Demonoid is a popular BitTorrent website. This popular website is visited by several hundred thousand Internet users daily. It will be a scary thought that such a popular website is attacked by cybercriminals with affiliate comments and pop-up spam windows. In fact, popular video-sharing website YouTube was plagued by spam comments advertising porn websites more than 6 months ago.
We noticed a few weeks ago that Demonoid started using AdBrite’s banners. Unlike ours, we hoped this website would not be victimized by the pop-up windows of DriveCleaner, ErrorProtector, PCTURBOPRO, SystemDoctor and other peudo-system optimization programs containing spyware. But when I made a visit to Demonoid some 30 minutes ago, my fear wasn’t just a sheer imagination. DriverCleaner’s spam banner replaced an existing one through AdBrite.
So who is responsible for this spam banner replacement? That’s something that we are not sure of. But one thing that we can say is that there is something odd about one particular banner. It’s the one from MonsterMarketplace.com. We always see this banner whenever we have a spam pop-up window. Right after I saw the spam banner replacement, I saw this purple banner. It’s different from other SWF banners. You cannot drag and copy it into your hard disk drive. But that’s not particularly unique for this banner. We will continue to cover this story when we find more evidence against MonsterMarketplace.com’s banner as well as others.