US attorney general sues vendor for spyware

05.04.2006

The lawsuit follows an extensive investigation that documented Direct Revenue's practice of installing advertising software on computers without proper notice, Spitzer said. In many cases, the installations were instigated when Direct Revenue or one of its distributors advertised 'free' applications such as games or browser 'enhancement' software, omitting reference to the spyware that would accompany any downloaded application, Spitzer said. Once users downloaded the applications, surreptitious code was placed on their computers by Direct Revenue's own servers, according to Spitzer.

His office also recorded several instances in which Direct Revenue's spyware was installed through silent 'drive-by-downloads,' -- downloads that took place without any notice to consumers from 21 separate Web sites through a practice known as 'bundling." Among the names of the programs that Direct Revenue downloaded this way are 'VX2,' 'Aurora,' and 'OfferOptimizer,' each of which tracks consumers' behaviors on the Web and then delivers sequential pop-up ads to them, Spitzer's office said.

The investigation revealed that Direct Revenue deliberately designed spyware that, once downloaded, was extremely difficult to detect and remove. In many cases, it reinstalled itself after being removed by users.

The suit specifically targets the company's founders and chief officers Joshua Abram, Alan Murray, Daniel Kaufman and Rodney Hook, who have owned a majority of the company's stock since its inception. Numerous e-mails submitted with the lawsuit document their knowledge of and participation in the underlying fraudulent practices, according to the statement.

'The government has been getting quite a bit more active, primarily because this stuff is having such a drag on networks and productivity,' said Rob Enderle, principal analyst at The Enderle Group in San Jose. 'It is reaching a point where there is no reasonable tool that can defend against this stuff; the volume is too overwhelming. Soon we will need a way to reinstall the OS more frequently to get rid of all the malware. So I do expect to see much more of these lawsuits going forward.'