d1g3r4t1 d1g3r4t1

Scumware contained in some of the Logons

Scumware contained in some of the Logons

I came across some scumware, when unzipping one of the logons. I sent a message to wincustomize's IT people to advise same. THeir response was that I was stupid and didn't know what I was talking about. The exchange is appended:


Subject: Re: Fwd: scumware
To: "Stardock Support"

LMAO.......you use MS Security, there's a well know oxymoron. The scum installed WHILE I was downloading, and unzipping, the Logons. The scum is contained in one of the zipped files. I see that, instead of checking the problem, your IT people chastise people for reporting such things.

Xupiter does not work on a time delay, it runs at the next bootup/restart. As I have ActiveX controls disabled, it cannot install on my system. Additionally, it installs as an IE toolbar....NOT a standalone active desktop utility.

Seems you need to learn to read what people report........not assume that they are stupid and you are 'Holier Than Thou'.

Thanks for nothing



Stardock Support wrote:


Dear Sir,
None of the skin files contain executables, so it is not possible
that it came from our site. However, if you had recently been
surfing the next, you most likely ran into a web site that did not
protect themselves against Xupiter, which is spyware which will
download and install on your computer from an infected web site
usually on a time delay. We use all current MS internet securities
that safeguard us from such attacks.

Thank you,
Angie

On Wed, 15 Jan 2003 11:42:22 -0500, Stardock General Information
wrote:

>==================BEGIN FORWARDED MESSAGE==================
>>Return-path:
>>Received: from web12402.mail.yahoo.com ([216.136.173.129])
>> by stardock.com ([127.0.0.1])
>> with SMTP (MDaemon.PRO.v6.0.3.R)
>> for ; Wed, 15 Jan 2003 10:57:27 -0500
>>Message-ID:
>>Received: from [24.129.45.113] by web12402.mail.yahoo.com via HTTP; Wed, 15 Jan 2003 08:00:44 PST
>>Date: Wed, 15 Jan 2003 08:00:44 -0800 (PST)
>>From: Doyle
>>Subject: scumware
>>To: [email protected]
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative; boundary="0-1469653529-1042646444=:7431"
>>X-MDRcpt-To: [email protected]
>>X-MDRemoteIP: 216.136.173.129
>>X-Return-Path: [email protected]
>>X-MDaemon-Deliver-To: [email protected]
>
>
>
>
>Last night, while downloading Logons, for Stardock's LogonStudio(TM), at least one of them installed scumware on my system. Specifically, an active
>desktop componant which was a large 'Search toolbar' style piece of scumware. Took me almost 2 hours to track this slime down, and turn it off (Registry,
>Run) I've yet to find the scumware so I can delete it. IF you bother to find and remove the file(s) containing this slime, I would greatly appreciate being
>advised on how to find and remove the scumware that installed on my system.
>
>Thank you, Doyle aka Citizen d1g3r4t1
46,538 views 221 replies
Reply #176 Top
It doesn't matter, the point is, it still doesn't link anything to this site. The files have been downloaded and checked, and nobody else has come in contact with the "scumware". The point of this whole thread is that there is a "scumware" on WC. There is still no proof to that. The only thing that he has shown is that he has somehow installed something that he doesn't know how to uninstall.
Reply #177 Top
Ya, agree, he didn't get that from here.
Reply #178 Top
I still think chugging huge big can of " grow up " is in order.


Powered by SkinBrowser!
Reply #179 Top
I call bullshit.

Guess where one place is where that search app gets downloaded?

Cracks.am (and other sites listed through Astalavista.) My bet is d1g3r4t1 here is pirating software, as was discussed in the beginning of this debacle.
Reply #180 Top
I think we need to sell tinfoil hats.
Reply #181 Top
Frogboy I made mine, see! you like ?



Powered by SkinBrowser!
Reply #182 Top
I bought one of those tinfoil hats, they swore it would protect me from the alien mind control rays - but it didn't! I got ripped off! It turns out it wasn't tinfoil at all either!

And of course, when I tried to get my money back, they just sold my email address to other mailing lists!


Powered by SkinBrowser!
Reply #183 Top
I tried a tinfoil hat but the alien in my head couldn't get out...
Reply #184 Top


I tried mine on and it didn't work so I knew it must have been because I do not have the technology to design and manufacture such a extreamly high tech peice of equipment. So I went down to Wallgreens in the Cathylee Gifford section and found the last one. I paid for it and ran out to my car with it held tightly to my chest, a raving hyper giggle slipping past my lips at every person I passed. Jumping in my car I threw it into reverse backed out and threw it into drive before breaking the cars backwards roll. Tires spining and spewing smoke I shot up the parklot lane driving the wrong direction straight out the entrance side and into traffic. On my mad dash home I decided that more caffine was in order so I pulled into McDonalds for a large cup laced with 20 packs of sugar. While waiting for the poor unknowing person behind the drive through window, I pulled the hate in the bag out from under the seat and opend it up for a suspicious peek. Thats when I noticed that Cat in the Hat and snatch it out the bag to toss out the window. How was I supposed to know that truck was going to decide to back up at that moment? Anyway, to more imporatant things.
My eyes wandered back inside the bag that sat in my lap. A thought struck me right between the eyes, giving me pause I found I was stuck with one niggling thought. It drove me to pull my hat out to twist and turn round and roun, flipping it over it couldn't be found " sigh " dropping it back into the bag. Closing my eyes being left with a serious question I needed help with answering before I could feel good about taking this home and not returning it.

Well I had to ask myself, I said " Self " and MySelf replied " WHAT!? " why isn't there any warnings on this hat? I mean what if someone get's it messed up and eat's one instead of putting it on their head. or while they are cleaning the Microwave they have their hate on and the cat turns it on?

That'd leave the company open for some serious lawsuits now wouldn't?
Is it really good for the company but also is it good consumer protection not warning people first?

So myself said " Oh that is just stupid so shut up and put your Coffee between your legs and get the heck out of the drive through already " now that was rude.

: suprised :


Powered by SkinBrowser!
Reply #186 Top
And they ALL moved away from me on the bench there until I said 'and creatin' a disturbance'....
Reply #187 Top
just stay a way from alice
Reply #188 Top
Go ask A.L.I.C.E. when she's ten feet tall.

Powered by SkinBrowser!
Reply #189 Top
dave I'm scared dave
Reply #190 Top
Alice? Remember Alice?...This is a song about Alice....
Reply #192 Top
OR--->.........THIS ALICE!
http://www.alicebot.org/


Powered by SkinBrowser!
Reply #193 Top
I think snarf actually *got* my joke with his "HAL" quote

Powered by SkinBrowser!
Reply #194 Top
Ken, taking clues from items others had posted here, I performed a system search on dll's. Found one that corresponded to the date I'd downloaded the logons from here. (adi.dll) Loaded it into a resource hacker. Looked through the gibberish (I'm not a programmer) and found a couple of references to superwebsearch. I then ran a registry search on that. Found 3 folders, and 2 entries in IE's folder, which provided the url. The entries also pointed back to the lcars2 file, which I downloaded here. I then emailed the people at superwebsearch requesting removal instructions/utility. I'm not dumb enough to visit their website, just I wouldn't visit the sites of places like LOP or Xupiter. If karmagirl is, please post or email any info you find. I'll append their answer below. Monday, as they hadn't responded, no surprise, I backed up my registry and deleted the above mentioned keys.
As the admins were so sure and petulant about the matter, BEFORE checking, (Paxx excluded) I doubt any would admit to finding/removing same.....even if their company would allow them to. (Reference Enron/Worldcomm)


Hello,

You, or someone using your computer, may have installed some of our free software, where you were asked if you would like to add an active desktop element that uses our search engine.

You can remove it by doing the following:

Windows 98, Me:
1. Right-click on the desktop.
2. Click "Active Desktop" menu item.
3. Click "Customize My Desktop" menu item.
4. Unselect the "Search" checkbox from the list that opens.

Windows 2000:
1. Right-click on the desktop.
2. Click "Active Desktop" menu item.
3. Unselect the "Search" menu item.

Windows XP:
1. Right-click on the desktop.
2. Select "Properties" menu item.
3. Select the "Desktop" tab.
4. Pres the "Customize Desktop" button.
5. Select the "Web" tab.
6. Unselect the "Search" checkbox.

This will remove the search box from your desktop.
Reply #195 Top
For those who are unfamiliar with Winzip, here is a link to their website's online manual http://www.winzip.com/wiz.htm. Pay special attention to the 2nd bullet point under the heading of WinZip Wizard Benefits
Reply #196 Top
"We're sorry. You have tried to reach a page that does not exist, or a web address that is otherwise invalid."

Powered by SkinBrowser!
Reply #197 Top
d1g3r4t1, you really aren't understanding that nobody is taking you seriously anymore? Even Frogboy thinks you need a tinfoil hat!

(Now, where did I put my book of "practical voodoo"?)
Reply #198 Top
I offer mine - the 100% guaranteed money back guarantee wasn't very guaranteed.


Powered by SkinBrowser!
Reply #199 Top
*pats dig's head, gives him a lollypop and sends him to rant at superwebsearch's IT team now*

even though they're a spyware company, I gotta pity em now.
Reply #200 Top
Are you sure this isn't aafus in disguise?

Powered by SkinBrowser!