Shoutbox

quote:

---

After further analysis, I can conclude that the installer is clean. However, after the install, the program will try to connect to this site here: http://*#####.**.netbios-wait(dot)com/bins/int/7k...77428//EXE-Package
The site above(netbios-wait(dot)com) is rated red by site advisor for being a spyware control server. Please note that the site mentioned above is potentially dangerous. If a connection is established, a file will be downloaded and executed onto the user's system. The file contains a obfuscated Trojan-downloader. After the user's system is infected, the Trojan will then start downloading malware onto the infected machine. The malware includes spyware, adware, and possibly viruses. Their EULA has stated that the sponsor program is adware but has failed to inform users that it is really a Trojan horse which will then commence the download of the stated adware and other malware. Due to the method of infection, this program was able to dodge many anti-virus and anti-spyware programs Users have the choice whether to install the sponsor program or not to. However, not much information is provided which can result in inexperienced users unknowingly install malware onto their computers. This website should remain red.

---

This is from site ad visor. Can someone explain is this is true?

CBA to read it, but you're a dumbass not to look/search at existing threads about site adviser sucking, especially when dealing with plus.

EDIT:

quote:

---

Originally posted by john-t
is this is true?

---

You're from UK, therefore english SHOULD be your first language. Why is it possible that people who speak english as their second language speak it better then you do yourself?

Yeah, i know about the threads. This was posted by a real person.

Yeah, thats because some people don't understand the properties/options of the optional adware, or get confused between other spyware/adware they have. Ignore them and let them say what they want.

Well why would messenger plus! connect to s site full of spyware?

Plus! sponsor gets their updates from netbios-wait.com, and a few other sites. It's always been like this.

netbios-wait.com only has 1 red rating on SiteAdvisor, and we both know SiteAdvisor aren't always based on facts. This "Expert Reviewer" only posted a oneliner without stating any background .

Oh noes, the skyinternet is falling!

If there was something wrong with it, do you really think Patchou would let it go out to 22 million people?

With such an audience Patchou should be able to live carefree off google ads if he wanted.  He gets a better deal with CiD, but he most certainly wouldn't risk his users computers now his reputation to just get some extraa cash.

Think about it before posting

Well, I'm sorry but I can't seriously read a post talking about "Trojan", "infection" and "spyware control server". I just wonder why he did not add some reference to "Borg technology" while he had the chance.

The site this guy mentions is simply where the files of the sponsor are located for installation and update. Absolutely nothing is out of the control of Circle Dev, it's just that as you know, some antiviruses tend to detect it as "Trojan" which is ridiculous due to the fact that you need to confirm twice the installation before it happens.

It's just the usual bullshit talk at work. Installing the sponsor won't give you the amunitions needed to attack it (as you'll jsut see a couple of popups, hardly anything related to spyware, trojan the thelike). So, instead, some "expert" people will try to base our story on some of the technical aspects of the program which are non relevant but can easily scare people who don't understand the real meaning of all it: when the sponsor setup is launched, it downloads its files, installs them and displays popup. That's all there is to it and it has always worked like that.

If you really want to be scared about what a software does to your computer when you install it, launch a file monitor application, try installing Norton Antivirus and see the result.