Here is a breakdown of how much of our traffic has spyware! (Stats included) - GoFuckYourself.com

Shap · 10-10-2007, 08:50 AM

Hey Guys. We just went thru our logs and here is the breakdown of spyware traffic we found going to our site today.

Zango 0.75%
Seekmo 0.82%
hbtools 0.37%
hotbar 0.28%
peoplepal 0.16%

Those are the top five. I'm going to research some more to see what else i find. So far it looks like at the very bare minimum 2% of our traffic is infected.

Anybody else have any results to share?

RP Fade · 10-10-2007, 08:54 AM

We're tracking as we speak...results shortly.

Shap · 10-10-2007, 08:57 AM

Quote:

Originally Posted by RP Fade

We're tracking as we speak...results shortly.

I'm going to track our free sites and hosted gals now as well to see what the difference would be.

Shap · 10-10-2007, 09:09 AM

HOLY SHIT.

4.6% of our traffic has funweb

fuzebox · 10-10-2007, 09:10 AM

I remember reading that most Zango infected computers don't actually reveal this in the User-Agent header string, only if they have a certain feature turned on.

12clicks · 10-10-2007, 09:12 AM

Quote:

Originally Posted by Shap

Hey Guys. We just went thru our logs and here is the breakdown of spyware traffic we found going to our site today.

Zango 0.75%
Seekmo 0.82%
hbtools 0.37%
hotbar 0.28%
peoplepal 0.16%

Those are the top five. I'm going to research some more to see what else i find. So far it looks like at the very bare minimum 2% of our traffic is infected.

Anybody else have any results to share?

so you ADMIT to accepting spyware traffic!

I had to be the first one with that.

Axeman · 10-10-2007, 09:13 AM

Quote:

Originally Posted by Shap

HOLY SHIT.

4.6% of our traffic has funweb

Holy shit, I've never even heard of them. DAMN.

Sosa · 10-10-2007, 09:16 AM

Quote:

Originally Posted by Shap

HOLY SHIT.

4.6% of our traffic has funweb

gotta love all those smileys !

RP Fade · 10-10-2007, 09:18 AM

Quote:

Originally Posted by Shap

I'm going to track our free sites and hosted gals now as well to see what the difference would be.

Yeah..good idea. I'll have Mike look into that as well.

Shap · 10-10-2007, 09:19 AM

Quote:

Originally Posted by 12clicks

so you ADMIT to accepting spyware traffic!

I had to be the first one with that.

lol. Yeah apparently i am. It's even worse on our members traffic.

Since Midnight here is the percentage of file requests that had the following companies in the user agent info.
funweb 14%
Zango 2.6%
seeko 1.1%
hbtools 0.2%
hotbar 1%

Right now the test is on file requests so it may be skewed in the members area if someone with it downloads the entire site. Still 19% is insane.

HS-Trixxxia · 10-10-2007, 09:24 AM

Quote:

Originally Posted by Shap

Hey Guys. We just went thru our logs and here is the breakdown of spyware traffic we found going to our site today.

Zango 0.75%
Seekmo 0.82%
hbtools 0.37%
hotbar 0.28%
peoplepal 0.16%

Those are the top five. I'm going to research some more to see what else i find. So far it looks like at the very bare minimum 2% of our traffic is infected.

Anybody else have any results to share?

Your other enemy, if I may add - are the 'codec' installers - probably doing more damage.

Here's why - they look legit and are on free galleries. Surfer sees that he's missing a codec - he can 'hear' the moaning but can'T see the action or he can't hear or see anything but the thumb was DAMN good. Anyhow... they install this codec and THEN the traffic belongs to them.

What they do is:
Overwrite affiliate codes - they will hijack on the join form.
You find something suspicious and shut down the account? They send this traffic, which is destined for you (or your galleries) to a 'fake trading site' and then either resell this traffic to search engines OR to traffic companies. Fucking you over twice when you're buying the traffic at a higher cost.

polish_aristocrat · 10-10-2007, 09:25 AM

shap, zango is pretty known here, but what do the other spyware programs do?

Shap · 10-10-2007, 09:26 AM

Quote:

Originally Posted by polish_aristocrat

shap, zango is pretty known here, but what do the other spyware programs do?

No clue yet. Just gathering the data now.

tranza · 10-10-2007, 09:28 AM

Quote:

Originally Posted by Shap

lol. Yeah apparently i am. It's even worse on our members traffic.

Since Midnight here is the percentage of file requests that had the following companies in the user agent info.
funweb 14%
Zango 2.6%
seeko 1.1%
hbtools 0.2%
hotbar 1%

Right now the test is on file requests so it may be skewed in the members area if someone with it downloads the entire site. Still 19% is insane.

Wow, that's just insane!!

rvincent · 10-10-2007, 09:29 AM

Quote:

Originally Posted by Shap

Anybody else have any results to share?

tell me which regex you used to match each spyware and I'll be able to share similar stats from my program...

Shap · 10-10-2007, 09:30 AM

Quote:

Originally Posted by HS-Trixxxia

Your other enemy, if I may add - are the 'codec' installers - probably doing more damage.

Here's why - they look legit and are on free galleries. Surfer sees that he's missing a codec - he can 'hear' the moaning but can'T see the action or he can't hear or see anything but the thumb was DAMN good. Anyhow... they install this codec and THEN the traffic belongs to them.

What they do is:
Overwrite affiliate codes - they will hijack on the join form.
You find something suspicious and shut down the account? They send this traffic, which is destined for you (or your galleries) to a 'fake trading site' and then either resell this traffic to search engines OR to traffic companies. Fucking you over twice when you're buying the traffic at a higher cost.

Do you know of any examples that I could download and try myself?

polish_aristocrat · 10-10-2007, 09:32 AM

I just checked - seekmo is zango

http://www.seekmo.com/partnerwithseekmo.aspx

Are you a webmaster or do you have content like games and videos to publish? Partner with Seekmo to earn cash and give your users a satisfying, free content experience! Go to Zangocash.com where you can learn more about our partner programs and sign up to start earning now.

Shap · 10-10-2007, 09:35 AM

Quote:

Originally Posted by rvincent

tell me which regex you used to match each spyware and I'll be able to share similar stats from my program...

he just ran
grep -ci "seekmo" /path/to/your-access.log

on each of the different spyware. funweb, zango, etc

Shap · 10-10-2007, 09:35 AM

Quote:

Originally Posted by polish_aristocrat

I just checked - seekmo is zango

http://www.seekmo.com/partnerwithseekmo.aspx

Are you a webmaster or do you have content like games and videos to publish? Partner with Seekmo to earn cash and give your users a satisfying, free content experience! Go to Zangocash.com where you can learn more about our partner programs and sign up to start earning now.

I believe they may all be zango but just the different names it's distributed under.

HS-Trixxxia · 10-10-2007, 09:37 AM

Quote:

Originally Posted by Shap

Do you know of any examples that I could download and try myself?

I uninstalled it last night cuz when I wanted to download Zango, it was giving me a blank page for zango, although I could reach it fine from my other computers... hehehe funny, the fuckers don't want other fuckers to fuck with their traffic...

Anyhow - Zango cut my connection - wonder how they will bounce me around if I can't connect to the internet anymore??

Just uninstalled Zango so I could connect to the net and once I can, I will email it to you if you want.

Once I figure out how to fix my dns settings...

Shap · 10-10-2007, 09:39 AM

Quote:

Originally Posted by HS-Trixxxia

I uninstalled it last night cuz when I wanted to download Zango, it was giving me a blank page for zango, although I could reach it fine from my other computers... hehehe funny, the fuckers don't want other fuckers to fuck with their traffic...

Anyhow - Zango cut my connection - wonder how they will bounce me around if I can't connect to the internet anymore??

Just uninstalled Zango so I could connect to the net and once I can, I will email it to you if you want.

Once I figure out how to fix my dns settings...

Sure that would be great tw-shap at twistys dot com

I was trying to run zango tests last night but had to give up. Zango has killed my computer. I can't even surf anymore. It takes 15 minutes to open IE

Ray@TastyDollars · 10-10-2007, 09:44 AM

Quote:

Originally Posted by HS-Trixxxia

Your other enemy, if I may add - are the 'codec' installers - probably doing more damage.

Yepp, a ton more damage. Id say a good 20% of all TGP traffic surfers are infected with this shit in their machines.

Anyone notice how TGP traffic hit the shitter the past few months?

Oh and they stared passing this shit around with mailers as well. Thats a LOT of traffic folks.

Read more about it here
http://www.gofuckyourself.com/showthread.php?t=720781

Ray

Roald · 10-10-2007, 09:44 AM

we checked this some while ago for zango alone and had like 0.7% on our main.

This shit is a serious problem.

And I agree with Trixxxia about the codec crap, we had some guys targeting freeones in the serps and then come up with the codec crap. All going to the same french (if I am correct) aff. program, obviously they never responded to the complaints showing they just don't give a shit (duhhh). The program is gone already (videoscash) and probably running under another name now.

Shit like this makes me sad

Roald · 10-10-2007, 09:46 AM

Quote:

Originally Posted by Shap

Sure that would be great tw-shap at twistys dot com

I was trying to run zango tests last night but had to give up. Zango has killed my computer. I can't even surf anymore. It takes 15 minutes to open IE

wouldn't that actually be a good thing? When the shit fucks up your browser that bad, maybe they will be more carefull installing toolbar crap the next time.

Shap · 10-10-2007, 09:47 AM

Quote:

Originally Posted by QuaShe

wouldn't that actually be a good thing? When the shit fucks up your browser that bad, maybe they will be more carefull installing toolbar crap the next time.

Yep I agree.

GonZo · 10-10-2007, 09:48 AM

Them rogue affiliates sure have been busy!

Are they kin to the rogue programmers from last year that used copyrighted images for some of the tours?

I dont expect an answer though. Im sure all the people involved blacked out and dont remember a thing . . . and you thought tossing a chair at guys from 10 stories up was wild...

HS-Trixxxia · 10-10-2007, 09:51 AM

Quote:

Originally Posted by Shap

Sure that would be great tw-shap at twistys dot com

I was trying to run zango tests last night but had to give up. Zango has killed my computer. I can't even surf anymore. It takes 15 minutes to open IE

For me, it's screwed up all my DNS and I can't seem to renew it or anything of the sort.

TampaToker · 10-10-2007, 09:53 AM

Quote:

Originally Posted by Shap

Sure that would be great tw-shap at twistys dot com

I was trying to run zango tests last night but had to give up. Zango has killed my computer. I can't even surf anymore. It takes 15 minutes to open IE

Funny you said my ie all shot to hell as well....

Quickdraw · 10-10-2007, 09:53 AM

Quote:

Originally Posted by HS-Trixxxia

I uninstalled it last night cuz when I wanted to download Zango, it was giving me a blank page for zango, although I could reach it fine from my other computers... hehehe funny, the fuckers don't want other fuckers to fuck with their traffic...

Anyhow - Zango cut my connection - wonder how they will bounce me around if I can't connect to the internet anymore??

Just uninstalled Zango so I could connect to the net and once I can, I will email it to you if you want.

Once I figure out how to fix my dns settings...

You just 'uninstalled' the zlob?

will76 · 10-10-2007, 09:53 AM

Quote:

Originally Posted by Shap

HOLY SHIT.

4.6% of our traffic has funweb

funwebproducts hits about 5 - 10% of my traffic

Shap · 10-10-2007, 09:56 AM

Quote:

Originally Posted by will76

funwebproducts hits about 5 - 10% of my traffic

Any idea who they are or how bad they are messing with traffic?

yys · 10-10-2007, 09:59 AM

Quote:

Originally Posted by QuaShe

wouldn't that actually be a good thing? When the shit fucks up your browser that bad, maybe they will be more carefull installing toolbar crap the next time.

The problem is that if they are stupid enough to install these programs they are probably too dense to figure out what is causing their computer to run like shit.

Probably the exact kind of surfer who is more likely to pay for their porn as well

Shap · 10-10-2007, 10:00 AM

Quote:

Originally Posted by yys

The problem is that if they are stupid enough to install these programs they are probably too dense to figure out what is causing their computer to run like shit.

I agree with that as well. I've seen that with family members. No idea how it showed up. All they know is their computer is slow as shit.

Roald · 10-10-2007, 10:02 AM

Quote:

Originally Posted by Shap

Any idea who they are or how bad they are messing with traffic?

http://www.sophos.com/security/analyses/funweb.html

* Displays pop-up advertising
* Modifies browser settings
* Installs adware
* Installs a browser toolbar

Roald · 10-10-2007, 10:04 AM

Quote:

Originally Posted by yys

The problem is that if they are stupid enough to install these programs they are probably too dense to figure out what is causing their computer to run like shit.

Probably the exact kind of surfer who is more likely to pay for their porn as well

yeah probably

fuzebox · 10-10-2007, 10:07 AM

Looks like 0.5% of my gallery traffic is tagged with zango.

Shap · 10-10-2007, 10:08 AM

Quote:

Originally Posted by fuzebox

Looks like 0.5% of my gallery traffic is tagged with zango.

Which is similar to what we see. But check out funweb

yys · 10-10-2007, 10:08 AM

Quote:

Originally Posted by Shap

I agree with that as well. I've seen that with family members. No idea how it showed up. All they know is their computer is slow as shit.

My exact experience with relatives and friends. You format the computer and reinstall everything for them and then you get a call a week later that their computer isn't working properly and you must have done something wrong. When you boot up out pops a purple guerrilla or some other form of adware/spyware.

I was over at one friends parents house and I shit you not, they had about 5 tool bars on their browser eating up half of the laptop screen.

Roald · 10-10-2007, 10:09 AM

not sure how funweb works but I read here and there that they show popups and I am pretty sure that if they do so you can bid on certain words to to trigger it. hm

Roald · 10-10-2007, 10:11 AM

Quote:

Originally Posted by yys

My exact experience with relatives and friends. You format the computer and reinstall everything for them and then you get a call a week later that their computer isn't working properly and you must have done something wrong. When you boot up out pops a purple guerrilla or some other form of adware/spyware.

I was over at one friends parents house and I shit you not, they had about 5 tool bars on their browser eating up half of the laptop screen.

lol my girl likes to play some online games every now and then and after that I have to spend my time again removing the crap she installed "just to play the game" Like you said, internet stupidity

HS-Trixxxia · 10-10-2007, 10:12 AM

Quote:

Originally Posted by Quickdraw

You just 'uninstalled' the zlob?

Quickdraw yes I uninstalled it and the game I had downloaded but I just restored it trying to fix it.

The agreement to their settlement with the FTC was that it would uninstall simply through the Add/Remove Hardware - obviously, this is not the case for me + they fucked my connections.

RP Fade · 10-10-2007, 10:13 AM

Quote:

Originally Posted by yys

My exact experience with relatives and friends. You format the computer and reinstall everything for them and then you get a call a week later that their computer isn't working properly and you must have done something wrong. When you boot up out pops a purple guerrilla or some other form of adware/spyware.

I was over at one friends parents house and I shit you not, they had about 5 tool bars on their browser eating up half of the laptop screen.

I 'service' friends and family's pc's every month..funny and sad at the same time.

Quickdraw · 10-10-2007, 10:17 AM

Quote:

Originally Posted by HS-Trixxxia

Quickdraw yes I uninstalled it and the game I had downloaded but I just restored it trying to fix it.

The agreement to their settlement with the FTC was that it would uninstall simply through the Add/Remove Hardware - obviously, this is not the case for me + they fucked my connections.

I'm sorry, I thought you were talking about the codec exploits

RawAlex · 10-10-2007, 10:36 AM

The codec deals are more difficult because they don't even try to be nice. Their entire intent is to create zombies to do their work. They certainly aren't going to put that in the infobar to show what they are.

I think that if a large number of adult sites suddenly started to refuse people with these products installed, that there would be a big change. Right now, there isn't a big push either way.

Let's say the hun, freeones, and a few other larger sites suddenly declined that traffic or at least popped up something on every page. I think you would see an increase in uninstalls as a result.

A few people around here would be very sad, they would lose traffic and income as a result.

AlmightyZeus · 10-10-2007, 10:40 AM

I did some digging and found a cool javascript tool: http://www.doxdesk.com/software/js/parasite.html

Basically it checks for spyware then alerts the user if he/she is infected. But the list hasn't been updated since 2005

Roald · 10-10-2007, 10:48 AM

Quote:

Originally Posted by RawAlex

The codec deals are more difficult because they don't even try to be nice. Their entire intent is to create zombies to do their work. They certainly aren't going to put that in the infobar to show what they are.

I think that if a large number of adult sites suddenly started to refuse people with these products installed, that there would be a big change. Right now, there isn't a big push either way.

Let's say the hun, freeones, and a few other larger sites suddenly declined that traffic or at least popped up something on every page. I think you would see an increase in uninstalls as a result.

A few people around here would be very sad, they would lose traffic and income as a result.

We put up a HTaccess like 2 months ago and if someone with Zango enters our mainpage it shows a bar on top of the page saying that spyware was detected etc. Maybe its to small to have an impact but we are very aware of the problems.

HS-Trixxxia · 10-10-2007, 10:50 AM

Quote:

Originally Posted by Quickdraw

I'm sorry, I thought you were talking about the codec exploits

I must have misunderstood too then - yes I uninstalled the codec too but I do have it on that computer in a zipped file

Shap · 10-10-2007, 10:51 AM

Quote:

Originally Posted by AlmightyZeus

I did some digging and found a cool javascript tool: http://www.doxdesk.com/software/js/parasite.html

Basically it checks for spyware then alerts the user if he/she is infected. But the list hasn't been updated since 2005

Hey Zeus. I found the same thing yesterday. It's a shame it's 2 years old

AlmightyZeus · 10-10-2007, 11:11 AM

Quote:

Originally Posted by Shap

Hey Zeus. I found the same thing yesterday. It's a shame it's 2 years old

Got my old laptop out, zango ready. I'll add some new entries to the js file and see if it works. I'll keep you guys posted.

V_RocKs · 10-10-2007, 11:15 AM

Crazy shit Shap

10-10-2007, 08:50 AM	#1
Shap Confirmed User Industry Role: Join Date: May 2001 Posts: 8,313	Here is a breakdown of how much of our traffic has spyware! (Stats included) Hey Guys. We just went thru our logs and here is the breakdown of spyware traffic we found going to our site today. Zango 0.75% Seekmo 0.82% hbtools 0.37% hotbar 0.28% peoplepal 0.16% Those are the top five. I'm going to research some more to see what else i find. So far it looks like at the very bare minimum 2% of our traffic is infected. Anybody else have any results to share?

10-10-2007, 08:54 AM	#2
RP Fade Confirmed User Join Date: Sep 2003 Location: Los Angeles Posts: 3,343	We're tracking as we speak...results shortly. __________________ HomemadeCash.com - Homemade & GF sites powered by NScash.com HomemadeVideoPass.com - The only all homemade mega site OurHomemadePorno.com - Real couples fucking on camera Contact ICQ: 400-786-531 Email: fade AT nscash.com

10-10-2007, 09:25 AM	#12
polish_aristocrat Too lazy to set a custom title Join Date: Jul 2002 Posts: 40,377	shap, zango is pretty known here, but what do the other spyware programs do? __________________ I don't use ICQ anymore.

10-10-2007, 09:32 AM	#17
polish_aristocrat Too lazy to set a custom title Join Date: Jul 2002 Posts: 40,377	I just checked - seekmo is zango http://www.seekmo.com/partnerwithseekmo.aspx Are you a webmaster or do you have content like games and videos to publish? Partner with Seekmo to earn cash and give your users a satisfying, free content experience! Go to Zangocash.com where you can learn more about our partner programs and sign up to start earning now. __________________ I don't use ICQ anymore.

10-10-2007, 09:44 AM	#23
Roald SecretFriends.com Industry Role: Join Date: May 2001 Location: IMC Headquarters Posts: 27,877	we checked this some while ago for zango alone and had like 0.7% on our main. This shit is a serious problem. And I agree with Trixxxia about the codec crap, we had some guys targeting freeones in the serps and then come up with the codec crap. All going to the same french (if I am correct) aff. program, obviously they never responded to the complaints showing they just don't give a shit (duhhh). The program is gone already (videoscash) and probably running under another name now. Shit like this makes me sad __________________ WE ARE BUYING PAY SITES! CONTACT ME ClubSweethearts \| ManUpFilms \| SinfulXXX \| HOT * AdultPrime * HOT Paying webmasters since 1996! Contact: r.riepen @ sansylgroup.com \| skype:roaldr \| icq:

10-10-2007, 09:09 AM	#4
Shap Confirmed User Industry Role: Join Date: May 2001 Posts: 8,313	HOLY SHIT. 4.6% of our traffic has funweb

10-10-2007, 09:10 AM	#5
fuzebox making it rain Industry Role: Join Date: Oct 2003 Location: seattle Posts: 22,017	I remember reading that most Zango infected computers don't actually reveal this in the User-Agent header string, only if they have a certain feature turned on.

10-10-2007, 09:48 AM	#26
GonZo Confirmed User Industry Role: Join Date: Jul 2002 Location: Atlanta,Ga. Posts: 3,180	Them rogue affiliates sure have been busy! Are they kin to the rogue programmers from last year that used copyrighted images for some of the tours? I dont expect an answer though. Im sure all the people involved blacked out and dont remember a thing . . . and you thought tossing a chair at guys from 10 stories up was wild... __________________ Assclown Bob Rice wants to BANG your credit card! "I am putting the bastards of this world on notice; greed and corruption will always be met with "a voice made of ink and rage." All the information above is my personal opinion. Last edited by GonZo; 10-10-2007 at 09:51 AM..

10-10-2007, 10:07 AM	#36
fuzebox making it rain Industry Role: Join Date: Oct 2003 Location: seattle Posts: 22,017	Looks like 0.5% of my gallery traffic is tagged with zango.

10-10-2007, 10:09 AM	#39
Roald SecretFriends.com Industry Role: Join Date: May 2001 Location: IMC Headquarters Posts: 27,877	not sure how funweb works but I read here and there that they show popups and I am pretty sure that if they do so you can bid on certain words to to trigger it. hm __________________ WE ARE BUYING PAY SITES! CONTACT ME ClubSweethearts \| ManUpFilms \| SinfulXXX \| HOT * AdultPrime * HOT Paying webmasters since 1996! Contact: r.riepen @ sansylgroup.com \| skype:roaldr \| icq:

10-10-2007, 10:36 AM	#44
RawAlex So Fucking Banned Join Date: Oct 2003 Location: In a house. Posts: 9,465	The codec deals are more difficult because they don't even try to be nice. Their entire intent is to create zombies to do their work. They certainly aren't going to put that in the infobar to show what they are. I think that if a large number of adult sites suddenly started to refuse people with these products installed, that there would be a big change. Right now, there isn't a big push either way. Let's say the hun, freeones, and a few other larger sites suddenly declined that traffic or at least popped up something on every page. I think you would see an increase in uninstalls as a result. A few people around here would be very sad, they would lose traffic and income as a result.

10-10-2007, 10:40 AM	#45
AlmightyZeus Registered User Join Date: Jan 2001 Location: Mount Olympus Posts: 59	I did some digging and found a cool javascript tool: http://www.doxdesk.com/software/js/parasite.html Basically it checks for spyware then alerts the user if he/she is infected. But the list hasn't been updated since 2005

10-10-2007, 11:15 AM	#50
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,391	Crazy shit Shap