Jump to content


Photo

Webhelper: BulletProofSoft Installs Adware


  • Please log in to reply
2 replies to this topic

#1 webhelper

webhelper

    Member

  • Developer
  • Pip
  • 17 posts

Posted 17 May 2004 - 01:07 PM

BulletProofSoft.com (Elbanhawy Gang) Now Installs Adware!

There was a post in the old forum that I gave me the link to Majorgeeks.com about popupsnuker.com. I have confirmed the installation of adware and other sites and software of theirs as well.
***************
BPS Installs Adware: Topmoxie eBates Mo Money and Navexcel

after reading a posting over at the MajorGeeks.comforum stating that popupsnuker.com was installing adware with their software and MajorGeeks removed it because of the adware, I found that popupsnuker.com belongs to one of the groups that I have been monitoring for the past year and that is BulletProofsoft.com (BPS) that sells the spyware remover that has been suspected of being hacked from both adaware and spybot older software.

I went and tested all their sites and I find one that you download the various software is offered at download sites that they (BPS)have been linked to since 2000 and 2 more that also installs the Navexcel and topmoxie's eBates Mo Money adware.

This is something new for them and as such you will not know if any of their software has adware installs or not unless you run the installation to get the Install EULA which most users will click continue without reading down into the 20 somewhat pages to find out all there is to know.

I have the sites that they own, the sites that have adware, and the names used as authors throughout the Internet as you will need to know the name of the site that matches the software or its author to stay away from it. As is my criteria I set forth on my site at webhelper4u.com, any site that installs adware, then all sites that it owns, its affiliates and partners will be listed as direct or indirect supporters of adware installations for profiting from users personal information.

One part of the EULA is what really gets me. Here you install a popup blocker that could keep eBates ads from popping up and what a user is authorizing is to let eBates disable or delete any program that interferes with theirs.

". In installing the Moe Money Maker Software, you authorize Ebates to disable, uninstall, or delete any application or software that might, in Ebates' opinion nullify its function and put you at risk of loosing the cash-back savings that Moe Money Maker Software is designed to earn you..."

Authors Names used Advertising the software:
Ayman Elbanhawy
Ahmad Elbanhawy
Dr. Gamal Elbanhawy
Naglaa Elbanhawy


BPS Sites Adware Installs:
Popupsnuker.com
Installer File: pn.exe

Zillsoft.ws (Installs navexcel and Topmoxie eBates Mo Money adware)
Zilla cd dvd rip and burn zrnb20.exe
Zilla Anonymous Surfer zas2501.exe

spamnullifier.com 216.40.206.208
spamnullifier (free version)
hxxp://www.filehog.com/sn30.exe
Installs navexcel


BulletProofSoft (BPS Gang) and Affiliates/Partners Sites

Activex.us - (Domains by Proxy, Inc.) 216.40.206.208
Adnuker.com - (Domains by Proxy, Inc.) 207.44.200.48
Ads4me.net - (Domains by Proxy, Inc.) 207.44.200.48
Audioshareware.com - (H4Host.com) 216.40.206.208
Audiotools.ws - (H4Host.com) 216.40.206.208
bulletproofsoft.com - (Domains by Proxy, Inc.) 216.40.227.156
bulletproofsoft.info:66.98.154.33
bulletproofsoft.ws:66.98.154.33
Clicknzip.com - (Domains by Proxy, Inc.) 207.44.200.48
Downloadupload.com - (H4Host.com) 216.40.206.208
Esftp.com - (Domains by Proxy, Inc.) 216.40.206.208
File4me.com -(Elbanhawy Investments Now H4Host.com) 216.40.206.208
Filehog.com (H4Host.com) 207.44.200.48
Fireballftp.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208
Ftpking.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208
Ftpmonster.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208
Ftpright.net - (Domains by Proxy, Inc.) 216.40.206.208
h4host.com - (Domains by Proxy, Inc.) 216.40.227.9
IMAGINEER-WEB.com 216.40.227.154
Job4middleeast.com -
(Boston Executive Limousine Now Domains by Proxy, Inc.) 216.40.206.208
Jobbid.ws - (H4Host.com) 216.40.206.208
Jobbid4me.com -(Boston Executive Limousine Now Domains by Proxy, Inc.) 216.40.206.208
mawaqit.com 216.40.227.9
Mediatools.ws - (H4Host.com) 216.40.206.208
Monsterzip.com - (Domains by Proxy, Inc.) 216.40.206.208
noadware.com: - (Domains by Proxy, Inc.) 66.98.154.33
bulletproofsoft.info:66.98.154.33
bulletproofsoft.ws:66.98.154.33
Onestopsoft.com - (Domains by Proxy, Inc.) 216.40.206.208
popupshield.net -(Domains by Proxy, Inc.) 216.40.206.208
popupsnuker.com: (Godaddy) 216.40.206.172 (installs ebates and navecel)
Robust.ws - (H4Host.com) 216.40.206.208
Robustftp.com - (Domains by Proxy, Inc.) 216.40.206.208
Royalftp.com - (Domains by Proxy, Inc.) 216.40.206.208
Sharewaredepo.com - (H4Host.com) 216.40.206.208
Sharewarepile.com - (H4Host.com) 216.40.206.208
Softdepo.com - (H4Host.com) 216.40.206.208
Softwareclub.ws - (Domains by Proxy, Inc.) 216.40.206.208
Softwaredepo.com - (H4Host.com) 216.40.206.208
Softwarepile.com - (Domains by Proxy, Inc.) 216.40.206.208
soundindepth.com (Domains by Proxy) 216.40.206.208
spaminnihilator.com (Domains by Proxy) 216.40.206.208
Spamnullifier.com - (Domains by Proxy, Inc) 216.40.206.208
spywarezapper.com (Domains by Proxy, Inc) 66.98.154.33
Spider.ws - (Chia Lor) 216.40.206.208
Tbel.net - (Boston Executive Limousine) 216.40.206.208
Traceremover.com - (Elbanhawy Investments) 216.40.206.208
Tracezapper.com - (Elbanhawy Investments) 216.40.206.208
Trackscrubber.com - (Elbanhawy Investments) 216.40.206.208
Trackzapper.com - (Elbanhawy Investments) 216.40.206.208
Windowscleanser.com - (Domains by Proxy, Inc.) 216.40.206.208
Windowsclenser.com - (H4Host.com) 216.40.206.208
Zillaftp.com - (Domains by Proxy, Inc.) 216.40.206.208
Zillasoft.ws - (H4Host.com) 216.40.206.208

Cloned Download Sites Linked to the BPS

digitalriver.com:209.87.182.60
topdownloads.com:209.87.178.244
tdwebhost.com:64.246.54.50
pigeons-news.com:64.246.54.50
topdownloads.net:66.98.178.22
PIGEONS.NET:66.98.178.22
subloads.com:66.98.178.22
downloadsnet.com:66.98.178.22
supportmail.info:216.168.224.63
rizalsoftware.com:207.44.194.97
backupdvd.info:207.44.194.97

Sites of the Adware
topmoxie.com 66.220.2.164
ebates.com 63.236.57.90
navexcel.com 128.121.212.181


Webhelper

#2 wawadave

wawadave

    Advanced Member

  • Full Member
  • PipPipPip
  • 126 posts

Posted 17 May 2004 - 01:37 PM

grate work there webhelper!!!!!!!!!!!!!!!
thank you once again. :D

<b>MYTH!!!!
Putting quotes around posts does not protect you from copy right infringement.</b>
<img src="http://img54.photobu...r_wawadave.gif" border="0" alt="IPB Image" />

#3 CES

CES

    Member

  • Full Member
  • Pip
  • 11 posts

Posted 17 May 2004 - 06:18 PM

Thx - Great Post - Appreciate your hard work!!!!!!!

:D




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button