Spyware Warrior

Eldar

At Download.com there was a new anti-spyware, namely Thespywarekiller 1.0 , but clicking the link to go to the vendor's page brings me on a Danish outsourcing agency (IniCom).
www.inicom.dk

Shocked

How can an outsourcing agency sell anti-spyware products?

Rogue software, I presume. Confused

[edit: added link to download.com]
_________________
Brabantse Leeuw | Eendracht maakt macht

radio · Posted: Fri Jul 16, 2004 2:59 pm Post subject:

looks like another one for "the list" Rolling Eyes

here's what coes up after installing:

then, here's the expected list of false positive results:

the regkey is empty, the last three folders are empty, dw.exe is the MS Application Error Reporting, & amcompat.tlb is for ActiveMovie Control , http://www.accs-net.com/smallfish/advw.htm

the database file is way out of date, 12/30/03, 107kb,
the update feature did try to connect to: thespywarekiller.com
and it says I have the most recent database Dunno

_________________
PcPitstop Forums

Eldar · Posted: Fri Jul 16, 2004 3:22 pm Post subject:

radio · Posted: Fri Jul 16, 2004 10:08 pm Post subject:

they're actually an 'opensource' company... http://www.inicom.dk/en/opensource.html

but, I don't think they're actually the publisher, it's most likely an attempt to throw people off of who actually wrote it...

also, I missed this before:

it's another clone of this : http://www.webhelper4u.com/clones/bilalahmed.html
http://www.webhelper4u.com/clones/noadware.html
_________________
PcPitstop Forums

eburger68 · Posted: Sat Jul 17, 2004 12:27 am Post subject:

Eldar & Radio:

Thanks for calling our attention to this app. I've updated the "Rogue Anti-Spyware" page to include it:

http://www.spywarewarrior.com/rogue_anti-spyware.htm

Once I installed it and took a look at it, I suddenly realized that both TheSpywareKiller and SpywareAssasin are part of the family that includes NoAdware, SpyBan, Spyware COP, and SpywareKilla:

http://www.spywarewarrior.com/family_resemblances.htm#6

In fact, TheSpywareKiller ships with the same outdated ref database file as SpywareAssasin and produces the same false positives with the ref database.

Best,

Eric L. Howes

webhelper · Posted: Sun Jul 18, 2004 12:37 pm Post subject:

eburger68 · Posted: Sun Jul 18, 2004 1:27 pm Post subject:

webhelper:

You wrote:

webhelper · Posted: Sun Jul 18, 2004 3:21 pm Post subject:

On one list yes, I will be submitting the database to Aaron at Lavasoft as I have gotten all this guys scam cloneware detected as a scam.

He get his jobs at rentacoder.com where companies pay for a fast job so they can start selling this stuff. What makes it bad is users need to be alerted as to the risk they take for who really updates those databases with new threats. Once this guy is contracted, the groups selling the stuff has been seen asking for programmers to look to our forums to get new threats to add to their databases.
_________________
Wächter der Geschichten:
http://www.webhelper4u.com/thewatcher.html
Member of ASAP Since 2004

eburger68 · Posted: Sun Jul 18, 2004 3:35 pm Post subject:

webhelper:

If you're looking into Ad-aware rip-offs and clones, you really ought to look at the Anti-Spyware Family Resemblances page -- esp. families #1, #2, #3, and #4, which look to me as they've borrowed heavily in some way from Ad-aware.

I'd be interested in knowing your opinion or take on those "families."

Best,

Eric L. Howes

Scaramouche · Posted: Fri Jul 30, 2004 1:11 am Post subject:

I think you guys are missing the point; not only is it a ripoff but it's also really really ugly.

eburger68 · Posted: Sat Aug 07, 2004 1:45 pm Post subject:

Hi All:

Back with another of Bilal Ahmed's clones:

The Adware Hunter
http://www.theadwarehunter.com/google.html

This one is a virtual carbon copy of TheSpywareKiller. It uses the same deceptive splash screen that Radio displays in his post above. It also uses the same horribly out-of-date ref database as TheSpywareKiller (12-30-03, 107 kb) and won't update it. And, of course, it produces the same false positives as the others in this family of applications:

http://www.spywarewarrior.com/family_resemblances.htm#7

It's advertised as completely free for now, but I've a sneaking suspicion that's just being used as a loss leader. It'll likely go for-pay at some near point in the future. And when it does, the company will be able to draw on the potential subscriber base it's building by requiring email contact info to download the free version.

Best,

Eric L. Howes

suzi · Posted: Sat Aug 07, 2004 2:26 pm Post subject:

I think that brings the rogue count up to about 79.

Be sure to read this page if you check out the site:

http://www.theadwarehunter.com/why-spyware-adware-free.html

wyrmrider

going to their SPYWARE CENTER gives very good advice
but there may be paid ad's above and on the way

it is one of the first things you see at download.com unless you go in looking for a specific item

Wyrmrider

wyrmrider · Posted: Sat Aug 14, 2004 6:59 pm Post subject: Dossier on Spyware Killer

admin please remove dup post- sorry

Spyware Killer is either paying Google directly or indirectly for hits through Googles "I'm feeling lucky" apps5.oingo.com context sensitive search error scam.
Anyone know who the principals and location is?

thanks
Wyrmrider

Nick · Posted: Sat Aug 14, 2004 7:13 pm Post subject: Re: Dossier on Spyware Killer

lytzhoft · Posted: Thu Aug 19, 2004 10:08 am Post subject: Thespywarekiller

Hi,
i'm the vendor of Thespywarekiller. My company IniCom.dk, has bought the application incl. website Thespywarekiller.com. That is why we have linked to inicom.dk. Yes we are a danish outsourcing company who are helping companies in Denmark outsourcing there webdevelopment/software work to Bangalore, India. As of now the database are a "bit" outdated, but we are working on a new DB update that should detect 15000+ spyware, trojans etc.

If there is anybody who are interested in develop thespywarekiller application or has some Spyware Database experience, please feel free to contact me personally on l
Admin edit. email address removed. No email addresses on the open board. We don't want the spambots to harvest it. Click on the email buttonbelow and it will yield the same address unless the user has hidden it. Nick
Regards,
Michael Lytzhoft

Nick · Posted: Thu Aug 19, 2004 1:47 pm Post subject:

I edited out you email address as we don't allow email addresses on the open board. The rest may get edited out as it appears to be more of a recruiting effort than an answer to any questions brought up.
_________________
Nick's Security Ticker

wyrmrider · Posted: Thu Aug 19, 2004 1:54 pm Post subject:

Hi Michael

did you get bot spyware killer AND spyware Killer pro
thre are so many names spy killer spy killer pro it's easy to get confused

Are you getting leads/ hits from Google or one of it's subsidiaries? or from a broker intermediatery??

I got transfered to spyware killer once from google and I can't figure out how

any ideas

Wyrmrider

lytzhoft · Posted: Thu Aug 19, 2004 1:55 pm Post subject:

Please feel free to edit my reply. It was never ment to be a reqruitment ad.

Regards,
Michael Lytzhoft