GoDOTless.SecureServicePack Spyware Profile
Title: GoDOTless.SecureServicePack
Also Known as: SecureServicePack, Adware-SecSvcPack
Severity scale:
GoDOTless.SecureServicePack is a spyware program created by the spyware company called GoDOTless. It was first discovered on January 26 of 2006. It may be transmitted by either a manual installation under false pretenses, or it may be bundled with freeware programs or other spyware. It is a variant of the Surf Speak spyware program.
GoDOTless.SecureServicePack attempts to redirect your browsing activity based on your search engine keyword usage. It uses keyboard logging to collect this information, which it sends to a remote server at http://www.surfspeak.com/plugins.asp. This information is then used to redirect your browser to its affiliate sites.
According to the EULA for GoDOTless.SecureServicePack, they admit that you are downloading spyware. Their legal language is strange. To quote: “enhanced web features and search results in the form of but not limited to pop-up, pop-under or exit-pop HTML pages and I Frames which will appear during your internet session, while browsing the Web.” These “enhanced web features and search results” are advertisements!
If you have this infection, it is in your best interest to remove it immediately. Use a reputable spyware removal tool such as SpyZooka to remove it.
Also Known As:
SecureServicePack, Adware-SecSvcPack,
Unclassified.SecureServicePack.BHO (SuperAdBlocker.com), HJTH.GoDOTLess
Associated Files:
Installer: setup.exe (849 KB, MD5: 802596A8CE461F0488EA3B15D1A40070)
%SystemDir%\SecureServicePack2.dll (113 KB, MD5: 1E2CC343AD482137D69A7692C6074343)
%SystemDir%\sspnetstreamlib.dll (145 KB)
%SystemDir%\sspnetflt.ax (113 KB)
%SystemDir%\sspctrls.ocx (285 KB)
%SystemDir%\ringout.wav (5 KB)
%SystemDir%\ringin.wav (9 KB)
%SystemDir%\i263_32.drv (382 KB)
%ProgramFiles%\secureservicepack\uninstall.exe (34 KB)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
“{DFEFF09F-785E-4191-8E5D-A7650A1C4F9A}”=”IESideBar”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE6A3E85-0F6C-49AD-8843-68FF44E7EEAA}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DFEFF09F-785E-4191-8E5D-A7650A1C4F9A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{DFEFF09F-785E-4191-8E5D-A7650A1C4F9A}
HKEY_CLASSES_ROOT\TypeLib\{90BB6171-83D8-43DE-94D4-6C0078DD7896}
HKEY_CLASSES_ROOT\SecureServicePack.BHO.1
HKEY_CLASSES_ROOT\SecureServicePack.BHO
HKEY_CLASSES_ROOT\Interface\{B5918C1E-B0CD-4123-A0CB-CFE9703A265B}
HKEY_CLASSES_ROOT\CLSID\{FE6A3E85-0F6C-49AD-8843-68FF44E7EEAA}
HKEY_CLASSES_ROOT\CLSID\{DFEFF09F-785E-4191-8E5D-A7650A1C4F9A}
I found this information really interesting. I was infected with this virus and I know how hard it was to get rid of it. I’ll keep on reading these posts.