07-21-2007, 06:27 PM | #1 |
FFR Player
Join Date: Aug 2006
Location: Ontario, Canada
Age: 33
Posts: 661
|
I'd like to bring this to your attention.
Guys, do NOT click the ad thats for "Internet Gamebox". Seriously. Theyre all over FFR. You'll see it. It will say "More then 1500 games!" and have pictures of game characters.
Do NOT click it or install the "Internet gamebox". Internet Gamebox is owned by GAD Network, which is a known spyware supplier. Their setup package, which is needed to play their free online games, reportedly installs a hard to remove rootkit. Uninstallation of their software is only possible through a form (bottom of this page). This also makes me wonder about the proper licensing of all the gaming characters they use (Sonic, Mario, Pacman, Donkey Kong, ...). Feel free to read what gamedev has to say about this. http://www.gamedev.net/community/for...age=1� ---- One post says that: I see the Internet Gamebox ads are still running... I duplicated one of my Virtual Server images and ran the Internet Gamebox installation on it. I had Filemon running on the background logging newly created files and modifications. The installation created a file named 'noffmmtudd.exe' in the windows\system32 directory and executed it. This file didn't show up in Explorer with 'show hidden/system files' turned on. A registry search didn't find a mention of this file either. Then I turned off the virtual machine and added the disk as a second (non-booting) disk to a clean virtual machine. The file named 'noffmmtudd.exe' was suddenly visible with Explorer in the windows\system32 directory, along with some data files also starting with 'noffmmtudd'. After rebooting the infected virtual machine the mentioned files were still not visible in Explorer or the registry. I ran the uninstaller which said it had removed all components of Internet Gamebox. Loading the disk in the clean virtual machine again showed that the files were still there. I then renamed the exe file. After rebooting the infected virtual machine the renamed exe and data files finally showed up in Explorer. A registry search came up with 'noffmmtudd.exe' being called on startup. I hope this proves that Internet Gamebox does indeed install a rootkit. I don't know how to check what the rootkit actually does but it can't be good when it tries to hide itself. ---- Really guys. These ads should be taken off. The companys a spyware producer,and the program reportedly installs a rootkit and such. The reason ads are put on the site. is that they are meant to be clicked. Well, I'd stay away from clicking this one. |
07-21-2007, 06:29 PM | #2 |
RobMagic
|
Re: I'd like to bring this to your attention.
Used to have that sort of problem on RuneScape
Spyware is teh sux but you should always research things before installing. |
07-21-2007, 06:37 PM | #3 | |
FFR Player
Join Date: Nov 2006
Location: California
Age: 34
Posts: 138
|
Re: I'd like to bring this to your attention.
Quote:
Another percussion is your temp internet files. This is probably the fastest way for a Virus to communicate to your computer and they can do this through image exploits, etc...
__________________
|
|
07-21-2007, 06:46 PM | #4 |
FFR Player
Join Date: Aug 2004
Posts: 373
|
Re: I'd like to bring this to your attention.
It might actually be considered legal to do this if you agreed to their "License" or "Terms of Agreement."
|
07-21-2007, 07:16 PM | #5 |
FFR Player
|
Re: I'd like to bring this to your attention.
You shouldn't click on any ads period, let alone this specific one.
|
07-21-2007, 07:29 PM | #6 |
FFR Player
Join Date: Aug 2004
Posts: 373
|
Re: I'd like to bring this to your attention.
|
07-21-2007, 09:25 PM | #7 |
FFR Veteran
Join Date: Dec 2006
Location: Cornfields
Age: 32
Posts: 228
|
Re: I'd like to bring this to your attention.
uhhmm and who exactly click on the ads? Lol
kk that was kinda harsh -_-. But like dragon_master2557 said...don't click on ANY ads |
07-22-2007, 09:20 PM | #8 |
FFR Player
Join Date: Aug 2006
Location: Ontario, Canada
Age: 33
Posts: 661
|
Re: I'd like to bring this to your attention.
It was just a warning.
|
07-22-2007, 09:45 PM | #9 |
Beach Bum Extraordinaire
|
Re: I'd like to bring this to your attention.
and good warning, too. There are alot of people who simply dont know/ didnt think/ are 6 years old and click the ad. This is why I owe iPatch and 8Shade8 so much: I forgot the site had ads
|
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
|
|