Attention ALL GFY MEMBERS. We're being robbed - Page 3 - GoFuckYourself.com

will76 · 03-11-2007, 02:32 AM

Quote:

Originally Posted by The Walrus

Fake things have been around for a long time. This is fucking genious

(Bad for us). Someone came up with one "CLICK HERE TO DOWNLOAD FREE PORN" link and now it's news? This is like placing an image of an X'ed out jpeg (load failure) on your page or a series of them for that matter and popping up a windw stating that they need a special program to view the photos of Jessica Simpson fucking a well hung donkey in Juarez drunk.

Some morons will fall for it, some won't. That's life. The net is still like the Wild fucking West. Untill we all get together and Deputize someone, something, some entity or unionize in a sense, the thugs will continue to ride through town whenever they want, and rape our women steal our food from our kids and bend us over and do us dry & hard. Not to mention giving us honest, hard working webmasters a bad name.

yeap and in more cases then people realize the " thugs" are among us.

Axzar · 03-11-2007, 02:59 AM

Quote:

Originally Posted by The Walrus

I have several customers that pay me to reformat their computers MONTHLY because they can't stay away from the porno.

kilotoons · 03-11-2007, 03:01 AM

Programs that allow spyware traffic are not to be trusted.

Zester · 03-11-2007, 03:05 AM

I want to say that I have a great desire to fight any type of cheating/spamming/fucking/trojan downloading/shit doing etc.
I wish I had a way to fight it.

will76 · 03-11-2007, 03:18 AM

Quote:

Originally Posted by Zester

I want to say that I have a great desire to fight any type of cheating/spamming/fucking/trojan downloading/shit doing etc.
I wish I had a way to fight it.

you do, if nothing else help expose the companies that support it.

Why can't we form a group, say the " anti spyware coalition ". Why can't affiliates donate $50 a month to this and sponsors donate $500 a month.

If just 100 affiliates anti up and just 10 sponsors that is $10,000 a month. apoint a board, hire a couple full time well qualified anti spyware people to start working on this. 10K a month should hire a couple really qualified people.

the more people who join the group the lower we can reduce the fees. $50 x 100 is the same as 1000 x $5 so fees could be lowered as more people join and/or more people could be hired to work on it.

If you make even $1,000 a month what is $50 to help fight this. Sponsors, if you make millions a month what is $500 ?

Dopy · 03-11-2007, 04:04 AM

Somebody spammed my holiday homes board with this shit last month.

Links to this stuff are everywhere but one in particular seems quite prominent (exclusivexxxclips.com). Below is a US University re-direct link that can be found at page one of Google after searching for Asian Cams. You can find same for many search terms.

I suggest people have a look around and begin by informing sites that are being exploited for SE traffic.

http://tig.csail.mit.edu/twiki/pub/_...exy-Asian.html

.

pornonada · 03-11-2007, 05:09 AM

Quote:

Originally Posted by tehHinjew

check the thread i made
maybe you can help out
http://www.gofuckyourself.com/showthread.php?t=708087

didn't read the whole article as it's clear what it is. But how i said and how someone already replied, get some professional help to get it fixed.
I'am not a sys admin nor in anyway talented to do server and script work.

pornonada · 03-11-2007, 05:14 AM

Quote:

Originally Posted by will76

IMO, spyware is the biggest threat to affiliates more so than anything else.

Like the orginal post stated, the sponsors still make their money, it's the affiliate that gets fucked.

We need a group of people to work on this 24/7. At very least the trojans should be identified as well as the sites using them. We try to work with all the major antivirus companies to include fixes for these trojans in their next update. We educate ourselves as much as possible. We only trade / buy from people we know or people that are reputable.

We need to put pressure on affiliate programs to do something about this. It really shouldn't be that hard. These affiliate accounts should be over written within a matter of seconds of your affiliate code being set.

For example. my page loads, my cookie is set, you have this trojan on your PC, it detects my affiliate program, and over writes my code, all in a matter of seconds. Now the affiliate company has all the data. They know your ip was set for my affiliate account and they know that "x" seconds later your ip was set again to another affiliate account. If two affiliate codes are set within say 5 mins from the same ip, the second account being set should be flagged. If it gets "x" amount of flags then the affiliate company needs to look into. This should be pretty easy to set up, if they see account "XYZ" is setting a cookie less than 5 mins after someone else 90% of the time than they know there is a serious problem with that account. I would have to think that a surfer clicking your account, than clicking someone else's account with in minutes would only happen a low percentage of the the time.

The trojan fucks can't beat this, if they wait too long to overwrite your cookie then they risk that person signing up through your account before they set theirs. So they have to do it pretty quick, in most cases i bet it happens in a matter of a couple seconds. I am suggesting 5 mins as an example, it could be reduced to shorter period of time.

The part i mentioned above about forming a group is critical. Unless someone is getting paid full time to do the work on behalf, we will never accomplish anything. We are all busy and have things to deal with, it will just be a lose collection of people trying to give an hour here or an hour there. That isn't going to cut it. How about a group with monthly fees of say $50 per person, and $500 per an affiliate company. (EXAMPLES) We hire someone who is very well qualified in spyware to work on this full time. The more people anti up and step up to the plate the more resources we can obtain.

Sounds like a good idea and like a plan. I'am all for that

pornonada · 03-11-2007, 05:21 AM

Quote:

Originally Posted by will76

you do, if nothing else help expose the companies that support it.

Why can't we form a group, say the " anti spyware coalition ". Why can't affiliates donate $50 a month to this and sponsors donate $500 a month.

If just 100 affiliates anti up and just 10 sponsors that is $10,000 a month. apoint a board, hire a couple full time well qualified anti spyware people to start working on this. 10K a month should hire a couple really qualified people.

the more people who join the group the lower we can reduce the fees. $50 x 100 is the same as 1000 x $5 so fees could be lowered as more people join and/or more people could be hired to work on it.

If you make even $1,000 a month what is $50 to help fight this. Sponsors, if you make millions a month what is $500 ?

I really like your idea and i will support it with whatever i'am possible to do, count me in!!!

Avery · 03-11-2007, 05:37 AM

samp!!!!!!!!!

Theo · 03-11-2007, 05:54 AM

will76, your solution won't work because redirection takes place on dns level, surfer doesn't get a chance to visit your linking code at all to set a cookie.

I'll post more about it tonight.

AmateurFlix · 03-11-2007, 10:28 AM

Quote:

Originally Posted by will76

Why can't we form a group, say the " anti spyware coalition ". Why can't affiliates donate $50 a month to this and sponsors donate $500 a month.

If just 100 affiliates anti up and just 10 sponsors that is $10,000 a month. apoint a board, hire a couple full time well qualified anti spyware people to start working on this. 10K a month should hire a couple really qualified people.

the more people who join the group the lower we can reduce the fees. $50 x 100 is the same as 1000 x $5 so fees could be lowered as more people join and/or more people could be hired to work on it.

If you make even $1,000 a month what is $50 to help fight this. Sponsors, if you make millions a month what is $500 ?

I'd contribute.

Affiliates, you're probably losing out on FAR more income than these modest suggested donations.

will76 · 03-11-2007, 10:34 AM

Quote:

Originally Posted by Soul_Rebel

will76, your solution won't work because redirection takes place on dns level, surfer doesn't get a chance to visit your linking code at all to set a cookie.

I'll post more about it tonight.

yes in some cases but not all. I don;t have a solution off the top of my head for the spyware that redirects you to their site instead of your sponsors site.

I am not techie either, here is the idiots explanation of what happens. Trojan modifies entries on your company and tells you computer when you type in say, ifriends.com instead of you going to ifriends you go to the trojans webpage where their cookie i set, you can not tell what happened. From my understanding this is used more for collecting credit card info, than stealling affiliate sales.

I believe most cases of trojans targetting affiliate programs is over writting affiliate cookies which the solution i mentioned will help for those cases but not when the trojan redirect the surfer to another site from the get go.

lazycash · 03-11-2007, 11:06 AM

I assume this is what most are referring to (warning do not download/install the codec) http://free3xmovies.com/movies/hardc...e1.php?id=1230 I've been running across this a ton lately. The codec link looks like some affiliate link to axmediasoft.com which is related to aximageobject.com in the whois, both go to forbidden pages. Anyone wanna download the file on a corrupted pc and see what it does, I can't seem to find where the affiliate program originates.

scottybuzz · 03-11-2007, 11:17 AM

Quote:

Originally Posted by tehHinjew

i have spyware on my damn site, not my my galleries!
as soon as you go to the site probably once a week, there is a pop up
i have to go to the index and remove the iframe
i have no idea how it gets there

you will know i had the same problem on my site. and it kept coming back

dont worry about how it gets there. aslong as u know what it is, remove it, then go straight to webaire and change your password the minuite after you have removed the bug

if you need any help further, hit me up on icq.

Zester · 03-11-2007, 12:43 PM

Quote:

Originally Posted by will76

you do, if nothing else help expose the companies that support it.

Why can't we form a group, say the " anti spyware coalition ". Why can't affiliates donate $50 a month to this and sponsors donate $500 a month.

If just 100 affiliates anti up and just 10 sponsors that is $10,000 a month. apoint a board, hire a couple full time well qualified anti spyware people to start working on this. 10K a month should hire a couple really qualified people.

the more people who join the group the lower we can reduce the fees. $50 x 100 is the same as 1000 x $5 so fees could be lowered as more people join and/or more people could be hired to work on it.

If you make even $1,000 a month what is $50 to help fight this. Sponsors, if you make millions a month what is $500 ?

count me in.

webjoker · 03-11-2007, 12:46 PM

Quote:

Originally Posted by will76

you do, if nothing else help expose the companies that support it.

Why can't we form a group, say the " anti spyware coalition ". Why can't affiliates donate $50 a month to this and sponsors donate $500 a month.

If just 100 affiliates anti up and just 10 sponsors that is $10,000 a month. apoint a board, hire a couple full time well qualified anti spyware people to start working on this. 10K a month should hire a couple really qualified people.

the more people who join the group the lower we can reduce the fees. $50 x 100 is the same as 1000 x $5 so fees could be lowered as more people join and/or more people could be hired to work on it.

If you make even $1,000 a month what is $50 to help fight this. Sponsors, if you make millions a month what is $500 ?

"if you build it he will come"
webjoker will join forces with any forces of good.

Lanceman · 03-11-2007, 01:09 PM

Quote:

Originally Posted by will76

you do, if nothing else help expose the companies that support it.

Why can't we form a group, say the " anti spyware coalition ". Why can't affiliates donate $50 a month to this and sponsors donate $500 a month.

If just 100 affiliates anti up and just 10 sponsors that is $10,000 a month. apoint a board, hire a couple full time well qualified anti spyware people to start working on this. 10K a month should hire a couple really qualified people.

the more people who join the group the lower we can reduce the fees. $50 x 100 is the same as 1000 x $5 so fees could be lowered as more people join and/or more people could be hired to work on it.

If you make even $1,000 a month what is $50 to help fight this. Sponsors, if you make millions a month what is $500 ?

I also like this idea count me in as well!

pornpf69 · 03-11-2007, 01:36 PM

thanks for the info!!

mikeet · 03-11-2007, 03:07 PM

Quote:

Originally Posted by The Walrus

I have several customers that pay me to reformat their computers MONTHLY because they can't stay away from the porno.

will76 · 03-11-2007, 03:20 PM

Hey guys, it's awesome to see the reponses so far from the people who support and idea of each of us contributing a few bucks monthly to hire someone full time to work on this to help educate and protect all of our interests.

I think a big help would be to ask your friends, associates, and sponsors if they would contribute. The $50 / affiliates and $500 / sponsors was just thrown out there, but i think would be a good number to use when asking them if they would be interested.

If we can get enough support I think the next step would be to find 4 - 5 key people to help set this up, make sure everything is legal and done correctly next step would be to collect membership dues and hire someone to start doing the work for us,put together a site and disclose the information to everyone.

tranza · 03-11-2007, 03:25 PM

Who wrote that text on the first post?

Is there any proof?

Lanceman · 03-11-2007, 03:33 PM

From what I understand alot of Big Wig type webmasters with well over 400 sites that are affected by this can you imagine the sales they have lost?

It may not even have crossed the minds of small timers with 2 or 3 sites.

But these guys are millionaires and Im sure they have documentation

I alone have been following this for days I have dedicated my life to making money in this industry and I am sick of seeing these exploits!!!!!

GoLiaT · 03-11-2007, 04:01 PM

i wonder how much of this shit is origin from torrent sites / fake torrents etc etc

must be huge ...

Lanceman · 03-11-2007, 04:07 PM

Quote:

Originally Posted by will76

you do, if nothing else help expose the companies that support it.

Why can't we form a group, say the " anti spyware coalition ". Why can't affiliates donate $50 a month to this and sponsors donate $500 a month.

If just 100 affiliates anti up and just 10 sponsors that is $10,000 a month. apoint a board, hire a couple full time well qualified anti spyware people to start working on this. 10K a month should hire a couple really qualified people.

the more people who join the group the lower we can reduce the fees. $50 x 100 is the same as 1000 x $5 so fees could be lowered as more people join and/or more people could be hired to work on it.

If you make even $1,000 a month what is $50 to help fight this. Sponsors, if you make millions a month what is $500 ?

Bottom fucking line is whos in on this?

This is the best motherfucking Idea I have ever heard of!

PERIOD!

These attacks will always change as do terrorists attacks cuase thats what they are lets stop putting down the sponsors and lets all work as a fucking team to rid the net of this shit!

Gaybucks · 03-11-2007, 04:16 PM

I think that Will76 has made an excellent suggestion, and it should not be difficult to get a number of sponsors and affiliates on board.

I would suggest that the group be named something more broad than "anti-spyware" though, as I think that the group of business owners working together to fight spyware might also want to fight other unethical practices (shaving and perhaps spamming comes to mind offhand.) Perhaps it could be the springboard for a "best practices" thing that could be a benchmark that could be beneficial toward keeping both sponsors and affiliates profitable and successful.

We would be interested and might be able to contribute some programming resources as well as some money to the project.

Lanceman · 03-11-2007, 04:17 PM

Quote:

Originally Posted by Lanceman

Bottom fucking line is whos in on this?

This is the best motherfucking Idea I have ever heard of!

PERIOD!

These attacks will always change as do terrorists attacks cuase thats what they are lets stop putting down the sponsors and lets all work as a fucking team to rid the net of this shit!

Let me be the first one to try and start a new thread on this Anti Spyware Coalition.

Anyone interested please post on it with contact info.....From there I would have to say its up to us(REAL WEBMASTERS) not people who want to post about the movie they saw last night becuase they have no life!
But serious fuckin people interested in making money!!!!!!!!!!

LETS ALL BEAT THIS CRAP!!!!!!!!!!!!!!!

cones · 03-11-2007, 04:30 PM

Quote:

Originally Posted by Naja-ram

the problem with you guys is that you can't handle competition

You stupid fuck.

cones · 03-11-2007, 04:31 PM

I am in - sounds like a great idea

will76 · 03-11-2007, 04:48 PM

Quote:

Originally Posted by Gaybucks

I think that Will76 has made an excellent suggestion, and it should not be difficult to get a number of sponsors and affiliates on board.

I would suggest that the group be named something more broad than "anti-spyware" though, as I think that the group of business owners working together to fight spyware might also want to fight other unethical practices (shaving and perhaps spamming comes to mind offhand.) Perhaps it could be the springboard for a "best practices" thing that could be a benchmark that could be beneficial toward keeping both sponsors and affiliates profitable and successful.

We would be interested and might be able to contribute some programming resources as well as some money to the project.

Thanks, i would suggest keeping it just to spyware. Some recent discussions with some very good people here has taught me that as your issues expand it is harder and harder to get everyone to agree. Also, the more broad you get the more your resources will be streached.

It would be monumental to get a group started about anything in the first place so I would take it one step at a time. But that doesn't mean it couldn't lead to others things and over time could encompass other issues that you mentioned.

will76 · 03-11-2007, 04:56 PM

Quote:

Originally Posted by Lanceman

Let me be the first one to try and start a new thread on this Anti Spyware Coalition.

Anyone interested please post on it with contact info.....From there I would have to say its up to us(REAL WEBMASTERS) not people who want to post about the movie they saw last night becuase they have no life!
But serious fuckin people interested in making money!!!!!!!!!!

LETS ALL BEAT THIS CRAP!!!!!!!!!!!!!!!

I admire your enthusiam. If we can get enough people interested in this we can make it happen. Sponsor involvement will be key for several reasons.

IMO, it would work best with 4-5 elected board members and a trusted 3rd party to over see the money collected and how it is spent. Also would need an attorney to step up and help make sure everything is legal, and adivise on what can and can't be said and done. If elected, I would be more than happy to donate my time and be involved on a "board level" capacity.

We really only need 50 - 100 people (affiliates) and 10 or so sponsors to become a member. Someone could create a logo (seal) for the affiliate program to put on their sites and they would also be listed on the membership site for everyone to see that they do not support spyware and they are doing what they can to prevent it.

I am also in the process of finishing a website that will be a great benefit to everyone in this industry. I think this site can help spread the message as well.

borked · 03-11-2007, 05:15 PM

Quote:

Originally Posted by lazycash

I assume this is what most are referring to (warning do not download/install the codec) http://free3xmovies.com/movies/hardc...e1.php?id=1230 I've been running across this a ton lately. The codec link looks like some affiliate link to axmediasoft.com which is related to aximageobject.com in the whois, both go to forbidden pages. Anyone wanna download the file on a corrupted pc and see what it does, I can't seem to find where the affiliate program originates.

Yes, I did and I can't see what Will and others are referring to - for me it doesn't redirect to a 3rd party site, it just modifies the GET url to replace the ref code with theirs. However if there is no referer code in the GET URL, it somehow gets modified at the processor.

In either case, this IS easy to tackle at the sponsor level - it just requires minor backend modification on how they track affiliates.

Lanceman · 03-11-2007, 05:19 PM

Anti Spyware Coalition

Please the first step is getting everyone on this to (get together)

PLEASE SEE THREAD ON

Anti Spyware Coalition.
Sign up!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Theo · 03-11-2007, 05:39 PM

Here's an update on this and some clarifications

I became aware of this spyware activity about a week ago when the computer of a very experienced friend of mine was affected by it. It happened through the fake codec update RawAlex posted earlier. Since he is a tech guy he noticed the hijacking instantly. He analyzed all registry changes and outgoing connections and also started contacting the aff.programs he is using and at that point seem to be affected.

Before coming on forums and posting half-info of what could possible be going on we decided to further research it first to avoid making false claims and accusations. Soon we realized the size of this issue and specially after talking with directors of few aff.programs. There's an already growing number of infected computers that frequently visit adult sites and it ranks in several millions. So, 3 days ago I let an experienced webmaster know of this issue and pretty much start letting know the adult webmasters community of what is going on. All those numbers mentioned in his initial post are personal estimations I had after getting in touch with various affected parties. If you had told me 10 days ago these numbers I wouldn't believe them, but now I can pretty much assure you they are realistic and they'll get even higher within the next few months.

Some important things:

a) There's minimal descrimination on what kind of paysites they are getting targetted. The initial post states: "CCBill is according to my source aware of it and seems to be the sponsor hardest hit". This was wrong interpretation of my words. When I found out the size of the problem I notified ccbill about it and provided them with some technical info and a sample source of infection. I did that for the simple reason it's the processor I know better and I can take their word they'll seriously check it out. At this point all cases I'm aware of have to do with aff.programs paying out with Epassporte. This for the simple reason such illegal activities are usually keen to anonymous payment methods.

b) As stated before the whole hijacking takes place on dns level therefore making things extremely harder. Aside paysites any domain can be target of this activity. For example user visits ebay.com and technically he could get a phishing site instead. I haven't seen with my own eyes the hijacking method that Wil described,but I'm sure it happens. Just I want to point out this isn't so popular at the moment (unless we are taking about adware) and not directly related with this growing issue mentioned in this thread. If you read reports of security analysts on this case you'll see they characterize it as organized crime. This is due to the intelligence and available resources it has. I cannot confirm it 100% yet, but it appears the whole spyware creation takes place on server level on-demand. Meaning the software used is so sophisticated now it generates unique instances of the same spyware for each visitor or at least extremely frequently. This makes its detection tremendously hard.

c) Another reason I didn't brought this on forums myself is for the simple fact I don't like to appear as fake-anti-spyware cruisader with actual intentions a low-level marketing scheme. I find it pretty lame that each aff.program "has to take" a public position if they support spyware or not. From what I remember we never bothered even making a post about it before. Spyware is stealing. Period. If it's not obvious to some affiliate of us we do not support stealing I can tell him he has poor criteria on picking business associates.

d) Suggested Solutions. I'll let you guys propose those, I already said my thoughts on this before and is similar to what Wil suggests. Just something to point out for being more effective in shorter timeframe is to at least attempt to seek a legal solution in the beginning. This is a truly criminal activity that is straight related with anyone operating a website/business on-line and everyone surfing the web.

If you have any technical info you think they can help please email them to me at [email protected]

thanks

JD · 03-11-2007, 06:01 PM

Quote:

Originally Posted by Soul_Rebel

Here's an update on this and some clarifications

I became aware of this spyware activity about a week ago when the computer of a very experienced friend of mine was affected by it. It happened through the fake codec update RawAlex posted earlier. Since he is a tech guy he noticed the hijacking instantly. He analyzed all registry changes and outgoing connections and also started contacting the aff.programs he is using and at that point seem to be affected.

Before coming on forums and posting half-info of what could possible be going on we decided to further research it first to avoid making false claims and accusations. Soon we realized the size of this issue and specially after talking with directors of few aff.programs. There's an already growing number of infected computers that frequently visit adult sites and it ranks in several millions. So, 3 days ago I let an experienced webmaster know of this issue and pretty much start letting know the adult webmasters community of what is going on. All those numbers mentioned in his initial post are personal estimations I had after getting in touch with various affected parties. If you had told me 10 days ago these numbers I wouldn't believe them, but now I can pretty much assure you they are realistic and they'll get even higher within the next few months.

Some important things:

a) There's minimal descrimination on what kind of paysites they are getting targetted. The initial post states: "CCBill is according to my source aware of it and seems to be the sponsor hardest hit". This was wrong interpretation of my words. When I found out the size of the problem I notified ccbill about it and provided them with some technical info and a sample source of infection. I did that for the simple reason it's the processor I know better and I can take their word they'll seriously check it out. At this point all cases I'm aware of have to do with aff.programs paying out with Epassporte. This for the simple reason such illegal activities are usually keen to anonymous payment methods.

b) As stated before the whole hijacking takes place on dns level therefore making things extremely harder. Aside paysites any domain can be target of this activity. For example user visits ebay.com and technically he could get a phishing site instead. I haven't seen with my own eyes the hijacking method that Wil described,but I'm sure it happens. Just I want to point out this isn't so popular at the moment (unless we are taking about adware) and not directly related with this growing issue mentioned in this thread. If you read reports of security analysts on this case you'll see they characterize it as organized crime. This is due to the intelligence and available resources it has. I cannot confirm it 100% yet, but it appears the whole spyware creation takes place on server level on-demand. Meaning the software used is so sophisticated now it generates unique instances of the same spyware for each visitor or at least extremely frequently. This makes its detection tremendously hard.

c) Another reason I didn't brought this on forums myself is for the simple fact I don't like to appear as fake-anti-spyware cruisader with actual intentions a low-level marketing scheme. I find it pretty lame that each aff.program "has to take" a public position if they support spyware or not. From what I remember we never bothered even making a post about it before. Spyware is stealing. Period. If it's not obvious to some affiliate of us we do not support stealing I can tell him he has poor criteria on picking business associates.

d) Suggested Solutions. I'll let you guys propose those, I already said my thoughts on this before and is similar to what Wil suggests. Just something to point out for being more effective in shorter timeframe is to at least attempt to seek a legal solution in the beginning. This is a truly criminal activity that is straight related with anyone operating a website/business on-line and everyone surfing the web.

If you have any technical info you think they can help please email them to me at [email protected]

thanks

BusterBunny · 03-11-2007, 06:06 PM

<---has no paypal account.....posted a paypal account last month to get paid on this board.....since that day i get phishing emails once ever other day from "paypal"....i love this place

will76 · 03-11-2007, 06:25 PM

Quote:

Originally Posted by Soul_Rebel

Here's an update on this and some clarifications

I became aware of this spyware activity about a week ago when the computer of a very experienced friend of mine was affected by it. It happened through the fake codec update RawAlex posted earlier. Since he is a tech guy he noticed the hijacking instantly. He analyzed all registry changes and outgoing connections and also started contacting the aff.programs he is using and at that point seem to be affected.

Before coming on forums and posting half-info of what could possible be going on we decided to further research it first to avoid making false claims and accusations. Soon we realized the size of this issue and specially after talking with directors of few aff.programs. There's an already growing number of infected computers that frequently visit adult sites and it ranks in several millions. So, 3 days ago I let an experienced webmaster know of this issue and pretty much start letting know the adult webmasters community of what is going on. All those numbers mentioned in his initial post are personal estimations I had after getting in touch with various affected parties. If you had told me 10 days ago these numbers I wouldn't believe them, but now I can pretty much assure you they are realistic and they'll get even higher within the next few months.

Some important things:

a) There's minimal descrimination on what kind of paysites they are getting targetted. The initial post states: "CCBill is according to my source aware of it and seems to be the sponsor hardest hit". This was wrong interpretation of my words. When I found out the size of the problem I notified ccbill about it and provided them with some technical info and a sample source of infection. I did that for the simple reason it's the processor I know better and I can take their word they'll seriously check it out. At this point all cases I'm aware of have to do with aff.programs paying out with Epassporte. This for the simple reason such illegal activities are usually keen to anonymous payment methods.

b) As stated before the whole hijacking takes place on dns level therefore making things extremely harder. Aside paysites any domain can be target of this activity. For example user visits ebay.com and technically he could get a phishing site instead. I haven't seen with my own eyes the hijacking method that Wil described,but I'm sure it happens. Just I want to point out this isn't so popular at the moment (unless we are taking about adware) and not directly related with this growing issue mentioned in this thread. If you read reports of security analysts on this case you'll see they characterize it as organized crime. This is due to the intelligence and available resources it has. I cannot confirm it 100% yet, but it appears the whole spyware creation takes place on server level on-demand. Meaning the software used is so sophisticated now it generates unique instances of the same spyware for each visitor or at least extremely frequently. This makes its detection tremendously hard.

c) Another reason I didn't brought this on forums myself is for the simple fact I don't like to appear as fake-anti-spyware cruisader with actual intentions a low-level marketing scheme. I find it pretty lame that each aff.program "has to take" a public position if they support spyware or not. From what I remember we never bothered even making a post about it before. Spyware is stealing. Period. If it's not obvious to some affiliate of us we do not support stealing I can tell him he has poor criteria on picking business associates.

d) Suggested Solutions. I'll let you guys propose those, I already said my thoughts on this before and is similar to what Wil suggests. Just something to point out for being more effective in shorter timeframe is to at least attempt to seek a legal solution in the beginning. This is a truly criminal activity that is straight related with anyone operating a website/business on-line and everyone surfing the web.

If you have any technical info you think they can help please email them to me at [email protected]

thanks

Seeing is believing. I had some people argue with me months back that it wasn't a big deal, i talked them into downloading the shit on their pc and when they saw what was happeing they were floored and pissed.

in many cases "adware" = spyware. It is just adware tries to appear to have a legal front and they are run by corporations where as spyware is some trojan installing kid in mama's basement with no attempted perception of being legal. sure zango tricked a lot of people "legally" into installing the search assistant, but how many of their affiliates have done installs of zango on other people's computers without the user knowing. Probably millions.... " blame the affiliate syndrome" . Zango didn't do it, it was the affiliate.

the problem with a "criminal / civil " route is that a lot of these individuals opperate in countries like Ukrane where we have no recourse. One possibility is to sue the affiliate companies themselves that allow support and accept this traffic.

Glad to see more and more people are finding out about this. whether it is "adware" or spyware trojans, they all affect us the same, they steal signups from us. I just wish you would have found out about this more than a couple days ago.

Theo · 03-11-2007, 06:35 PM

yes true, but I would wait a bit more to see how certain organizations will act before saying we can't be effective on legal level. It's incredible, but even google itself is getting targetted:

will76 · 03-11-2007, 07:31 PM

Quote:

Originally Posted by Soul_Rebel

yes true, but I would wait a bit more to see how certain organizations will act before saying we can't be effective on legal level. It's incredible, but even google itself is getting targetted:

yeap...

and when i say adware = spyware, I don't mean all adware. I use google tool bar and have no issues with stuff like that. It is the shaddy shit like zango, whenu, and a shit load of others who "sneak in", bundle other crap in with their "adware" download that hijacks and redirects our traffic and costs us millions...

shit has got to stop one way or the other.

JD · 03-11-2007, 08:24 PM

let's keep this shit alive ladies. I doubt any programs that could make a difference even give a shit though....

will76 · 03-11-2007, 08:59 PM

Quote:

Originally Posted by SPeRMiNaToR

let's keep this shit alive ladies. I doubt any programs that could make a difference even give a shit though....

We only need a few sponsors to get this going.... i think once it is started the rest will follow suit. None of them will want to have the appearance of not supporting an issue like this, well unless they are involved in spyware and they just don't give a fuck. I don't see that being the case with that many of them.

This thread will get a couple.. hundred bumps from me easy, so it should stay a live for while.

JD · 03-11-2007, 09:24 PM

Quote:

Originally Posted by will76

We only need a few sponsors to get this going.... i think once it is started the rest will follow suit. None of them will want to have the appearance of not supporting an issue like this, well unless they are involved in spyware and they just don't give a fuck. I don't see that being the case with that many of them.

This thread will get a couple.. hundred bumps from me easy, so it should stay a live for while.

Yeah no one will want to be shown as not supporting the fight but even if they make a statement how would anyone know if they're actually doing anything about it other than by canning individual accounts? For all we know the spammer/scammer could have dozens of "backup" accounts under dozens of names.

will76 · 03-11-2007, 11:44 PM

Quote:

Originally Posted by SPeRMiNaToR

Yeah no one will want to be shown as not supporting the fight but even if they make a statement how would anyone know if they're actually doing anything about it other than by canning individual accounts? For all we know the spammer/scammer could have dozens of "backup" accounts under dozens of names.

I was talking about them joining the anti spam coalition group or whatever we would call it and paying membership dues to help fight/educate everyone on spyware (the stuff i was talking about a few posts up).

True, a company can create an affiliate account through their own program so it looks like an affiliate, can the account so they make everyone think they closed the spyware asshole, and then they just make a new account and do it again.

Eventually they will be exposed for doing this. If they really close down accounts and don't pay the word will spread through the spyware community and after these people get their accounts shut down and don't get paid, they will move on to try someone else.

if an account gets banned then new one replaces it, gets banned, new one, gets banned, etc.... this can only go on so long before it is blatantly obvious the affiliate company is behind it.

blonda80 · 03-12-2007, 12:47 AM

that`s sucks!

pussyluver · 03-12-2007, 02:33 AM

The idea of an industry trade association has been brought up a number of times for all kinds of reasons. Shaving, insurance, representation to congress and so on. Never seems to get off the ground.

We do have somethings in place now that might be of help. For example StopBadware.org.

Wonder if there could be any help from the electronic frontier foundation or other groups. While this subject may not be their main focus, they sure have a ton of resource.

So the point: Is there any group that is already established that might help?

escorpio · 03-12-2007, 07:56 AM

*bump*
this shit is killing me

my sales are in the fucking trashcan
ratios so bad it's hard to believe

Lanceman · 03-12-2007, 08:05 AM

Quote:

Originally Posted by escorpio

*bump*
this shit is killing me

my sales are in the fucking trashcan
ratios so bad it's hard to believe

You and everyone else

Its a hard pill to swallow that sponsors are the ones who are
Profiting from this

I have started a thread "Anti Spyware Coilation Sign Up"

It is in the works at this point if

1.We as webmasters get organized with it
2.If enough people beleive
3.If sponsors want to play ball
4.We should all benifit greatly by this.

Please see thread...............

Lanceman · 03-12-2007, 08:18 AM

Quote:

Originally Posted by Lanceman

You and everyone else

Its a hard pill to swallow that sponsors are the ones who are
Profiting from this

I have started a thread "Anti Spyware Coilation Sign Up"

It is in the works at this point if

1.We as webmasters get organized with it
2.If enough people beleive
3.If sponsors want to play ball
4.We should all benifit greatly by this.

Please see thread...............

http://www.gofuckyourself.com/showth...13712:thumbsup

McSpike · 03-12-2007, 12:12 PM

ok I am busy as fuck today, so I skipped a few posts (dunno if anyone suggested any smart solutions).

anyway, recently we got hit with one of these. one of my editors got tricked into installing a scumware that was masquerading as a legitimate program on his machine, tryng to do an update. He allowed the update. the thing crashed the firewall and let more shit through. It looked a bit weird at the time it happened, but we didn't notice any weird shit going on and antispyware & antivirus didn't report anything. 2 days later however...

we noticed our linking codes were getting changed to the scammers' ones. the scumware infected the registry and put the scammers' "namerservers" in there, causing the click on a browser accessing their nameservers first. upon identifying the regular joe's browser is trying to access milfhunter dot com they redirected to their own ND linking codes.

when you see the shit happening in front of your own eyes, it really hits you.

the shit was easy to block (once you figure out you have it, that is). however the sheer thought of us webmasters being tricked in to installing it (and we are experienced) is fucking scary. think about hoooooooow maaaaaany regular joes out there exist having this scumware installed on their machines right at this moment, taking your sales away.

One of the top 10 sponsors listed here
http://www.pornresource.com/industrystats/overallaff/
said the scammer was making 20 sales/day.

Now just imagine how many sponsors are on that list - and you end up with a couple of hundreds of sales per day. Lots of sales taken away from affiliates.

The IPs of this scammer belong to the known Ukrainian spyware spammers working from class C IP ranges 85.255.114.* & 85.255.112.*. They run all sorts of spamming operations. You name it, they run it. Stealing affiliates' sales is one of them.

One another sponsor told us they see 5% of this "scam traffic" and were looking into ways of how to get rid of it. Which is a positive move, but I am not so sure (like RawAlex says) how many sponsors motivated to eliminate the scam.

Some don't realize that they won't lose sales - they only hurt their affiliates - their traffic partners.

There was one common thing to these scammers sponsors were able to identify:
- traffic was coming from various URLs (URLs you could find in multiple other legit affiliate accounts)
- scammers didn't reply to questions regarding traffic origin, ownership of the URLs in question.
- they were using epassporte.

The thing is all up to:
1) anti-spyware companies to clean the shit
2a) sponsors to decide to put an end to it
2b) they see these 3 combinations I mentioned above and they put the account on hold.

JD · 03-12-2007, 01:04 PM

good post McSpike 150

03-11-2007, 03:01 AM	#103
kilotoons Confirmed User Join Date: Apr 2006 Location: Look for me where it's hot and sunny Posts: 519	Programs that allow spyware traffic are not to be trusted. __________________ Knowledge is Power Ask Me How To make money

03-11-2007, 03:05 AM	#104
Zester Confirmed User Industry Role: Join Date: Jul 2003 Posts: 5,344	I want to say that I have a great desire to fight any type of cheating/spamming/fucking/trojan downloading/shit doing etc. I wish I had a way to fight it. __________________ * Mainstream ? $65 per sale * new male contraception

03-11-2007, 05:37 AM	#110
Avery Confirmed User Join Date: Feb 2007 Posts: 450	samp!!!!!!!!! __________________ go fuck yourself

03-11-2007, 01:36 PM	#119
pornpf69 Too lazy to set a custom title Join Date: Jun 2004 Location: Brasil Posts: 15,778	thanks for the info!! __________________ Do you need cheap, fast and reliable porn website hosting? Host Head is the way to go!! Asian Gay Special \| Live on MSN - Live Webcam Chat \| Live Adult Webcam Performances \| MY SWEET BLACKS LIVE ON CAM Cash X \| OK Pay \| Pukka Ropes \| Pukka Fetish \| STRAPED BLOG \| Male Bound and Fucked Pukka Tranny \| Tattooed Shemales \| She's A He \| Menu Porno \| Porn Performances \| All Chubby MY ICQ# 169833797

03-11-2007, 03:20 PM	#121
will76 Making $$$$ w/ ClickCash Industry Role: Join Date: May 2003 Location: USA Posts: 18,037	Hey guys, it's awesome to see the reponses so far from the people who support and idea of each of us contributing a few bucks monthly to hire someone full time to work on this to help educate and protect all of our interests. I think a big help would be to ask your friends, associates, and sponsors if they would contribute. The $50 / affiliates and $500 / sponsors was just thrown out there, but i think would be a good number to use when asking them if they would be interested. If we can get enough support I think the next step would be to find 4 - 5 key people to help set this up, make sure everything is legal and done correctly next step would be to collect membership dues and hire someone to start doing the work for us,put together a site and disclose the information to everyone. __________________ ICQ: 86364801 Email: will [at] innovativeassets [dot] com PROGRAM SHIT LIST - DO NOT PROMOTE (click link for gfy thread) FNCash \| Media Revenue

03-11-2007, 04:04 AM	#106
Dopy Confirmed User Join Date: Feb 2001 Location: Puerto Del Carmen, Lanzarote, Canary Islands Posts: 1,572	Somebody spammed my holiday homes board with this shit last month. Links to this stuff are everywhere but one in particular seems quite prominent (exclusivexxxclips.com). Below is a US University re-direct link that can be found at page one of Google after searching for Asian Cams. You can find same for many search terms. I suggest people have a look around and begin by informing sites that are being exploited for SE traffic. http://tig.csail.mit.edu/twiki/pub/_...exy-Asian.html .

03-11-2007, 05:54 AM	#111
Theo HAL 9000 Industry Role: Join Date: May 2001 Posts: 34,515	will76, your solution won't work because redirection takes place on dns level, surfer doesn't get a chance to visit your linking code at all to set a cookie. I'll post more about it tonight.

03-11-2007, 11:06 AM	#114
lazycash Troll Patrol Industry Role: Join Date: Aug 2002 Location: Local Socal Posts: 15,214	I assume this is what most are referring to (warning do not download/install the codec) http://free3xmovies.com/movies/hardc...e1.php?id=1230 I've been running across this a ton lately. The codec link looks like some affiliate link to axmediasoft.com which is related to aximageobject.com in the whois, both go to forbidden pages. Anyone wanna download the file on a corrupted pc and see what it does, I can't seem to find where the affiliate program originates.

03-11-2007, 03:25 PM	#122
tranza ICQ: 197-556-237 Join Date: Jun 2003 Location: BRASIL !!! Posts: 57,559	Who wrote that text on the first post? Is there any proof? __________________ I'm just a newbie.

03-11-2007, 03:33 PM	#123
Lanceman So Fucking Banned Join Date: Mar 2007 Posts: 301	From what I understand alot of Big Wig type webmasters with well over 400 sites that are affected by this can you imagine the sales they have lost? It may not even have crossed the minds of small timers with 2 or 3 sites. But these guys are millionaires and Im sure they have documentation I alone have been following this for days I have dedicated my life to making money in this industry and I am sick of seeing these exploits!!!!! Last edited by Lanceman; 03-11-2007 at 03:35 PM..

03-11-2007, 04:01 PM	#124
GoLiaT Confirmed User Join Date: Mar 2002 Posts: 1,130	i wonder how much of this shit is origin from torrent sites / fake torrents etc etc must be huge ... __________________ "where ever you go..there you are."

03-11-2007, 04:16 PM	#126
Gaybucks Confirmed User Join Date: May 2004 Location: Sacramento, CA Posts: 451	I think that Will76 has made an excellent suggestion, and it should not be difficult to get a number of sponsors and affiliates on board. I would suggest that the group be named something more broad than "anti-spyware" though, as I think that the group of business owners working together to fight spyware might also want to fight other unethical practices (shaving and perhaps spamming comes to mind offhand.) Perhaps it could be the springboard for a "best practices" thing that could be a benchmark that could be beneficial toward keeping both sponsors and affiliates profitable and successful. We would be interested and might be able to contribute some programming resources as well as some money to the project. __________________ Gaybucks.com 100% exclusive American guys - hosted movie galleries - NATS - Boyfunk.com - Boysfeetclub.com - AJsCloset.com- SkylerDeVoss.com ICQ 272-995-402

03-11-2007, 04:31 PM	#129
cones So Fucking Banned Join Date: Feb 2007 Location: Australia Posts: 571	I am in - sounds like a great idea

03-11-2007, 05:19 PM	#133
Lanceman So Fucking Banned Join Date: Mar 2007 Posts: 301	Anti Spyware Coalition Please the first step is getting everyone on this to (get together) PLEASE SEE THREAD ON Anti Spyware Coalition. Sign up!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

03-11-2007, 05:39 PM	#134
Theo HAL 9000 Industry Role: Join Date: May 2001 Posts: 34,515	*Here's an update on this and some clarifications* I became aware of this spyware activity about a week ago when the computer of a very experienced friend of mine was affected by it. It happened through the fake codec update RawAlex posted earlier. Since he is a tech guy he noticed the hijacking instantly. He analyzed all registry changes and outgoing connections and also started contacting the aff.programs he is using and at that point seem to be affected. Before coming on forums and posting half-info of what could possible be going on we decided to further research it first to avoid making false claims and accusations. Soon we realized the size of this issue and specially after talking with directors of few aff.programs. There's an already growing number of infected computers that frequently visit adult sites and it ranks in several millions. So, 3 days ago I let an experienced webmaster know of this issue and pretty much start letting know the adult webmasters community of what is going on. All those numbers mentioned in his initial post are personal estimations I had after getting in touch with various affected parties. If you had told me 10 days ago these numbers I wouldn't believe them, but now I can pretty much assure you they are realistic and they'll get even higher within the next few months. Some important things: a) There's minimal descrimination on what kind of paysites they are getting targetted. The initial post states: "CCBill is according to my source aware of it and seems to be the sponsor hardest hit". This was wrong interpretation of my words. When I found out the size of the problem I notified ccbill about it and provided them with some technical info and a sample source of infection. I did that for the simple reason it's the processor I know better and I can take their word they'll seriously check it out. At this point all cases I'm aware of have to do with aff.programs paying out with Epassporte. This for the simple reason such illegal activities are usually keen to anonymous payment methods. b) As stated before the whole hijacking takes place on dns level therefore making things extremely harder. Aside paysites any domain can be target of this activity. For example user visits ebay.com and technically he could get a phishing site instead. I haven't seen with my own eyes the hijacking method that Wil described,but I'm sure it happens. Just I want to point out this isn't so popular at the moment (unless we are taking about adware) and not directly related with this growing issue mentioned in this thread. If you read reports of security analysts on this case you'll see they characterize it as organized crime. This is due to the intelligence and available resources it has. I cannot confirm it 100% yet, but it appears the whole spyware creation takes place on server level on-demand. Meaning the software used is so sophisticated now it generates unique instances of the same spyware for each visitor or at least extremely frequently. This makes its detection tremendously hard. c) Another reason I didn't brought this on forums myself is for the simple fact I don't like to appear as fake-anti-spyware cruisader with actual intentions a low-level marketing scheme. I find it pretty lame that each aff.program "has to take" a public position if they support spyware or not. From what I remember we never bothered even making a post about it before. Spyware is stealing. Period. If it's not obvious to some affiliate of us we do not support stealing I can tell him he has poor criteria on picking business associates. d) Suggested Solutions. I'll let you guys propose those, I already said my thoughts on this before and is similar to what Wil suggests. Just something to point out for being more effective in shorter timeframe is to at least attempt to seek a legal solution in the beginning. This is a truly criminal activity that is straight related with anyone operating a website/business on-line and everyone surfing the web. If you have any technical info you think they can help please email them to me at [email protected] thanks

03-11-2007, 06:06 PM	#136
BusterBunny perverted justice decoy Join Date: Aug 2005 Location: unborn still in the womb connected via blackberry Posts: 19,291	<---has no paypal account.....posted a paypal account last month to get paid on this board.....since that day i get phishing emails once ever other day from "paypal"....i love this place __________________ my sig caught gonoherpasyphilaids and died

03-11-2007, 06:35 PM	#138
Theo HAL 9000 Industry Role: Join Date: May 2001 Posts: 34,515	yes true, but I would wait a bit more to see how certain organizations will act before saying we can't be effective on legal level. It's incredible, but even google itself is getting targetted:

03-11-2007, 08:24 PM	#140
JD Too lazy to set a custom title Industry Role: Join Date: Sep 2003 Posts: 22,651	let's keep this shit alive ladies. I doubt any programs that could make a difference even give a shit though....

03-12-2007, 12:47 AM	#144
blonda80 FOR HIRE: AFF Manager Industry Role: Join Date: May 2006 Location: EU Posts: 10,959	that`s sucks! __________________ Weekly Paying Affiliate Program with Dating Cam Offers! TrafficGoldmine.com is the official home of HookUP.com They offer payments by PayPal, Paxum, BTC, Bkash, Webmoney & more!

03-12-2007, 02:33 AM	#145
pussyluver Clueless OleMan Join Date: Mar 2003 Location: ICQ - 169903487 Posts: 11,009	The idea of an industry trade association has been brought up a number of times for all kinds of reasons. Shaving, insurance, representation to congress and so on. Never seems to get off the ground. We do have somethings in place now that might be of help. For example StopBadware.org. Wonder if there could be any help from the electronic frontier foundation or other groups. While this subject may not be their main focus, they sure have a ton of resource. So the point: Is there any group that is already established that might help?

03-12-2007, 07:56 AM	#146
escorpio I love to racism, bro! Industry Role: Join Date: Oct 2002 Location: USA! USA! USA! Posts: 23,030	bump this shit is killing me my sales are in the fucking trashcan ratios so bad it's hard to believe __________________ Unvaxxed, still alive.

03-12-2007, 12:12 PM	#149
McSpike Confirmed User Join Date: May 2001 Posts: 1,042	ok I am busy as fuck today, so I skipped a few posts (dunno if anyone suggested any smart solutions). anyway, recently we got hit with one of these. one of my editors got tricked into installing a scumware that was masquerading as a legitimate program on his machine, tryng to do an update. He allowed the update. the thing crashed the firewall and let more shit through. It looked a bit weird at the time it happened, but we didn't notice any weird shit going on and antispyware & antivirus didn't report anything. 2 days later however... we noticed our linking codes were getting changed to the scammers' ones. the scumware infected the registry and put the scammers' "namerservers" in there, causing the click on a browser accessing their nameservers first. upon identifying the regular joe's browser is trying to access milfhunter dot com they redirected to their own ND linking codes. when you see the shit happening in front of your own eyes, it really hits you. the shit was easy to block (once you figure out you have it, that is). however the sheer thought of us webmasters being tricked in to installing it (and we are experienced) is fucking scary. think about hoooooooow maaaaaany regular joes out there exist having this scumware installed on their machines right at this moment, taking your sales away. One of the top 10 sponsors listed here http://www.pornresource.com/industrystats/overallaff/ said the scammer was making 20 sales/day. Now just imagine how many sponsors are on that list - and you end up with a couple of hundreds of sales per day. Lots of sales taken away from affiliates. The IPs of this scammer belong to the known Ukrainian spyware spammers working from class C IP ranges 85.255.114.* & 85.255.112.*. They run all sorts of spamming operations. You name it, they run it. Stealing affiliates' sales is one of them. One another sponsor told us they see 5% of this "scam traffic" and were looking into ways of how to get rid of it. Which is a positive move, but I am not so sure (like RawAlex says) how many sponsors motivated to eliminate the scam. Some don't realize that they won't lose sales - they only hurt their affiliates - their traffic partners. There was one common thing to these scammers sponsors were able to identify: - traffic was coming from various URLs (URLs you could find in multiple other legit affiliate accounts) - scammers didn't reply to questions regarding traffic origin, ownership of the URLs in question. - they were using epassporte. The thing is all up to: 1) anti-spyware companies to clean the shit 2a) sponsors to decide to put an end to it 2b) they see these 3 combinations I mentioned above and they put the account on hold.

03-12-2007, 01:04 PM	#150
JD Too lazy to set a custom title Industry Role: Join Date: Sep 2003 Posts: 22,651	good post McSpike 150