KLIK gang and ISPRIME distribute Malware - GoFuckYourself.com

Box MT · 07-20-2007, 05:58 AM

I was told to post here, as this is the biggest adult webmasters forum.
KLIK gang (owners of many projects like klikvip.com, klikadult.com, kliksoftware.com) is now distributing fake codecs malware. They probably do it with their new affiliate program vipcodec.com. Their malware hijacks desktop, replaces homepage, popups ad windows
every 3-5 minutes and installs other malware. They also generate fake clicks and send them to different feed providers like goclick, google.
Its interesting that KLIKs are using their own domains (registered at klikdomains.com) and feeds from klikvip.com to send fake clicks to victims' websites (like ebay.com). I also would not recommend buying any traffic from their klikadvertising too, as it is full of fake clicks.

more information on this site:
castlecops.com/t193669-New_codec_pusher_nmextensions_etc_fake_porn_malwar e.html
(sorry, forum script doesn't let me post direct links)
connect last e.html to entire url. again forum script

Isprime does not see anything bad in this. Here is what they said:

Quote:

Hello,
We provide hosting for everyone, we've looked in to this issue and
we spoke to our lawyers this is not an illegal issue, if you want any
further action taken against this website please provide us with a
subpoena.

Please let me know if I can be of further assistance.

Best Regards,

Dennis Serkov
[email protected]
isprime.com
ICQ: 136633378

I also see some posts on adult forums about their porn affiliate program klikadult.com. They probably use fake codecs there too.

I suggest everybody stop any business with Isprime and KLIK GANG projects.

Lee · 07-20-2007, 06:17 AM

Oh to be a sigwhore.

darksoul · 07-20-2007, 07:38 AM

This days nothing surprises me.

ztik · 07-20-2007, 07:47 AM

Ouch that sucks. As far as I know malware that installs malware over and over IS illegal.

FakeNick · 07-20-2007, 07:48 AM

awesome stuff another programs dies as quickly as they appeared

BuggyG · 07-20-2007, 07:48 AM

oh wait... I got sig spot at top of page?? well 6th

xclusive · 07-20-2007, 08:00 AM

Doesn't surprise me

Quagmire · 07-20-2007, 08:40 AM

Companies installing loaders and malware? I'm shocked... Absolutely shocked.

I need to take the rest of the day off to get over this.

Tom_PM · 07-20-2007, 08:43 AM

Never heard of it honestly.

Box MT · 07-23-2007, 04:41 AM

Malware is still online
Isprime doesn't care!

195.225.177.206/soft/temp/502_242_0/NewMediaCodecInstaller.exe
Don't run it!

nation-x · 07-23-2007, 04:44 AM

Maybe ISPRIME should know how many webmaster have completely blacklisted any site served by intercage for this same trojan shit. I personally have blacklisted the whole netblocks... I guess ISPRIME is next... that sux.

Trax · 07-23-2007, 06:55 AM

bump....

12clicks · 07-23-2007, 07:13 AM

Quote:

Originally Posted by nation-x

Maybe ISPRIME should know how many webmaster have completely blacklisted any site served by intercage for this same trojan shit. I personally have blacklisted the whole netblocks... I guess ISPRIME is next... that sux.

holy shit!
you'll single handedly bring iSprime to its knees!

Subtle · 07-23-2007, 07:54 AM

Dear Box MT, Welcome to GFY and Good luck too!

Nice informative post, though sad!!

Am glad that you decided to do something and be different from the others! Good luck!

Your link has been posted as follows for others' convenience:
http://www.castlecops.com/t193669-Ne...ke_porn_malwar e.html

RazorSharpe · 07-23-2007, 08:09 AM

Quote:

Originally Posted by 12clicks

holy shit!
you'll single handedly bring iSprime to its knees!

Hardly the response one would expect from a so called industry leader.

...

Hen · 07-23-2007, 08:33 AM

Hello,

The original investigation on this issue has concluded that the information included in the ticket submitted was insufficient for immediate withdrawal, and that while we do not approve of malware, we feel it is important that all clients get a proper investigation to ensure that all customers receive the same treatment they would prefer in the event that they were accused of baseless claims. We have continued the investigation, and have decided that based on additional evidence that this customer is not in alignment with our AUP and therefore should be terminated.

This particular issue was a customer of a customer, and therefore we were not able to directly terminate this user. We have put pressure on our direct customer to terminate this customer, and it is currently offline.

ISPrime has a policy of enforcing our AUP, and would like to apologize for any misunderstanding on that policy earlier.

It is also ISPrime policy that we will not share any information with the person who sent in the abuse complaint without a subpoena, as dictated by out privacy policy with all customers.

Thanks for your understanding,
ISPrime Support

nation-x · 07-23-2007, 09:05 AM

Quote:

Originally Posted by RazorSharpe

Hardly the response one would expect from a so called industry leader.

...

Why do you think he is an industry leader? He must be an industry troll who likes to poke people he doesn't have any idea about. ;) I know alot of program owners... I have never even heard of him... (other then seeing his posts on GFY) and that is saying alot.

12clicks · 07-24-2007, 08:05 AM

Quote:

Originally Posted by nation-x

Why do you think he is an industry leader? He must be an industry troll who likes to poke people he doesn't have any idea about. ;) I know alot of program owners... I have never even heard of him... (other then seeing his posts on GFY) and that is saying alot.

ahahahahaha, I missed this joke yesterday.

here's an idea, punk.

Go to the biggest person in this industry you know and ask them if they know me.

Then crawl back into your fucking hole.

quantum-x · 07-24-2007, 08:07 AM

ISPrime is blacklisted in a lot of firewall suites for this very reason.

corvette · 07-24-2007, 08:20 AM

Quote:

Originally Posted by nation-x

I have never even heard of him

you obviously dont go to vegas/atlantic city much

see you in a few weeks ron

tranza · 07-24-2007, 08:24 AM

Quote:

Originally Posted by 12clicks

holy shit!
you'll single handedly bring iSprime to its knees!

Just the response you'd expect from someone that used to promote spyware stuff and scammed many webmasters in the past.

Flynn · 07-24-2007, 08:26 AM

this is a great time to get my non-functional sig in!

justsexxx · 07-24-2007, 08:40 AM

Quote:

Originally Posted by quantum-x

ISPrime is blacklisted in a lot of firewall suites for this very reason.

Lol. As you see they acted. Isprime is one of the biggest (adult) hosts. When you block Isprime, you won't hace access to bangbros, parts of casio, JRN, DieselAction etc etc etc...

I would say it's pretty good(and it should be this way) that a host does not simply give info out, based on an email from 'random' person..

StarkReality · 07-24-2007, 08:47 AM

Quote:

Originally Posted by Hen

This particular issue was a customer of a customer, and therefore we were not able to directly terminate this user. We have put pressure on our direct customer to terminate this customer, and it is currently offline.

Ah, the "customer of a customer", is that an equivalent for a "rogue affiliate" in the hosting business ?

natas · 07-24-2007, 09:06 AM

Quote:

Originally Posted by Flynn

this is a great time to get my non-functional sig in!

LOL nice

marec · 07-24-2007, 09:35 AM

shit .. more and more of such shit nowadays ...

gosh

12clicks · 07-24-2007, 10:04 AM

Quote:

Originally Posted by tranza

Just the response you'd expect from someone that used to promote spyware stuff and scammed many webmasters in the past.

hahahaha, don't make me call your mom and tell her you're abusing her computer again.

baddog · 07-24-2007, 10:08 AM

Quote:

Originally Posted by Hen

Hello,

The original investigation on this issue has concluded that the information included in the ticket submitted was insufficient for immediate withdrawal, and that while we do not approve of malware, we feel it is important that all clients get a proper investigation to ensure that all customers receive the same treatment they would prefer in the event that they were accused of baseless claims. We have continued the investigation, and have decided that based on additional evidence that this customer is not in alignment with our AUP and therefore should be terminated.

This particular issue was a customer of a customer, and therefore we were not able to directly terminate this user. We have put pressure on our direct customer to terminate this customer, and it is currently offline.

ISPrime has a policy of enforcing our AUP, and would like to apologize for any misunderstanding on that policy earlier.

It is also ISPrime policy that we will not share any information with the person who sent in the abuse complaint without a subpoena, as dictated by out privacy policy with all customers.

Thanks for your understanding,
ISPrime Support

As it should be. Job well done.

baddog · 07-24-2007, 10:11 AM

Quote:

Originally Posted by StarkReality

Ah, the "customer of a customer", is that an equivalent for a "rogue affiliate" in the hosting business ?

I suspect ISPRIME has people reselling their hosting. They handled it as it should be handled. Even if it was their direct customer, you don't just "shut them down" based on the allegations of an email.

RazorSharpe · 07-24-2007, 10:27 AM

Quote:

Originally Posted by baddog

I suspect ISPRIME has people reselling their hosting. They handled it as it should be handled. Even if it was their direct customer, you don't just "shut them down" based on the allegations of an email.

Their response on this board is very different from what they are alleged to have said:

Quote:

Hello,
We provide hosting for everyone, we've looked in to this issue and
we spoke to our lawyers this is not an illegal issue, if you want any
further action taken against this website please provide us with a
subpoena.

Please let me know if I can be of further assistance.

Best Regards,

Dennis Serkov
[email protected]
isprime.com
ICQ: 136633378

Why could they not have said what they have on this board in this alleged email? It would significantly have reduced the chances of a thread like this being started.

...

baddog · 07-24-2007, 10:52 AM

Quote:

Originally Posted by RazorSharpe

Their response on this board is very different from what they are alleged to have said:

Why could they not have said what they have on this board in this alleged email? It would significantly have reduced the chances of a thread like this being started.

...

Different author?

JD · 07-24-2007, 10:57 AM

i like boobiez

deniska · 07-24-2007, 11:35 AM

Apologies for any confusion, Hen's post in this thread is our official response, and the email response in the first post was from a tech-on-duty who was misinformed.

As a large hosting company, it is impossible to know what all customers are doing at any given time, and therefore have to react to abuse notifications. We participate in several feedback loop systems to automate notification of abuse (eg AOL's feedback loop), and perform as much proactive monitoring as technology allows to detect such behavior.

ISPrime has a long history of being an industry leader in enforcing policies to reject abusive practices such as spam, malware, spyware, etc.

Once again, we regret this incident as reflecting our policy as being lenient on abusive behavior. We have terminated this customer's services, and we have re-enforced our policy of handling abuse tickets requiring additional oversight to prevent such an initial response to an ongoing investigation in the future.

07-20-2007, 07:38 AM	#3
darksoul Confirmed User Join Date: Apr 2002 Location: /root/ Posts: 4,997	This days nothing surprises me. __________________ 1337 5y54\|)m1n: 157717888 BM-2cUBw4B2fgiYAfjkE7JvWaJMiUXD96n9tN Cambooth

07-20-2007, 07:47 AM	#4
ztik Confirmed User Industry Role: Join Date: Aug 2001 Location: Nomad Posts: 5,196	Ouch that sucks. As far as I know malware that installs malware over and over IS illegal. __________________ .

07-20-2007, 07:48 AM	#5
FakeNick Confirmed User Join Date: May 2007 Posts: 739	awesome stuff another programs dies as quickly as they appeared __________________ this is my sig, it is the only one i have which is why it is mine

07-20-2007, 08:00 AM	#7
xclusive Too lazy to set a custom title Join Date: Apr 2004 Location: Buffalo, NY Posts: 35,218	Doesn't surprise me __________________ I support MediumPimpin.com / Shemp's Outlawtgp.com /

07-20-2007, 08:40 AM	#8
Quagmire Confirmed User Join Date: Jul 2005 Location: Stinkin' up your bathroom Posts: 6,490	Companies installing loaders and malware? I'm shocked... Absolutely shocked. I need to take the rest of the day off to get over this. __________________

07-20-2007, 06:17 AM	#2
Lee Confirmed User Join Date: Aug 2002 Location: Kernow Posts: 2,977	Oh to be a sigwhore.

07-20-2007, 07:48 AM	#6
BuggyG Confirmed User Join Date: Oct 2002 Location: Ottawa Posts: 4,179	oh wait... I got sig spot at top of page?? well 6th

07-20-2007, 08:43 AM	#9
Tom_PM Porn Meister Industry Role: Join Date: Feb 2005 Posts: 16,443	Never heard of it honestly. __________________ 43-922-863 Shut up and play your guitar.

07-23-2007, 04:41 AM	#10
Box MT Registered User Join Date: Jul 2007 Posts: 5	Malware is still online Isprime doesn't care! 195.225.177.206/soft/temp/502_242_0/NewMediaCodecInstaller.exe Don't run it!

07-23-2007, 04:44 AM	#11
nation-x Confirmed User Industry Role: Join Date: Mar 2004 Location: Rock Hill, SC Posts: 5,370	Maybe ISPRIME should know how many webmaster have completely blacklisted any site served by intercage for this same trojan shit. I personally have blacklisted the whole netblocks... I guess ISPRIME is next... that sux.

07-23-2007, 06:55 AM	#12
Trax [----------------------] Join Date: Aug 2001 Posts: 14,486	bump....

07-23-2007, 07:54 AM	#14
Subtle Confirmed User Join Date: Jun 2007 Posts: 2,005	Dear Box MT, Welcome to GFY and Good luck too! Nice informative post, though sad!! Am glad that you decided to do something and be different from the others! Good luck! Your link has been posted as follows for others' convenience: http://www.castlecops.com/t193669-Ne...ke_porn_malwar e.html __________________ ----- Blog Themes for $49 ----- ------ INSTANT DELIVERY ------

07-23-2007, 08:33 AM	#16
Hen Confirmed User Industry Role: Join Date: Dec 2001 Posts: 113	Hello, The original investigation on this issue has concluded that the information included in the ticket submitted was insufficient for immediate withdrawal, and that while we do not approve of malware, we feel it is important that all clients get a proper investigation to ensure that all customers receive the same treatment they would prefer in the event that they were accused of baseless claims. We have continued the investigation, and have decided that based on additional evidence that this customer is not in alignment with our AUP and therefore should be terminated. This particular issue was a customer of a customer, and therefore we were not able to directly terminate this user. We have put pressure on our direct customer to terminate this customer, and it is currently offline. ISPrime has a policy of enforcing our AUP, and would like to apologize for any misunderstanding on that policy earlier. It is also ISPrime policy that we will not share any information with the person who sent in the abuse complaint without a subpoena, as dictated by out privacy policy with all customers. Thanks for your understanding, ISPrime Support __________________

07-24-2007, 08:07 AM	#19
quantum-x Confirmed User Join Date: Feb 2002 Location: ICQ: 251425 Fr/Au/Ca Posts: 6,863	ISPrime is blacklisted in a lot of firewall suites for this very reason.

07-24-2007, 08:26 AM	#22
Flynn pr0's goat screwed me Industry Role: Join Date: Jan 2002 Location: Seattle Posts: 2,083	this is a great time to get my non-functional sig in! __________________ blah blah blah

07-24-2007, 09:35 AM	#26
marec Confirmed User Join Date: Sep 2001 Location: .sk Posts: 681	shit .. more and more of such shit nowadays ... gosh __________________ TRANNY POLICE .com - To Serve and Fuck JOIN www.trannydollars.com - niche tranny program NOW !

07-24-2007, 10:57 AM	#32
JD Too lazy to set a custom title Industry Role: Join Date: Sep 2003 Posts: 22,651	i like boobiez

07-24-2007, 11:35 AM	#33
deniska Confirmed User Industry Role: Join Date: Mar 2001 Location: Miami Beach, FL Posts: 1,053	Apologies for any confusion, Hen's post in this thread is our official response, and the email response in the first post was from a tech-on-duty who was misinformed. As a large hosting company, it is impossible to know what all customers are doing at any given time, and therefore have to react to abuse notifications. We participate in several feedback loop systems to automate notification of abuse (eg AOL's feedback loop), and perform as much proactive monitoring as technology allows to detect such behavior. ISPrime has a long history of being an industry leader in enforcing policies to reject abusive practices such as spam, malware, spyware, etc. Once again, we regret this incident as reflecting our policy as being lenient on abusive behavior. We have terminated this customer's services, and we have re-enforced our policy of handling abuse tickets requiring additional oversight to prevent such an initial response to an ongoing investigation in the future.