Here is a breakdown of how much of our traffic has spyware! (Stats included)

**pornguy** · 10-10-2007, 11:39 AM

OK really stupid question. How do I check the traffic for these?

**Zebra** · 10-10-2007, 12:11 PM

I just stripped down my logs and only ran results for our top 3 traffic entry pages and the numbers were about 0.4% overall higher than what I listed above. Fuckers.

**Zebra** · 10-10-2007, 12:11 PM

Originally posted by pornguy

OK really stupid question. How do I check the traffic for these?

You can search your server logs.

**pornguy** · 10-10-2007, 12:15 PM

Thanks Zebra

**fuzebox** · 10-10-2007, 12:15 PM

Originally posted by DaddyHalbucks

Wow, alot of traffic has spyware and it seems to be increasing.

Not good.

Fuck off and die!

**Drake** · 10-10-2007, 01:23 PM

I had no idea it was as high as 20%.

**pornguy** · 10-10-2007, 02:40 PM

This is what we have so far.

funweb 2.85 %
megaupload 0.62 %
Zango 0.51 %
Seekmo 0.39 %
peoplepal 0.28 %
hbtools 0.22 %
hotbar 0.20 %

IM not happy at all.

**Quickdraw** · 10-10-2007, 02:46 PM

You can bet that a large portion of these guys that have any of the zango family installed, also have a variation of the zlob or codec exploit as well since Zango is popping windows to places like adultdvds1.com/teen.html (visit at your own risk)

For every person that has the zlob installed, you are losing them in your organic search engine listings as well. Surfers with these codecs get their search engine results redirected to a multitude of PPC engines.

**Pleasurepays** · 10-10-2007, 03:24 PM

Originally posted by QuaShe

We put up a HTaccess like 2 months ago and if someone with Zango enters our mainpage it shows a bar on top of the page saying that spyware was detected etc. Maybe its to small to have an impact but we are very aware of the problems.

everyone should be reminded of the fact that its not "spyware" according to the FTC. so, trying to hurt their business by mischaracterizing what the software is, opens you up to civil liability.

**HS-Trixxxia** · 10-10-2007, 03:44 PM

Originally posted by Quickdraw

Surfers with these codecs get their search engine results redirected to a multitude of PPC engines.

**my post disappeared**
but wanted to add that it's a multitude of PPC engines...OR...fake TGPS/MGPS that redirect the traffic for trades of legit traffic and then ultimately resold to a traffic broker.

**Pornwolf** · 10-10-2007, 04:26 PM

This thread is depressing.

**HS-Trixxxia** · 10-10-2007, 04:43 PM

Originally posted by Pornwolf

This thread is depressing.

I think a lot of us have surpassed the depressed part - the good thing is that finally others are taking notice. In th past 2+ years, I'd love to know how much all these companies have taken from the adult industry. I say 2+ years cuz it's around the time that the US got rid of gambling online that they replaced that income with going after adult agressively.

**pornguy** · 10-10-2007, 06:42 PM

Originally posted by HS-Trixxxia

I think a lot of us have surpassed the depressed part - the good thing is that finally others are taking notice. In th past 2+ years, I'd love to know how much all these companies have taken from the adult industry. I say 2+ years cuz it's around the time that the US got rid of gambling online that they replaced that income with going after adult agressively.

Sadly we will most likely find out, that this company is owned by one of our very own high rollers.

**rowan** · 10-10-2007, 06:46 PM

Originally posted by Shap

he just ran
grep -ci "seekmo" /path/to/your-access.log

on each of the different spyware. funweb, zango, etc

I think this could be further refined, because it's counting raw hits rather than uniques. A surfer who goes through as many FHGs as he can find and grabs 100 videos/500 images will push up the total even though his spyware 'value' is the same as a surfer who views a single hotlinked image on a forum.

Something like this would probably work better:

first, count the total number of unique IPs in your log:
cat /path/to/access_log | awk '{print $1}' | sort -u | wc -l

then for each spyware name find the number of unique IPs that reference it:
grep -ci "seekmo" /path/to/access_log | awk '{print $1}' | sort -u | wc -l

This won't work so well for logs spanning several days because the concept of a "unique" IP gets a bit blurry with different IPs being assigned as people reconnect but it will probably still be more accurate than just counting raws.

BTW the above assumes that the user-agent is actually logged... AFAIK the default Apache setup doesn't do this.

**rowan** · 10-10-2007, 07:00 PM

Originally posted by rowan

then for each spyware name find the number of unique IPs that reference it:
grep -ci "seekmo" /path/to/access_log | awk '{print $1}' | sort -u | wc -l

Oops, drop the "-c"

grep -i "seekmo" /path/to/access_log | awk '{print $1}' | sort -u | wc -l

Here is a breakdown of how much of our traffic has spyware! (Stats included)

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment