• Announcements

    • Budfred

      IE 11 copy/paste problem

      It has come to our attention that people using Internet Explorer 11 (IE 11) are having trouble with copy/paste to the forum. If you encounter this problem, using a different browser like Firefox or Chrome seems to get around the problem. We do not know what the problem is, but it seems to be specific to IE 11 and we are hopeful that Microsoft will eventually fix it.
Sign in to follow this  
Followers 0
webhelper

Webhelper: BulletProofSoft Installs Adware

3 posts in this topic

BulletProofSoft.com (Elbanhawy Gang) Now Installs Adware!

 

There was a post in the old forum that I gave me the link to Majorgeeks.com about popupsnuker.com. I have confirmed the installation of adware and other sites and software of theirs as well.

***************

BPS Installs Adware: Topmoxie eBates Mo Money and Navexcel

 

after reading a posting over at the MajorGeeks.comforum stating that popupsnuker.com was installing adware with their software and MajorGeeks removed it because of the adware, I found that popupsnuker.com belongs to one of the groups that I have been monitoring for the past year and that is BulletProofsoft.com (BPS) that sells the spyware remover that has been suspected of being hacked from both adaware and spybot older software.

 

I went and tested all their sites and I find one that you download the various software is offered at download sites that they (BPS)have been linked to since 2000 and 2 more that also installs the Navexcel and topmoxie's eBates Mo Money adware.

 

This is something new for them and as such you will not know if any of their software has adware installs or not unless you run the installation to get the Install EULA which most users will click continue without reading down into the 20 somewhat pages to find out all there is to know.

 

I have the sites that they own, the sites that have adware, and the names used as authors throughout the Internet as you will need to know the name of the site that matches the software or its author to stay away from it. As is my criteria I set forth on my site at webhelper4u.com, any site that installs adware, then all sites that it owns, its affiliates and partners will be listed as direct or indirect supporters of adware installations for profiting from users personal information.

 

One part of the EULA is what really gets me. Here you install a popup blocker that could keep eBates ads from popping up and what a user is authorizing is to let eBates disable or delete any program that interferes with theirs.

 

". In installing the Moe Money Maker Software, you authorize Ebates to disable, uninstall, or delete any application or software that might, in Ebates' opinion nullify its function and put you at risk of loosing the cash-back savings that Moe Money Maker Software is designed to earn you..."

 

Authors Names used Advertising the software:

Ayman Elbanhawy

Ahmad Elbanhawy

Dr. Gamal Elbanhawy

Naglaa Elbanhawy

 

 

BPS Sites Adware Installs:

Popupsnuker.com

Installer File: pn.exe

 

Zillsoft.ws (Installs navexcel and Topmoxie eBates Mo Money adware)

Zilla cd dvd rip and burn zrnb20.exe

Zilla Anonymous Surfer zas2501.exe

 

spamnullifier.com 216.40.206.208

spamnullifier (free version)

hxxp://www.filehog.com/sn30.exe

Installs navexcel

 

 

BulletProofSoft (BPS Gang) and Affiliates/Partners Sites

 

Activex.us - (Domains by Proxy, Inc.) 216.40.206.208

Adnuker.com - (Domains by Proxy, Inc.) 207.44.200.48

Ads4me.net - (Domains by Proxy, Inc.) 207.44.200.48

Audioshareware.com - (H4Host.com) 216.40.206.208

Audiotools.ws - (H4Host.com) 216.40.206.208

bulletproofsoft.com - (Domains by Proxy, Inc.) 216.40.227.156

bulletproofsoft.info:66.98.154.33

bulletproofsoft.ws:66.98.154.33

Clicknzip.com - (Domains by Proxy, Inc.) 207.44.200.48

Downloadupload.com - (H4Host.com) 216.40.206.208

Esftp.com - (Domains by Proxy, Inc.) 216.40.206.208

File4me.com -(Elbanhawy Investments Now H4Host.com) 216.40.206.208

Filehog.com – (H4Host.com) 207.44.200.48

Fireballftp.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208

Ftpking.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208

Ftpmonster.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208

Ftpright.net - (Domains by Proxy, Inc.) 216.40.206.208

h4host.com - (Domains by Proxy, Inc.) 216.40.227.9

IMAGINEER-WEB.com 216.40.227.154

Job4middleeast.com -

(Boston Executive Limousine Now Domains by Proxy, Inc.) 216.40.206.208

Jobbid.ws - (H4Host.com) 216.40.206.208

Jobbid4me.com -(Boston Executive Limousine Now Domains by Proxy, Inc.) 216.40.206.208

mawaqit.com 216.40.227.9

Mediatools.ws - (H4Host.com) 216.40.206.208

Monsterzip.com - (Domains by Proxy, Inc.) 216.40.206.208

noadware.com: - (Domains by Proxy, Inc.) 66.98.154.33

bulletproofsoft.info:66.98.154.33

bulletproofsoft.ws:66.98.154.33

Onestopsoft.com - (Domains by Proxy, Inc.) 216.40.206.208

popupshield.net -(Domains by Proxy, Inc.) 216.40.206.208

popupsnuker.com: (Godaddy) 216.40.206.172 (installs ebates and navecel)

Robust.ws - (H4Host.com) 216.40.206.208

Robustftp.com - (Domains by Proxy, Inc.) 216.40.206.208

Royalftp.com - (Domains by Proxy, Inc.) 216.40.206.208

Sharewaredepo.com - (H4Host.com) 216.40.206.208

Sharewarepile.com - (H4Host.com) 216.40.206.208

Softdepo.com - (H4Host.com) 216.40.206.208

Softwareclub.ws - (Domains by Proxy, Inc.) 216.40.206.208

Softwaredepo.com - (H4Host.com) 216.40.206.208

Softwarepile.com - (Domains by Proxy, Inc.) 216.40.206.208

soundindepth.com – (Domains by Proxy) 216.40.206.208

spaminnihilator.com – (Domains by Proxy) 216.40.206.208

Spamnullifier.com - (Domains by Proxy, Inc) 216.40.206.208

spywarezapper.com (Domains by Proxy, Inc) 66.98.154.33

Spider.ws - (Chia Lor) 216.40.206.208

Tbel.net - (Boston Executive Limousine) 216.40.206.208

Traceremover.com - (Elbanhawy Investments) 216.40.206.208

Tracezapper.com - (Elbanhawy Investments) 216.40.206.208

Trackscrubber.com - (Elbanhawy Investments) 216.40.206.208

Trackzapper.com - (Elbanhawy Investments) 216.40.206.208

Windowscleanser.com - (Domains by Proxy, Inc.) 216.40.206.208

Windowsclenser.com - (H4Host.com) 216.40.206.208

Zillaftp.com - (Domains by Proxy, Inc.) 216.40.206.208

Zillasoft.ws - (H4Host.com) 216.40.206.208

 

Cloned Download Sites Linked to the BPS

 

digitalriver.com:209.87.182.60

topdownloads.com:209.87.178.244

tdwebhost.com:64.246.54.50

pigeons-news.com:64.246.54.50

topdownloads.net:66.98.178.22

PIGEONS.NET:66.98.178.22

subloads.com:66.98.178.22

downloadsnet.com:66.98.178.22

supportmail.info:216.168.224.63

rizalsoftware.com:207.44.194.97

backupdvd.info:207.44.194.97

 

Sites of the Adware

topmoxie.com 66.220.2.164

ebates.com 63.236.57.90

navexcel.com 128.121.212.181

 

 

Webhelper

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0