Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

180 Solutions and CDT take the train to Bittorrent land


  • Please log in to reply
1 reply to this topic

#1 TeMerc

TeMerc

    Countermeasures Team Leader


  • Malware Response Team
  • 215 posts
  • OFFLINE
  •  
  • Location:PHX., AZ.
  • Local time:01:22 PM

Posted 08 July 2005 - 01:02 AM

Yes, that's right - 180 Solutions thought it'd be a great idea to not only pursue Bittorrent installer bundles,but kind of mess up on the "this is what's included" front. Hmm....because the last coverage of this kind of thing generated so much good publicity, right?

Same old, same old? Blame the affiliates? Bore us all to death with a "whoops, we got them" and a "same time next month"?

You bet. So come with me and check out the latest great bit of kit in Bittorrent land...


Full Read @ Vital Security.org
Posted Image
Calendar of Updates
Malware Advisor Blog
HijackThis! Trusted Advisor
Ultimate Countermeasures Page
TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals
Posted Image

BC AdBot (Login to Remove)

 


#2 TeMerc

TeMerc

    Countermeasures Team Leader

  • Topic Starter

  • Malware Response Team
  • 215 posts
  • OFFLINE
  •  
  • Location:PHX., AZ.
  • Local time:01:22 PM

Posted 08 July 2005 - 01:25 AM

From Dave Methvin of PCPitstop:

They're doing it again!
More BitTorrent fireworks went off over the July 4th holiday. After the last episode it was inevitable that the pests would come crawling back, but so soon? I plucked two files and installed them to get the details, but I saw at least a dozen more files that are likely to have the same installer. Here's what I found out so far.

Different company, same scam. This time, the supposed distributor is Media Decompressor Company, or at least that's the name in the license. A user downloads one of their files using BitTorrent; often the content is an adult-oriented video. Running the file brings up a dialog with soothing legalese on the first screen; clicking "I Agree" rewards the user with the content and the adware bundle. If the user scrolls down in the license, they will see that this program installs the 180Search Assistant from 180Solutions, Golden Retriever from ShopAtHomeSelect, and Internet Optimizer from Avenue Media. The license text shown to the user only has links to the 180Solutions license; for the others it just mentions that they are installed but says nothing about their license terms.

CDT rides again, with 180Solutions in tow. Several pieces of 180Solutions adware are installed by the bundle. 180Solutions purchased a company named CDT in March 2005. The payload for this latest bundle is immediately retrieved from servers under the control of CDT and/or 180Solutions, from domains owned by the same companies: public.windupdates.com, static.flingstone.com, bis.180solutions.com, and downloads.180solutions.com. If the "Media Compressor Company" exists at all, it delegates responsibility to CDT/180Solutions very early in the install process.


Full Read @ PCPitstop
Posted Image
Calendar of Updates
Malware Advisor Blog
HijackThis! Trusted Advisor
Ultimate Countermeasures Page
TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals
Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users