1.5.2.351 legitimate version?

shyly

Is this what you mean about publishing the software with the address? Notice the developer link on the page.

http://www.softpicks.net/software/Windows-Optimizer-Platinum-30994.htm

tullik

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

tullik

Here are some more web sites where the bad guys have planted their stuff:

http://www.vista-files.org

http://www.4-software-downloads.com

http://www.topdownloads.net

http://www.hotlib.com

http://www.batchconverter.com

http://www.getsomesoft.com

http://cnn-cnet.com.com/

http://www.cnet.com.au

http://www.sharewareatlas.de

http://www.download25.com

pramogos.zemas.lt (via CNET; may be archived)

http://www.businessmobile.fr (via CNET; may be archived)

http://www.padring.com

php.zdnet.de

rss.zeden.net (via CNET; may be archived)

http://www.serials.ws (a cracker site per Google)

http://www.pdfchm.com (a Russian site)

http://www.freetrialsoft.com

http://www.daolnwod.net

http://www.tweakyourwindows.com (site lists 15 products by developer "Merphi Alex" -- there are duplicates in the list -- sloppy)

http://www.sympatico-msn-ca.com -- a referral to "System Accelerate Expert Edition" appeared here on 12/17/06 via a CNET feed

http://www.zicos.com -- a referral to "System Accelerate Expert Edition" appeared here on 12/18/06 via a CNET feed

Notes:

This list came from a google search for "System Accelerate Expert Edition" -- there were about

344 hits -- google immediately compressed the list to 76 items.

I went to the sites -- other pirated products we already know about were on some sites.

I did not see any new pirated products.

You can't always trust the dates, but a lot of stuff appears to have been planted this month, some just last week.

tullik

A google search for "Merphi Alex" got 290 hits. Google immediately compressed the list to 10 items.

Yield (new sites):

3d2f.com ( http://3d2f.com/ )

http://www.visoracle.com

http://www.softcab.net

http://www.blogdigger.com (site links to 3d2f.com)

tullik

A google search for "Windows Optimizer Platinum" got about 562 hits. Google immediately compressed the list to 78 items.

Yield (new sites):

http://www.windowsmarketplace.com

http://www.download3k.com

http://www.soft20.com

http://www.audiocdripper.com

netscape.com.com

http://www.subloads.com (subsidiary of http://www.topdownloads.net )

http://www.upload.com (a CNET subsidiary)

http://www.wikio.de

http://www.amazingfiles.com

http://www.freegamesoft.com

http://www.pigeons.net (subsidiary of http://www.topdownloads.net )

http://www.kids-downloads.com (subsidiary of http://www.topdownloads.net )

http://www.downloadready.com

http://www.topdownloads.org (aka http://www.topdownloads.net )

netscape.com.com -- a referral to "Windows Optimizer Platinum" appeared here on 12/17/06 via a CNET feed

http://www.startdomein.com -- a Dutch language site? Items appear to come from a feed I could not recognize

tullik

A google search for "Registry Wizard 2.25" got about 75 hits. Google immediately compressed the list to 36 items.

Yield (new sites):

http://www.downloadpipe.com (if the program is still there, I could not find it)

sharewareville.com

http://www.freedownloadeducation.com

http://www.mysoftoday.com

tullik

A google search for "jv16 Power Tools 2006 1.5.2.351 1.5.2" got 17 hits. Google immediately compressed the list to 11 items.

Yield (new sites):

download.acasa.ro

The other 10 items were all CNET/ZDNet sites.

tullik

A google search for jv16 AND 2006 AND 1.5.2.351 AND "Power Tools" got 207 hits. Google immediately compressed the list to 53 items.

Yield (new sites):

http://www.hotsoft32.com

About 10 of the other items were not applicable. The rest were already known.

tullik

Note:

This post consolidates and categorizes most URLs mentioned in prior posts in this topic.

Order of lists is domain-level 2 within domain-level 1.

These organizations provide distribution services for the pirates:

http://www.cnet.com.au

3d2f.com

http://www.4-software-downloads.com

http://www.amazingfiles.com

http://www.audiocdripper.com

http://www.batchconverter.com

http://www.blogdigger.com (site links to 3d2f.com)

http://www.buydownloadedgames.com/software_publishing_companies/

cnn-cnet.com.com

netscape.com.com (a referral to "Windows Optimizer Platinum" was here on 12/17/06 via CNET)

http://www.download.com

http://www.download25.com

http://www.download3k.com

http://www.downloadpipe.com (if the program (Registry Wizard 2.25) is still there, I could not find it)

http://www.downloadready.com

http://www.filesrepository.com

http://www.freedownloadeducation.com

http://www.freegamesoft.com

http://www.freetrialsoft.com

http://www.getsomesoft.com

http://www.gold-software.com

goodfiles.com

http://www.handyarchive.com

http://www.hotlib.com

http://www.hotsoft32.com

itprodownloads.com

http://www.kids-downloads.com (subsidiary of http://www.topdownloads.net )

http://www.mysoftoday.com

http://www.padring.com

http://www.pdfchm.com (a Russian site)

http://www.programurl.com

http://www.qarchive.org

http://www.safe-install.com

http://www.shareware-download.org

http://www.sharewareconnection.com

http://www.sharewareisland.com

http://www.sharewareplaza.com

sharewareville.com

http://www.sofodown.com

http://www.soft20.com

http://www.soft411.com

http://www.softizer.com

http://www.softslist.com

http://www.startdomein.com -- a Dutch language site? Items appear to come from a feed I could not recognize

http://www.subloads.com (subsidiary of http://www.topdownloads.net )

http://www.sw-files.com

http://www.sympatico-msn-ca.com (referral to "System Accelerate Expert Edition" was here on 12/17/06 via CNET)

software.techrepublic.com

http://www.topdownloads.org (aka http://www.topdownloads.net )

http://www.tweakyourwindows.com

http://www.upload.com (a CNET subsidiary)

http://www.visoracle.com

http://www.vista-files.org

http://www.wapti.com

http://www.windowsmarketplace.com

http://www.zicos.com (referral to "System Accelerate Expert Edition" was here on 12/18/06 via CNET)

http://www.sharewareatlas.de

http://www.wikio.de

php.zdnet.de

http://www.businessmobile.fr (via CNET; may be archived)

pramogos.zemas.lt (via CNET; may be archived)

http://www.daolnwod.net

http://www.download-by.net

http://www.fileboost.net

http://www.pigeons.net (subsidiary of http://www.topdownloads.net )

http://www.softcab.net

http://www.softpicks.net

http://www.topdownloads.net (aka http://www.topdownloads.org )

rss.zeden.net (via CNET; may be archived)

download.acasa.ro

http://www.serials.ws (a cracker site per Google)

These organizations provide hosting services for the pirates:

http://www.fsphost.com (aka four.fsphost.com and fsphost.net)

http://www.hostfreeweb.com

http://www.ifastnet.com

http://www.php1h.com

http://www.serverheaven.net

http://www.phpnet.us

These organizations collect and transfer funds for the pirates:

http://www.digitalriver.com (parent of swreg.org)

http://www.swreg.org (aka usd.swreg.org )

Nota bene:

The pirates' victims include all the organizations above,

the actual developers and owners of the stolen products, and anyone who is fooled into

buying the bogus and unsupported cracked programs.

These URLs are under the pirates' direct control.

They keep fraudulent programs and materials at these places.

four.fsphost.com/brainlab

softlab.ifastnet.com (current contents are just gif image placeholders -- planning expansion?)

brainlab.php1h.com (current contents are just gif image placeholders -- planning expansion?)

brainlab.hostfreeweb.info

ashampoo.serverheaven.net

brainlab.serverheaven.net

usd.swreg.org/soft_shop/45085/

brainlabsoft.phpnet.us (current contents are just gif image placeholders -- planning expansion?)

jv16

These sites have now been contacted to remove these crooked apps:

http://www.vista-files.org

http://www.4-software-downloads.com

http://www.topdownloads.net

http://www.hotlib.com

http://www.batchconverter.com

http://www.getsomesoft.com

http://www.sharewareatlas.de

http://www.tweakyourwindows.com

Looks like their main websites at serverheaven.net are now down.

redseujac

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

tullik

jv16 wrote
... Looks like their main websites at serverheaven.net are now down.

All eight of the pirate sites I listed are still up.

Last night, http://www.serverheaven.net itself was down. So the pirate sites there only appeared to be gone.

jv16

I have now sent a DMCA complaint to SWREG/Digital River and CNET Networks to stop distributing these crooked copies.

All other websites removed these programs from their services with a simple e-mail, by the way.

jv16

tullik wrote

Last night, http://www.serverheaven.net itself was down. So the pirate sites there only appeared to be gone.

OK, I guess I have now saved all their websites and files. It's time to shut them down:

http://www.serverheaven.net/forums/index.php/topic,235.0.html

tullik

Update on the eight previously mentioned sites under direct control by the pirates:

These links still deadend at rotating gif images stored on an ifastnet.com location (probably -- IP=209.190.16.82):

http://brainlab.php1h.com

http://brainlabsoft.phpnet.us

http://softlab.ifastnet.com

It is still possible to download the pirates' copy of Ashampoo from:

http://ashampoo.serverheaven.net

The payment site is still up. It appears to be possible to pay, but none of the download links there work:

http://usd.swreg.org/soft_shop/45085

These home pages are still there:

http://four.fsphost.com/brainlab/ (Decompiler page -- links to the pay site, but the download link there deadends at the rotating gif images)

http://brainlab.hostfreeweb.info/ (Mass Mail Tools page -- a download link deadends at the rotating gif images; a "Purchase now" link goes to the payment site)

The primary site does appear to be down now. All four cracked and renamed versions of jv16 PowerTools were hosted here:

http://brainlab.serverheaven.net/

tullik

Further update:

Its not over yet. The pirates' "products" have been mirrored, possibly at sites all over the world.

Check this one: http://www.windowsmarketplace.com/results.aspx?text=softlab&tabid=1

The "products" come from http://www.software-files.download.com (CNET).

Besides the "products" previously identified, windowsmarketplace.com shows a product (Photo Protector By Softlab Software) that has not previously been mentioned in this topic.

If that product is pirated, then the pirates are possibly operating from other locations. The product was not visible in the pirate sites we already know about.

jv16

tullik wrote
Further update:

Its not over yet. The pirates' "products" have been mirrored, possibly at sites all over the world.

Check this one: http://www.windowsmarketplace.com/results.aspx?text=softlab&tabid=1

The "products" come from http://www.software-files.download.com (CNET).

I have now contacted windowsmarketplace.com to remove these apps. CNET has already been contacted with the DMCA complaint, they should remove all the files they are hosting soon. I hope.

jv16

tullik wrote

It is still possible to download the pirates' copy of Ashampoo from:

http://ashampoo.serverheaven.net

Which of the files is a pirated version of Ashampoo's product? Perhaps I missed it but I couldn't find it.

tullik

jv16 wrote
tullik wrote

It is still possible to download the pirates' copy of Ashampoo from:

http://ashampoo.serverheaven.net

Which of the files is a pirated version of Ashampoo's product? Perhaps I missed it but I couldn't find it.

The above link points to a page "Index of /"

The name "Ashampoo/" is of course a directory

The last name in the Ashampoo/ directory list is "ashampoo_powerupxp_platinum220_se.exe"

Clicking that name (or Ashampoo.php) initiates a download

The .exe is a 13.3MB file. Its properties show Description=Ashampoo PowerUP XP Platinum 2 Installation, Company (of the installer program I guess)=Venesuela, and Version=1.0.0.0

Incidentally, ashampoo_powerupxp_platinum220_se.exe downloaded via the actual Ashampoo company site is a 9.9MB file.

tullik

Also, in the parent directory, the subdirectory WinOpt/ contains ashampoo_winoptimizerplatinum330_se.exe, and the subdirectory UninstallerPlatinum/ contains ashampoo_uninstallerplatinum385_se.exe.

« Previous Page Next Page »