BF2AMP sticky removed

[Bongwater]

Re: BF2AMP sticky removed

maybe the file was changed to the media gateway one after a few people had already got it.. because it doestn come in a zip .. comes in a exe right now from the download link provided.

[Retribution.]

Re: BF2AMP sticky removed

what the hell is BF2AMP?

[AlphaNut]

Re: BF2AMP sticky removed

maybe the file was changed to the media gateway one after a few people had already got it.. because it doestn come in a zip .. comes in a exe right now from the download link provided.

Ok this post might help clear this issue up. I'll have a look at it tonight when I come home from work. I'll compare the two files.
Would be nice to hear something about this from the author of the program.

[Bongwater]

Re: BF2AMP sticky removed

in game winamp controls

[[GF5]BigCheese]

Re: BF2AMP sticky removed

For me it was a ZIP file with 2 files in it, nothing with any disclaimer in it. You need to double click the launcher before you start BF2 for it to work, and I too got error messages sometimes to do with memory.

[Filch]

Re: BF2AMP sticky removed

Fellas!
The Media Gateway.exe is buried in the executable install file. This is in regards to the exe file located in the link provided from the original thread posted here.

If any of you used a decent Firewall, you'd see that when you went to install the app, a program titled Media Gateway would attempt to connect to an IP address that is a well known ad server IP Address.

http://securityresponse.symantec.com/avcenter/venc/data/adware.mediapass.html

It's ADWARE

[Bongwater]

Re: BF2AMP sticky removed

it seems there were different BF2amp links because some people got a zip some got an EXE.. they both contain the adware

[AlphaNut]

Re: BF2AMP sticky removed

Yes definately two different files we're talking about. No idea if the author thought he should "upgrade" his tool because it seemed to become popular.
I did not get an installer, only a zip file with the injector (BF2Amp.exe and a *.dll file.)
No disclaimer either...
There was no suspicious activity that I was aware of at the time I tested it.
And I do have a firewall - it's a Zywall 5. Would you consider this a decent firewall?

[Bongwater]

Re: BF2AMP sticky removed

so long as it warns u for every incoming out outgoign port connection and allows u to block or accept then it should be good enough.

[Filch]

Re: BF2AMP sticky removed

Care to send me the package you downloaded so I can have a looksee ?

[Clayton Gold]

Re: BF2AMP sticky removed

bf2 amp didn't even have an installer. I didn't notice any media gateway ad server, but where would it be since I dont see it in add/remove programs?

You dont need to install it.

Dont talk **** if you dont know what you're talking about.

[dark-eye]

Re: BF2AMP sticky removed

dude there is no installer, though it says .exe you dont install anything. if theres Adware or anything alike i dont know, i just stopt using it

[AlphaNut]

Re: BF2AMP sticky removed

I also could not find any outgoing connections while running the app.
No visible outgoing connections in netstat.

Filch: I've uploaded the original file - check pm

spaztek: do you have evidence of this integrated adware? What port does it use, and what is the IP address it connects to according to your info?

[Filch]

Re: BF2AMP sticky removed

Well, it does appear we have two different file sets. The one with the adware was an exe installer, with blank license fields, etc, comments in the installer window to the effect of "blah blah blah".

It connects over port 80 to an IP I posted in the original thread, but it has since been deleted and I no longer have that original exe to give you the IP address again. But I do know for a fact that IP was a well known ad server.

As far as the zip files that I downloaded from Alphanut, I detected no outgoing requests and it is not an installer. So it does appear that the file was swapped or we were maliciously linked to an altered setup.

I was by no means speaking directly to you AlphaNut in regards to my posts. My comment about the firewall was not an attack, I was just strictly regarding the link that was posted and those that had ran it had failed to see it.

[AlphaNut]

Re: BF2AMP sticky removed

Puh, *wipes sweat off forehead* was afraid I missed spyware on my PC...
Would be nice to have a statement from the developer though.
He either did it deliberately without letting anyone know, or he was sabotaged. I assume he was the victim of a ruthless sabotage act. But you never know...

I wen't back to Winamp Global Hotkeys... works too.

No worries Filch, I was just being a smartass about the FW - talking out of my butt sometimes. I know you meant it in a decent way :)