Ad-aware 6 False Positive

[Sarge]

As of referencefile 0R148 24.06.2003 Ad-aware 6 Personal incorrectly
identifies the Web browser-cached MyWay logo image as MyWay Speedbar
spyware. This is the offending image:

http://i1img.com/bz/logos/9.gif

Steps to reproduce:

Ensure Web browser is caching images.

Visit http://my.myway.com/

Scan browser cache directory with Ad-aware 6 Personal, referencefile 0R148
24.06.2003 or above.

I reported this to support at Lavasoft, perhaps someone who is registered
to post in their support forum could report this there as well.

[Sarge]

siljaline <siljaline@invalid.com> wrote in
news:vbgkfvoodu1mfllet12ca595um0pev2as4@4ax.com:

> That clicks through to the "i-won" domain - perhaps not a false-flag.

How can a .gif be spyware? And how does iwon.com figure into it? Nowhere on
http://my.myway.com can I find a link, redirect or embedded object pointing
to iwon.com. But that's beside the point anyway -- Ad-aware is flagging the
*image*. There are plenty of ways for scumware authors to screw with you,
but a .gif ain't one of them.

[siljaline]

On 26 Jun 2003 03:03:03 GMT, Sarge <GiveMeTwenty@bootcamp.invalid> wrote:

>How can a .gif be spyware? And how does iwon.com figure into it? Nowhere on
>http://my.myway.com can I find a link, redirect or embedded object pointing
>to iwon.com. But that's beside the point anyway -- Ad-aware is flagging the
>*image*. There are plenty of ways for scumware authors to screw with you,
>but a .gif ain't one of them.

Doing some homework, I'll post back.


--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

[Faded Glory]

"siljaline" <siljaline@invalid.com> wrote in message
news:vbgkfvoodu1mfllet12ca595um0pev2as4@4ax.com...
> On 26 Jun 2003 00:00:52 GMT, Sarge <GiveMeTwenty@bootcamp.invalid> wrote:
>
> >As of referencefile 0R148 24.06.2003 Ad-aware 6 Personal incorrectly
> >identifies the Web browser-cached MyWay logo image as MyWay Speedbar
> >spyware. This is the offending image:
> >
> >http://i1img.com/bz/logos/9.gif
> >
> >Steps to reproduce:
> >
> >Ensure Web browser is caching images.
> >
> >Visit http://my.myway.com/
> >
> >Scan browser cache directory with Ad-aware 6 Personal, referencefile
0R148
> >24.06.2003 or above.
> >
> >I reported this to support at Lavasoft, perhaps someone who is registered
> >to post in their support forum could report this there as well.
>
> That clicks through to the "i-won" domain - perhaps not a false-flag.
>
> Part of my HOSTS block file & Restricted Sites Zone:
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
> # IWON [Restricted Zone site]
> #
> 127.0.0.1 c4.iwon.com
> 127.0.0.1 cc.iwon.com
> 127.0.0.1 efc.iwon.com
> 127.0.0.1 home.iwon.com
> 127.0.0.1 image.i1img.com
> 127.0.0.1 i1img.com
> 127.0.0.1 my.iwon.com
> 127.0.0.1 plus.iwon.com
> 127.0.0.1 prizemachine.games.iwon.com
> 127.0.0.1 search.iwon.com
> 127.0.0.1 searchassistant.iwon.com
> 127.0.0.1 www1.iwon.com
> 127.0.0.1 image.imgfarm.com
> 127.0.0.1 imgfarm.com
> 127.0.0.1 c4.mysearch.com
> 127.0.0.1 www.mysearch. com
> 127.0.0.1 help.mysearch.com
> 127.0.0.1 myway.com
> 127.0.0.1 www.myway. com
> 127.0.0.1 bfc.myway.com
> 127.0.0.1 c4.myway.com
> 127.0.0.1 gk.myway.com
> 127.0.0.1 gs.myway.com
> 127.0.0.1 my.myway.com
> 127.0.0.1 mysearch.myway.com
> 127.0.0.1 search.myway.com
> 127.0.0.1 speedbar.myway.com
> 127.0.0.1 www1.myway.com
>
>
>
> --
> siljaline
>
> "Arguing with anonymous strangers on the Internet is a sucker's game
> because they almost always turn out to be -- or to be indistinguishable
from
> -- self-righteous sixteen-year-olds possessing infinite amounts of free
time."
> - Neil Stephenson, _Cryptonomicon_

They are blocked in my host file as well.. I don't believe this is a "false
Positive"

[Sarge]

Lance Delacroix <lance_delacroix@fastmail.fm> wrote in
news:9e2lfvo5chh6g0r3lp8vvm6ofia4p6mk90@4ax.com:

> AdAware claims to detect, among other components, "aggressive
> advertising". Better too much than too little, in my humble ****ing
> opinion.
>

You can't be serious. It's a 223 x 58 *.gif*, weighing in at a whopping
5.3K. And it's not even an ad, it's the logo for the site. And Ad-aware
incorrectly flags it as the "My-Way Speedbar" which is, according to their
description:

"IE toolbar, homepage and search hijacker, targeted at mysearch.com. Also
known as MySearch variant."

The Speedbar may be spyware, but the image sitting in my brower cache isn't
the Speedbar, and it sure as hell isn't spyware.

[Sarge]

Lance Delacroix <lance_delacroix@fastmail.fm> wrote in
news:8ihlfv481neudht6r5r0121u4ep7hu4oh6@4ax.com:

> No go take a couple of Valium.
>

Ad hominem attacks are the last refuge of those defending an untenable
position.

[Lance Delacroix]

On 27 Jun 2003 04:02:50 GMT, Sarge <GiveMeTwenty@bootcamp.invalid>
prounounced a fatwah thus:

>Lance Delacroix <lance_delacroix@fastmail.fm> wrote in
>news:8ihlfv481neudht6r5r0121u4ep7hu4oh6@4ax.com :
>
>> No go take a couple of Valium.
>>
>
>Ad hominem attacks are the last refuge of those defending an untenable
>position.

Ad hominem attacks? That was a prescription. I'm trying to help.

[BillW]

Besides if he wants it in his cache he can just tell AdAware to ignore it,
no big deal other than trying to show off his ego.....


"Faded Glory" <fadedglory@despammed.com> wrote in message
news:MrvKa.19453$QC5.11650@fe02.atl2.webusenet.com ...
>
> "siljaline" <siljaline@invalid.com> wrote in message
> news:vbgkfvoodu1mfllet12ca595um0pev2as4@4ax.com...
> > On 26 Jun 2003 00:00:52 GMT, Sarge <GiveMeTwenty@bootcamp.invalid>
wrote:
> >
> > >As of referencefile 0R148 24.06.2003 Ad-aware 6 Personal incorrectly
> > >identifies the Web browser-cached MyWay logo image as MyWay Speedbar
> > >spyware. This is the offending image:
> > >
> > >http://i1img.com/bz/logos/9.gif
> > >
> > >Steps to reproduce:
> > >
> > >Ensure Web browser is caching images.
> > >
> > >Visit http://my.myway.com/
> > >
> > >Scan browser cache directory with Ad-aware 6 Personal, referencefile
> 0R148
> > >24.06.2003 or above.
> > >
> > >I reported this to support at Lavasoft, perhaps someone who is
registered
> > >to post in their support forum could report this there as well.
> >
> > That clicks through to the "i-won" domain - perhaps not a false-flag.
> >
> > Part of my HOSTS block file & Restricted Sites Zone:
> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> >
> > # IWON [Restricted Zone site]
> > #
> > 127.0.0.1 c4.iwon.com
> > 127.0.0.1 cc.iwon.com
> > 127.0.0.1 efc.iwon.com
> > 127.0.0.1 home.iwon.com
> > 127.0.0.1 image.i1img.com
> > 127.0.0.1 i1img.com
> > 127.0.0.1 my.iwon.com
> > 127.0.0.1 plus.iwon.com
> > 127.0.0.1 prizemachine.games.iwon.com
> > 127.0.0.1 search.iwon.com
> > 127.0.0.1 searchassistant.iwon.com
> > 127.0.0.1 www1.iwon.com
> > 127.0.0.1 image.imgfarm.com
> > 127.0.0.1 imgfarm.com
> > 127.0.0.1 c4.mysearch.com
> > 127.0.0.1 www.mysearch. com
> > 127.0.0.1 help.mysearch.com
> > 127.0.0.1 myway.com
> > 127.0.0.1 www.myway. com
> > 127.0.0.1 bfc.myway.com
> > 127.0.0.1 c4.myway.com
> > 127.0.0.1 gk.myway.com
> > 127.0.0.1 gs.myway.com
> > 127.0.0.1 my.myway.com
> > 127.0.0.1 mysearch.myway.com
> > 127.0.0.1 search.myway.com
> > 127.0.0.1 speedbar.myway.com
> > 127.0.0.1 www1.myway.com
> >
> >
> >
> > --
> > siljaline
> >
> > "Arguing with anonymous strangers on the Internet is a sucker's game
> > because they almost always turn out to be -- or to be indistinguishable
> from
> > -- self-righteous sixteen-year-olds possessing infinite amounts of free
> time."
> > - Neil Stephenson, _Cryptonomicon_
>
> They are blocked in my host file as well.. I don't believe this is a
"false
> Positive"
>
>
>
>

[Sarge]

"BillW" <TheCrow@nesting.com> wrote in
news:ZOXKa.2559$Vx2.1399233@newssvr28.news.prodigy .com:

> Besides if he wants it in his cache he can just tell AdAware to ignore
> it, no big deal other than trying to show off his ego.....
>

Look sport, Ad-aware is a popular program among the posters in this group.
I discovered and reported a flaw introduced in a recent referencefile
update. I could have just notified the developers and left it at that, but
I brought it to the attention of the user community for *your* benefit. If
you're blithely unconcerned about the accuracy of the product you're more
than welcome to take a seat at the back of the class and play quietly with
your marbles.

[Sarge]

Lance Delacroix <lance_delacroix@fastmail.fm> wrote in
news:edaqfvk4j0se2rg51k6rk6s1561hkgiqo9@4ax.com:

> Ad hominem attacks are the last refuge of those defending an untenable
> position, sport.
>

Great! You've mastered the fine art of copy and paste. Such a momentous
accomplishment merits the awarding of the much coveted gold star and the
privilege of cleaning the erasers after class. Now, for extra credit try to
add something of substance to the discussion.