Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

Webhelper: BulletProofSoft.com Now Installing Adware!

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spyware/Adware in the News
View previous topic :: View next topic  
Author Message
webhelper
SWW Expert


Joined: 11 Apr 2004
Last Visit: 16 Jul 2011
Posts: 1090

PostPosted: Mon May 17, 2004 10:04 am    Post subject: Webhelper: BulletProofSoft.com Now Installing Adware! Reply with quote

BulletProofSoft.com (Elbanhawy Gang) Now Installs Adware!

BPS Installs Adware: Topmoxie eBates Mo Money and Navexcel

after reading a posting over at the MajorGeeks.comforum stating that popupsnuker.com was installing adware with their software and MajorGeeks removed it because of the adware, I found that popupsnuker.com belongs to one of the groups that I have been monitoring for the past year and that is BulletProofsoft.com (BPS) that sells the spyware remover that has been suspected of being hacked from both adaware and spybot older software.

I went and tested all their sites and I find one that you download the various software is offered at download sites that they (BPS)have been linked to since 2000 and 2 more that also installs the Navexcel and topmoxie's eBates Mo Money adware.

This is something new for them and as such you will not know if any of their software has adware installs or not unless you run the installation to get the Install EULA which most users will click continue without reading down into the 20 somewhat pages to find out all there is to know.

I have the sites that they own, the sites that have adware, and the names used as authors throughout the Internet as you will need to know the name of the site that matches the software or its author to stay away from it. As is my criteria I set forth on my site at webhelper4u.com, any site that installs adware, then all sites that it owns, its affiliates and partners will be listed as direct or indirect supporters of adware installations for profiting from users personal information.

One part of the EULA is what really gets me. Here you install a popup blocker that could keep eBates ads from popping up and what a user is authorizing is to let eBates disable or delete any program that interferes with theirs.

". In installing the Moe Money Maker Software, you authorize Ebates to disable, uninstall, or delete any application or software that might, in Ebates' opinion nullify its function and put you at risk of loosing the cash-back savings that Moe Money Maker Software is designed to earn you..."

Authors Names used Advertising the software:
Ayman Elbanhawy
Ahmad Elbanhawy
Dr. Gamal Elbanhawy
Naglaa Elbanhawy


BPS Sites Adware Installs:
Popupsnuker.com
Installer File: pn.exe

Zillsoft.ws (Installs navexcel and Topmoxie eBates Mo Money adware)
Zilla cd dvd rip and burn zrnb20.exe
Zilla Anonymous Surfer zas2501.exe

spamnullifier.com 216.40.206.208
spamnullifier (free version)
hxxp://www.filehog.com/sn30.exe
Installs navexcel


BulletProofSoft (BPS Gang) and Affiliates/Partners Sites

Activex.us - (Domains by Proxy, Inc.) 216.40.206.208
Adnuker.com - (Domains by Proxy, Inc.) 207.44.200.48
Ads4me.net - (Domains by Proxy, Inc.) 207.44.200.48
Audioshareware.com - (H4Host.com) 216.40.206.208
Audiotools.ws - (H4Host.com) 216.40.206.208
bulletproofsoft.com - (Domains by Proxy, Inc.) 216.40.227.156
bulletproofsoft.info:66.98.154.33
bulletproofsoft.ws:66.98.154.33
Clicknzip.com - (Domains by Proxy, Inc.) 207.44.200.48
Downloadupload.com - (H4Host.com) 216.40.206.208
Esftp.com - (Domains by Proxy, Inc.) 216.40.206.208
File4me.com -(Elbanhawy Investments Now H4Host.com) 216.40.206.208
Filehog.com – (H4Host.com) 207.44.200.48
Fireballftp.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208
Ftpking.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208
Ftpmonster.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208
Ftpright.net - (Domains by Proxy, Inc.) 216.40.206.208
h4host.com - (Domains by Proxy, Inc.) 216.40.227.9
IMAGINEER-WEB.com 216.40.227.154
Job4middleeast.com -
(Boston Executive Limousine Now Domains by Proxy, Inc.) 216.40.206.208
Jobbid.ws - (H4Host.com) 216.40.206.208
Jobbid4me.com -(Boston Executive Limousine Now Domains by Proxy, Inc.) 216.40.206.208
mawaqit.com 216.40.227.9
Mediatools.ws - (H4Host.com) 216.40.206.208
Monsterzip.com - (Domains by Proxy, Inc.) 216.40.206.208
noadware.com: - (Domains by Proxy, Inc.) 66.98.154.33
bulletproofsoft.info:66.98.154.33
bulletproofsoft.ws:66.98.154.33
Onestopsoft.com - (Domains by Proxy, Inc.) 216.40.206.208
popupshield.net -(Domains by Proxy, Inc.) 216.40.206.208
popupsnuker.com: (Godaddy) 216.40.206.172 (installs ebates and navecel)
Robust.ws - (H4Host.com) 216.40.206.208
Robustftp.com - (Domains by Proxy, Inc.) 216.40.206.208
Royalftp.com - (Domains by Proxy, Inc.) 216.40.206.208
Sharewaredepo.com - (H4Host.com) 216.40.206.208
Sharewarepile.com - (H4Host.com) 216.40.206.208
Softdepo.com - (H4Host.com) 216.40.206.208
Softwareclub.ws - (Domains by Proxy, Inc.) 216.40.206.208
Softwaredepo.com - (H4Host.com) 216.40.206.208
Softwarepile.com - (Domains by Proxy, Inc.) 216.40.206.208
soundindepth.com – (Domains by Proxy) 216.40.206.208
spaminnihilator.com – (Domains by Proxy) 216.40.206.208
Spamnullifier.com - (Domains by Proxy, Inc) 216.40.206.208
spywarezapper.com (Domains by Proxy, Inc) 66.98.154.33
Spider.ws - (Chia Lor) 216.40.206.208
Tbel.net - (Boston Executive Limousine) 216.40.206.208
Traceremover.com - (Elbanhawy Investments) 216.40.206.208
Tracezapper.com - (Elbanhawy Investments) 216.40.206.208
Trackscrubber.com - (Elbanhawy Investments) 216.40.206.208
Trackzapper.com - (Elbanhawy Investments) 216.40.206.208
Windowscleanser.com - (Domains by Proxy, Inc.) 216.40.206.208
Windowsclenser.com - (H4Host.com) 216.40.206.208
Zillaftp.com - (Domains by Proxy, Inc.) 216.40.206.208
Zillasoft.ws - (H4Host.com) 216.40.206.208

Cloned Download Sites Linked to the BPS

digitalriver.com:209.87.182.60
topdownloads.com:209.87.178.244
tdwebhost.com:64.246.54.50
pigeons-news.com:64.246.54.50
topdownloads.net:66.98.178.22
PIGEONS.NET:66.98.178.22
subloads.com:66.98.178.22
downloadsnet.com:66.98.178.22
supportmail.info:216.168.224.63
rizalsoftware.com:207.44.194.97
backupdvd.info:207.44.194.97

Sites of the Adware
topmoxie.com 66.220.2.164
ebates.com 63.236.57.90
navexcel.com 128.121.212.181


Webhelper
_________________
Wächter der Geschichten:
http://www.webhelper4u.com/thewatcher.html
Member of ASAP Since 2004
Back to top
View user's profile Send private message Visit poster's website
wawadave
Warrior Obsessed


Joined: 25 Jan 2004
Last Visit: 24 Jul 2009
Posts: 3448
Location: Illegitimus non carborundum

PostPosted: Mon May 17, 2004 10:54 am    Post subject: Reply with quote

thank you webhelper.grate work your doing!!!!
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spyware/Adware in the News All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group