CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 930
Comments: 25
block bottom
spacer spacer

BillP Studios under attack
Goto page 1, 2  Next
 
Post new topic   Reply to topic       All -> FavForums -> WinPatrol Talk [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
BillPStudios

WinPatrol
Premium Member

Joined: Jun 30, 2004
Posts: 697
Location: Scotia, N.Y. USA
Premium Security Experts

PostPosted: Mon Apr 11, 2005 3:26 pm    Post subject: BillP Studios under attack
Reply with quote

BillP Studios became the latest software developer to receive a cease and desist letter from a well known spyware company.

According to IBIS, LLC publisher of WebSearch Toolbar...

"WinPatrol detects our products running processes WToolsA.exe and TBPS.exe and
tries to disable them"

"We believe your product was developed with clear intention of harming IBIS, LLC, and preventing it from distributing its applications to users and interfering with its business relationships."


The interesting part is they provided screen shots of their programs in WinPatrol but they don't mention our PLUS information where we provide information on how horrible they really are. The screen shots also note that we detect SDHelper.dll and NavShext.dll. They obviously have no clue how WinPatrol functions and that its doing exactly what its users want.


The full letter with screen shots can be viewed at
http://www.winpatrol.com/support/ibisthreat.pdf

For information on other companies being threatened
http://www.benedelman.org/spyware/threats/

Bill


_________________
Bill Pytlovany
BillP Studios
Back to top
View users profile Send private message Visit posters website AIM Address
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16496

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Mon Apr 11, 2005 3:53 pm    Post subject: Re: BillP Studios under attack
Reply with quote

BillPStudios wrote:
BillP Studios became the latest software developer to receive a cease and desist letter from a well known spyware company.

So what is your response?

BillPStudios wrote:
The interesting part is they provided screen shots of their programs in WinPatrol but they don't mention our PLUS information where we provide information on how horrible they really are. The screen shots also note that we detect SDHelper.dll and NavShext.dll. They obviously have no clue how WinPatrol functions and that its doing exactly what its users want.

But in effect the PLUS info is private right? They'd have to pay for the privilege of reading it and I doubt thay'd want to pay for that! Wink


_________________
imageCastleCopsWiki
Back to top
View users profile Send private message
BillPStudios

WinPatrol
Premium Member

Joined: Jun 30, 2004
Posts: 697
Location: Scotia, N.Y. USA
Premium Security Experts

PostPosted: Mon Apr 11, 2005 4:58 pm    Post subject: Response
Reply with quote

Quote:
So what is your response?


At this time my response is to laugh however we must review all threats of a legal nature. WinPatrol doesn't do anything indicated in the letter other than to prove that we do what our users request. It also proves that they are responsible for other files which appear in their screen shots.

Bill


_________________
Bill Pytlovany
BillP Studios
Back to top
View users profile Send private message Visit posters website AIM Address
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16496

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Mon Apr 11, 2005 5:47 pm    Post subject:
Reply with quote

Dunno if you've followed the CastleCops response to their cease and desist, but I'm sure you can count on Paul and Robin to provide any private advice you may wish to ask them for. Wink


_________________
imageCastleCopsWiki
Back to top
View users profile Send private message
BillPStudios

WinPatrol
Premium Member

Joined: Jun 30, 2004
Posts: 697
Location: Scotia, N.Y. USA
Premium Security Experts

PostPosted: Mon Apr 11, 2005 6:02 pm    Post subject: Paul and Robin's help
Reply with quote

Hi Ikeb,

Yes, while I suspect Robin is pretty busy these days along with Paul, but I know I can count on their help.

I have also had commitments from others who have been antagonized in a similiar manner.

You will probably see this incident added to the following

http://www.benedelman.org/spyware/threats/


Bill


_________________
Bill Pytlovany
BillP Studios
Back to top
View users profile Send private message Visit posters website AIM Address
BenEdelman

Cadet
Cadet


Joined: Jun 30, 2004
Posts: 3
Location: USA

PostPosted: Mon Apr 11, 2005 6:35 pm    Post subject:
Reply with quote

Just as Bill expected, I have added this matter to my threats page. http://www.benedelman.org/spyware/threats/

Back to top
View users profile Send private message Visit posters website
TeMerc

Captain
Captain
Premium Member

Joined: Apr 24, 2004
Posts: 557

MVP Premium

PostPosted: Mon Apr 11, 2005 11:10 pm    Post subject:
Reply with quote

Well, Bill its good to see you get a laugh at these idiots. One can only hope their lawyers suck them dry persuing such absurd claims. It wouldn't surprise me if they were the same bunch of ambulance chasing lawyers who have made other claims, against other folks such as yourself, all baseless without merit. I guess they all figure at sometime, one of you will cave, much the way things, in my opinion, happened at Lavasoft and WhenU.

Keep up the good fight, Scotty needs to bite these guys where it hurts!!!


_________________
Ultimate Countermeasures Page
Malware Advisor Blog
Back to top
View users profile Send private message Visit posters website
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Tue Apr 12, 2005 1:49 am    Post subject:
Reply with quote

Front page:

CastleCops Link/article-5891-nested-0-0.html


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
suzicat

Microsoft MVP
Premium Member

Joined: Sep 10, 2004
Posts: 416

MVP Premium

PostPosted: Tue Apr 12, 2005 3:33 am    Post subject:
Reply with quote

Blogged here:

http://netrn.net/spywareblog/archives/2005/04/11/ibis-llc-another-adware-company-attacking/

Edit to stir the Google juice:

DSLReports.com discussion here:

http://www.dslreports.com/forum/remark,13144805


_________________
Microsoft MVP 2005-2008, Consumer Security
Malware researcher / consultant
Back to top
View users profile Send private message Visit posters website
Paul

CastleCops Founder


Joined: Feb 22, 2002
Posts: 27351

Administrators Firetrust Forums Admin MIRT Moderators MVP Phishing Squad Premium Team CC Committee

PostPosted: Tue Apr 12, 2005 3:37 am    Post subject:
Reply with quote

Thanks Suzi, I read your blog entry. Very nice. It is about time we send a unified message from all spyware-critics. We're not giving in. We're doing the right thing.


_________________
Paul Laudanski - http://www.laudanski.com
http://www.linkedin.com/pub/1/49a/17b
Back to top
View users profile Send private message Send email Visit posters website
YoKenny

Corporal
Corporal


Joined: Nov 02, 2002
Posts: 74
Location: Canada

PostPosted: Tue Apr 12, 2005 10:28 pm    Post subject:
Reply with quote

I'm spreading the word.image

Back to top
View users profile Send private message
negster22

Security Expert
Premium Member

Joined: Mar 10, 2004
Posts: 5252

Moderators MVP Premium RootKit Detection Hosts Rootkit Experts Security Experts SRT

PostPosted: Wed Apr 13, 2005 3:48 pm    Post subject:
Reply with quote

It's time for Scottie to start growling!

It is the behavior of the Ibis toolbar itself, not WinPatrol's say so that makes it the anathema of computer users. Having tended to quite a few HijackThis logs, I can say there was a time period when WinTools, a variant of the Ibis toolbar, ranked right up there with CWS and VX2 as the posters' chief complaint. The users were reacting to the havoc the program wreaked on their systems, not what WinPatrol's program data base or anyone else's reference defined it to be. Not a single one said "WinPatrol identifies this as malware can you remove it." No..they just complained about their PC being nearly nonfunctional. Just look at how many views this topic on WInTools received. The users were desperate to have this crap removed.

image

Log: CastleCops Link/modules.php?name=Forums&file=viewtopic&p=503242#503242


_________________
Negster22 - MS MVP - Consumer Security 2006-2008 image
Back to top
View users profile Send private message Visit posters website
BillPStudios

WinPatrol
Premium Member

Joined: Jun 30, 2004
Posts: 697
Location: Scotia, N.Y. USA
Premium Security Experts

PostPosted: Thu Apr 14, 2005 10:15 pm    Post subject: IBIS Part II
Reply with quote

Another letter from IBIS arrived today.

This time it was an almost identical letter as before but with a twist.
This one claimed to be IBIS LLC but the letterhead was
XACTI CZ, s.no.
America 23/525
120 00 Praha
Czech Republic

All the text was the same as the one from Boco Raton but it was signed by Mgr. Petra Prochazhova, Legal Department Manager.

Screen shots were the same too but on this one they underlined which programs were theirs which was helpful
http://www.winpatrol.com/support/ibisthreat2.pdf shots were the same too but on this one they underlined which programs were theirs which was helpful
http://www.winpatrol.com/support/ibisthreat2.pdf

Bill


_________________
Bill Pytlovany
BillP Studios
Back to top
View users profile Send private message Visit posters website AIM Address
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16496

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Fri Apr 15, 2005 5:42 am    Post subject:
Reply with quote

Rolling on the floor laughing... Too much! First of all they kindly told you "OK here's the crap that's ours". Secondly interesting that they have a few anti-malware applications to keep this sort of crap out of their own machines. And thirdly, there's nothing in any of your screens that claims that any of those underlined processes has any association with spyware! Shocked

Of course we expect you to say just that in your PLUS info service ... now that they've kindly confirmed their stuff for you. Wink Laughing


_________________
imageCastleCopsWiki
Back to top
View users profile Send private message
VaMPiRiC_CRoW

Corporal
Corporal


Joined: Aug 09, 2004
Posts: 70
Location: Portugal

PostPosted: Fri Apr 15, 2005 4:11 pm    Post subject:
Reply with quote

Bill, I think that the best you can do is to ignore them... Wink

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> WinPatrol Talk All times are GMT
Goto page 1, 2  Next
Page 1 of 2

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer