"Trojan web tracker spy software in computer game Dope Wars! Caution "

Trojan Web Tracker/Spy Software
In Computer Game Dope Wars!

The Company that makes Dope Wars tried to get me to pull this page! & I told them that I would gladly pull this page, When they pulled the Trojan web tracker out of their game! Until that happens? This page stays! This was about 5 years ago, Since then I have not heard even 1 peep from them. Chris.

A little while ago, I read about many activists playing a shareware game called Dope Wars. I, too, downloaded and installed it. Then, to my horror, my security software started reporting that a trojan was trying to transmit sensitive data about my system to a third party.

I started digging in to the problem.

Here's what I discovered.

On installing Dope Wars shareware, a piece of garbage Trojan virus program is installed called CyDoor. It is a separate, always-loading component that digs itself into your Windows Registry (so as to load always on start-up) and refuses to uninstall. It connects to the Internet and downloads ads, transferring data (including a GUID unique to your computer) whether the associated app is running or not. As with another
Trojan virus called TSADBOT, running the installer immediately infects you with the CyDoor trojan, even if the associated application is never installed.

On investigating CyDoor activities on my system, I discovered that, even without DopeWars running it was snooping my browser history and cache files, digging in to my computer's registry, and transmitting this information back to CyDoor. It was trying to bypass my security system by illegally using a backdoor it had installed on my system, leaving high ports vulnerable to hack attack, and it was redirecting several network ports directly to CyDoor.

To me, the most disturbing aspect of this program is what it was doing with my browser history. So not only is it a Trojan Horse, it is also gathering marketing data on you while you work! This program is a clear and present danger to the privacy of any user.

If anyone is using Dope Wars and wants to confirm that CyDoor Trojan Virus has been installed on their system, look for the following files, usually in the C:\Windows\system
directory:

CD_CLINT.DLL
CD_GIF.DLL
CD_SWF.DLL
CD_LOAD.EXE

If you wish to disable CyDoor Trojan Virus, remove these files (if it will let you!). Unfortunately, this means that Dope Wars won't run, as the CyDoor Trojan is made integral to running it. Here's more complete instructions:

1.Delete the following files (usually found in C:\WINDOWS\SYSTEM\):

CD_CLINT.DLL
CD_GIF.DLL
CD_SWF.DLL
CD_LOAD.EXE

2.Delete the ADCACHE folder and its contents
(usually found under C:\WINDOWS\SYSTEM\).

3.Remove Cydoor and Cydoor Services from the Windows Registry. The
following Cydoor keys were added in my Windows 98 Registry and are shown
for reference only:

HKEY_CURRENT_USER\Software\Cydoor\
HKEY_CURRENT_USER\Software\Cydoor Services\
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\
CurrentVersion\Run\Cydoor=CD_Load.exe

If this seems a bit much to do, there is a software tool that will remove the CyDoor Trojan Virus. Lavasoft Ad-Aware software can be found at http://lavasoft.de/aaw/index.html.

If you want to use Dope Wars, and take a chance on leaving the CyDoor trojan virus on your 'puter, this program claims it can spoof a connection to the CyDoor Servers http://noads.hypermart.net/

Personally, until Dope Wars takes the CyDoor trojan virus out of it's software, I'll not be using it, and I recommend that you do the same.

OLP Newsletter

BOYCOTT PAYPAL!