View Full Version : SuperAntiSpyware problem


G Mulcaster
12-11-2008, 10:54 PM
Hi folks,

I was happy with SuperAntiSpyware on my old computer. So, I did a
Google search for for a new copy to install on my new computer. I
picked one of many to download.

The installation also installed a program called Zango which purported
to sponsor SuperAntiSpyware by with an arrangement that it would
provide no more than four or five pop-up ads per day.

As I recall, there was no option to reject the Zango install, nor was
there an ability to stop the install while in process.

I ran SAS and it picked up Zango, but the box associated was
unchecked. I checked it and restared the computer per the SAS
instruction.

The computer would not run. I had to use safe mode to conduct a
system restore.

Of possible interest, the Version of the download was 4.23.0.1006,
5.51Mb

Questions:

How can I verify Zango is no longer on my computer?
Where do I get a clean copy of SAS?

Thanks, Gary

Beauregard T. Shagnasty
12-11-2008, 11:02 PM
G Mulcaster wrote:

> Hi folks,
>
> I was happy with SuperAntiSpyware on my old computer. So, I did a
> Google search for for a new copy to install on my new computer. I
> picked one of many to download.

One of many? Many what? Did you not look at the author's website?
http://superantispyware.com/download.html

> How can I verify Zango is no longer on my computer?
> Where do I get a clean copy of SAS?

Download from above link, and install, update, and run it.

--
-bts
-Friends don't let friends drive Windows

G Mulcaster
12-11-2008, 11:12 PM
On Fri, 12 Dec 2008 00:02:44 -0500, "Beauregard T. Shagnasty"
<a.nony.mous@example.invalid> wrote:

>G Mulcaster wrote:
>
>> Hi folks,
>>
>> I was happy with SuperAntiSpyware on my old computer. So, I did a
>> Google search for for a new copy to install on my new computer. I
>> picked one of many to download.
>
>One of many? Many what?

I did a Google search on "superantispyware". There were numerous
sites to download SAS from. Evidently I picked the wrong one.

Did you not look at the author's website?
>http://superantispyware.com/download.html

No. Thanks for the pointer.

>
>Download from above link, and install, update, and run it.

I will. Many thanks.

Gary

G Mulcaster
12-11-2008, 11:23 PM
On Thu, 11 Dec 2008 21:12:15 -0800, G Mulcaster
<mulcasterXXX@XXXshaw.ca> wrote:

>On Fri, 12 Dec 2008 00:02:44 -0500, "Beauregard T. Shagnasty"
><a.nony.mous@example.invalid> wrote:
>
>>G Mulcaster wrote:
>>
>>> Hi folks,
>>>
>>> I was happy with SuperAntiSpyware on my old computer. So, I did a
>>> Google search for for a new copy to install on my new computer. I
>>> picked one of many to download.
>>
>>One of many? Many what?
>
>I did a Google search on "superantispyware". There were numerous
>sites to download SAS from. Evidently I picked the wrong one.
>
> Did you not look at the author's website?
>>http://superantispyware.com/download.html
>
>No. Thanks for the pointer.
>
>>
>>Download from above link, and install, update, and run it.
>
>I will. Many thanks.

I downloded Version 4.23.1006 from the link you provided and got a
clean edition installed. The bogus version was 4.23.0.1006.

Again, thank you.

Gary

Beauregard T. Shagnasty
12-11-2008, 11:45 PM
G Mulcaster wrote:

> I downloded Version 4.23.1006 from the link you provided and got a
> clean edition installed. The bogus version was 4.23.0.1006.

Report back after you've run it, and let us know what it found.

This site also may help you to remove Zango.
http://www.pchell.com/support/zango.shtml

--
-bts
-Friends don't let friends drive Windows

David H. Lipman
12-12-2008, 05:20 AM
From: "G Mulcaster" <mulcasterXXX@XXXshaw.ca>

| Hi folks,

| I was happy with SuperAntiSpyware on my old computer. So, I did a
| Google search for for a new copy to install on my new computer. I
| picked one of many to download.

| The installation also installed a program called Zango which purported
| to sponsor SuperAntiSpyware by with an arrangement that it would
| provide no more than four or five pop-up ads per day.

| As I recall, there was no option to reject the Zango install, nor was
| there an ability to stop the install while in process.

| I ran SAS and it picked up Zango, but the box associated was
| unchecked. I checked it and restared the computer per the SAS
| instruction.

| The computer would not run. I had to use safe mode to conduct a
| system restore.

| Of possible interest, the Version of the download was 4.23.0.1006,
| 5.51Mb

| Questions:

| How can I verify Zango is no longer on my computer?
| Where do I get a clean copy of SAS?

| Thanks, Gary

That's why you NEVER download software from sites other than the vendor or vendor mirror
sites.

http://www.ftc.gov/opa/2006/11/zango.shtm

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Leythos
12-12-2008, 07:45 AM
In article <uhq3k454o5h7fgflli24tbn85u9sorvkrq@4ax.com>,
mulcasterXXX@XXXshaw.ca says...
> I was happy with SuperAntiSpyware on my old computer. So, I did a
> Google search for for a new copy to install on my new computer. I
> picked one of many to download.
>

If the software is not available from the vendors OWN site then you
should not download it.

No clean/reputable anti-malware product would install ad/pop-up software
of any type and it would not block access to other anti-malware sites.

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)

G Mulcaster
12-12-2008, 09:54 AM
On Fri, 12 Dec 2008 00:45:50 -0500, "Beauregard T. Shagnasty"
<a.nony.mous@example.invalid> wrote:

>G Mulcaster wrote:
>
>> I downloded Version 4.23.1006 from the link you provided and got a
>> clean edition installed. The bogus version was 4.23.0.1006.
>
>Report back after you've run it, and let us know what it found.
>
>This site also may help you to remove Zango.
>http://www.pchell.com/support/zango.shtml

SAS found two hits on Zango. Both were removed with no problem.

I later ran Kaspersky Internet Suite. KIS found three instances of
Zango, but only flagged them; there was no option to delete.

Thanks for the URL.

G Mulcaster
12-12-2008, 10:00 AM
>
>That's why you NEVER download software from sites other than the vendor or vendor mirror
>sites.
>
>http://www.ftc.gov/opa/2006/11/zango.shtm

That is what I attempted to do. The link looked genuine and the
downloading and install processes were familiar, based on my previous
two experiences installing SAS.

Leythos
12-12-2008, 10:21 AM
In article <1c25k4pmt1oefno23f4d5ggtcmvbpv91dp@4ax.com>,
mulcasterXXX@XXXshaw.ca says...
>
> >
> >That's why you NEVER download software from sites other than the vendor or vendor mirror
> >sites.
> >
> >http://www.ftc.gov/opa/2006/11/zango.shtm
>
> That is what I attempted to do. The link looked genuine and the
> downloading and install processes were familiar, based on my previous
> two experiences installing SAS.
>

If the link doesn't have the vendors name in it, and you've not
validated the rest of the site, then you should not visit it.


--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)

James Morrow
12-12-2008, 12:36 PM
In article <MPG.23ac34f787e27dd989778@us.news.astraweb.com>,
spam999free@rrohio.com says...
> In article <uhq3k454o5h7fgflli24tbn85u9sorvkrq@4ax.com>,
> mulcasterXXX@XXXshaw.ca says...
> > I was happy with SuperAntiSpyware on my old computer. So, I did a
> > Google search for for a new copy to install on my new computer. I
> > picked one of many to download.
> >
>
> If the software is not available from the vendors OWN site then you
> should not download it.
>
> No clean/reputable anti-malware product would install ad/pop-up software
> of any type and it would not block access to other anti-malware sites.
>
>

The very good advise in this thread bear repeating often. But it seems
so simple and harmless to take the Google shortcut. One product I use I
often download from a well known download site. But it is always the
same such site. Because the download process is subject to social
engineering spyware criminals try to deceive the unsuspecting. Because
of this, caution is the best mode of operation. Human nature says
"CLICK HERE" but the safe course is to think first. Many of us have
learned this the hard way. But yet it still bears repeating.

--
James E. Morrow
Email to: jamesemorrow@email.com

Jonathan Mars
12-13-2008, 10:23 PM
"G Mulcaster" <mulcasterXXX@XXXshaw.ca> wrote in message
news:1c25k4pmt1oefno23f4d5ggtcmvbpv91dp@4ax.com...
> That is what I attempted to do. The link looked genuine and the
> downloading and install processes were familiar, based on my previous
> two experiences installing SAS.


Report Zango to the authorities. What they are doing is highly illegal and
comes with a penalty of huge fines and even jail time these days.

Jonathan Mars
12-13-2008, 10:27 PM
"Leythos" <spam999free@rrohio.com> wrote in message
news:MPG.23ac34f787e27dd989778@us.news.astraweb.com...
> If the software is not available from the vendors OWN site then you
> should not download it.
>
> No clean/reputable anti-malware product would install ad/pop-up software
> of any type and it would not block access to other anti-malware sites.

Yea, he knows that now. More importantly is how do we get these cock suckers
and make them pay for their dastardly deeds?

Jonathan Mars
12-13-2008, 10:30 PM
"James Morrow" <jamesemorrow@email.com> wrote in message
news:MPG.23ac5f25b5f0b02f989704@extreme.x-privat.org...
> The very good advise in this thread bear repeating often. But it seems
> so simple and harmless to take the Google shortcut. One product I use I
> often download from a well known download site. But it is always the
> same such site. Because the download process is subject to social
> engineering spyware criminals try to deceive the unsuspecting. Because
> of this, caution is the best mode of operation. Human nature says
> "CLICK HERE" but the safe course is to think first. Many of us have
> learned this the hard way. But yet it still bears repeating.

I know a person who went to download the latest version of a free registry
cleaner. He hit a fake site for the product that said it was no longer free
and costs thirty bucks. He actually paid these criminals for the prog with
his CC when it was still free all along. I'm surprised they didn't clean out
his CC too.

Jonathan Mars
12-13-2008, 10:46 PM
"G Mulcaster" <mulcasterXXX@XXXshaw.ca> wrote in message
news:uhq3k454o5h7fgflli24tbn85u9sorvkrq@4ax.com...
> The installation also installed a program called Zango which purported
> to sponsor SuperAntiSpyware by with an arrangement that it would
> provide no more than four or five pop-up ads per day.

Here's what you do about Zango. Go read this url then report them to the
FCC. If what you say is true and can prove it then they are in doggy-doo,
once again. It's our duty to fight these pricks tooth and nail. They are
scum.

http://en.wikipedia.org/wiki/Zango

Jonathan Mars
12-13-2008, 10:48 PM
"G Mulcaster" <mulcasterXXX@XXXshaw.ca> wrote in message
news:uhq3k454o5h7fgflli24tbn85u9sorvkrq@4ax.com...
> The installation also installed a program called Zango which purported
> to sponsor SuperAntiSpyware by with an arrangement that it would
> provide no more than four or five pop-up ads per day.

p.s. If you don't want to do it then post the url where you got the Zango
infected file from and I will see what I can do.

David H. Lipman
12-14-2008, 06:43 AM
From: "Jonathan Mars" <JM@here.invalid>

| "G Mulcaster" <mulcasterXXX@XXXshaw.ca> wrote in message
| news:uhq3k454o5h7fgflli24tbn85u9sorvkrq@4ax.com...
>> The installation also installed a program called Zango which purported
>> to sponsor SuperAntiSpyware by with an arrangement that it would
>> provide no more than four or five pop-up ads per day.

| Here's what you do about Zango. Go read this url then report them to the
| FCC. If what you say is true and can prove it then they are in doggy-doo,
| once again. It's our duty to fight these pricks tooth and nail. They are
| scum.

| http://en.wikipedia.org/wiki/Zango


The Federal Communications Commission (FCC) has no jurisdiction over this matter.
I do believe you mean the Federal Trade Commission (FTC) and I have already posted a URL
showing the results of a previous FTC action.

In this case, Nick would have to file a claim, not G Mulcaster.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Jonathan Mars
12-14-2008, 02:16 PM
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:H_ydnSb29YgeYtnUnZ2dnUVZ_gWdnZ2d@giganews.com...
> The Federal Communications Commission (FCC) has no jurisdiction over this
> matter.
> I do believe you mean the Federal Trade Commission (FTC) and I have
> already posted a URL
> showing the results of a previous FTC action.
>
> In this case, Nick would have to file a claim, not G Mulcaster.

Obviously I meant FTC and not FCC but thanks for being anal about it. And
Nick doesn't have to file a complaint at all to go after them. If you
actually read my Wikipedia link you would know that. What they have done is
break the law and there are organizations it can be handed off too that will
take care of them. You don't have to be the victim to report a crime.

G Mulcaster
12-14-2008, 03:01 PM
On Sat, 13 Dec 2008 20:48:00 -0800, "Jonathan Mars" <JM@here.invalid>
wrote:

>"G Mulcaster" <mulcasterXXX@XXXshaw.ca> wrote in message
>news:uhq3k454o5h7fgflli24tbn85u9sorvkrq@4ax.com...
>> The installation also installed a program called Zango which purported
>> to sponsor SuperAntiSpyware by with an arrangement that it would
>> provide no more than four or five pop-up ads per day.
>
>p.s. If you don't want to do it then post the url where you got the Zango
>infected file from and I will see what I can do.

Regretably, I don't know which URL I picked.

A google search reveals several SAS sites. The first two are likely
authentic and, from experience, I can't see myself not picking one of
those. However, it appears I didn't...

Regards, Gary

David H. Lipman
12-14-2008, 03:27 PM
From: "Jonathan Mars" <JM@here.invalid>

| "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
| news:H_ydnSb29YgeYtnUnZ2dnUVZ_gWdnZ2d@giganews.com...
>> The Federal Communications Commission (FCC) has no jurisdiction over this
>> matter.
>> I do believe you mean the Federal Trade Commission (FTC) and I have
>> already posted a URL
>> showing the results of a previous FTC action.

>> In this case, Nick would have to file a claim, not G Mulcaster.

| Obviously I meant FTC and not FCC but thanks for being anal about it. And
| Nick doesn't have to file a complaint at all to go after them. If you
| actually read my Wikipedia link you would know that. What they have done is
| break the law and there are organizations it can be handed off too that will
| take care of them. You don't have to be the victim to report a crime.


It doesn't work that way. The same way Bochner couldn't do anything about the WinFixer
group. It took the FTC.

In this case it may be an IP issue that Nick would have to take action on.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Jonathan Mars
12-15-2008, 10:21 AM
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:A9GdnduDX8eh59jUnZ2dnUVZ_jOdnZ2d@giganews.com...
> It doesn't work that way. The same way Bochner couldn't do anything about
> the WinFixer
> group. It took the FTC.
>
> In this case it may be an IP issue that Nick would have to take action on.


Um, no. Once again there are organizations I could go report this to and
they would investigate and they would take care of reporting it to the FTC.
Just because it is in SA doesn't mean only Nick can file a complaint and I
question why you are trying to make me believe that BS. Computer crimes are
a federal offense punishable by hefty fines and/or jail time now. It is not
a simple case of going on the Judge Judy show anymore. Their only protection
is if they are off-shore and hard to get at, Zango has already been in
trouble with the FTC. It's possible he downloaded a file that someone else
hacked into SA and not Zango themselves. It would be extremely stupid of
them to continue with these illegal activities if they are already well
known to the FTC. Next time they won't be so light on them. And why are you
trying to obfuscate the matter. Is it because you have a vested interest in
malware? It would make sense that you like malware because it keeps you in
business maybe. A spammer in Canada was recently fined over 30 million
dollars. Has that got you scared or what?

Jonathan Mars
12-15-2008, 10:25 AM
"G Mulcaster" <mulcasterXXX@XXXshaw.ca> wrote in message
news:9esak4596ll0e0elhc36i6tln6usatc4e8@4ax.com...
> A google search reveals several SAS sites. The first two are likely
> authentic and, from experience, I can't see myself not picking one of
> those. However, it appears I didn't...
>
> Regards, Gary


Well, you should at least email the author of SA and tell him about it
because it does affect his business in a negative way so he may want to
investigate the matter. I was discussing this Zango thing last night with a
friend and he told me some site tried to charge him for OPenOffice, which is
a freeware Office alternative app developed by Sun.

G Mulcaster
12-15-2008, 09:48 PM
On Mon, 15 Dec 2008 08:25:52 -0800, "Jonathan Mars" <JM@here.invalid>
wrote:

>"G Mulcaster" <mulcasterXXX@XXXshaw.ca> wrote in message
>news:9esak4596ll0e0elhc36i6tln6usatc4e8@4ax.com...
>> A google search reveals several SAS sites. The first two are likely
>> authentic and, from experience, I can't see myself not picking one of
>> those. However, it appears I didn't...
>
>Well, you should at least email the author of SA and tell him about it
>because it does affect his business in a negative way so he may want to
>investigate the matter.

Done. I sent my start comments and referred to this thread.

Gary

Jonathan Mars
12-16-2008, 11:46 AM
"G Mulcaster" <mulcasterXXX@XXXshaw.ca> wrote in message
news:j49ek4ltfk4fn2h84gg2amup7nhj6h7jnr@4ax.com...
> Done. I sent my start comments and referred to this thread.
>
> Gary


Good. I think a lot of spyware exists because most people never do anything
about it. Just wipe their PC and start over. I saw an article on 60 Minutes
or one of those type of shows about a guy who lives on a barge in the Thames
in England and has multiple computers set up in it and all he does is track
down malware and fight the good fight. That takes dedication.