Zango Detection? - GoFuckYourself.com

4Pics · 10-21-2006, 02:56 PM

Can anyone make a java applet or something else that will
detect if a user has Zango installed?

I'd love to figure something out so i could maybe make something
that warns them they have it installed and need to remove it.

BlackCrayon · 10-21-2006, 03:03 PM

see smokeys post about zango.

4Pics · 10-21-2006, 03:11 PM

http://www.gofuckyourself.com/showthread.php?t=668659

fuzebox · 10-21-2006, 03:39 PM

To make it easier

Quote:

Originally Posted by SmokeyTheBear

someone start a fund and PAY the large tgp's to run this script

( plus everyone should just be doing this anyways )

this script will inform people that have zango installed that they are infected and give instructions to remove it without interfering with your regular traffic in any way and wont even disturb zango users , just inform them

------------------------
<script>
var agt=navigator.userAgent.toLowerCase();
if (agt.indexOf("zango")!=-1)
alert("WARNING - do not close this message - please read - You have what many people call dangerous spyware known as ZANGO installed on your system. We are not here to sell you anything you can remove it for free simply go to google and type REMOVE ZANGO into the search box and you will find many websites to help you remove it.");
</script>

----------------------------------

This next script does the same thing but instead of just informing them it takes them to a page of your choice , this way if you wanted you could make money by selling them some adware removal program ( again it doesnt disrupt traffic in any way )

---------------------------------------

<script>
var agt=navigator.userAgent.toLowerCase();
if (agt.indexOf("zango")!=-1) {
alert("WARNING - do not close this message - please read -ACCESS TO THIS WEBSITE HAS BEEN DENIED You have what many people call dangerous spyware known as ZANGO installed on your system. We are not here to sell you anything you can remove it for free simply go to google and type REMOVE ZANGO into the search box and you will find many websites to help you remove it.")
window.open('http://www.google.com/search?q=remove+zango','_top');
}
</script>

polish_aristocrat · 10-21-2006, 03:42 PM

how many ppl have zango installed?

fris · 10-21-2006, 03:43 PM

not me thats for sure

jayeff · 10-21-2006, 04:27 PM

I don't know how many people use phpAdsNew (and it probably isn't the only such script to offer this option) but I was reminded yesterday that it can detect user agents.

In other words, if you use such a script and don't ban "infected" visitors, you could choose to show them some infomercials in place of (some of) your usual promos...

Paul Markham · 10-21-2006, 09:57 PM

A thread with a solution dies, threads with bitching stay at the top. Anyone know why this is?

GrouchyAdmin · 10-21-2006, 09:59 PM

It modifies your user agent (for now). Pretty trivial to detect and mod_rewrite to a "Install Ad-Aware, you fucking idiot." page.

pr0 · 10-21-2006, 11:01 PM

ok so someone link me to some spyware removal software...with an affiliate program

& i'll put this code on all my sites

smokey, if you got some links, icq me with your refcode ill signup under ya

or anyone else

martinsc · 10-21-2006, 11:07 PM

any stats on how many are infected?

VexXxed · 10-21-2006, 11:13 PM

Quote:

Originally Posted by pr0

ok so someone link me to some spyware removal software...with an affiliate program

& i'll put this code on all my sites

smokey, if you got some links, icq me with your refcode ill signup under ya

or anyone else

Lavasoft has an affiliate program but I'm not sure if they can kill zango.

martinsc · 10-21-2006, 11:14 PM

Quote:

Originally Posted by VexXxed

Lavasoft has an affiliate program but I'm not sure if they can kill zango.

that's only a matter of time... give the a few more days...

Dirty Dane · 10-21-2006, 11:19 PM

bump4u

RawAlex · 10-21-2006, 11:33 PM

Quote:

Originally Posted by martinsc

any stats on how many are infected?

According to server stats that my admin checked today, 2.8% of my surfers announced zango in their headers (it is part of the list of toolbars).

martinsc · 10-21-2006, 11:36 PM

Quote:

Originally Posted by RawAlex

According to server stats that my admin checked today, 2.8% of my surfers announced zango in their headers (it is part of the list of toolbars).

2.8%? damn....

pr0 · 10-22-2006, 01:20 AM

Quote:

Originally Posted by RawAlex

According to server stats that my admin checked today, 2.8% of my surfers announced zango in their headers (it is part of the list of toolbars).

I'd like to be alone in a room with these mother fuckers for 20mins...thats all i ask ...20mins

polish_aristocrat · 10-22-2006, 01:21 AM

Quote:

Originally Posted by martinsc

2.8%? damn....

wow thats really a lot....

Chr0makey · 10-22-2006, 01:27 AM

Quote:

Originally Posted by polish_aristocrat

wow thats really a lot....

It sure is

Zyber · 10-22-2006, 04:46 AM

This is a nice solution which will work as long as Zango choose to disclose it's presence via the User Agent information. So not 100% bullet-proof.

I would also seek for their alternative name - "seekmo" - in addition to "zango".

Replace
if (agt.indexOf("zango")!=-1)

With
if (agt.indexOf("zango")!=-1 || agt.indexOf("seekmo")!=-1)

The final script would look like

<script>
var agt=navigator.userAgent.toLowerCase();
if (agt.indexOf("zango")!=-1 || agt.indexOf("seekmo")!=-1){
alert("WARNING - do not close this message - please read - You have what many people call dangerous spyware known as ZANGO installed on your system. We are not here to sell you anything you can remove it for free simply go to google and type REMOVE ZANGO into the search box and you will find many websites to help you remove it.");
}
</script>

u-Bob · 10-22-2006, 05:14 AM

Quote:

Originally Posted by pr0

ok so someone link me to some spyware removal software...with an affiliate program

& i'll put this code on all my sites

smokey, if you got some links, icq me with your refcode ill signup under ya

or anyone else

Like I've said before: Most of those anti-spyware programs also block/delete cookies, so promoting them=shooting yourself in the foot.
Spybot S&D is free, removes zango and doesn't block your tracking cookies: http://www.spybot.info/

10-21-2006, 02:56 PM	#1
4Pics Confirmed User Industry Role: Join Date: Dec 2001 Posts: 7,952	Zango Detection? Can anyone make a java applet or something else that will detect if a user has Zango installed? I'd love to figure something out so i could maybe make something that warns them they have it installed and need to remove it.

10-21-2006, 03:03 PM	#2
BlackCrayon Too lazy to set a custom title Join Date: Jun 2003 Location: Ottawa Posts: 19,631	see smokeys post about zango. __________________ you don't know you're wearing a leash if you sit by the peg all day..

10-21-2006, 03:42 PM	#5
polish_aristocrat Too lazy to set a custom title Join Date: Jul 2002 Posts: 40,377	how many ppl have zango installed? __________________ I don't use ICQ anymore.

10-21-2006, 03:43 PM	#6
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,359	not me thats for sure __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

10-21-2006, 09:57 PM	#8
Paul Markham Too old to care Industry Role: Join Date: Jun 2001 Location: On the sofa, watching TV or doing my jigsaws. Posts: 52,943	A thread with a solution dies, threads with bitching stay at the top. Anyone know why this is? __________________ Blowout deal. 880 videos, 2,400 image sets, plus many RAW videos. $500. PM me for a deal. Skype Paulmarkham70

10-21-2006, 03:11 PM	#3
4Pics Confirmed User Industry Role: Join Date: Dec 2001 Posts: 7,952	http://www.gofuckyourself.com/showthread.php?t=668659

10-21-2006, 04:27 PM	#7
jayeff Confirmed User Join Date: May 2001 Posts: 2,944	I don't know how many people use phpAdsNew (and it probably isn't the only such script to offer this option) but I was reminded yesterday that it can detect user agents. In other words, if you use such a script and don't ban "infected" visitors, you could choose to show them some infomercials in place of (some of) your usual promos...

10-21-2006, 09:59 PM	#9
GrouchyAdmin Now choke yourself! Industry Role: Join Date: Apr 2006 Posts: 12,085	It modifies your user agent (for now). Pretty trivial to detect and mod_rewrite to a "Install Ad-Aware, you fucking idiot." page. __________________ AIM: GrouchyGfy

10-21-2006, 11:01 PM	#10
pr0 rockin tha trailerpark Industry Role: Join Date: May 2001 Location: ~Coastal~ Posts: 23,088	ok so someone link me to some spyware removal software...with an affiliate program & i'll put this code on all my sites smokey, if you got some links, icq me with your refcode ill signup under ya or anyone else __________________ __________ Loadedca$h - get sum! - Revengebucks - mmm rebills! - webair (gotz sErVrz)

10-21-2006, 11:07 PM	#11
martinsc Too lazy to set a custom title Industry Role: Join Date: Jun 2005 Location: 127.0.0.1 Posts: 27,047	any stats on how many are infected? __________________ Make Money Last edited by martinsc; 10-21-2006 at 11:09 PM..

10-21-2006, 11:19 PM	#14
Dirty Dane Sick Fuck Industry Role: Join Date: Feb 2004 Location: www Posts: 9,491	bump4u

10-22-2006, 04:46 AM	#20
Zyber Confirmed User Industry Role: Join Date: Aug 2001 Posts: 832	This is a nice solution which will work as long as Zango choose to disclose it's presence via the User Agent information. So not 100% bullet-proof. I would also seek for their alternative name - "seekmo" - in addition to "zango". Replace if (agt.indexOf("zango")!=-1) With if (agt.indexOf("zango")!=-1 \|\| agt.indexOf("seekmo")!=-1) The final script would look like <script> var agt=navigator.userAgent.toLowerCase(); if (agt.indexOf("zango")!=-1 \|\| agt.indexOf("seekmo")!=-1){ alert("WARNING - do not close this message - please read - You have what many people call dangerous spyware known as ZANGO installed on your system. We are not here to sell you anything you can remove it for free simply go to google and type REMOVE ZANGO into the search box and you will find many websites to help you remove it."); } </script>