Class action lawsuit against Winfixer

This is one to watch.

Beatrice Ochoa launched a class against lawsuit against "Winfixer" (or more specifically, those behind it) back in September 2006 in the Superior Court of California, County of Santa Clara.

You can check on the latest status of the lawsuit by going to the Public Access Case Information Site and then conducting a search for case number 106CV072057.

There is a Web site devoted to the lawsuit here - sadly, it is has just one entry:
http://fixwinfixer.wordpress.com/

A copy of the originating Summons can be seen here:
http://fixwinfixer.files.wordpress.com/2006/10/summons-complaint-notice.pdf

Interestingly, the Web site cited in the Complaint, which I assume is www.vipfares.com, resolves to localhost (127.0.0.1), just like www.winfixer.com, and immediately piqued my interest because of that (hey, what can I say, I'm easily amused Wink)

Let's check out a DNS loolup for www.vipfares.com:

http://www.dnsstuff.com/tools/lookup.ch?name=www.vipfares.com&type=ALL

Searching for www.vipfares.com A record at m.root-servers.net [202.12.27.33]: Got referral to B.GTLD-SERVERS.NET. (zone: com.) [took 80 ms]
Searching for www.vipfares.com A record at B.GTLD-SERVERS.NET. [192.33.14.30]: Got referral to ns9.nscache.net. (zone: vipfares.com.) [took 278 ms]
Searching for www.vipfares.com A record at ns9.nscache.net. [66.244.254.9]: Got CNAME of one.vipfares.com. and referral to c.root-servers.net [took 125 ms]
Searching for one.vipfares.com A record at c.root-servers.net [192.33.4.12]: Got referral to L.GTLD-SERVERS.NET. (zone: com.) [took 6 ms]
Searching for one.vipfares.com A record at L.GTLD-SERVERS.NET. [192.41.162.30]: Got referral to ns9.nscache.net. (zone: vipfares.com.) [took 22 ms]
Searching for one.vipfares.com A record at ns9.nscache.net. [66.244.254.9]: Reports one.vipfares.com. [took 18 ms]

66.244.254.9 (and 8) has also been reported as being none other than:

Drivecleaner:
http://www.dnsstuff.com/tools/whois.ch?ip=www.drivecleaner.com

Winantivirus.com:
http://www.dnsstuff.com/tools/whois.ch?ip=www.winantivirus.com

Errorsafe:
http://www.dnsstuff.com/tools/whois.ch?ip=www.errorsafe.com

Systemdoctor:
http://www.dnsstuff.com/tools/whois.ch?ip=www.systemdoctor.com

I'm sure I'd find more after giving it some thought, but are we seeing a trend here?

So far there has been little movement on the Winfixer class action lawsuit, and very little Press about it either.  Maybe more attention will now be paid to the lawsuit necausre winfixer has been getting so much press (thanks to the malware adverts appearing in the Windows Live Messenger banner advertisements and various blog spam comments as reported in this blog).

My concern is that Beatrice Ochoa, whoever he/she is, may not go after winfixer with sufficient energy, or keep the internet community as a whole informed about what is happening with the case.  I've worked in the legal field for close to 20 years, and would love to know what's going on - for example, please give us details of the Case Management Statement. Tell us what is going on. Also, give us a copy of the amended Complaint.

To be honest, I can't understand why those behind Winfixer would be so stupid as to plant their ads in the Windows Live Messenger advertisements, and especially on *my* blog.  Seriously - that is like waving a red flag at a bull and yelling "come 'n' get me", then standing still and letting the bull take all the chunks of flesh it wants.

Published Sat, Mar 3 2007 17:40 by sandi

Comments

# MalwareTeks Blog : Class action lawsuit against Winfixer

PingBack from http://blog.malwareteks.com/?p=78

# re: Class action lawsuit against Winfixer

Tuesday, March 06, 2007 1:28 AM by Joseph

There will be much more information about this lawsuit shortly, if I have anything to say about it (and, well, in fact I do).

Starting here: http://www.youtube.com/watch?v=zBUZHiKhsog

# re: Class action lawsuit against Winfixer

Tuesday, March 06, 2007 5:13 AM by sandi

Hi Joseph,

It's great news that the lawsuit is getting some publicity. I am heartily sick of Winfixer and those behind it after fighting its infiltration of the Messenger Plus! sponsor program adverts, not to mention MySpace, ActiveWin and even Windows Live Messenger banner advertisements.

It was a great win when CiD started editing MP! users' hosts file to map winfixer domains to localhost - that step put up to 14 million potential users out of Winfixer's reach.  I'm also pleased that I was able to get in touch with the right people at MS to get Winfixer out of the Windows Live Messenger ad network - that's, what, 220 million or so users taken out of the reach of Winfixer (via the IM banner ads).

I will keep the heat on, chasing after every advertising network that dares to host such crap advertisements. 

Unfortunately, those behind winfixer are also trying to use blog comments to spread their wares which is going to be harder to stop so the next step as far as I'm concerned is to go after the malware Web site hosts, and if *they* don't listen, to go to their upstream providers, and if *they* don't listen to go even higher.

Please keep me up to speed on all that is happening.

Sandi

# re: Class action lawsuit against Winfixer

Saturday, April 07, 2007 7:09 AM by Ole

All belongings should be taken away from the people behind these malware programs. Then feed them to the sharks.

# Seeking ideas to make people less upset about the ads - Page 18 - EQ2Flames Forum

Pingback from  Seeking ideas to make people less upset about the ads - Page 18 - EQ2Flames Forum