 |
Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
|
| View previous topic :: View next topic |
| Author |
Message |
TeMerc
Warrior VIP
Joined: 12 Feb 2004
Last Visit: 23 Dec 2009
Posts: 9351
Location: Phx. AZ.
|
|
| Back to top |
|
 |
TeMerc
Warrior VIP
Joined: 12 Feb 2004
Last Visit: 23 Dec 2009
Posts: 9351
Location: Phx. AZ.
|
 Posted: Thu Jul 07, 2005 10:29 pm Post subject: |
 |
|
From Dave Methvin of PCPitstop:
| Dave wrote: |
They're doing it again!
More BitTorrent fireworks went off over the July 4th holiday. After the last episode it was inevitable that the pests would come crawling back, but so soon? I plucked two files and installed them to get the details, but I saw at least a dozen more files that are likely to have the same installer. Here's what I found out so far.
Different company, same scam. This time, the supposed distributor is Media Decompressor Company, or at least that's the name in the license. A user downloads one of their files using BitTorrent; often the content is an adult-oriented video. Running the file brings up a dialog with soothing legalese on the first screen; clicking "I Agree" rewards the user with the content and the adware bundle. If the user scrolls down in the license, they will see that this program installs the 180Search Assistant from 180Solutions, Golden Retriever from ShopAtHomeSelect, and Internet Optimizer from Avenue Media. The license text shown to the user only has links to the 180Solutions license; for the others it just mentions that they are installed but says nothing about their license terms.
CDT rides again, with 180Solutions in tow. Several pieces of 180Solutions adware are installed by the bundle. 180Solutions purchased a company named CDT in March 2005. The payload for this latest bundle is immediately retrieved from servers under the control of CDT and/or 180Solutions, from domains owned by the same companies: public.windupdates.com, static.flingstone.com, bis.180solutions.com, and downloads.180solutions.com. If the "Media Compressor Company" exists at all, it delegates responsibility to CDT/180Solutions very early in the install process. |
Full Read @ PCPitstop
_________________
Ultimate Countermeasures Page
Calendar Of Updates
Malware Advisor Blog |
|
| Back to top |
|
|
Chao284
Warrior
Joined: 06 Sep 2004
Last Visit: 01 Sep 2010
Posts: 220
|
| Posted: Fri Jul 08, 2005 6:53 am Post subject: |
|
|
| TeMerc wrote: |
From Dave Methvin of PCPitstop:
| Dave wrote: |
They're doing it again!
More BitTorrent fireworks went off over the July 4th holiday. After the last episode it was inevitable that the pests would come crawling back, but so soon? I plucked two files and installed them to get the details, but I saw at least a dozen more files that are likely to have the same installer. Here's what I found out so far.
Different company, same scam. This time, the supposed distributor is Media Decompressor Company, or at least that's the name in the license. A user downloads one of their files using BitTorrent; often the content is an adult-oriented video. Running the file brings up a dialog with soothing legalese on the first screen; clicking "I Agree" rewards the user with the content and the adware bundle. If the user scrolls down in the license, they will see that this program installs the 180Search Assistant from 180Solutions, Golden Retriever from ShopAtHomeSelect, and Internet Optimizer from Avenue Media. The license text shown to the user only has links to the 180Solutions license; for the others it just mentions that they are installed but says nothing about their license terms.
CDT rides again, with 180Solutions in tow. Several pieces of 180Solutions adware are installed by the bundle. 180Solutions purchased a company named CDT in March 2005. The payload for this latest bundle is immediately retrieved from servers under the control of CDT and/or 180Solutions, from domains owned by the same companies: public.windupdates.com, static.flingstone.com, bis.180solutions.com, and downloads.180solutions.com. If the "Media Compressor Company" exists at all, it delegates responsibility to CDT/180Solutions very early in the install process. |
Full Read @ PCPitstop |
And what else, I just looked at the MS Antispy picture under this article, they also put a trojan in there wich tells guess who is involved once again, the Transponder Gang/VX2 this likly means you will also get hit with it's stubby installers when you try to download an mpg file, this also makes gateway for the pacmedia virant to also install in this fashion that would likly enough people would disable all securety programs, this is just mad, now expect WinMX to get more users just because this sort of stunt is at it again. |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group
|
