Gambling Federation Malware

[Macgyver]

Can any one of you IT guys give a step by step process to detect and remove these files or comments. I'm sure everyone will appreciate this. Not everyone has tech guys at their disposal

I'd be interested to see a process to remove these files, as well. I downloaded some G-Fed a few months back, though I never had the problem of not being able to access any casino site I wanted.

I'd still like to doublecheck my home computer and fix the problem if it exists there.

[Dutch]

Our team of programmers developed the following patch - IS SAFE TO USE-
this will fix the problem on your systems, use the following links:

http://fix.royaldutchcasino.com/fix_win2k.zip ----- For Windows 2000

http://fix.royaldutchcasino.com/fix_winxp.zip ---- For Windows XP

Please click on the link according with the Operational System of your
computer

and then open the zip file, save the files inside the ZIP, and execute the
file by double click on the file FIX_RYL2.exe


.

[bagofmaggots]

How can the hell can G-fed not be rogued after all they've done?

They have admitted to these actions and in my opinion they are unforgivable. If that doesn't qualify as unethical bussiness practices.....I don't know what does. Royal Dutch and The Blackjack Table should be very Pi**ed-off too.
I agree they belong in the Rouge's gallery.

Kudos to you jmildstone for bringing this to the public's attention too !

[Sodax77]

Your first mistake was:

Hi Brian,

(It's Bryan)

I just check this, and what Kitty_23 said, is total BS.
As far i know about these things.

However, my Host-file was clean.

I use these programs regularly:

1. Spybot S&D

Check this:
Spybot S&D > Tools > Hosts File > Add Spybot-S&D Hosts List

And be sure, that you have latest version:
Spybot S&D > Info & License> 1.4 ß2

2. Total Uninstall 2.34*

When i install/uninstall any program.

Description:

" Total Uninstall - track and undo system changes

Total Uninstall can help you to monitor any changes that were made to your system during installation of a new software product and allow you to perform a complete uninstall without having to rely on the supplied uninstall program (which may leave files or changes behind). To use it, you simply launch the installation program from the Total Uninstall interface and select the system areas to be monitored. The program will then create a snapshot of your system before it installs the new software and an additional snapshot after install completes. it then compares the two snapshots and displays all changes n a nice, graphical tree view, marking all values and/or files that have been added or changed as well as some before/after details. Total Uninstall will save these changes and if you decide to uninstall the application, it will reverse all changes to the previous state"

*with my own settings + i check my registry regularly. I already know, that example GF and Playtech leaves some tracking registry keys behind, sometimes even you clean program with Total Uninstall (depend settings). Also sometimes you have to remove folders manually, if you use Total Uninstall

BE CAREFUL WITH THIS PROGRAM!

[Vesuvio]

Please click on the link according with the Operational System of your
computer

and then open the zip file, save the files inside the ZIP, and execute the
file by double click on the file FIX_RYL2.exe

Running an executable file provided courtesy of Royal Dutch casino Only for the gamblers out there...

[555YY]

I'd be interested to see a process to remove these files, as well. I downloaded some G-Fed a few months back, though I never had the problem of not being able to access any casino site I wanted.

I'd still like to doublecheck my home computer and fix the problem if it exists there.

you can open up the host file using a text editor like notepad/wordpad, and just go through yourself deleting any unwanted entries

a faster and more efficient way is download a clean host file from a trusted source and use it to replace the one you currently have on your workstation.

here's one that also offers additional protection: http://www.mvps.org/winhelp2002/hosts.htm

also included there is a tool that allows you to lock the host file from unwanted modifications

[GrandMaster]

I also recommend that you download a little program called edexter from http://accs-net.com/hosts/eDexter.html to use with the hosts file.

[spearmaster]

The spam claim is bogus. Putting the IP of the domain in the hosts file does not stop someone from getting spam. It does, however, stop you from accessing the site.

I think we have a rogue on our hands.

[caruso]

Well, I posted about Gambling Federation. People didn't listen, carried on downloading and playing and now they're having their computers screwed with. LOL. You think cheats only cheat with software?

Like I always say: why bother to post anything? People never listen, carry on playing...then post complaints. LOL.

Hopeless.

[maxlevine]

I downloaded VideoPokerClassic last summer (august... maybe september). Just checked the file and casinoxo and theblackjacktable were there. GFed could have suggested this solution to their clients instead of installing it themselves. Here's a link on how to block unwanted parasites with a hosts file (Windows XP and ME): http://www.mvps.org/winhelp2002/hosts.htm

Thanks to everyone here, especially jmildstone, for pointing it out, and also to GrandMaster for providing the solution.

Max