Scumware contained in some of the Logons

Thursday, January 16, 2003 by d1g3r4t1 | Discussion: WinCustomize Talk

I came across some scumware, when unzipping one of the logons. I sent a message to wincustomize's IT people to advise same. THeir response was that I was stupid and didn't know what I was talking about. The exchange is appended:


Subject: Re: Fwd: scumware
To: "Stardock Support"

LMAO.......you use MS Security, there's a well know oxymoron. The scum installed WHILE I was downloading, and unzipping, the Logons. The scum is contained in one of the zipped files. I see that, instead of checking the problem, your IT people chastise people for reporting such things.

Xupiter does not work on a time delay, it runs at the next bootup/restart. As I have ActiveX controls disabled, it cannot install on my system. Additionally, it installs as an IE toolbar....NOT a standalone active desktop utility.

Seems you need to learn to read what people report........not assume that they are stupid and you are 'Holier Than Thou'.

Thanks for nothing



Stardock Support wrote:


Dear Sir,
None of the skin files contain executables, so it is not possible
that it came from our site. However, if you had recently been
surfing the next, you most likely ran into a web site that did not
protect themselves against Xupiter, which is spyware which will
download and install on your computer from an infected web site
usually on a time delay. We use all current MS internet securities
that safeguard us from such attacks.

Thank you,
Angie

On Wed, 15 Jan 2003 11:42:22 -0500, Stardock General Information
wrote:

>==================BEGIN FORWARDED MESSAGE==================
>>Return-path:
>>Received: from web12402.mail.yahoo.com ([216.136.173.129])
>> by stardock.com ([127.0.0.1])
>> with SMTP (MDaemon.PRO.v6.0.3.R)
>> for ; Wed, 15 Jan 2003 10:57:27 -0500
>>Message-ID:
>>Received: from [24.129.45.113] by web12402.mail.yahoo.com via HTTP; Wed, 15 Jan 2003 08:00:44 PST
>>Date: Wed, 15 Jan 2003 08:00:44 -0800 (PST)
>>From: Doyle
>>Subject: scumware
>>To: [email protected]
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative; boundary="0-1469653529-1042646444=:7431"
>>X-MDRcpt-To: [email protected]
>>X-MDRemoteIP: 216.136.173.129
>>X-Return-Path: [email protected]
>>X-MDaemon-Deliver-To: [email protected]
>
>
>
>
>Last night, while downloading Logons, for Stardock's LogonStudio(TM), at least one of them installed scumware on my system. Specifically, an active
>desktop componant which was a large 'Search toolbar' style piece of scumware. Took me almost 2 hours to track this slime down, and turn it off (Registry,
>Run) I've yet to find the scumware so I can delete it. IF you bother to find and remove the file(s) containing this slime, I would greatly appreciate being
>advised on how to find and remove the scumware that installed on my system.
>
>Thank you, Doyle aka Citizen d1g3r4t1
First Previous Page 10 of 12 Next Last
IPlural
Reply #181 Tuesday, January 21, 2003 5:49 PM
Frogboy I made mine, see! you like ?



Powered by SkinBrowser!
kthxbye
Reply #182 Tuesday, January 21, 2003 6:41 PM
I bought one of those tinfoil hats, they swore it would protect me from the alien mind control rays - but it didn't! I got ripped off! It turns out it wasn't tinfoil at all either!

And of course, when I tried to get my money back, they just sold my email address to other mailing lists!


Powered by SkinBrowser!
Jafo
Reply #183 Tuesday, January 21, 2003 7:20 PM
I tried a tinfoil hat but the alien in my head couldn't get out...
IPlural
Reply #184 Tuesday, January 21, 2003 10:27 PM


I tried mine on and it didn't work so I knew it must have been because I do not have the technology to design and manufacture such a extreamly high tech peice of equipment. So I went down to Wallgreens in the Cathylee Gifford section and found the last one. I paid for it and ran out to my car with it held tightly to my chest, a raving hyper giggle slipping past my lips at every person I passed. Jumping in my car I threw it into reverse backed out and threw it into drive before breaking the cars backwards roll. Tires spining and spewing smoke I shot up the parklot lane driving the wrong direction straight out the entrance side and into traffic. On my mad dash home I decided that more caffine was in order so I pulled into McDonalds for a large cup laced with 20 packs of sugar. While waiting for the poor unknowing person behind the drive through window, I pulled the hate in the bag out from under the seat and opend it up for a suspicious peek. Thats when I noticed that Cat in the Hat and snatch it out the bag to toss out the window. How was I supposed to know that truck was going to decide to back up at that moment? Anyway, to more imporatant things.
My eyes wandered back inside the bag that sat in my lap. A thought struck me right between the eyes, giving me pause I found I was stuck with one niggling thought. It drove me to pull my hat out to twist and turn round and roun, flipping it over it couldn't be found " sigh " dropping it back into the bag. Closing my eyes being left with a serious question I needed help with answering before I could feel good about taking this home and not returning it.

Well I had to ask myself, I said " Self " and MySelf replied " WHAT!? " why isn't there any warnings on this hat? I mean what if someone get's it messed up and eat's one instead of putting it on their head. or while they are cleaning the Microwave they have their hate on and the cat turns it on?

That'd leave the company open for some serious lawsuits now wouldn't?
Is it really good for the company but also is it good consumer protection not warning people first?

So myself said " Oh that is just stupid so shut up and put your Coffee between your legs and get the heck out of the drive through already " now that was rude.

: suprised :


Powered by SkinBrowser!
Iben
Reply #185 Tuesday, January 21, 2003 10:37 PM


Powered by SkinBrowser!
Jafo
Reply #186 Tuesday, January 21, 2003 11:28 PM
And they ALL moved away from me on the bench there until I said 'and creatin' a disturbance'....
snarph
Reply #187 Tuesday, January 21, 2003 11:30 PM
just stay a way from alice
Angel_Wings
Reply #188 Tuesday, January 21, 2003 11:45 PM
Go ask A.L.I.C.E. when she's ten feet tall.

Powered by SkinBrowser!
snarph
Reply #189 Tuesday, January 21, 2003 11:49 PM
dave I'm scared dave
Jafo
Reply #190 Tuesday, January 21, 2003 11:50 PM
Alice? Remember Alice?...This is a song about Alice....
Iben
Reply #191 Tuesday, January 21, 2003 11:50 PM


Powered by SkinBrowser!
Angel_Wings
Reply #192 Tuesday, January 21, 2003 11:54 PM
OR--->.........THIS ALICE!
http://www.alicebot.org/


Powered by SkinBrowser!
Angel_Wings
Reply #193 Wednesday, January 22, 2003 12:13 AM
I think snarf actually *got* my joke with his "HAL" quote

Powered by SkinBrowser!
d1g3r4t1
Reply #194 Wednesday, January 22, 2003 10:50 AM
Ken, taking clues from items others had posted here, I performed a system search on dll's. Found one that corresponded to the date I'd downloaded the logons from here. (adi.dll) Loaded it into a resource hacker. Looked through the gibberish (I'm not a programmer) and found a couple of references to superwebsearch. I then ran a registry search on that. Found 3 folders, and 2 entries in IE's folder, which provided the url. The entries also pointed back to the lcars2 file, which I downloaded here. I then emailed the people at superwebsearch requesting removal instructions/utility. I'm not dumb enough to visit their website, just I wouldn't visit the sites of places like LOP or Xupiter. If karmagirl is, please post or email any info you find. I'll append their answer below. Monday, as they hadn't responded, no surprise, I backed up my registry and deleted the above mentioned keys.
As the admins were so sure and petulant about the matter, BEFORE checking, (Paxx excluded) I doubt any would admit to finding/removing same.....even if their company would allow them to. (Reference Enron/Worldcomm)


Hello,

You, or someone using your computer, may have installed some of our free software, where you were asked if you would like to add an active desktop element that uses our search engine.

You can remove it by doing the following:

Windows 98, Me:
1. Right-click on the desktop.
2. Click "Active Desktop" menu item.
3. Click "Customize My Desktop" menu item.
4. Unselect the "Search" checkbox from the list that opens.

Windows 2000:
1. Right-click on the desktop.
2. Click "Active Desktop" menu item.
3. Unselect the "Search" menu item.

Windows XP:
1. Right-click on the desktop.
2. Select "Properties" menu item.
3. Select the "Desktop" tab.
4. Pres the "Customize Desktop" button.
5. Select the "Web" tab.
6. Unselect the "Search" checkbox.

This will remove the search box from your desktop.
d1g3r4t1
Reply #195 Wednesday, January 22, 2003 11:02 AM
For those who are unfamiliar with Winzip, here is a link to their website's online manual http://www.winzip.com/wiz.htm. Pay special attention to the 2nd bullet point under the heading of WinZip Wizard Benefits
werewolf
Reply #196 Wednesday, January 22, 2003 11:04 AM
"We're sorry. You have tried to reach a page that does not exist, or a web address that is otherwise invalid."

Powered by SkinBrowser!
KarmaGirl
Reply #197 Wednesday, January 22, 2003 11:13 AM
d1g3r4t1, you really aren't understanding that nobody is taking you seriously anymore? Even Frogboy thinks you need a tinfoil hat!

(Now, where did I put my book of "practical voodoo"?)
kthxbye
Reply #198 Wednesday, January 22, 2003 11:22 AM
I offer mine - the 100% guaranteed money back guarantee wasn't very guaranteed.


Powered by SkinBrowser!
Action_Jay
Reply #199 Wednesday, January 22, 2003 12:28 PM
*pats dig's head, gives him a lollypop and sends him to rant at superwebsearch's IT team now*

even though they're a spyware company, I gotta pity em now.
Fuzzy Logic
Reply #200 Wednesday, January 22, 2003 12:53 PM
Are you sure this isn't aafus in disguise?

Powered by SkinBrowser!

Please login to comment and/or vote for this skin.

Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:

  • Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
  • Access to a great community, with a massive database of many, many areas of interest.
  • Access to contests & subscription offers like exclusive emails.
  • It's simple, and FREE!



web-wc01