Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

Spy Deleter Attacking

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spyware/Adware in the News
View previous topic :: View next topic  
Author Message
suzi
Site Admin


Joined: 27 Jul 2003
Last Visit: 30 Aug 2014
Posts: 10324
Location: sunny California

PostPosted: Fri Mar 12, 2004 10:32 pm    Post subject: Spy Deleter Attacking Reply with quote

Nomorespyware and I posted about Spy Deleter earlier with a warning that it will probably replace Spy Wiper and use the same despicable marketing techniques - scare tactics and browser hijacking. That has now come to pass.

http://www.spywarewarrior.com/viewtopic.php?t=13

All of a sudden my blog is getting search engine hits for Spy Deleter and people are leaving comments in the blog asking for help to get rid of it. I expect that it will increase!

To you log helpers - so far the HJT logs from people with Spy Deleter problems look the same as the one from Spy Wiper - these entries:

Quote:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://server224.smartbotpro.net/7search/?hkcu
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://default-homepage-network.com/start.cgi?hkcu
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://default-homepage-network.com/start.cgi?hklm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://server224.smartbotpro.net/7search/?hklm


I will be checking those logs looking for any changes in those URL's and if you notice changes in them could you alert me to them?

Nomorespyware and I have been working with the CDT on their complaint to the FTC about Spy Wiper. We are trying to keep the CDT updated on what we are seeing with the Spy Wiper and now Spy Deleter logs. We are also keeping them informed of web stats (search engine hits) and emails requesting help.

Also - I would like to suggest to everyone to encourge the victims of Spy Wiper and Spy Deleter to file complaints with the CDT and FTC. Info and links are in this post:

http://www.spywarewarrior.com/viewtopic.php?t=350

We would to see the scumbags behind Spy Wiper and Spy Deleter stopped! If the FTC acts on this, it will also set a precedent for action against other companies.
_________________
Former Microsoft MVP 2005-2009, Consumer Security
Please do not PM or Email me for personal support. Post in the Forums instead and we will all learn. Smile


Last edited by suzi on Fri Mar 12, 2004 10:42 pm; edited 1 time in total
Back to top
View user's profile Send private message Visit poster's website
wawadave
Warrior Obsessed


Joined: 25 Jan 2004
Last Visit: 24 Jul 2009
Posts: 3448
Location: Illegitimus non carborundum

PostPosted: Fri Mar 12, 2004 10:39 pm    Post subject: Reply with quote

the more i see the worse it looks thx suzi its getting worse every day. Evil or Very Mad
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Nick
Site Admin


Joined: 27 Feb 2004
Last Visit: 15 Jul 2014
Posts: 3913
Location: California

PostPosted: Fri Mar 12, 2004 11:14 pm    Post subject: Reply with quote

Ask and you shall receive:

http://spywarewarrior.com/viewtopic.php?t=566

Quote:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://server224.smartbotpro.net/7search/?hkcu
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://tvlistings3.zap2it.com/partners/grid.asp?partner_id=097
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://default-homepage-network.com/start.cgi?hklm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://server224.smartbotpro.net/7search/?hklm
Back to top
View user's profile Send private message
CalamityKen
Warrior Addict


Joined: 06 Mar 2004
Last Visit: 26 Aug 2004
Posts: 611
Location: Ont. Canada

PostPosted: Sat Mar 13, 2004 6:32 am    Post subject: Reply with quote

It is the CoolWebSearch gang. They are getting desperate for ANY way to increase their pay-per-click traffic.
_________________
Install IE-SPYAD and SpywareBlaster updated regularly available in the following links .
How did I get infected? http://boards.cexx.org/viewtopic.php?t=957
Calendar Of Updates http://www.dozleng.com/updates/index.php?&act=calendar
member
Back to top
View user's profile Send private message
suzi
Site Admin


Joined: 27 Jul 2003
Last Visit: 30 Aug 2014
Posts: 10324
Location: sunny California

PostPosted: Sat Mar 13, 2004 12:27 pm    Post subject: Reply with quote

I don't think that Spy Deleter and Spy Wiper are part of the CWS gang, but I could be wrong. Spy Wiper is owned marketed by the company called Mail Wiper, Inc. which is in Atlanta, Georgia and owned by Rob Martinson. The state of Georgia's website has the corporate registration information online.

Spy Deleter, Inc. was just incorporated about 2 months ago and is owned by the same person.

Nomorespyware has it well documented on her site:

http://tired-of-spam.home.comcast.net/spywiper.html

http://tired-of-spam.home.comcast.net/spydeleter.html

I have it on my blog as well.

Nick, thanks. The URL with tvlistings may not be related but I'm not sure. I clicked on it and it looked to be a legit page - but who knows anymore? It could be an affiliate of SpyDeleter and have hijacking code on... I don't get hijacked because of all the protection I have.
_________________
Former Microsoft MVP 2005-2009, Consumer Security
Please do not PM or Email me for personal support. Post in the Forums instead and we will all learn. Smile
Back to top
View user's profile Send private message Visit poster's website
suzi
Site Admin


Joined: 27 Jul 2003
Last Visit: 30 Aug 2014
Posts: 10324
Location: sunny California

PostPosted: Tue Mar 16, 2004 9:10 am    Post subject: Reply with quote

About CoolWebSearch and Spy Deleter - last night I finally figured out how to use the "debug" in CWShredder to see the list of targets. Sure enough - those URL's that are being used to send victims to the Spy Deleter ads (and formerly Spy Wiper ads) are in the list.

So CalamityKen is right - they are connected. And it also means that CWShredder will fix the Spy Deleter hijacks. Razz
_________________
Former Microsoft MVP 2005-2009, Consumer Security
Please do not PM or Email me for personal support. Post in the Forums instead and we will all learn. Smile
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spyware/Adware in the News All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group