Golden Palace Casino

jpm

Dormant account
Joined
Mar 29, 2002
That's good news, you may also want to give AdAware a try. You can get that one at www.lavasoft.de There may be more things lurking that spybot didn't catch. As I said, I use 3 of these programs together on my computer to keep it as clean as possible.

FYI, I too have this 'casino' folder and it was also identified by spybot with the same description if gave you. I, however, have never downloaded GP. I believe that since this is such a generic folder name that it may be giving you a 'false positive'.
 

Casinomeister

Forum Cheermeister
Staff member
Joined
Jun 30, 1998
Location
Bierland
Black21Jack said:
...it kept returning and it seemed empty when I opened it. I again deleted it manually yesterday and today Spybot found it again. This is the info Spybot gave me on this folder:

Company - N/A
Product - Casino
Threat - Dialer
Description -
Dialer offering casino access, violating German law by not telling it will close connection and open it's own. Secretly installs additional code.

So now I have my proof. It says company unknown but obviously it was Golden Palace because this "casino" folder was the one that contained the GP software folder. I guess I can't really do anything about it except e-mail them and give them a piece of my mind ( a lot of good that will do), and inform everyone online about these shenanigans. If anyone else has GP installed go into the c:\ drive and see if the GP software is housed in this "casino" folder. Then download that awesome spybot software and run a test. I would be curious to see what happens.

Peace.
This is really strange, but I don't think it's Golden Palace; it may have something to do with the link you signed up through.

I've downloaded GP straight from their website, opened an account, then unintalled (with no problem). Then I ran Ad-aware 5.62 - deleted all of the cookies and sextracker files that it found :D, then reinstalled GP.

I then uninstalled GP again, and ran Ad-aware - nothing. So this may have something to do with an affiliate spiking the download file somehow. Do you remember where you downloaded this from?
 

GrandMaster

Ueber Meister
CAG
Joined
Jan 21, 2004
Location
UK
Black21Jack said:
I have never played Golden Palace for money and cashed out however I did have a strange experience with their software. I downloaded it and installed it on my computer and played for fun for a while but decided I wanted to uninstall it. When I initiated the uninstall the screen popped up and said "if you would like to uninstall Golden Palace click continue otherwise click cancel" however the only button available to click was cancel so I went into my c:/ folder and manually got rid of it. About an hour later I heard the lobby music playing from my computer, came up and saw Golden Palace had reinstalled itself and was running. Now when I shut my computer down the software somehow made it so that Golden Palace would run on startup and ask me if I wanted to make a deposit. My homepage on my IE mysteriously got set to the Golden Palace website and would go straight there everytime I started IE. So I removed it again, it has not reinstalled yet but every second day I get a popup on my computer screen that says "It has been detected that Golden Palace has been removed from your computer. Would you like to download and install Golden Palace? Yes No" Has anyone had this happen and if so is there some kind of file they may have hidden somewhere on my drive that I can erase and keep this from happening?

Thanks
You need to find out what reinstalls it. Get RegCleanr or another registry editor or cleaner which can show you all the programs that start automatically. If you are adventurous you can use the built-in "regedit" command, and search for keys containing "run", but make sure you know what you are doing because you can permanently damage your computer if you mess it up.

You should also search for all occurrences of GoldenPalace in the registry (the IE startpage will be there, too) and get rid of them.

Others have commented on Spybot S&D picking something up. In my experience anti-spyware programs are not very reliable in the area of casino software. I had something that identified various Microgaming casino files as Golden Tiger casino (which I didn't have), some others as Casino-on-Net (which I didn't have either). Ad-aware and Spybot S&D don't pick up anything on my computer, maybe I have taught them that my casino programs are OK.
 

jetset

RIP Brian
CAG
Joined
Feb 22, 2001
Location
Earth
Thanks for keeping us in the loop, Black21Jack - this is certainly very interesting, and who knows how many other folks might have been affected.

If you can't recall where you aquired that GP link (ie the affiliate theory) perhaps the best approach is to approach GP direct, courteously inform them of your discovery and ask them what they know about it, and how you remove it.

I have a feeling others will be doing the same thing in the near future, which might get their attention before this starts getting major publicity...

Edit: Typos.
 

Black21Jack

Dormant account
Joined
Mar 1, 2004
Location
Toronto, Ontario, Canada
jetset said:
Thanks for keeping us in the loop, Black21Jack - this is certainly very interesting, and who knows how many other folks might have been affected.

If you can't recall where you aquired that GP link (ie the affiliate theory) perhaps the best approach is to approach GP direct, courteously inform them of your discovery and ask them what they know about it, and how you remove it.

I have a feeling others will be doing the same thing in the near future, which might get their attention before this starts getting major publicity...

Edit: Typos.
I don't remember where I downloaded it from but usually when I hear about a casino I just type the url direct like www.goldenpalace.com, I don't think I used an affiliate link but I may be wrong. I have e-mailed GP and I was polite in asking what is going on. I have a strong feeling that they will not answer my e-mails, you know how it is. These casinos love e-mail correspondence they can just ignore them all they want and they don't have to talk to anyone. Anyways I will keep you all posted as soon as I hear. I have removed all the jusnk off of my computer with spybot including that mysterious casino folder. I am now going to goldenpalace.com to download their software again and run some tests. I will let you all know.

Peace.
 

jetset

RIP Brian
CAG
Joined
Feb 22, 2001
Location
Earth
Great. I, too have emailed GP asking about this and what they have to say. It will be interesting to see if they give the business courtesy of a response.
 

jpm

Dormant account
Joined
Mar 29, 2002
I bet you're right though, it sounds like a scumbag affiliate planted that to ensure he'd get the credit for you signing up.
 

jpm

Dormant account
Joined
Mar 29, 2002
I've got a ton of playtechs installed on my machine, but never downloaded GP, and I've not had any of these issues sorrelltop. It sounds like its more than likely GP specific.
 

Sodax77

Dormant account
Joined
Apr 15, 2004
Location
EU|FI
Every playtech

I continue my text here, i start this playtech spyware-case from Hodgepodge, then i post information/help/etc to WOL
You do not have permission to view link Log in or register now.
(post #17), and finally something new to here.
Yeasterday i download Kiwi Casino from "Reputable Casinos" section. Install it, and run my Ad-Aware (latest updates, latest database), and Ad-Aware found 3 x "golden palace" xxxxware from my computer. I use Ad-aware and Spybot - Search & Destroy a lot, and my computer was clean before that. So i remove these xxxxwares, and i think this is that new variant. Because after cleaning, Kiwi Casino do same thing like any playtech nowdays (after cleaning these xxxxwares): It's starting to download updates. So i write nice letter to Kiwi Casino, and ask about my privacy etc. I hope they answer. And again, if this "golden palace" xxxxware is harmless, why they (Playtech) don't tell that? Why they don't contact for example Ad-Aware, SB-S&D or tell somewhere what this xxxxware collect or doing?
(xxxxware = spyware, malware, thiefware or something)

And Hi Casinomeister and Vortran007 ;), i finally open my mouth here, after 2 years reading your site. Thanks
:thumbsup:
 
Last edited:

jetset

RIP Brian
CAG
Joined
Feb 22, 2001
Location
Earth
From Casinomeister News a few weeks back:

GOLDEN PALACE TWILIGHT ZONE

This goes beyond guerrilla marketing...

Golden Palace Casino marketers have achieved some notoriety for their guerrilla marketing tactics involving strippers 'n streakers at international sporting events, but if recent reports are true, their alleged technical marketing practices are going too far.

One player thought he had entered the Twilight Zone after he downloaded and installed the GP software and messed around in Freeplay mode, then changed his mind and decided to uninstall the program from his computer....

But let him tell his own story:

"When I initiated the uninstall the screen popped up and said '...if you would like to uninstall Golden Palace click continue otherwise click cancel.' However the only button available to click was cancel so I went into my c:/ folder and manually got rid of it.

"About an hour later I heard the GP lobby music playing from my computer, came up and saw Golden Palace had reinstalled itself and was running. Now when I shut my computer down the software somehow made it so that Golden Palace would run on startup and ask me if I wanted to make a deposit.

"My homepage on my IE mysteriously got set to the Golden Palace website and would go straight there everytime I started IE.

"So I removed it again, it has not reinstalled yet but every second day I get a popup on my computer screen that says "It has been detected that Golden Palace has been removed from your computer. Would you like to download and install Golden Palace? Yes / No"

As we went to press various solutions aimed at making GP disappear permanently were being attempted by the player, but results were not to hand although it is known that Spybot and AdAware were being tried.

If this is a deliberate marketing ploy on the part of Golden Palace, or for that matter its software provider Playtech then it is not only an unsolicited invasion of privacy, but is in very poor taste to boot.

We twice asked Golden Palace to comment on this story but, as at going to press no response had been received.
 

jpm

Dormant account
Joined
Mar 29, 2002
After reading this latest post, and since I already have Kiwi on my machine, I decided to run spybot again and see if it found anything like was mentioned. It didn't. I've played at kiwi as recently as last week, so everything is up to date on the s/w side as is spybot. I'm not sure why you're seeing something on your machine now.
 

Sodax77

Dormant account
Joined
Apr 15, 2004
Location
EU|FI
Same result:
Spybot S&D = 0
But:
Ad-Aware 2-3
(update both)
You do not have permission to view link Log in or register now.
latest version .And after Ad-Aware installation, go to settings and select all (Scan within arhives to Scan my hosts file, Skip-things can not changes)
Then "Click here to select drivers + folders" (middle), and select drives and folders that you use (C, D,...). Always "Proceed". And Before scanning, select: "Use custom scanning options". And scan. If nothing found, gongrats.
Remember repeat scanning after few reboot.
 
Last edited:

Sodax77

Dormant account
Joined
Apr 15, 2004
Location
EU|FI
Sodax77 said:
.... So i write nice letter to Kiwi Casino, and ask about my privacy etc. I hope they answer....
Yep. No answer after 3 days (14th april). Only auto-replies, that they answer soon (i sent again same message). I think this is NOT good customer service. And yes, i know that sometimes e-mail go to spam-folder, and i use that "trusted list" in hotmail, and i get answer from EVERY casino, EVERYTIME in 10 min to 2 days. But from Kiwi, i only get "automatic"-letters. :confused:

I don't have any problem with other Casinomeisters Reputable Casinos, EVER.
But maybe they don't like (in Kiwi Casino) my question about my privacy vs. this weird "golden palace"-xxxxware.
:(

Note/Edit: I already uninstall Kiwi Casino, and if i am wrong about this xxxxware, they can answer me, and correct my misunderstanding. But like i say, and read (wol, here, some ezboards, etc, etc, etc [use google with: golden palace spyware or golden palace malware]), every Playtech keep this xxxxware. They can answer, that they don't know or whatever?!
 
Last edited:

case

Dormant account
Joined
May 16, 2003
I downloaded, installed, and ran spybot-S&D (v1.2) and ad-aware (v6.181).

Spy-bot found some registry entries, but none that looked specifically related to my casinos, though it's hard to tell whether a random string of letters and numbers is related to anything.

I ran Ad-aware afterwards. It found several tracking cookies of the form name@banner.<foo>[1].txt, where name is my name and <foo> is variously clubdicecasino, goldenpalace, kiwicasino, pacificpoker, casinopays, luckynuggetpoker, and luckynugget.

Ad-aware also found three files of category Misc, all named replacer.exe. One was in \casino\city club casino, one was in my carnival casino directory, and one was in my usa casino directory. All are listed as coming from Vendor Golden Palace Casino. They were all "possibly installed by JRaun." I'd like to have a word with this individual, if he or she has in fact been installing software on my machine. I prefer to take care of that myself :)

Both Kiwi and City Club are installed in \casino. All other casinos are installed in a different directory.

I do have USA, City Club, Kiwi, Pacific Poker, and Lucky Nugget installed. I have never downloaded or installed Golden Palace

All items found have been quarantined and removed. Now all that remains to be seen is whether removing them will cause me to cease to exist.

If that happens, well, it's been real, folks. ;)
 

lanidar

Dormant account
Joined
Sep 5, 2003
Location
Avenel, New Jersey
case said:
I downloaded, installed, and ran spybot-S&D (v1.2) and ad-aware (v6.181).

Spy-bot found some registry entries, but none that looked specifically related to my casinos, though it's hard to tell whether a random string of letters and numbers is related to anything.

I ran Ad-aware afterwards. It found several tracking cookies of the form name@banner.<foo>[1].txt, where name is my name and <foo> is variously clubdicecasino, goldenpalace, kiwicasino, pacificpoker, casinopays, luckynuggetpoker, and luckynugget.

Ad-aware also found three files of category Misc, all named replacer.exe. One was in \casino\city club casino, one was in my carnival casino directory, and one was in my usa casino directory. All are listed as coming from Vendor Golden Palace Casino. They were all "possibly installed by JRaun." I'd like to have a word with this individual, if he or she has in fact been installing software on my machine. I prefer to take care of that myself :)

Both Kiwi and City Club are installed in \casino. All other casinos are installed in a different directory.

I do have USA, City Club, Kiwi, Pacific Poker, and Lucky Nugget installed. I have never downloaded or installed Golden Palace

All items found have been quarantined and removed. Now all that remains to be seen is whether removing them will cause me to cease to exist.

If that happens, well, it's been real, folks. ;)
I just finished running Ad Aware.
Now I REALLY don't know much about this at all.
I do know that it found 73 files that I was told to delete. So, naturally, I did.
I also have McAfee.
McAfee found 2 infected files and many potentially infectious files. I have about 42 thousand files. I ran McAfee THREE times and each time when it got close to finishing the scan, my compuer would reboot by itself. So, the files were never deleted.

The question I have is ...is there a difference between AdAware and McAfee?
Do they serve the same purpose or are they serve two entirely diffenent purposes?


Also, tomorrow I'm phoning McAfee to find out why I can't complete a scan and how do I get rid of the virus that was found.
 

case

Dormant account
Joined
May 16, 2003
Viruses are programs that replicate themselves. They frequently have negative side effects (ranging from the relatively minor to the disastrous). They typically attach themselves to other programs and attempt to email themselves to other people (thus the self-replication).

McAfee checks your files and processes for viruses.

Ad-aware searches your computer for files and/or programs that attempt to track your web-surfing activities. For example, the program or file might cause pop-up ads to appear when you surf a particular site, or it might simply allow the site to record more information about you than you might like.

These descriptions are not quite complete, but should serve to give you the basic idea.

YMMV. Hot filling may be hot. Do not stop chainsaw blade with hands. Allow contents to cool before applying to groin area. Other disclaimers may also apply.
 

lanidar

Dormant account
Joined
Sep 5, 2003
Location
Avenel, New Jersey
case said:
Viruses are programs that replicate themselves. They frequently have negative side effects (ranging from the relatively minor to the disastrous). They typically attach themselves to other programs and attempt to email themselves to other people (thus the self-replication).

McAfee checks your files and processes for viruses.

Ad-aware searches your computer for files and/or programs that attempt to track your web-surfing activities. For example, the program or file might cause pop-up ads to appear when you surf a particular site, or it might simply allow the site to record more information about you than you might like.

These descriptions are not quite complete, but should serve to give you the basic idea.

YMMV. Hot filling may be hot. Do not stop chainsaw blade with hands. Allow contents to cool before applying to groin area. Other disclaimers may also apply.
Thank You... :notworthy
I'm going to phone McAfee this morning.
 

Black21Jack

Dormant account
Joined
Mar 1, 2004
Location
Toronto, Ontario, Canada
jetset said:
From Casinomeister News a few weeks back:

GOLDEN PALACE TWILIGHT ZONE

This goes beyond guerrilla marketing...

Golden Palace Casino marketers have achieved some notoriety for their guerrilla marketing tactics involving strippers 'n streakers at international sporting events, but if recent reports are true, their alleged technical marketing practices are going too far.

One player thought he had entered the Twilight Zone after he downloaded and installed the GP software and messed around in Freeplay mode, then changed his mind and decided to uninstall the program from his computer....

But let him tell his own story:

"When I initiated the uninstall the screen popped up and said '...if you would like to uninstall Golden Palace click continue otherwise click cancel.' However the only button available to click was cancel so I went into my c:/ folder and manually got rid of it.

"About an hour later I heard the GP lobby music playing from my computer, came up and saw Golden Palace had reinstalled itself and was running. Now when I shut my computer down the software somehow made it so that Golden Palace would run on startup and ask me if I wanted to make a deposit.

"My homepage on my IE mysteriously got set to the Golden Palace website and would go straight there everytime I started IE.

"So I removed it again, it has not reinstalled yet but every second day I get a popup on my computer screen that says "It has been detected that Golden Palace has been removed from your computer. Would you like to download and install Golden Palace? Yes / No"

As we went to press various solutions aimed at making GP disappear permanently were being attempted by the player, but results were not to hand although it is known that Spybot and AdAware were being tried.

If this is a deliberate marketing ploy on the part of Golden Palace, or for that matter its software provider Playtech then it is not only an unsolicited invasion of privacy, but is in very poor taste to boot.

We twice asked Golden Palace to comment on this story but, as at going to press no response had been received.
This item was regarding my experience with Golden Palace. I did run SpyBot and Spyware blaster and removed everything as well as immunized my system. I see differing stories of some people having this strange software on their computers from Golden Palace and some say they install GP, run the Spy software and find nothing. I can only think of two reasons why this might be 1. an affiliate link is responsible (I must add that the strange occurence I had was from a direct download link from Goldenpalace.com, not an affiliate) 2. GP does this randomly, and not on every download
In either case I find it very disturbing as I do lots of web banking and transactions on my computer. If they can put this kind of thing on my computer, I wonder what they can be viewing.
 

Sodax77

Dormant account
Joined
Apr 15, 2004
Location
EU|FI
Black21Jack said:
...I see differing stories of some people having this strange software on their computers from Golden Palace and some say they install GP, run the Spy software and find nothing....
I found this xxxxware with Ad-aware (and i use settings, what i explain in post #33). Spybot S&D found nothing. (and i use also Spybot S&D immune, Spyware Blaster)

never have GP

sorry that "xxxxware", no good information, what is it.
 
Last edited:

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

Top