Help - Search - Members - Calendar
Full Version: Please Support Spyware Warriors
B.I.S.S. Forums > Bluetack Forums > Global News
Moore
Hi , there's a great anti-spyware forum called >>SPYWARE WARRIOR<<

They have recently come under fire for exposing the details of a particular dodgy spyware company by the name of Enigma software who like to produce fake anti-spyware software and ripoff other legitimate programs like Spybot S&D , if you have time to have a look and show your support by posting in the blog , that would be great. biggrin.gif

>> http://www.netrn.net/archives2/000539.html <<

The company's alleged CEO ? is threatening legal action against them, just for telling the truth on their cool forum and Blog.

It's a growing site and they do really great work helping to keep people free from spyware, so please post your support if you would in the blog. biggrin.gif They cant sue the whole world for telling the truth..


http://spywarewarrior.com/viewtopic.php?t=2120
http://www.netrn.net/archives2/000541.html


A bit more on Enigma Spyware:

Big fake warning
http://www.safer-networking.org/index.php?...tail=2004-02-05

http://tired-of-spam.home.comcast.net/enigma.html

http://forums.net-integration.net/index.php?showtopic=11043
http://forums.net-integration.net/index.php?showtopic=13938

http://forum.gladiator-antivirus.com/index...showtopic=14887


##################################################################


QUOTE
The power of Blog vs a spyware scam company
Posted by: rigor on Sunday, May 23, 2004 -   
  
A few days ago I received the following email from the chairman of Enigma Software Group, the company that markets SpyHunter.

Apparently SpyWare Warrior reported that the Enigma Software Group (who markets a product named SpyHunter) that says it's a free download and claims to find malware (a very small percentage of what's really out there) and they want $29 to fix the problems. She felt so scammed by them then discovered the FREE tools that even removed the $29 SpyHunter...

"Ok so I decided to find a spy ware program to fix the problems. So I typed anti-spy ware programs in my browser and I found one claiming to be a great tool find and get rid of spy ware. It was SpyHunter. I downloaded it for free as it said. Did a scan and was surprised at the number of infected files I found. But when attempted to fix the problems SpyHunter asked to register the copy. So I paid $29 dollars for it. Once I did that I scanned my system again and “fixed” the problems. Ok the next day, I started my system again and when I got online I found out that my homepage had been changed once again. So I ran SpyHunter again, and again, and again… but my homepage keep on getting changed. Now not only that but every time I scanned my system the number of infected files seemed to double. I thought, what the hell!!!

Finally, upset and very frustrated, I decided get the new Norton Internet security and looked for a new anti-spy ware program. When I did my second search I ran into an article from CNET new and found out the straight facts about the so-called anti-spy ware programs and about how spyware is a much bigger problem than I though. I was so angry since I had been ripped off by Enigma, (makers SpyHunter) and even more nobody understands me at the fact that there are no laws against this kind of scam!! So I joined the Spyware Warrior forums and there I found out about the true anti-spy ware software. I downloaded Ad-aware and Spybot S&D. Finally my computer began to work properly.
Bottom line, we need laws against spy ware and fast!!!

SpyHunter is marketed by EnigmaSoftwareGroup keep reading for more info on them.

Important note - Ad-aware now removes SpyHunter. Way to go Lavasoft, makers of Ad-aware!"

The company apparently doesn't like the adverse publicity generated by the news release.
In the end, let the buyer beware.


####################################################################
r00ted
are
Enigma Software Group XREO-ENIGMASO-328 (NET-64-93-12-88-1) 64.93.12.88 - 64.93.12.95
Enigma Software Group, Inc. PEER1-ENIGMA-01 (NET-69-90-125-0-1) 69.90.125.0 - 69.90.125.255 added to 1 of the lists? That's from ARIN.
Moore
yes they should already be in the spyware list, but thanks for these r00ted.

ok the second range isnt in there , so it will be soon. biggrin.gif
Enigma Software Group, Inc. PEER1-ENIGMA-01 (NET-69-90-125-0-1) 69.90.125.0 - 69.90.125.255
pruttel
Yep, both are covered in the adware list
one entry( the above) as enigma and a large range including the second one listed as peer 1 network evil spyware
so we're safe
tongue.gif
Moore
alright thats good , thanks Pruttel biggrin.gif.

i had also blocked a whole lot of single IP ranges of their websites that were dealing out fake spybot /adaware downloads , but theres still a lot more in The Webhelpers latest awesome report that need adding too :

http://www.bluetack.co.uk/forums/index.php?showtopic=2992
pruttel
Looks like a lot of work moore blink.gif
Moore
nah , it's fun , and good to know theyre blocked biggrin.gif
Moore
Enigma Spyhunter has been included in the latest Ad-Aware definition file :

http://www.lavasoftusa.com/news/20040528.shtml

QUOTE
Åsarp, Friday, May 28, 2004

SpyHunter now included in Ad-aware's database

Enigma Software Group Inc. is the company behind the SpyHunter software. They claim that "Our suites are built to address the need of privacy protection and computer security. We empower internet users to take control over their computers against Spyware, parasites, SPAM, and others obtaining your personal information online!" However, what's not disclosed is the hidden transmission of the Microsoft Windows Product ID to their servers every time their software checks for an update. They also uniquely identify their users by use of a unique ID for each installation. This unique ID is also sent to their servers undisclosed. This is something we at Lavasoft find highly questionable and unethical.

Enigma Software Group also uses questionable methods to market their software SpyHunter. Their pop-up ads resemble virus alerts from well-known anti-virus programs, and DOS windows displaying fake scan results.

The pop-up ads can be found here:

  http://www2.enigmasoftwaregroup.com/TMP/1.htm
  http://www2.enigmasoftwaregroup.com/TMP/2.htm
  http://www2.enigmasoftwaregroup.com/TMP/3.htm
  http://www2.enigmasoftwaregroup.com/TMP/4.htm

and here (mirrored site):

  Example 1 http://www.lavasoftusa.com/news/spyhunter_files/1.htm
  Example 2 http://www.lavasoftusa.com/news/spyhunter_files/2.htm
  Example 3 http://www.lavasoftusa.com/news/spyhunter_files/3.htm
  Example 4 http://www.lavasoftusa.com/news/spyhunter_files/4.htm

Internet users are tricked into believing their computers are infected with "a spyware virus" and that they must download and scan their computers with SpyHunter to get rid of it. The SpyHunter scanner is free to download, but in order to remove these items, the software must be purchased.

Earlier this year the so-called anti-spyware software SpyBan was removed from the website Download.com because adware was installed along with the software. According to News.com SpyBan "had failed to disclose and explain all the software components included in its installation, a violation of the Web site's policies".

Enigma Software Group's End User Licence Agreement does not contain information about SpyHunter transmitting a client id or the Product ID of the Microsoft Windows Operating System. That is why we at Lavasoft hope that SpyHunter will be removed from the Download.com website soon.

Why SpyHunter has been added to Ad-aware's database
While some may claim adding SpyHunter to Ad-aware's database is an attempt to defame a competitor, our users trust us with protecting their privacy, and when another company is doing the very thing they're claiming to help protect against, Ad-aware is there to ensure our users' privacy isn't deceptively violated.

All items added to Ad-aware's database are qualified using a Threat Assessment Chart (TAC) prior to inclusion. The system is based on a total of 10 points, 1 being the least and 10 being the most threatening and/or problematic. Behavior and intent weigh more heavily towards becoming a legitimate detection than do the technical aspects. Please note that applications that are difficult to remove and cause system instability due to poor coding and DO NOT contain any further violations as described below ARE NOT considered for inclusion in the Ad-aware database.

Points are added according to the following criteria:
Removal - One Point
Integration - Two Points
Distribution - Two Points
Behavior - Three Points
Privacy - Two Points
An application requires a TAC number of three or higher to be included in the database. More information about the TAC can be found on the Threat Assessment Chart page.

SpyHunter from Enigma Software Group Inc. has received a TAC level of four and has been added to the database. The TAC level was determined using the following information:


Removal - No Points Received
This item does not have any characteristics which match those defined in the Removal section.
Integration - No Points Received
This item does not have any characteristics which match those defined in the Removal section.
Distribution - Two Points Received
This item's End User Licence Agreement (EULA) does not contain information pertaining to the transmission of a client id or the Product ID of the Microsoft Windows Operating System.
This transmission is not disclosed in the EULA. More information about this transmission can be found in the Privacy section.
Behavior - No Points Received
This item does not have any characteristics which match those defined in the Removal section.
Privacy - Two Points Received
This item transmits the Product ID of the Microsoft Windows Operating System. This ID is transmitted as part of the update check process. MemScanner is the memory-resident portion of Enigma.SpyHunter. This component transmits a Unique ID during its update process
Moore
########################################################################

Spyhunter antispyware program

########################################################################

http://www.spywareinfo.com/newsletter/archives/0604/2.php

If you browse the internet with Internet Explorer and have no pop-up blocker, you probably have seen a few ads for a program called Spyhunter. Depending on your level of experience with the internet, you probably were either disgusted or frightened by it (nevermind that it was a pop-up ad, which is disgusting enough on its own).

The ads try to mislead the surfer into believing spyware has been discovered on their PC. They pop up in what appears to be a DOS or CMD window and look like something Windows itself might produce. The ad states that "Spy Software may be installed in your computer" and shows a list of locations where some common malware are found. At the bottom, it shows an image of a button next to "Click OK to remove items".

If the surfer clicks the ad, they are presented with a page that looks very similar to an Internet Explorer error page which declares "Severe Virus Alert!" and a pitch to download the "free" Spyhunter program. In fact, Spyhunter is NOT a free program. It will scan for free but it has to be purchased before it will remove anything.

You may have found the Spyhunter site through another means. If you have done a Google search for Spybot or Ad-aware, you might have found advertisements that lead to Spyhunter instead of the real Spybot or Ad-aware. Most of the Spyhunter pages that show up in Google results are loaded with keywords related to these legitimate antispyware programs. Thankfully, Google appears finally to have stopped accepting Google advertisements that trigger on the word "Spybot".

Understandably, many people consider Spyhunter to be nothing but a scam. Those of us in the antispyware community consider it to be garbage, little different from Spywiper or SpywareNuker. Check any antispyware message board and search for Spyhunter and you'll see what I mean.

The company behind Spyhunter, EnigmaSoftware Group, has sent a cease and desist letter to at least one site because of negative comments about their software. Netrn.net, home of the Spyware Warrior blog, was the recipient of the letter. The operator of the site fired back, on the advice of an attorney, with a demand for examples of every single statement to which EnigmaSoftware objected, its internet address and proof that the statement was incorrect. To my knowledge there has been no response.

The Spyware Warrior blog also has an extensive list of so-called antispyware programs that are as bad as anything a legitimate antispyware program would remove. These are programs that either install spyware themselves or are just plain garbage. Looking over the list, I see nothing there that shouldn't be there in my opinion.

And yes, Spyhunter is on that list.

On a final note, it's worth pointing out that Spyhunter now is detected and removed by Lavasoft Ad-aware.

#######################################################################
biohazard
They're just trying to fool the average user. Which it does work. I've had to uninstall this many times cause my peers are dumb. Con artists, they try anything to get money. I think they are coke addicts and they need money to get more coke. LOL. They'll take money no matter what it takes. That is still just wrong. That's why there are people like us to inform the rest.
Moore
Post removed by request
zero
moore,

you posted outdated info. there is no original article anymore, and you posting rumours.

For all others read latest news about spyhunter:
http://spywarewarrior.com/viewtopic.php?t=5015
Moore
Hi zero , was www2-spyware ever hosted on an Adorons server , or did they lie and make that up to trick people ?

If its false information it will be removed.
zero
QUOTE (Moore @ Aug 25 2004, 10:09 PM)
Hi zero , was www2-spyware ever hosted on an Adorons server , or did they lie and make that up to trick people ?

If its false information it will be removed.

Hello Moore,

Long time ago, when Enigma were providing hosting services, 2-spyware.com was one of their clients. In late 2003 when people started to think that its Enigma's site, 2-spyware.com moved to dedicated server. Also, As far I know Enigma shut down their hosting services.

This article you post recarding content theft is outdated, because it was just misunderstanding which was solved in spring 2004. There is No original article anymore, your post links to comments, not to the original article.

2-spyware.com never been under the ownership of Enigma and never will be. Its informational portal which provides info how to remove parasites and advertises not only Enigmas product Spyhunter, but other products like x-cleaner, pestpatrol.

At this moment neither spyhunter nor 2-spyware.com are in any rogue lists.

I think there is no reason to post about a year old information (which has changed a lot of times) as a new.
Satans_Spawn
QUOTE
moore...you posting rumours


ZERO - sounds to me like you're trying to cover for the likes of Enigma! tongue.gif
zero
QUOTE (Satans_Spawn @ Sep 2 2004, 10:15 AM)
ZERO - sounds to me like you're trying to cover for the likes of Enigma! tongue.gif

there is nothing to cover there, Because there is nothing BAD with them at the moment.
Theiving
Aight, added my comments to the blog. Sorry to see this shit happen also.
Moore
Yes I wlll remove that post Zero , just been a little busy.

Its true the original page at spywareguide.com has been removed and if you say its been resolved , then I'll believe you , as things at spyware warrior seem to have taken a turn for the better.

Still some of the content I viewed at www2-spyware last time i was looking up some information on a few spyware files through google , made me glad I didnt have to rely on that site for my information.

one part of the page said the file was not spyware then right below that it said I "was" infected with spyware and click here to get it removed . nice.
zero
QUOTE (Moore @ Sep 3 2004, 03:29 AM)
Yes I wlll remove that post Zero  , just been a little busy.

Its true the original page at spywareguide.com has been removed and if you say its been resolved , then I'll believe you , as things at spyware warrior seem to have taken a turn for the better.

Still some of the content I viewed at www2-spyware last time i was looking up some information on a few spyware files through google , made me glad I didnt have to rely on that site for my information.

one part of the page said the file was not spyware then right below that it said I "was" infected with spyware and click here to get it removed . nice.

Thanx Moore for the removal,

regarding 2-spyware:
There are lots of files which are used by spyware related programs to mislead the user. So in text description both things needs to be mentioned.
lets take csrss.exe as an example. It is system file but it is widely used by various keyloggers and worms.

So either way if you are unsure its better to scan with any spyware scanner.
Moore
Hmm , ok , well to me this page has some obvious contradiction ..

>> LINK ! <<

QUOTE
WorkFlow.exe description:
Related to BroadJump's broadband trouble-shooting software. cfd.exe

If you think that information about the file WorkFlow.exe is inacurate, please edit it.
Edit WorkFlow.exe description
WorkFlow.exe last edited: 2004-07-07 19:03:38 by user 64.12.117.9

File WorkFlow.exe removal:
WARNING!!! File WorkFlow.exe is related to spyware. Your system is under security threat.
We advice you to scan your computer and eliminate possible threats.
download scanner and remover


So on one hand WorkFlow.exe is not spyware , but wait is is , and you have to download a scammer , oh I mean scanner to remove it .

This is one just reason I have www2.spyware IP blocked in my firewall , theres enough totally unreliable information available out there already.
CalamityKen
QUOTE
Their product is not classified anymore as rogue/suspect but little we know... they are doing something again.

Enigma Software Group did it again?
paperghost
Ken, thats a great link smile.gif
CalamityKen
It's not an April Fools joke either. biggrin.gif
Moore
smile.gif They never give up do they .. must be a company policy , that when times are tough to go out and trick people into using their dodgy products and visiting their deceitful sites. I doubt they will ever get off our lists. laugh.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2012 Invision Power Services, Inc.