Originally Posted by RawAlex

The codec installers are some of the worst ones around right now. They have huge networks of sites that start off as TGPs, but within a few days of trading, all of their galleries are replaced by galleries with the codec install, and about 50% of their trades go to other codec install TGPs.

Once installed, the fake codec cracks the user's machine open like a nut and starts stuffing things into the machine on a daily basis. These people are actually charging others per item to stuff machines. This is anything from zombie mailers, clickbots, and port scanners to code replacers, redirection tools, and signup stealing.

CCBill is often a target for this stuff because CCBill's link codes are easy to spot and hack (simple single code replacement, and you can do it only on sites you are signed up for). It a beautiful but horrible hack, and one we can do little about really.