We deal with a lot of SPAM in our forums and automatically delete any that are posted. It doesn't matter who the spam is from; if someone comes to the forum solely to drive traffic to their own site, we delete the post! 

In the past three days, four forum accounts were created that posted links to external virus removal guides that pushed SpyHunter. We feel that this is SpyHunter affiliate spam because on each day the two accounts were created within minutes of each other and their only posts were to push people to the same affiliate sites. Furthermore, at least three out of four of them were from the same location, Bangladesh, and used proxies and VPNs. 

In my opinion this type of marketing is one of the concerns that people have regarding Enigma Software and their SpyHunter product.

What is even more concerning, though, is that two of the links lead back to TeslaCrypt removal guides that would be a big problem if an infected user followed the instructions.

SpyHunter Affiliate Removal Guide for TeslaCrypt
SpyHunter Affiliate Removal Guide for TeslaCrypt

According to BloodDolly, our resident TeslaCrypt expert, the problem with the above guide is if a TeslaCrypt victim scans their computer with SpyHunter it would remove registry keys that contain the victim's master key. It would not, though, remove the infection and the autorun for it. That means the next time the user reboots and logs into the computer, TeslaCrypt will start, create a brand new master key, and encrypt any new files with it.

Now the victim has data encrypted by TWO DIFFERENT keys!
Now they have to pay a ransom TWICE in order to get both keys!

It is bad enough having to a pay a ransom to get your files back, but to have to pay it twice is just disastrous. BloodDolly, probably the most knowledgeable TeslaCrypt researcher out there, illustrated this best in his post about SpyHunter removing the registry keys.

Enigma Software, even though you are suing the site and its volunteers, here is a sincere offer:

Drop the lawsuit and become partners with the security community instead of fighting with them. We offer an invitation for you to come to the site and discuss your product with us. If you are willing to take our concerns seriously and resolve them, then I can assure you that you will be seen in a different light. Come prove us wrong!

Below are the four different SPAM posts I referenced above.

SPAM from 2/11/2016 in the TeslaDecoder Topic
SPAM from 2/11/2016 in the TeslaDecoder Topic
SPAM from 2/11/2016 in the TeslaDecoder Topic
SPAM from 2/11/2016 in the TeslaDecoder Topic
SPAM from 2/10/2016 in a topic about VirusTotal
SPAM from 2/10/2016 in a topic about VirusTotal
SPAM from 2/10/16 in a topic about DecryptCryptolocker.com
SPAM from 2/10/16 in a topic about DecryptCryptolocker.com
SPAM Posts in our Forums from Enigma Software SpyHunter Affiliates
Click on each post for the full size.