Originally Posted by Missie (Post 11132899)

It makes me happy and sad at the same time that many of you are trying to find ways around zango and how to get rid of it. However, by posting this information IN A PUBLIC FORUM, you are giving them everything they need to counter any action taken against them.

If what has been posted so far works today, don't expect it to still be working in a week from now. Programmers will probably have found ways to keep the installs on the computers totally bypassing your codes. It's so easy for them, they can see exactly how you're doing it.

As for automatic removal scripts for scumware... I discussed this with an anti spyware company a while back. Although they thought it was a good idea, they were against it for several reasons. 1) what if some idiots installed it on purpose and didn't want to get rid of it, 2) MANY of these applications use legit files to hide themselves - when they find out that there is a script to remove them, they'll find new ways to hide - the script needs to be updated on a regular basis - so what if webmasters don't update their codes and fuck up computers even worse by trying to remove it than the scumware itself? And other reasons not to be discussed publicly.

Those who think you can remove scumware just using the add/remove programs tool, you're complete fools.

The idea of just informing surfers that they're infected and giving them links to remove it - like a google search - is a good one. Links directly to spyware removal can create more suspicion as many have done this in the past and it led straight to spyware applications.

Just don't post your great ideas in this forum. Find a way to communicate it via ICQ or email or whatever that will be kept private and make sure you're not giving it away to some moron who actually promotes their installs or condones it.

Missie

Originally Posted by rigrunner (Post 11130750)

Is there any way that I could add something to my htaccess to redirect people with these user agents to sites where they can be removed?

Originally Posted by Missie (Post 11132899)

It makes me happy and sad at the same time that many of you are trying to find ways around zango and how to get rid of it. However, by posting this information IN A PUBLIC FORUM, you are giving them everything they need to counter any action taken against them.

If what has been posted so far works today, don't expect it to still be working in a week from now. Programmers will probably have found ways to keep the installs on the computers totally bypassing your codes. It's so easy for them, they can see exactly how you're doing it.

As for automatic removal scripts for scumware... I discussed this with an anti spyware company a while back. Although they thought it was a good idea, they were against it for several reasons. 1) what if some idiots installed it on purpose and didn't want to get rid of it, 2) MANY of these applications use legit files to hide themselves - when they find out that there is a script to remove them, they'll find new ways to hide - the script needs to be updated on a regular basis - so what if webmasters don't update their codes and fuck up computers even worse by trying to remove it than the scumware itself? And other reasons not to be discussed publicly.

Those who think you can remove scumware just using the add/remove programs tool, you're complete fools.

The idea of just informing surfers that they're infected and giving them links to remove it - like a google search - is a good one. Links directly to spyware removal can create more suspicion as many have done this in the past and it led straight to spyware applications.

Just don't post your great ideas in this forum. Find a way to communicate it via ICQ or email or whatever that will be kept private and make sure you're not giving it away to some moron who actually promotes their installs or condones it.

Missie

Originally Posted by TreasureBucks (Post 11131849)

Id like someone to post a list of sponsors who do business with spyware.

That would add some help to the situation.

Originally Posted by Missie (Post 11133406)

That's what most of these people thrive on! :( There are tons of applications out there that you can't detect on your own if you don't know where to look, do you think any of them are worried about lawsuits? They get discovered, they find new ways to hide. They all go to great lengths to try to fool spyware removal tools and go undetected. That's what scumware is all about.

Don't you think that if it was this easy it wouldn't have been done a long time ago? Every webmaster out there would have that script on their site! :)

If you want your codes to work for as long as possible, don't post it here, that's all I was saying. :) GREAT JOB to come up with something that works. I hope you're right and they don't find ways around it faster than you came up with a solution. I'm rooting for ya!

Missie

Originally Posted by SmokeyTheBear (Post 11134083)

the big difference is those hidden aps need to keep hiding like you mentioned and keep moving , this keeps them from hooking up with mainstream companies and legit advertising so they are forced to promote crap..

lets be realistic , gfy isn't going to help clean the net of spyware , but we are quite a formidable force when it comes traffic.. by exposing infected zango users we also drive down the value of their traffic..

Originally Posted by RK (Post 11134199)

How about some numbers?
Here we go, for typical gallery traffic:

[root@clips logs]# wc -l hits_to_html_pages.txt
61750 hits_to_html_pages.txt
[root@clips logs]# grep -i zango hits_to_html_pages.txt | wc -l
273

So, out of 61750 hits, only 273 had zango. That's less than 0.5%

Are we overeacting?

Originally Posted by Zyber (Post 11129844)

This is a nice solution which will work as long as Zango choose to disclose it's presence via the User Agent information. So it is not 100% bullet-proof

I would also search for their alternative name - "seekmo" - in addition to "zango".

Replace
if (agt.indexOf("zango")!=-1)

With
if (agt.indexOf("zango")!=-1 || agt.indexOf("seekmo")!=-1)

The final script would look like

<script>
var agt=navigator.userAgent.toLowerCase();
if (agt.indexOf("zango")!=-1 || agt.indexOf("seekmo")!=-1){
alert("WARNING - do not close this message - please read - You have what many people call dangerous spyware known as ZANGO installed on your system. We are not here to sell you anything you can remove it for free simply go to google and type REMOVE ZANGO into the search box and you will find many websites to help you remove it.");
window.open('http://www.google.com/search?q=remove+zango','_top');
}
</script>


Thanks to Smokey for providing a small and simple solution which webmasters can implement. Better than nothing.

Originally Posted by RK (Post 11134199)

How about some numbers?
Here we go, for typical gallery traffic:

[root@clips logs]# wc -l hits_to_html_pages.txt
61750 hits_to_html_pages.txt
[root@clips logs]# grep -i zango hits_to_html_pages.txt | wc -l
273

So, out of 61750 hits, only 273 had zango. That's less than 0.5%

Are we overeacting?

Originally Posted by RK (Post 11134199)

How about some numbers?
Here we go, for typical gallery traffic:

[root@clips logs]# wc -l hits_to_html_pages.txt
61750 hits_to_html_pages.txt
[root@clips logs]# grep -i zango hits_to_html_pages.txt | wc -l
273

So, out of 61750 hits, only 273 had zango. That's less than 0.5%

Are we overeacting?

Originally Posted by Missie (Post 11134257)

I was going to say a lot of stuff on this, but WTF, I've been fighting this problem for years already but hey, I don't know anything. After all, both Kellie and myself have been insulted more times than we can count by a newborn expert on the subject... or is it a snitch?

Smokey, keep up the good work. You're actually one person who's trying to accomplish something (besides Will! :) ). Just be careful, scumware companies have been known to pay forum members to gather information and report back to them. This wouldn't be the first time, and it sure as hell wouldn't be the last. Remember that the best con artist is the one who will have you truly believe he's the nicest and most straightforward guy. Don't get fooled by the book cover!

I'll stay out of these threads from now on.

Missie

Originally Posted by Naja-ram (Post 11129478)

i'm promoting Zango and don't give a shit about any of you clowns

Originally Posted by TreasureBucks (Post 11134240)

Until you add a sig or url to your nic, you are not part of "we"

Originally Posted by Rocco Bruzesse

We deliver ads when a consumer is searching or browsing the web and likely looking for goods or services,? . ?In other words, at the precise moment that advertising is beneficial both to the consumer and to the advertiser.

Originally Posted by woj (Post 11134883)

100.........,.

Originally Posted by Yanks_Todd (Post 11137811)

I cleaned the PC of a friend of mine who is not in the business and found 26 instances of zango on his machine. Odd how he would have INSTALLED it 26 times.

Originally Posted by rigrunner (Post 11138021)

it was pretty straight forward to uninstall for me... I guess it had to have some pros right? ;)

Originally Posted by fuzebox (Post 11134848)

Is that a serious statement? He posts something intelligent and you want a fucking 120x60 before you'll take his comment seriously?

:helpme