View Single Post
Old 02-16-2006, 01:20 PM   #8
Sashman
Registered User
 
Join Date: Aug 2002
Location: Dulles Virginia
Posts: 590
Default

Quote:
Originally Posted by Czar
As such, it may not be too long until a savvy reporter stumbles across this thread and performs a search for the term "AdsCPM" on Geek/Talk, which will reveal a huge backlog of publisher complaints, reports of non-payment and claims of the network being friendly towards spyware players.
AdsCPM actually ran and hosted http://www3.adscpm.com/FreeMP3Music.exe which apparantly a good deal of his pops called via a prompted download. FreeMP3Music.exe comes loaded with one of the nastier AdWares (LOP) which is difficult to remove http://www.spywareinfo.com/articles/lop/.

FreeScratchAndWin also installed lop/rnd and in it's earlier iteration dealt with xzoomy. It has it's own parasite designation (http://research.sunbelt-software.com...&threatid=5475) and eadgbe appears to be correct that it is affiliated with adscpm somehow. Here is an old domain registration for scratchandwin.com : http://www.shoalhaven.net.au/sis/tec...ages/8279.html.

Xzoomy.com, which is actively running also has the contact info (Mike Cass) domains@adscpm.com. Xzoomy.com was apparently involved in some autodownload via exploit activity (no prompt download). Here is a nice article explaining what they did : http://www.xeromag.com/vx2.html.
Sashman is offline