Marie Foster: Tantrums

Wed, 07 May 2003 19:29:15 GMT

New Software Attack on MSIE

A featured story at Salon documents another program like the one that affected my version of MSIE. Like clocksync, and Huntbar the program hijacks your browser, sends information about your surfing habits to the central server that lobs back pages and pages of pop up ads that you have to deal with.

Read about the KoolKatalog caper here.

Sun, 27 Apr 2003 17:26:22 GMT

Huntbar - Traffic Syndicate - clocksync elimination

I continue to get daily hits on his weblog from people desperate to get rid of these parasite programs. I thought I had done everything that I needed to do to get rid of it on my computer. However, I was finally able to do it by following this link. If you have Huntbar attached to your MSIE, it will tell you as you hit the site. If you do, follow the link for step by step instructions to completely eradicate it. Huntbar is the key to getting rid of the Traffic Syndicate pop ups as well as the clocksync installs.

Sun, 27 Apr 2003 02:41:31 GMT

Sheesh!

Spyware vs. anti-spyware. The author of Ad-Aware, a program that removes sneaky software, explains what happened when his own program was zapped by the enemy. [Salon Headlines]

Lets just go out and string the bastages up... er... just kidding.

Sun, 27 Apr 2003 02:35:37 GMT

ACK

A law to protect spyware. Sen. Fritz Hollings is pushing a bill that supposedly safeguards online privacy -- but actually gives intrusive marketers a green light. [Salon Headlines]

Pardon me! Help... I am falling.

Thu, 24 Apr 2003 12:37:35 GMT

All Pop Ups are Evil

They are part of the global hegemony trying to finagle money out of you against your will. All of the collection of data only serves to further embolden these people into making inroads into your privacy with only one motive – profit – theirs.

They may say things like we use this information to make our services better for you. And they may even believe that. But the problem is that there are plenty of people out there who do not care an iota about you or your values.

So beware.

full story "apuae"

Tue, 22 Apr 2003 22:06:17 GMT

Google - Clocksync - Huntbar - Trafficsyndicate Cabal?

I just sent the following email to Google. I should cc it to Salon maybe. Hopefully, Google was just being hijacked by these unscrupulus companies. I will keep you informed if I hear anything back from them.

I have had a ongoing problem with the installation of some software on my computer called clocksync. This program installed itself twice without giving me a chance to confirm it. The program has an association with another program called Huntbar. The majority of hits on my blog have ironically come from google or yahoo searches on any of the three topics above. The searches are all about how to remove the software from their computers. Following the instructions given to eliminate the programs on my computer did not resolve my problem with uncounted numbers of pop ups.

Somehow this program is associated with Google tool bar. If that is your intent, then so be it. If not, then you need to find out how it attaches as it continued to do so until I uninstalled Google tool bar. That is a shame too as I found that Google Toobar really did speed up my research.

Today the problem even exacerbated in that nearly every time I tried a search from the toolbar I got an MSIE error and my entire browser shut down. I do have a pop up killer on my system now. If I had not installed that I would have gone totally ballistic I think which would not be a pretty sight for I am a 57 year old grandmother.

You probably do not want to hear all this, but I am publicizing the problem on my blog and I am getting lots of hits every day from people who seem to be having similar problems.

Now that I have uninstalled Google Tool Bar, my problem with pop ups seem to have totally gone away. I am getting NO more pop up notices from Pop Up Stopper.

http://blogs.salon.com/0002237/categories/tantrums/

http://www.huntbar.com/

http://www.trafficsyndicate.com/

www.clock-sync.com/

Clock sync sends you to traffic syndicate to get removal instructions. Huntbar is a product of Traffic Syndicate.

Wed, 16 Apr 2003 16:34:37 GMT

Premature Optimism

On Sunday I published a blog which stated that my pop up problem had been solved. Unfortunately, that optimism has not been rewarded. Despite my best efforts to remove any trace of these programs, I am still getting pop ups (often 4 or 5 at a time) that jump to the top of my work or research.

Google has an information page about how to deal with this kind of Spam.

I have followed all the suggestions on this page up to notifying the FTC.

As over 90% of search engine referrals to Blog Baby have come from searches on the same three programs that I have been documenting I do not think that I am the only one who is ready to sue. I have also been installing a number of Microsoft security updates on a nearly daily basis for the past week or so. Which is just about the length of time that I have been having this severe a problem.

These three different urls are the crux of the problem: Traffic Syndicate, Huntbar, and the aforementioned clocksync program. I have followed the instructions for eliminating them, and in each case the problem returns. These three products are related. Traffic Syndicate has Huntbar as a ‘product’ and clocksync sends a person to Traffic Syndicate as a part in the process of un-installation.

I have been running Spybot and AdAware. When I first ran them they reported that the software had been removed. But it appears that they are missing some key part that lets the software reattach.

I have sent emails to the listed addresses that I have been able to ferret out. When I have gotten a response it has included standard disclaimers stating that I have given permission or implied permission for the software to be loaded onto my machine. In the case of clocksync they sent me a screen cap of a dialog box that they said I clicked on. However, I was never given any option either time that the program installed itself.

These programs have robbed me of hours and hours of productive time in trying to eliminate them. They have resulted in my deleting some of the programs that do the same kinds of thing but in a way that up to now had been a minor annoyance rather than a full blown attack on my sanity.

I am at my wits end. I am preparing to write my letter to the FTC concerning them. I hope that you will join me in reporting your experiences with these unethical companies. Maybe we can make some kind of difference even if it does take me out of the top 100 blogs list.

(Why does it not surprise me that this company is located in Florida? If you live in Florida you might want to call them at 1-561-417-9415. You might also want to call Jeb and let him know that you are not amused. Florida seems to becoming some kind of haven for unethical enterprises.)

Tue, 15 Apr 2003 11:22:49 GMT

Being Decluded ¹

I am a spammer I guess. But I swear - I did not mean to be!

I emailed a letter to the editor of our local weekly newspaper today but it was blocked.

I am still decoding the message I got back from the email postmaster but there were only two things in my email which might have caused it to be rejected.

First, I included a link to this story in the Seattle PI about a local politician who thinks that home health care workers here are “perpetual pathetics” among other things. He even had the gall to call them terrorists for having a peaceful rally outside his home protesting his blocking their upcoming HUMONGOUS ($1.02) pay increase. And the saddest thing of all to me is that it is likely he will get away with this arrogant insult because the people of my town have become so Rush-Limbaughed that they probably agree with him.
The second is that I have a signature with a link to my blog.

So… the suspects could be I guess, Radio-Userland, Salon, The Seattle Post Intelligencer (though I think that this one is the least likely), or Microsoft.

I feel so dirty.

¹I was going to do my usual links thing with this but feel that the emphasis should be on Mr. West and his verbal assault. But if you want to know about Declude, be my guest.

Sun, 13 Apr 2003 16:55:23 GMT

I solved my pop up problem

I scrubbed my computer clean. I gave up convenience to avoid annoyance. I have realized that the computer virus has mutated into illegitimate legality. Even if it can be implied that I granted consent I have learned that I have no right for complaint.

So, I got out the deadbolts and put the brakes on. I am taking back my privacy.

I never did like people who once invited into my house started looking into drawers or opening up my medicine cabinet in some kind of prurient attempt to ferret out my secrets.

If you want me to come to your website, take down your pop ups. I no longer see them as being petty. Someone else (probably the virus companies *sigh*) found them to be a new revenue stream. I won’t buy. The only way to stop it is for no one else to buy either.

Fri, 11 Apr 2003 15:33:48 GMT

US senators introduce antispam bill. Spammers face $10 fine per e-mail [InfoWorld: Top News]

This had better apply to pop up ads as well.

Fri, 11 Apr 2003 14:35:44 GMT

I am making pop up spam my personal crusade.

I am going to list all the culprits I can find here. This is important. It will be my own innovative way to generate a small income flow.

Please do me a favor and drop by these links and let them know what you think of them!

http://www.huntbar.com/

I told these guys "Your constant sending me advertising messages is interfering with my ability to make a living. I understand that Congress is looking to make a law to stop spam. I have put you on my list so that I can be the first in line to make my claim. $10.00 per pop up baby. Yah! I want to retire on your ass and drive your business into bankruptcy."

I just got an automated email reply. I am republishing it here. None of the links are valid, the registry information is wrong, the directory is not on my machine, etc. I am still being spammed.

Dear User,

Thank you for contacting us regarding our website service. Although we are always are happy to hear from one of our users,

we are sorry to learn that you have decided to uninstall our software.

We realize that your computer is important to you and that your decision

may have been caused by a technical problem or concerns of yours.

Please let us know if there is anything we may help you with to keep you as a user.

If it surprises you to learn that you have the Search Toolbar on your computer, you're not alone.

Over the last month's, we have heard from people who have installed the software without realizing it.

If this has happened to you, we apologize. We will remedy this now with a guide to uninstalling the program.

We have laid out instructions on how to remove the Search Toolbar, along with steps to prevent you from

inadvertently downloading it again. We've also provided answers to common questions about how the Search Toolbar

may have been loaded onto your computer in the first place.

If you still have decided to uninstall our software, please follow the exact instructions below.

If you encounter any trouble uninstalling the software, please accept our sincere apologies and please let us know.

We will strive to assist your request as quickly as possible.

The auto uninstall feature in this email is the most convenient way to uninstall our software.

You may however use the manual uninstallation instructions if you so prefer.

Both instructions have been included in this email for your convenience.

Should you need further assistance, please email us at uninstall@huntbar.com.

We try to respond to all inquiries within 24 hours sometimes in as little as 1 hour, however,

please understand that we are unable to respond to any questions that this email already answers,

so make sure that you've read the complete message before requesting additional help.

Please do not send us multiple requests for help as they cannot and will not be answered

any faster and you may only delay Customer Service replies to other users.

Sincerely,

Customer Support

+++++++++++++++++++++++++++++++++++++++++++++++

Frequently Asked Questions:

Q. Where did I get your software from? I do not remember downloading it.

A. We distribute the software in a variety of ways and the most common distribution channels

are via a popup message or co-bundled with another software application, however,

all our advertisements requires that you (or someone using your computer) accept our

WEBSITE TERMS OF USE AND END USER LICENSE AGREEMENT located at http://www.huntbar.com/toolbar/terms.asp

with a "YES" before the download can take place.

It is worth pointing out that just visiting one of these distribution sites is not enough

for you to get the software. You have to click "Yes" to a download box before any software

is loaded onto your computer. This message box, incidentally, does not come from us

(our software is not running on your computer at this point) but rather from a security mechanism

that's on your computer (inside Microsoft's Internet Explorer).

Microsoft has designed its browser to notify you before it downloads and runs new executable

software programs; this is intended to protect you against viruses and programs that you do not want.

Note that the pre-selected choice here is "No" (i.e., don't download) so you won't download it inadvertently

by clicking the enter button on your keyboard.

You must click "Yes" to download the software. A sample advertising message can be found

at http://www.huntbar.com/Toolbar/Toolbar.asp

Q. Why I am seeing HuntBar.com as my start page?

A. You may have arrived at HuntBar.com for a variety of reasons, but most likely because you have

elected to set HuntBar.com as your start page by clicking 'Yes' upon an opt-in pop-up window.

Q. How do I remove HuntBar as my start page?.

A. For Internet Explorer users, please select 'Tools --> Internet Options'.

Change your Home Page as desired, and click 'Apply'.

Q. How do I uninstall the Search Toolbar?

A. If you decide that the Search Toolbar is not right for you, you can easily remove it through

the Add/Remove Programs menu in your Microsoft Windows control panel. To uninstall your Search Toolbar,

please do the following:

1. Click on the Start button and select Settings and then Control Panel. If you are running

Microsoft XP, you can go directly to the Control Panel from the Microsoft Windows Start button.

2. When the Control panel window opens, double-click on the Add/Remove Programs Icon.

3. When the Add/Remove Programs Properties window opens, locate the program that

you would like to uninstall from the list of installed programs. IMPORTANT: If the program is not listed, you did not use the manual installation procedure.

Please use our automatic uninstallation feature provided below in this email.

4. Click once on the program to be uninstalled and then click on the Add/Remove button

and follow the instructions.

Manual Uninstallation Instructions

HuntBar stores its code in a folder called 'MSIETS' inside the 'Common Files' folder in 'Program Files'.

Before you can delete it, you must deregister its DLLs. There will be one called 'msiets.dll', and, if HuntBar has been running long enough

to download some updates, probably also 'msielink.dll'. If you don't have msielink.dll

you will only have to use the first of the two following commands.

Open a DOS command prompt window from Start->Programs->Accessories, and enter the commands.

For Windows XP, 2000 or NT:

regsvr32 /u "C:\Program Files\Common Files\MSIETS\msiets.dll"

regsvr32 /u "C:\Program Files\Common Files\MSIETS\mslink.dll"

Or for Windows 95, 98 or Me:

"%WinDir%\SYSTEM\regsvr32.exe" /u "C:\Program Files\Common Files\MSIETS\msiets.dll"

"%WinDir%\SYSTEM\regsvr32.exe" /u "C:\Program Files\Common Files\MSIETS\mslink.dll"

You will need to change the path 'C:Program FilesCommon Files' in the above commands

if your Program Files are on a different drive, or have a different name (eg. non-English

Windows installations).

Having done this you can restart the machine and delete the MSIETS folder,

along with the entry '{8A05273A-2EA5-42DE-AA75-59EA7D9D50D7}' inside 'Downloaded Program Files'

in the Windows folder. You can also run 'regedit' and remove these entries from the registry to clean up if you like:

HKEY_CURRENT_USERSoftwareMSIETS

HKEY_CURRENT_USERSoftwareMSIETSLink

HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar{8A05273A-2EA5-42DE-AA75-59EA7D9D50D7}

After removing the software you may want to delete the shortcuts it adds to the desktop, start menu and favorites menu, and set your search and home pages back to normal (see Tools->Internet Options->Programs->Reset Web Settings).

Automatic Uninstallation Instructions:

If you did not use our manual installation program, you can only remove it with our special program.

The program to remove the Search Toolbar is available for download with this link:

http://www.trafficsyndicate.com/TB/TB_Removal.exe and to remove the Related Link Toolbar with this link: http://www.trafficsyndicate.com/tb/TB_Link_Removal.exe

+++++++++++++++++++++++++++++++++++++++++++++++

If you still experience problems uninstalling the software, please download

http://www.trafficsyndicate.com/tb/RemoveToolbar.zip and unzip the file

into C:Program FilesCommon FilesMSIETS directory and launch (double-click) on the 'RemoveToolbar.cmd'. It should remove both toolbars from the browser. Then you can just delete the folder named MSIETS.

Thu, 10 Apr 2003 22:42:35 GMT

Ip Vandalism

We survived the denial of service attacks here at radio a couple of days ago. I have my own saga of dealing with internet frustration as I tried to figure out who had installed the application called clocksync on my computer. I was reading an article on the San Francisco Chronicle at the time. My friend who lives there thinks that it was the paper that took the opportunity to do that. I dunno. I will send them a copy of this entry in hopes that if they were the ones, they will fess up. Likely? I doubt it. The absence of manners in this country really amazes me.

Hello. A couple of nights ago while I was quietly going about doing research on the web I nearly had a heart attack. There was a pop up window that said something about time synch then before I could really react, it had run on my machine, and installed itself.

The upshot of this is that now I have NO time synch apparatus. I already had one that I had gotten from our National observatory. I uninstalled yours, and now I am faced with the loss of time to do the research that I did then.

Since then every time I go to a web site, I get two windows opening. One is a window that is my chosen destination. The other is a full list of suggested links for buying something.

Believe me. I have no desire for any kind of steam catapult. I am merely doing research for my writing career.

I am writing to you because I believe that it is your product that is doing this. For some reason you must think that this guerilla tactic is what you need to do to stay viable in the dog eat dog world of global information domination. Well, I consider it vandalism. If I could sue you I would.

As it is, your unethical business practice is going to rate a hit on my web log. I am sure that someone who reads my page may have a few suggestions for how I can return the favor and make your life as miserable as mine has been since you attacked me.

M. Foster

http://blogs.salon.com/0002237/

Grrrr….

As I finished uninstalling the vandal software I was redirected to a web page where I could choose if I REALLY did want to uninstall their product. Not only that, I was asked to tell them what might have caused me to want to NOT uninstall it.

I typed the following in the box clicked on send, then thought … why did I do that? I have just contributed to their being better able to slip this to someone else.

I sent you email under separate cover. You were uninvited.... a party crasher... I evicted you.

If I could I would send some kind of service denial your way. But I am not only lawful but ethical.

You are not. Have a good day.

The product name is clocksync:

Q: How much does ClockSync cost?

A: ClockSync is FREE. Since ClockSync is free to use, we need a source of revenue to stay in business - that's where Save! comes in. Save! is free software that shows you contextually relevant offers and information; proceeds from Save! are used to continually support and improve ClockSync and other great software products. When you installed ClockSync you opted-in to install Save! For more information about Save!, (link removed to avoid giving them any publicity)

Do you love the term opted-in? I set up my rant page for just this kind of bs.