Jump to content
Sign in to follow this  
Scaramouche

Ax Slinger And/or Cajuntek: Zerospyware Not Bogus

Recommended Posts

Thanks Eric. Just read your report. No wonder I couldn't understand what was going on. :blink:

 

:beer:

Share this post


Link to post
Share on other sites

thanks for your efforts Eric, nice to know there are still good people out there :)

Edited by cpuguru

Share this post


Link to post
Share on other sites

Hi All:

 

I've finally been able to do some testing with ZeroSpyware. In short, there is something seriously wrong with ZeroSpyware. For the full details, please see my latest post over at Spyware Warrior:

 

http://spywarewarrior.com/viewtopic.php?p=18442#18442

 

Questions and comments are always welcome.

 

Best,

 

Eric L. Howes

Eric -

 

Thanks for the info. We'll see what we can do with it. Gotta say though so far it doesn't look good for us though :)

 

I didn't tell you we had updated because the update was cosmetic only, and I didn't think it would solve your problem. We're going to have the 'real' (your stability problem/database definition upgrade) update out on Thursday or Friday. Kind of weird that it started working. The update that did go out is embarassingly chronicled earlier in this thread, basically changing a placeholder UI screen.

 

I want to say that I really respect both your spyware community work and your list, and that if we're on it, we're on it. Obviously I'll work here to change things as best as I can, but since you publish both your criteria and your tests so clearly it's no one's fault but our own if you decide to include us.

Share this post


Link to post
Share on other sites

Scaramouche:

 

OK, let me know when you have a new version.

 

I'm starting to suspect that the previous version that crashed on me did so because Flash was not installed (I keep a Flash-free system -- at least on the IE/Windows side of things). The "lite" version properly installed Flash and ran effortlessly. When I then tested the "free scan" version, it also ran effortlessly.

 

I know that Flash had not previously been installed -- I check thoroughly for all new additions to the system.

 

Eric L. Howes

Share this post


Link to post
Share on other sites

To the post about weatherbug, Weatherbug IS spyware. Actually its adware, a company I was working at had it installed and caused many pop ups. Common sense says its adware too, think about it, a program you have on all the time to show you the weather, perfect to keep pop ups going.

 

As to the product this topic is talking about, I think your company should give free memberships to those who have been helping you out. You've got troubleshooting and beta testing from them, usually gotta pay for it or give free software in exchange.

Share this post


Link to post
Share on other sites

As to the product this topic is talking about, I think your company should give free memberships to those who have been helping you out. You've got troubleshooting and beta testing from them, usually gotta pay for it or give free software in exchange.

To all of you following this, I'm sorry I took so long to get back. I was ill for four days and have been catching up on work until now. The dialog continues on the spyware warrior forum linked earlier in this thread, so I won't repeat what goes on there here for brevity's sake.

 

As to hepkat17t I am willing to make an offer like that, but I doubt that many people here would want the software :)

 

We are releasing a fully-functional time limited demo in probably a week or so, which might give people a different idea of the product as compared to the freescan/lite versions.

Share this post


Link to post
Share on other sites

I would think if it worked as the other anti-spy progs, like spybot and ad-aware your sales will increase...follow pest patrol s example...Now that's one unbeatable program

The only way your gonna get any sales is a free offer (maybe limited) so word of mouth gets around and a product that works without a lot of hype

Share this post


Link to post
Share on other sites

Hi everyone.

 

I was sent an ad from PCWorld (I subscribe to a bunch of their newsletters). It offered me a free acan for spyware and adware. It was called spyblaster v2.0.

 

I downloaded it and it came up with the following:

 

1 Spyware Processes found

6 infected registry keys

2 infected folder keys

3 spyware files found

 

37 Live spyware Processes

12 spyware recognized

0 files ignored

12 new spyware found

 

........................

 

There was only an option to do the repairs for 39.95.

 

I removed the Spyblaster from my system.

 

I ran adaware and found only 3.

 

I ran spybot and found only 5.

 

Why the big difference?

 

I do not have weather bug or any Gains product.

 

What other products could I run, as I know that none of the free-ware can handle everything.

 

Help, PLEASE.

Share this post


Link to post
Share on other sites

I have removed them from my list till I get thru with the CWS and Walt Riner hijackings, exploits, and adware installs from their sites Passthison.com and Default-Homepage-Network.com..

 

I remember a long time ago while surfing thru code something about zerospyware so if I find the slightest reference to them being connected to anything to do with Adware,spyware, exploits, or found around the CWS porn sites, they go back onto my list.

 

I will work later with Radio to get more indepth research on them.

 

Webhelper

 

BTW: Godaddy shut down the Walt (the spammer of Passthison) Rines Spywarehelp.net for Spam Abuse. Now if we can get the rest of his sites closed for the same offence. Half of the CWS overwrites of the mplayer.exe and notepad.exe would vanish

Share this post


Link to post
Share on other sites

In response to your newsletter recommended software I would offer you also download and try WinPatrol if you haven't already.

 

Hopefully, your experience won't sour you on the PC World newsletter because they have frequently recommended WinPatrol but it's an editorial recommendation. We pay no ad dollars to PC World and we're glad they like WinPatrol.

 

Our program won't answer all your questions but it may make you feel better because it will let you see for yourself exactly what is running on your system.

 

The results of your other scan may vary based on the last update of the reference files used by SpyBot and Adaware. My guess is Spybot has a couple more cookies in their listing than your latest Adaware.

 

As far as SpyBlaster 2.0, I'm suspicious of any program finds all sorts of stuff when it scans and then offers to fix your problems only if you pay.

 

Good Luck,

Bill Pytlovany

Share this post


Link to post
Share on other sites

Just posting to say that I'm sorry more than a week has gone by since I said we'd probably have a fully featured time trial version of our software (zerospyware). Some last minute changes came up that we had to integrate, but it's in release testing as I speak. I'll update you guys here when it goes live. This trial version will replace ZeroSpyware Lite, which will probably go to the 5.25" Floppy Bin In The Sky.

 

(even though the thread is pretty old and he might not read it)

Webhelper : Thanks for the heads up. As I said in my original email to you I don't think we have any shady affiliation but please let me know if you find anything. We're not really doing any affiliate marketing at the moment, which would probably be the only way something like what you describe would happen.

Share this post


Link to post
Share on other sites

Though no one is probably reading this anymore the fully featured, yet time-limited version of ZeroSpyware is available on download.com. It looks just like the 'lite' version released earlier (reviews, downloads) but it's the new one. Someone at download.com just replaced the existing entry instead of making a new one.

 

I'm not doing this to flog the software, because once again, I'm sure most of you have no interest in buying it. I think this version fixes a lot of the problems a lot of you had with it, so this is mostly a heads up to the people still interested in seeing if it's a scam or not (I'm hoping this will convince you it's not). Please let me know via PM or this thread if you have any questions or concerns.

Share this post


Link to post
Share on other sites

I've downloaded the Trial Version. I ran Spybot and Ad-aware first. Then I ran Zerospyware. It found Gratisware adware.

 

:beer:

Share this post


Link to post
Share on other sites

Aw jeez margie. Thanks for the info guys.

 

Oatman -

Do you remember what it identified as Gratisware? It'd help a lot in isolating the problem, though I think I know what the problem is.

 

BBYTech587 -

Thanks for the link. I installed and ran Winpcap and sure enough it got tagged. I'll have the database team check it out. Our updates are usually done weekly, so hopefully we'll have it fixed by next week.

 

Again thanks guys. I know you all consider the application as not very good but this input really helps.

 

This is a more plaintive call, but I don't suppose anyone else got it and had no problems at all?

Share this post


Link to post
Share on other sites

Interesting what it found on my rig, very similar to BBYTech587:

Spyware Components:

¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Application Name: BizDefender

 

Type: File

 

File Name: packet.dll

File Path: C:\WINNT\system32\

 

File Name: wpcap.dll

File Path: C:\WINNT\system32\

Windows Packet Filter Library

 

BizDefender has never been on this computer.

 

Although the architecture can be exploited for malicious purposes as with the BackDoor-ASW Trojan, there are other telltell signs that differentiate, such as winnt\system32\RtKit\packet.dll verses winnt\system32\packet.dll.

 

 

 

A couple of side notes:

This zerospyware is very zealous about wanting to autorun at Windows start up on many levels. I had to deny it 3 times on installation and after uninstalling it, WinPatrol asked if I approved of zerospyware\NetGuard.exe to auto run at start up. :blink: Good grief! :erm:

 

After installing and running the program, I ran Adaware SE 1.04 which characterized an uninstall feature in the registry as a Possible Browser Hijack. Located @ HKLM: Software\Microsoft\Windows\CurrentVersion\Uninstall\(A6E676F9-A28C-4EF0-B138-002AB9A56A24)\Software\Microsoft\Windows\CurrentVersion\Uninstall\(A6E676F9-A28C-4EF0-B138-002AB9A56A24)"http://www.zerospyware.com"

 

I assume that this is for the feedback screen that appears after the uninstall.

 

I will now manually remove the remaining files, folders and any orphaned reg keys. :blank:

Share this post


Link to post
Share on other sites

Although the architecture can be exploited for malicious purposes as with the BackDoor-ASW Trojan, there are other telltell signs that differentiate, such as winnt\system32\RtKit\packet.dll verses  winnt\system32\packet.dll.

 

 

Y kawika/ BBYTech587 -

 

We found out why it's identified as BizDefender, it's because the BizDefender client installation installs Winpcap. We're tuning the distinction now, but I'm also curious to know if the Winpcap people know their open source project is being used by this commercial software. I'm assuming that since there's a quick title banner of the Winpcap during installation that they do.

 

Y kawika -

 

Reducing our uninstallation profile is one of the goals of the next major upgrade, because it bugs me too :)

 

EDIT-Late breaking story on the CBC. Eric L. Howes removes ZeroSpyware from the 'rogue/suspect anti-spyware' list.

http://www.spywarewarrior.com/rogue_anti-spyware.htm#zs_note

Edited by Scaramouche

Share this post


Link to post
Share on other sites

Keep at it Scaramouche, you are making good progress! :) Sometimes it takes the hard working "little" guy to get the needed changes and improvements in place.

 

Next, we're all gonna sick you on that marketing department that you are enduring! :woot:

Share this post


Link to post
Share on other sites

Not trying to come down on ya Scaramouche, and the pit/members don't mind either but if you're gonna use this place for beta testing you should consider rewarding those that help you. I think most places let beta testers have the program....just a thought.

You are a for-profit business and zero spyware will profit from the help you're getting here

Edited by Joe C

Share this post


Link to post
Share on other sites

I downloaded it and installed it. I was about to run Spybot first when it (your product) picked up save.exe; I know that it really was there because I remember it being in the EULA of a product I installed this morning and also it was running in task manager. I have yet to run the scan, but I would like to say I am happy so far :)

 

Edit: It says Powerstrip is adware...

 

http://img5.exs.cx/img5/48/zerospy.jpg

 

it's confusing it with The Power Strip

 

And the Winpcap problem is still there..labels it as Bizdefender (keylogger)

 

http://img40.exs.cx/img40/48/zerospy.jpg

Edited by wolf88

Share this post


Link to post
Share on other sites

Hello Scaramouche,

 

First off, I apologize for not noticing this thread before now. One of the Moderators here pointed it out to me tonight and asked why I had not posted in it. The only excuse I can offer is I did not see it. In addition to this forum, I am also an Admin or Mod on a few others, and I have a family as well. So I can get rather busy sometimes. I'm here a lot, but I don't read every thread. A few (one or two at least... :lol: ) slip by without my ever having noticed them.

 

And to anyone else who read this post before now, yes, it is now different. I just checked Spyware Warrior website and found this: ZeroSpyware Note.

 

Note on ZeroSpyware:  ZeroSpyware was listed on this page because of concerns with false positives and the nature of its detections and scan reporting (1, 2). In early September 2004, a new version of ZeroSpyware was released. Testing with this new version indicates not only that the problems with earlier versions have been satisfactorily resolved, but that the application does provide usable anti-spyware protection. Thus, we can no longer consider ZeroSpyware to be "rogue/suspect" anti-spyware.

I quote it here because they have never given me any reason to doubt them. A lot of good info on spyware comes from there. For that same reason and per your request as well, since I am now satisfied it is warranted to do so, I have removed ZeroSpyware from my list. In fact, due to the numerous links to it that I found on various websites that I did not authorize, nor would I as the bandwidth of this forum is not mine to give away, I have changed the address of the list.

Share this post


Link to post
Share on other sites
Guest Matts88Pulsar

I enjoyed reading this entire thread from a neutral viewpoint. I doubt I'd ever run it for myself, but If ZeroSpyware does what it says reliably, I may reccommend it to those who ask for my help. Usually, I just reccommend Mozilla Firefox, Spybot S&D and Ad-A-Ware 6.0 SE. Its the combo I use and same as most here. I use IE pretty much as needed.

What I most want to explore is the WeatherBug spyware/adware topic. I knew in the past of its questionable side, etc. I don't allow it onto my system, but I did find it installed on system I checked out for a family running ALL my reccommendations of anti-spyware. Daily checks, too. It's an older system easily brought down by a few renegade programs. I commented on its suspiciousness, but figured Lavasoft and the like no longer find it bad in its current form. I did ask that they view as suspicious. :nospys:

I figure anytime I want to check the weather with the net, I just look it up for my zip @ weather.com :rolleyes:

Share this post


Link to post
Share on other sites

Hello Scaramouche,

 

First off, I apologize for not noticing this thread before now. One of the Moderators here pointed it out to me tonight and asked why I had not posted in it. The only excuse I can offer is I did not see it. In addition to this forum, I am also an Admin or Mod on a few others, and I have a family as well. So I can get rather busy sometimes. I'm here a lot, but I don't read every thread. A few (one or two at least... :lol: ) slip by without my ever having noticed them.

 

And to anyone else who read this post before now, yes, it is now different. I just checked Spyware Warrior website and found this: ZeroSpyware Note.

 

 

 

I quote it here because they have never given me any reason to doubt them. A lot of good info on spyware comes from there. For that same reason and per your request as well, since I am now satisfied it is warranted to do so, I have removed ZeroSpyware from my list. In fact, due to the numerous links to it that I found on various websites that I did not authorize, nor would I as the bandwidth of this forum is not mine to give away, I have changed the address of the list.

Ax Slinger -

 

Thanks a lot. I haven't had a chance to look here for quite a while (busy working on the 2005 edition) but I was happy to see that the situation had in fact been resolved. I hope this means that ZeroSpyware isn't seen as "the enemy" as much anymore here, though the fact that people can just get false positives on a whim is worrying to me. In that vein ;

 

Wolf88 -

 

Thanks for the heads up. I'll send it on to the database team. Actually they should be reading this forum too but I'll send it anyway just in case :)

 

I'm glad that I'm hopefully getting people to take the product semi-seriously, though of course everyone has their own preferred removal tool. For me the goal wasn't converting anyone to using ZeroSpyware, but rather just to give it a fair shake. I think at the beginning maybe it didn't deserve that, but thanks to you guys' help and a lot of development time it's come a long way. I'm glad this sordid chapter is somewhat over but I'm still going to hang out at the 'pit. You guys catch some of that spyware early dagnabit :)

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

×
×
  • Create New...