Gambling Federation Malware

[jetset]

I'm through to the Montreal headquarters of GF.

They're now aware of the issue and are investigating before responding, hopefully later today....

 

[Kitty_23]

Hi Brian,

We are in EST -5 Time zone, so I just got your 3 posts. We are currently looking into the situation and we'll get back to you today.

We recognize the seriousness of these allegations so please rest assure that we will respond shortly.

Thank you
Talia *

 

[Casinomeister]

Hi Brian,

We are in EST -5 Time zone, so I just got your 3 posts. We are currently looking into the situation and we'll get back to you today.

We recognize the seriousness of these allegations so please rest assure that we will respond shortly.

Thank you
Talia *

Hi Talia,

Thanks! But please bear in mind that these are not allegations but actual findings. You can download the software and check it yourself. In fact, I'm probably driving a lot of traffic to your sites by people just wanting to see for themselves

 

[Kitty_23]

Casino Meister and fellow posters,

First off, please allow us to extend our apologies for this major issue. We owe all of you an explanation regarding this.

A few months ago, we received several spam complaints from our players being sent by the domains you found in your host file. At first we tried to calm our players down, stating that we had nothing to do with these properties and were not responsible for their actions. However, the issue repeated itself several times within a short time span, causing us a mass influx of complaints.

We decided, albeit foolishly, to resolve this issue by blocking the domains which cause our players grief through the software. We did not intend to ever block any one else, nor impair revenues for affiliates. We now realize that this was not the right way to go about this problem. We will be issuing a fix for this very shortly and we will correct this problem within 24 hours.

We sincerely apologize,
Talia
Gambling Federation PR Manager

 

[555YY]

i have submitted the app to our company's default antivirus and malware vendors, symantec and A2, for further review and scrutiny

 

[555YY]

Casino Meister and fellow posters,

First off, please allow us to extend our apologies for this major issue. We owe all of you an explanation regarding this.

A few months ago, we received several spam complaints from our players being sent by the domains you found in your host file. At first we tried to calm our players down, stating that we had nothing to do with these properties and were not responsible for their actions. However, the issue repeated itself several times within a short time span, causing us a mass influx of complaints.

We decided, albeit foolishly, to resolve this issue by blocking the domains which cause our players grief through the software. We did not intend to ever block any one else, nor impair revenues for affiliates. We now realize that this was not the right way to go about this problem. We will be issuing a fix for this very shortly and we will correct this problem within 24 hours.

We sincerely apologize,
Talia
Gambling Federation PR Manager

i'm confused...

were you referring to email spam? how does blocking the domain url stop affiliate sending spam through email?

 

[Kitty_23]

By associating the domain to an non existent IP, the spam cannot load in the person's computer. So this protects the person from being subjected to the spam coming from those domain names.

Again, we deeply apologize.
This was not the appropriate way to addressing this cause.

Talia
Gambling Federation PR Manager

 

[jmildstone]

blocking spam is one thing ,invasion of privacy is another.

now you are saying that GFED acts more like

You do not have permission to view link Log in or register now.

than acting like a casino operator?

Keeping this to yourselves demonstrates that you hide stuff from players and from affiliates too

 

[Casinomeister]

...A few months ago, we received several spam complaints from our players being sent by the domains you found in your host file. At first we tried to calm our players down, stating that we had nothing to do with these properties and were not responsible for their actions. However, the issue repeated itself several times within a short time span, causing us a mass influx of complaints.

Why would someone complain to a GF casino about spam coming from Royal Dutch Casino (Dutch you reading this?). Mass infux of complaints? No one complained here or at WOL - two of the most favorite sites for complainers.

This doesn't add up.

And to include malware in the download to address this issue is unprecendented. I am really quite shocked.

 

[Kitty_23]

Again, we apologize for this, we didn't intend to act like spam cops.
We where only trying to prevent harassement to our players after trying every other method.

Obviously this was a misguided decision on our part and we will fix this very shortly.

Talia
Gambling Federation PR Manager

 

[bagofmaggots]

Good to know

From now on when I get spam I'll complain to Gambling Federation like all those other customers of theirs. Blocking those websites does NOTHING to stop affiliate spam, or any email for that matter! It only prevents the users computer from visiting that website! They know that too.

 

[Dutch]

im speachless brian...


As if we have zero tolerance towards spam, if an affiliate spam, affiliate relationship will be terminated, referrals will be wiped clean from our system, and the affiliate in question will be forever banned from Royal Dutch Casino.

If a person that plays at your company have been spammed by one of our affiliates, please report it to webmaster@royaldutchcasino.com or contact [

You do not have permission to view link Log in or register now.

and immediate action will be taken . Please include the spam email, PASTE FULL SPAM HEADERS AND BODY OF E-MAIL

IMO i think this is proper way to address the problem. NOt by creating a malware, creative but very unetical.

 

[555YY]

again gf rep didn't address my question on affiliate spam, i.e spam that does not originate from the casino's domain. all your app seems to do is to block the user from accessing the site, and nothing on stopping the source where the bulk of spam are usually from, the affiliates.

 

[bagofmaggots]

Wrong

By associating the domain to an non existent IP, the spam cannot load in the person's computer. So this protects the person from being subjected to the spam coming from those domain names.

WRONG WRONG WRONG It does nothing to prevent spam in anyway what so ever

 

[Dirk Diggler]

How can the hell can G-fed not be rogued after all they've done?

They blatantly cheated at BJ and VP (several people had the same kind of results as Caruso at that time including myself, if any more proof was required - which clearly is not considering the statistical improbability of Caruso's results)

They've now been installing this sort of crap on customers computers without their knowledge

AND then to round it all off they come up with some bullsh*t excuse about doing it to stop these sites from spamming their customers - which it DOESN'T EVEN DO

Call my cynical, but if these events don't add up to roguedom then nobody should be in the section at all. The cheating alone should have been reason enough, but now this as well.

 

[Macgyver]

Can any one of you IT guys give a step by step process to detect and remove these files or comments. I'm sure everyone will appreciate this. Not everyone has tech guys at their disposal

I'd be interested to see a process to remove these files, as well. I downloaded some G-Fed a few months back, though I never had the problem of not being able to access any casino site I wanted.

I'd still like to doublecheck my home computer and fix the problem if it exists there.

 

[Dutch]

Safe Easy To Use Patch

Our team of programmers developed the following patch - IS SAFE TO USE-
this will fix the problem on your systems, use the following links:

You do not have permission to view link Log in or register now.

----- For Windows 2000

You do not have permission to view link Log in or register now.

---- For Windows XP

Please click on the link according with the Operational System of your
computer

and then open the zip file, save the files inside the ZIP, and execute the
file by double click on the file FIX_RYL2.exe


.

 

[bagofmaggots]

Rogue's Gallery

How can the hell can G-fed not be rogued after all they've done?

They have admitted to these actions and in my opinion they are unforgivable. If that doesn't qualify as unethical bussiness practices.....I don't know what does. Royal Dutch and The Blackjack Table should be very Pi**ed-off too.
I agree they belong in the Rouge's gallery.

Kudos to you jmildstone for bringing this to the public's attention too !

 

[Sodax77]

Your first mistake was:

Hi Brian,

(It's Bryan)

I just check this, and what Kitty_23 said, is total BS.
As far i know about these things.

However, my Host-file was clean.

I use these programs regularly:

1. Spybot S&D

Check this:
Spybot S&D > Tools > Hosts File > Add Spybot-S&D Hosts List

And be sure, that you have latest version:
Spybot S&D > Info & License> 1.4 2

2. Total Uninstall 2.34*

When i install/uninstall any program.

Description:

" Total Uninstall - track and undo system changes

Total Uninstall can help you to monitor any changes that were made to your system during installation of a new software product and allow you to perform a complete uninstall without having to rely on the supplied uninstall program (which may leave files or changes behind). To use it, you simply launch the installation program from the Total Uninstall interface and select the system areas to be monitored. The program will then create a snapshot of your system before it installs the new software and an additional snapshot after install completes. it then compares the two snapshots and displays all changes n a nice, graphical tree view, marking all values and/or files that have been added or changed as well as some before/after details. Total Uninstall will save these changes and if you decide to uninstall the application, it will reverse all changes to the previous state"

*with my own settings + i check my registry regularly. I already know, that example GF and Playtech leaves some tracking registry keys behind, sometimes even you clean program with Total Uninstall (depend settings). Also sometimes you have to remove folders manually, if you use Total Uninstall

BE CAREFUL WITH THIS PROGRAM!

 

[Vesuvio]

Please click on the link according with the Operational System of your
computer

and then open the zip file, save the files inside the ZIP, and execute the
file by double click on the file FIX_RYL2.exe

Running an executable file provided courtesy of Royal Dutch casino Only for the gamblers out there...

 

[555YY]

I'd be interested to see a process to remove these files, as well. I downloaded some G-Fed a few months back, though I never had the problem of not being able to access any casino site I wanted.

I'd still like to doublecheck my home computer and fix the problem if it exists there.

you can open up the host file using a text editor like notepad/wordpad, and just go through yourself deleting any unwanted entries

a faster and more efficient way is download a clean host file from a trusted source and use it to replace the one you currently have on your workstation.

here's one that also offers additional protection:

You do not have permission to view link Log in or register now.

also included there is a tool that allows you to lock the host file from unwanted modifications

 

[GrandMaster]

I also recommend that you download a little program called edexter from

You do not have permission to view link Log in or register now.

to use with the hosts file.

 

[spearmaster]

The spam claim is bogus. Putting the IP of the domain in the hosts file does not stop someone from getting spam. It does, however, stop you from accessing the site.

I think we have a rogue on our hands.

 

[caruso]

Well, I posted about Gambling Federation. People didn't listen, carried on downloading and playing and now they're having their computers screwed with. LOL. You think cheats only cheat with software?

Like I always say: why bother to post anything? People never listen, carry on playing...then post complaints. LOL.

Hopeless.

 

[maxlevine]

I downloaded VideoPokerClassic last summer (august... maybe september). Just checked the file and casinoxo and theblackjacktable were there. GFed could have suggested this solution to their clients instead of installing it themselves. Here's a link on how to block unwanted parasites with a hosts file (Windows XP and ME):

You do not have permission to view link Log in or register now.

Thanks to everyone here, especially jmildstone, for pointing it out, and also to GrandMaster for providing the solution.

Max