Spyware masquerades as helpful software

[pechenegs]

http://news.zdnet.co.uk/internet/security/0,39020375,39145496,00.htm

 

[carrr]

I'm suprised they're running this now. Malwares have been bundling with "legit" software for some time now. Maybe they just feel the frequency has increased to the level that it merits broader exposure.

"'Tis an ill wind that blows no minds." - Malaclypse the Younger

 

[pechenegs]

I posted this bacause of the recent thread and many have been caught out by software which claims it removes spyware, and bundles spyware itself!

Heard of "Windows Antivirus 2004" program?

thread760-744567

cheers Pech

 

[carrr]

Yes. I've read the thread.
I was just commenting on the fact that they've waited this long to make mention of the bundling practices, which are not a new phenomenon.

"'Tis an ill wind that blows no minds." - Malaclypse the Younger

 

[pechenegs]

ok Carr!

 

[carrr]

You raise a good point.
A lot of users blissfully take things at face value, unaware of such practices.
Some other examples are:

SpyBlast (a purported antispyware tool)

http://www.spysweeper.com/spyblast.html

ZeroPopUp (a supposed popup stopper)

http://doxdesk.com/parasite/ZeroPopUp.html

Creative Labs (think SoundBlaster)

http://cexx.org/creative.htm

Internet Washer (a tool for cleaning up one's surfing tracks)

http://doxdesk.com/parasite/InternetWasher.html

...and this is just a sampling.


"'Tis an ill wind that blows no minds." - Malaclypse the Younger

 

[pechenegs]

Aha, Carr, just thought of something, it's a play on words. Many users are aware of a legitimate software utility and the bad guys make a piece of adaware or spyware with a similar name! For instance,

legitimate programme = spywareblaster, phony= spyware
legitimate programme = windows washer, phony= internet washer
and the thread I was referring to has a legitimate sounding
name: Windows Antivirus 2004".

 

[carrr]

I think you're onto it. The closer they can come (without committing actual copyright infringement), the more people they can dupe into submitting orders.
Most of these places are fly-by-night, fast-buck shams. They suck in as many shills as possible, then quickly fold up, taking the money and running.
Not really along the lines of what we're discussing, but I wonder if you remember LoverSpy software from the end of last year. True logging spyware that you "injected" into people's machines via email that reported email transmissions, chat, etc. back to the sender under the guise of catching cheating partners/spouses. They folded up in a matter of months, but not before making Symantec's list (

http://securityresponse.symantec.com/avcenter/venc/data/spyware.loverspy.html)

and taking in cash from who knows how many people.
Don't know when we'll see the end of it.

"'Tis an ill wind that blows no minds." - Malaclypse the Younger

 

[pechenegs]

Yip, same old scam, the old ones are the best -. It's like the timeshare scam, selling holiday homes in Spain, Portugal etc to Brits, then you turn up, no holiday, cos no home and the company has dissappeared! It appears the scams they use in everyday life are now being employed on the internet!

pech

 

[micker377]

Just tried a new "All Purpose Spyware" program called "Mechanic.Exe". Nice looking, several false positives "Files Harmful to your system". Delete these and your system might have problems (I don't know, I was smart enough to question the program). The strange (?) thing is that there is no way to contact the site to ask for clarifacation. Even Google search only go to the down load site. Until they give a way for feedback, I advise to stay away.