Spyware from Fugly.com

[Fugly]

I received two emails, one yesterday and one today. I need to play Private Detective and try to find out what's going on. I'm looking for help. Is anybody interested in doing some testing to see if this is really a problem or if these people are just retarded?

Here are the emails:
EMAIL #1
--- begin headers ---
Return-Path: <smehlschmidt@gci.net>
Received: from mmp-3.gci.net (mmp-3.gci.net [208.138.130.77])
by greenape-d1.candidhosting.com (8.12.11/8.12.11) with ESMTP id iA9MWp2e060516
for <feedbag@fugly.com>; Tue, 9 Nov 2004 22:32:51 GMT
(envelope-from smehlschmidt@gci.net)
Received: from Mehlschmidt (94-10-237-24.gci.net [24.237.10.94])
by mmp-3.gci.net
(iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003)) with SMTP id
<0I6X00MP6NYM38@mmp-3.gci.net> for feedbag@fugly.com; Tue,
09 Nov 2004 13:32:49 -0900 (AKST)
Date: Tue, 09 Nov 2004 13:32:46 -0900
From: sidney mehlschmidt <smehlschmidt@gci.net>
Subject: adware
To: feedbag@fugly.com
Cc: scott shellhorn <sksplace@gci.net>
Message-id: <000601c4c6ac$09411030$6401a8c0@Mehlschmidt>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
Content-type: multipart/alternative;
boundary="Boundary_(ID_ylRSjaRHGDblXsLjzEyp6w)"
X-Priority: 3
X-MSMail-priority: Normal
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on
--- end headers ---

In order to confirm my suspicions, I ran Norton Antivirus, Spybot Search and Ad-Aware to make sure my system was clean. I then pulled up Fugly, opened 5 images and scanned my system again. Surpise, surprise: 8 new data mining intrusions. Is this kind of underhanded shit the only way you people can make a living?


-------------------------------------
EMAIL #2
--- begin headers ---
Return-Path: <sksplace@gci.net>
Received: from mmp-3.gci.net (mmp-3.gci.net [208.138.130.77])
by greenape-d1.candidhosting.com (8.12.11/8.12.11) with ESMTP id iAAGp995067434
for <feedbag@fugly.com>; Wed, 10 Nov 2004 16:51:10 GMT
(envelope-from sksplace@gci.net)
Received: from Scott (34-128-237-24.gci.net [24.237.128.34])
by mmp-3.gci.net (iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14
2003)) with SMTP id <0I6Z00HI72T5IU@mmp-3.gci.net> for feedbag@fugly.com; Wed,
10 Nov 2004 07:51:06 -0900 (AKST)
Date: Wed, 10 Nov 2004 07:50:59 -0900
From: Scott Shellhorn <sksplace@gci.net>
Subject: Spyware
To: <Undisclosed-Recipient:;>
Message-id: <005a01c4c745$76630c10$2280ed18@Scott>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
Content-type: multipart/alternative;
boundary="Boundary_(ID_i5zS6Sz73870HMXgrS0kiA)"
X-Priority: 3
X-MSMail-priority: Normal
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on
greenape-d1.candidhosting.com
X-Spam-Status: No, hits=-0.4 required=5.0 tests=BAYES_30,HTML_FONT_BIG,
HTML_MESSAGE,RCVD_IN_SORBS autolearn=no version=2.63
X-UIDL: o"P!!SgD"!,IQ!!N,'!!
--- end headers ---

What's up with the spyware that's connected to your site??? LOSE IT!!! this is a cool site that is UNCOOL because of the unnecessary left handed bullshit. Where the hell is YOUR integrity?????? I will tell everyone I know about this shit!!!!

-------------------------------------

I have no idea if these are legitimate complaints or not. I didn't think it was even possible to install SpyWare or anything else by simply visiting a website. I'm hoping that maybe some of you more technically inclined people will know.

[zeek]

It does, unfortunately, appear that some of the advertisers on this site are using commonly known Active-X (and other) exploits that take advantage of specific vulnerabilities in Internet Explorer to drop a cookie on your system.

There are several ways to combat this. The first, and single most effective method is to simply ditch that piece of crap web browser and get something that actually WORKS, and works with security in mind: FireFox (http://www.firefox.com/).

I know the anti-Microsoft/anti-establishment geeks have saturated the net with the gospel of Firefox, but it's warranted. Test it yourself: point Internet Explorer to Fugly, then run any of the spyware programs listed at the end of this message. You'll see some cookies (or if you want to sound 1337, " data mining intrusions"). Clear them out. Download, install and point Firefox to fugly, and then run your scanners. NOTHING.

Now, if you just can't handle the change of a new web browser (you lazy mofo), you better get into the guts of your IE and lock down the whole damn thing. Go to tools, then internet options, then security. Anything that mentions active-x should be set to "Prompt" or "Disable". You really won't see much of a detraction from your overall web experience. (IE: Most porn sites still work with Active-X disabled). This will help a bit.

Seriously consider Firefox though. Come on. You'll be cooler than your pals, and chicks will literally THROW THEMSELVES at you. Wouldn't that be nice? Maybe the only reason you aren't gettin' any tail is because THEY know that you still use IE. I pity you, you poor celebate bastard.

Anyway, that said, here's a list of CRUCIAL software packages to have, run and update regularly.


My personal favorite is Spybot Seach & Destroy (http://www.safer-networking.org/en/). Make sure to use it's 'Immunize' feature to stop browser hijacks and whatnot.

The next one is AdAware (http://www.lavasoftusa.com/software/adaware/). This is the perfect buddy to Spybot S&D. Run 'em both once a day and you'll be amazed at what you find all over the place.

Another one I've been recomended, but haven't finished testing is SpyKiller (http://www.safer-networking.com). Now, I'm just running this now as I write this, and it's telling me I've got some spyware that S&D and Adaware didn't find -- but I think it's a product that actually wants MONEY to activate it, unlike the other ones which are free. I could be wrong though.

So, here's the run down: FUGLY has ads. These ads try to pop a cookie on your system. It's not that big of a deal -- it can't do shit to you. But it's also not Fugly.com doing it. It's the advertisers..

But, all in all, you can avoid all this happy horseshit if you just buck up and install Firefox. It fucking rocks.

[Reizvolles]

Firstly, there are no fuckin ActiveX ads in fugly, you clutz. Stop trying to sound inteliigent. No ActiveX programs need to be installed to store cookies on your fuckin computer. Cookies have been around since Internet Explorer 3.01, it's just recently people have been abusing what they can do with "tracking cookies".

I use the following and havent had a single problem with popups, cookies or ActiveX.

Windows XP Professional, Service Pack 2
NAT-based hardware firewall
Windows XP SP2 software firewall
Internet Explorer 6.029 SP1 (using XP SP2 built-in popup stopper)
Grisoft (http://www.grisoft.com) AVG Antivirus 7 Beta Free Edition
Lavasoft (http://www.lavasoftusa.com) Ad-Aware SE Professional
Spybot (http://www.safer-networking.org/en/index.html) Search & Destroy

Not had one problem with Fugly.com whatsoever. I'd tell this guy if he wants to "run around naked" on the net, then he's a fucking moron. Most of these "cookies" he is getting is probably from some trojan the dumb cunt installed when he installed that desktop stripper to masturbate over while shouting his mother's name at the top of his voice.

I also have a sneaking suspicion it may be the same whinging cunt. Don't worry about it, Fugly. What's he going to do besides piss and moan about what he will TRY (keyword: try) and do?

[Reizvolles]

Oh, yeah. Tell this fuck knuckle that he might want to do some research on a Texas-based company called Red Sheriff, who has lately been instaling SERVER SIDE spyware & adware onto major routers in 5 different countries.

[StrangelyBrown]

FUCK YEAH! i love it when you talk dirty......

TEACH ME MORE OH MISTRESS OF INTERESTING INTERNET WAFFLE!

[Reizvolles]

Try getting an education.

[StrangelyBrown]

I already do and look what that did to me......

Tell me, why are you so hostile? Is it because you naturally know that people will hate you for the cold spiteful bitch you are?

[Deebo57]

'she got a look in her eye like she hasnt been fucked in a year'-scarface

[Dr.Roboto]

web root isnt bad either nore its spybot which is supposed to be a java based scanner .

[Reizvolles]

Tell me, why are you so hostile? Is it because you naturally know that people will hate you for the cold spiteful bitch you are?
Because I have very little time for fools and try-hards.

'she got a look in her eye like she hasnt been fucked in a year'-scarface
What is sex?

[Dr.Roboto]

oh yea FireFox is better tho, i use it on my linux box and my notebook. you can open up multiple windows in a single one so you dont clutter that bar at the bottom.

[StrangelyBrown]

Well, there is no need at making everyone else suffer for your inadequacies at dealing with the variety in the world, is there Rez?

[Reizvolles]

Well, there is no need at making everyone else suffer for your inadequacies at dealing with the variety in the world, is there Rez?
But I love you, SB.

[Dr.Roboto]

Well, there is no need at making everyone else suffer for your inadequacies at dealing with the variety in the world, is there Rez?
But I love you, SB.

damn there goes my chances out the window :evil:

[Reizvolles]

I love you too, Doc.

[zeek]

Whoa there buddy! I was just reporting what I saw. When I set my IE to prompt for Active-X install requests, I get one.

I bow before your obvious power, oh lord of the Fugly Forums.

Can you ask your mom if I can come over for dinner?

[Dr.Roboto]

I love you too, Doc.


score! i fill all warm inside, although it might be the best fuckin hamburger i just ate.

[Fugly]

Why can't we all just get along?

Seriously. I think Zeek has a valid point. If you don't have IE locked down and if you alow it to automatically install Active-X, you're asking for trouble.

And I think that there used to be some ads on here that tried to install an Active-X component. I'm 99% sure that those are all gone now.

Thanks for all the information Rezivi...whatever your name is. What do you do for a living that you know so much about this stuff?

[StrangelyBrown]

I'm hoping its fucking IT techhies for a nickel a time........

[Reizvolles]

I do a little of this, a little of that. Tell you later, fugly. The floors have teeth.