Zango

Infobox_Company
company_
company_name = 180solutions, Inc. Zango
industry = Adware
Advertising
Marketing
company_type = Private
foundation = 1999
location = Bellevue, Washington
products = Adware
key_people = Keith Smith, co-founder and Chief Executive Officer; Jamie Miller, Chief Financial Officer; Ken McGraw, Executive Vice President, General Counsel and Chief Compliance Officer; Rip Warendorf, Senior Vice President of Sales; Val Sanford, Vice President of Marketing and Product Development; Neal Freeland, Vice President of Online Engagement
num_employees = 130 |
revenue = Undisclosed
homepage = [http://www.zango.com www.zango.com]

Zango, formerly 180solutions and Hotbar, produces software that provides access to partners' games and DRM-restricted videos and software. Zango software is listed as adware by Symantec. [cite web | url=http://www.symantec.com/security_response/writeup.jsp?docid=2005-050416-3519-99| title=Adware. ZangoSearch|publisher=symantec.com| accessdate=2007-06-13 ] McAfee states, "this program may have legitimate uses", but describes it as a "potentially unwanted program", and an "adware downloader". [cite web| url= http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=137580| title= Threat Profile: Adware-ZangoSA.dldr| accessdate=2007-06-12| publisher=us.mcafee.com ]

Content

Zango's consumer website asserts that the company is "committed to creating a content economy built on a foundation of safe and ethical practices by protecting consumer privacy while offering a fulfilling and high-value content experience." Zango content includes sports, comedy, dance, erotic videos, online games, and screensavers. [ [http://zango.com/Destination/Catalog/tags.aspx?group=popular zango.com - Tags: Popular - All Time] ] Warner Bros. and others have been known to provide content, although Warner Bros. has terminated [cite web | url=http://publications.mediapost.com/index.cfm?fuseaction=Articles.san&s=46185&Nid=22075&p=246812| title=Warner Bros. Calls Off Deal With Adware Company|publisher=mediapost.com| accessdate=2007-09-16 ] its business relationship with Zango after concerns were raised that children viewing Warner Bros. content could be exposed to advertisements for pornography. [cite web |url=http://www.washingtonpost.com/wp-dyn/content/article/2006/07/27/AR2006072701620.html |title=Warner Bros. To Cut Link With Adware Firm Zango|publisher=Washington Post
accessdate=2008-07-01 ]

Undesirable software behaviors

StopBadware.org lists a number of undesirable behaviors associated with Zango Easy Messenger, including "behaves as spyware", "automatically runs on startup", "displays pop-up advertisements", "installs adware", and "bundled software cannot be closed". The same site states, "We find that Zango Easy Messenger is not badware, although it does engage in behaviors that users should be aware of." [cite web |url=http://www.stopbadware.org/reports/reportdisplay?reportname=zangomessenger101006|title=Zango Easy Messenger|accessdate=2008-07-10|publisher=StopBadware.org]

Websense issued a Zango-related security advisory in November 2006. The report stated that "Websense Security Labs has discovered a number of user pages on the MySpace domain which have videos that look like they are from YouTube. The videos have an installer embedded within them for the Zango Cash Toolbar. When users click on the video, they are directed to a copy of the video, which is hosted on server sites such as Yootube.info, Yuotube.com, Youtuhe.com, and etc. these all will most likely give you spyware." [cite web|url=http://www.websense.com/securitylabs/alerts/alert.php?AlertID=689|title=Malicious Website / Malicious Code: Fraudulent You Tube video on MySpace installing Zango Cash|publisher=websense.com|accessdate=2007-06-24]

A more detailed analysis of this attack appears in [http://www.benedelman.org/spyware/zango-violations/ "Zango Practices Violating Zango's Recent Settlement with the FTC"] : "Zango continues numerous practices likely to confuse, deceive, or otherwise harm typical users as well as practices specifically contrary to Zango's obligations under its November 2006 settlement with the FTC." These include a failure to include an on-screen disclosure of material terms, widespread in-toolbar ads without the labeling and hyperlinks, ads for "bogus Sites that attempt to defraud users" and third party installations without any disclosure whatsoever.

Automated analysis by McAfee SiteAdvisor in May 2008 reports "629 red downloads - In our tests, we found downloads on this site that some people consider adware, spyware or other potentially unwanted programs." [ [http://www.siteadvisor.com/sites/zango.com Site Advisor] retrieved 17th May 2008] .

History

1999 to 2001

When founded in 1999, Zango was known as ePIPO. It was one of the first "pay-to-surf" companies, following in the footsteps of AllAdvantage. This business model paid users a minimal amount to surf the Internet while running an application that showed banner ads. Users could also make money by referring others who would use this application.

After enjoying brief success,the pay-to-surf business model declined with the bursting of the Internet bubble in 2001, and 180solutions adjusted their technologies in several ways:
* To show pop-up ads rather than banner ads.
* To not have any visible GUI.
* To be bundled with other potentially valuable applications.ePIPO changed their name to 180solutions.

2002 to 2005

From 2002 through 2005, 180solutions' applications (ncase and 180SA (search assistant)) were distributed via various affiliates. While these affiliates were legally required (by 180solutions contract and other laws) to obtain the permission of the user prior to software installation, many did not, and this resulted in millions of illegal non-consensual installs. Many other affiliates notified users only via the end user license agreement and this resulted in millions more of arguably legal but still essentially non-consensual installs.

180solutions' software showed pop-up ads while a user was surfing the Internet. This software was often, but not always, bundled with other pieces of free of charge software which the user intentionally installed. Since permission to install the 180solutions adware was typically hidden in an EULA, most users were unaware of the fact that they were installing adware. In some cases 180solutions' software was not bundled with any other software, but installed as a standalone install. Using this method, an ActiveX prompt simply asked the user to install the software so that they could receive "comparison shopping advertisements".

180solutions contended that the value of the bundled software or the "comparison shopping advertisements" made up for the inconvenience of the pop-up ads. The value of this trade-off was contested by critics of the adware business model.

In 2004 Benjamin Edelman, assistant professor at Harvard Business School and spyware researcher, analyzed the network behavior of 180solutions applications and claimed they redirected commissions to themselves that were properly due to affiliates, and additionally caused merchants to pay commissions when affected users clicked on merchant sites directly. [ [http://www.benedelman.org/spyware/180-affiliates/ The Effect of 180solutions on Affiliate Commissions and Merchants] Benjamin Edelman October 20, 2004]

During this time, 180solutions' applications were often difficult to uninstall, requiring the user to download an additional 'uninstall' application made by 180solutions or to use an adware removal tool. In 2005, the software uninstall was standardized to use the Windows 'add/remove programs' feature.

In 2005, 180solutions implemented a number of initiatives that were intended to show that the company was serious about controlling the distribution of its software to eliminate non-consensual installs:
* March: Acquired one of their distribution partners, a Canadian company called CDT (dba LoudCash). This gave them direct visibility into and greater control of many of the formerly "third party" distributors.
* June: Claimed to have re-notified its 20 million user customer base and implemented a program that notifies all users within 72 hours of install and re-notifies all users every 90 days thereafter.
* August: Filed suit against seven individuals alleged to have illegally distributed its software using a botnet.
* November: Announced an ongoing partnership with the FBI in breaking up a botnet ring in the Netherlands.
* December: Ended distribution of the 180SearchAssistant and closed LoudCash (a remnant from the CDT acquisition). They claim that this removes the financial incentive for fraudulent installs, which many critics claim not to be true.

2006 to 2008

Despite the initiatives of 2005, 180solutions admitted that it is possible for malicious users to hack their install routines and thus cause fraudulent installs. [ [http://blog.180solutions.com/PermaLink,guid,b0fc12f9-e1f0-4a7a-998f-0b2f11d1fafd.aspx Mea Culpa] 180Solutions 5:33 PM, Feb 23, 2006] They claim that the percentage of fraudulent installs has dropped from over 10% to under 1%. Critics claim that the business model is untenable because fraud against 180solutions (which therefore harms unknowing users via non-consensual installs) can never be completely removed. [ [http://www.benedelman.org/news/022006-1.html Non-consensual 180 Installations Continue, Despite 180's "S3" Screen] Benjamin Edelman February 24, 2006]

In early 2008, security researchers at Fortinet reported that the rapidly spreading Facebook widget "Secret Crush" was enticing users to download Zango adware by promising to identify a secret admirer. [cite journal
title = Zango Pleads 'Not Guilty' in Facebook Adware Flap
journal = Internet.com
date = 2008-01-08
url = http://www.internetnews.com/ec-news/article.php/3720436
accessdate = 2008-07-06 ] Zango denied any involvement with the widget, and further investigation by an Infoworld senior writer showed that the Fortinet report was incorrect. [cite journal
title = Zango strikes back over reported Facebook hack
journal = infoworld.com
date = 2008-01-08
url = http://weblog.infoworld.com/zeroday/archives/2008/01/zango_strikes_b.html
accessdate = 2008-01-08 ]

On 2008-06-16, the company laid off 68 of its approximately 200 employees, with three senior executives, Executive Vice President of Corporate Development York Baur, company co-founder Chief Technology Officer Ken Smith, and company co-founder Chief Information Officer Doug Hanhart also leaving. Zango said it was narrowing its focus to concentrate on its new product Platrium, a "casual gaming experience" that shows targeted ads, shopping comparisons and search suggestions based on keywords from the user's Internet browsing. [ cite web | url= http://seattlepi.nwsource.com/business/367388_zango18.html |title= 68 lose jobs as Zango moves into gaming |publisher= "Seattle Post Intelligencer" |date= 2008-06-17 |accessdate= 2008-07-18 ] [ [http://sunbeltblog.blogspot.com/2008/06/casualties-zango-recent-layoffs.html Casualties: Zango's recent layoffs include senior execs] Alex Eckelberry June 17, 2008]

Federal Trade Commission charges and settlement

On January 23, 2006, a public advocacy group filed two official complaints with the Federal Trade Commission. The Center for Democracy and Technology complaints charge 180solutions with engaging in unfair and deceptive business practices, deliberately duping Internet users into downloading intrusive advertising software. [ [http://www.cdt.org/publications/policyposts/2006/2 CDT Files Complaints Against Major Adware Distributor] January 27, 2006]

In 2006, the Federal Trade Commission charged Zango with "Deceptive Failure to Disclose Adware", "Unfair Installation of Adware", and "Unfair Uninstall Practices" in violation of the Federal Trade Commission Act. [ [http://ftc.gov/os/caselist/0523130/0523130cmp061103.pdf FTC complaint against Zango.] ] Since the FTC ruling, security researchers continue to find Zango involved in [http://www.vitalsecurity.org/2006/11/presenting-zangozones.html problematic installs] .

In November 2006, Zango settled this complaint via a consent decree with the FTC, without formally admitting guilt. In the words of the Federal Trade Commission press release, "Zango, Inc., formerly known as 180solutions, Inc., one of the world’s largest distributors of adware, and two principals have agreed to settle Federal Trade Commission charges that they used unfair and deceptive methods to download adware and obstruct consumers from removing it, in violation of federal law. The settlement bars future downloads of Zango’s adware without consumers’ consent, requires Zango to provide a way for consumers to remove the adware, and requires them to give up $3 million in ill-gotten gains." [ [http://www.ftc.gov/opa/2006/11/zango.htm Zango, Inc. Settles FTC Charges] November 3, 2006] These restrictions remain in force for twenty years. The agreement also requires respondents Keith Smith and Daniel Todd to notify the FTC of the discontinuance of their current business or employment, or of their affiliation with any new business or employment, for ten years. [http://www.ftc.gov/os/caselist/0523130/0523130agree061103.pdf FTC AGREEMENT CONTAINING CONSENT ORDER In the Matter of ZANGO, INC. f/k/a 180SOLUTIONS, INC., a corporation, KEITH SMITH, individually and as an officer of the corporation, and DANIEL TODD, individually and as an officer of the corporation (PDF, 12pages)] ]

In July 2007, Edelman said, "Zango continues numerous practices likely to confuse, deceive, or otherwise harm typical users as well as practices specifically contrary to Zango's obligations under its [http://www.ftc.gov/os/caselist/0523130/index.shtm November 2006 settlement with the FTC] ." [cite web|publisher=benedelman.org|title=Zango Practices Violating Zango's Recent Settlement with the FTC |url=http://www.benedelman.org/spyware/zango-violations/|accessdate=2007-08-05]

Other litigation

In September 2005, attorney Shawn Collins filed a class action lawsuit against Zango on behalf of three plaintiffs, alleging that Zango deceptively installed spyware on more than 20 million personal computers. The company says its software is voluntarily installed by users who download premium content in exchange for their consent to view advertisements relevant to what they search for online. During pre-trial discovery, the parties agreed to a dismissal with prejudice, meaning that the suit cannot be brought again by the same complainants. Each side agreed to pay its own fees and expenses. [cite web |publisher= U.S. District Court |url= http://www.spywarewarrior.com/classactioncomplaint-180.pdf |title= Logan Simios v. 180solutions, CLASS ACTION COMPLAINT |date= September 13, 2005 |accessdate= 2007-09-05] [cite web |publisher= ClickZ |url= http://www.clickz.com/3623374 |title= Zango Spyware Suit Dismissed |date= September 8, 2006 |accessdate= 2007-09-05] [cite web |publisher= Chicago Tribune |url= http://www.redorbit.com/news/technology/649021/classaction_suit_dismissed_against_spyware_provider/index.html
title= Class-Action Suit Dismissed Against Spyware Provider |date= September 7, 2006 |accessdate= 2007-09-05]

In May 2007, Zango filed a lawsuit against PC Tools alleging tortious interference with its business and trade libel, because the PC Tools product Spyware Doctor at that time classified Zango software as malicious and removed it without informing users. [cite web|publisher=Infoworld|url=http://www.infoworld.com/article/07/05/18/zango-sues-antispyware-vendor_1.html|title=Zango sues antispyware vendor PC Tools|date=May 18, 2007|accessdate=2007-05-19] cite web
publisher= U.S. District Court at Seattle
url= http://www.sunbelt-software.com/spyware/zango-pctools-tro-denial-060507.pdf
title= ZANGO, INC., Plaintiff, v. PC TOOLS PTY LTD., Defendant. – Denial of Motion for a Temporary Restraining Order (PDF, 9 pages)
date= June 5, 2007
accessdate= 2007-09-13] Zango dropped the suit after the judge ruled that the suit was "unlikely to succeed on the merits of any of its three causes of action" and refused to grant Zango a temporary restraining order. [cite web|publisher=Betanews|url=http://www.betanews.com/article/Zango_Drops_Lawsuit_Against_PC_Tools/1188317390|title=Zango Drops Lawsuit Against PC Tools|date=August 28, 2007|accessdate=2007-08-28]

Also in May 2007, Zango filed in the same court a similar lawsuit against Kaspersky Lab, accusing it of tortious interference, trade libel and unjust enrichment for blocking the installation of Zango software. Kaspersky defended itself by invoking the Communications Decency Act (CDA), saying it was immune from civil liability based on the paragraph of the CDA headed "Protection for 'Good Samaritan' blocking and screening of offensive material". The judge agreed, granting Kasperky's motion for summary judgment. [cite web
publisher= Cornell University Law School
url= http://www4.law.cornell.edu/uscode/html/uscode47/usc_sec_47_00000230----000-.html
title= U.S. Code Collection: TITLE 47 > CHAPTER 5 > SUBCHAPTER II > Part I > § 230. Protection for private blocking and screening of offensive material
date= January 3, 2005
accessdate= 2007-09-05] [cite web |publisher= ars technica |url= http://arstechnica.com/news.ars/post/20070830-zango-tries-fails-to-sue-its-way-out-from-under-the-spyware-label.html |title= Zango tries, fails to sue its way out from under the "spyware" label |date= August 30, 2007 |accessdate= 2007-09-05] cite web
publisher= U.S. District Court at Seattle
url= http://claranet.scu.edu/tempfiles/tmp33547/zangokaspersky230ruling.pdf
title= ZANGO, INC., Plaintiff, v. KASPERSKY LAB, INC., Defendant. – Dismissal (PDF, 8 pages)
date= August 28, 2007
accessdate= 2007-09-13] Zango is currently appealing the ruling. [cite web
publisher= Eric Goldman's Blog
url= http://blog.ericgoldman.org/archives/2008/03/zangos_brief_in.htm
title= Zango's Brief in Zango v. Kaspersky Ninth Circuit Appeal
date= March 30, 2008
accessdate= 2008-03-30] The National Business Coalition for E-Commerce and Privacy is supporting Zango in the appeal. [cite web
publisher= MediaPost Publications
url= http://publications.mediapost.com/index.cfm?fuseaction=Articles.showArticleHomePage&art_aid=80609
title= Adware Company Gets Assist From Business Groups In Legal Battle
date= April 15, 2008
accessdate= 2008-04-15]

Installation and removal

Unusual methods of installation and operation have evolved as software such as Zango is targeted to run on a broader mix of applications and platforms. Zango has stated on their website that any Zango "application" can be completely uninstalled by using the (Microsoft Windows) Add or Remove Programs function. However, Zango may appear as a browser plug-in or in some other form which cannot be removed by the officially recommended procedure.

Utilities exist for the purpose of detecting, and in some cases removing Zango-like software. Some software advisers have recommended that individuals seeking to remove Zango-like software from their computers search for instructions specific to their particular platform, application, and installation.

Zango variants

Hotbar

Hotbar (also known as HbTools) is a plugin for Internet Explorer, Microsoft Office Outlook and Outlook Express produced by Zango. Hotbar adds a toolbar and the option of extra skins to these programs. It also allows the user to add emoticons to emails created in Outlook or Outlook Express or check the weather report. Its major revenue comes from the excessive use of pop-ups which are displayed according to a user's behavior and current URL. The application can show over 15 pop-ups a day, depending on how much Internet browsing has occurred.

Hotbar Premium

Hotbar does have an option to turn off the advertisements, for a fee. The fee-based Premium access also unlocked certain content beyond the preview stage in Hotbar's utilities. Grandfathered Premium accounts have unlimited access, as long as you have saved the activation link when it was purchased. Currently, only 365-day accounts are sold. The accounts are valid ONLY for the Hotbar toolset, and do not apply to the other toolsets offered. That means if you install Zango alongside Hotbar Premium, you will not be served Hotbar's advertising, but will see Zango's Advertising. Currently, Zango does not offer Premium access on any other toolset besides Hotbar.

Controversy

Hotbar is an example of adware due to its banner advertising and use of pop-up windows. Also the user's browsing habits are sent to the Hotbar servers with a unique user ID which allows a user's browsing habits to be tracked over an extended period of time. For example spyware researcher Benjamin Edelman defined Hotbar's problems like this:

:"Promoting Hotbar advertising software at sites targeting kids, using banners with smiley faces but without mention of ads. Failing to affirmatively show a license agreement, and burying advertising terms so many screens into the license and below such counterintuitively-labeled section headings that users cannot reasonably find the key provisions. First affirmatively mentioning advertising on a screen that offers no Cancel button for users to decline the installation. And ultimately bombarding users with ads in pop-ups, web browser toolbars, Windows Explorer toolbars, auto-opening sidebars, and even desktop icons." [Benjamin Edelman, May 16, 2005, [http://www.benedelman.org/spyware/installations/kidzpage-hotbar/ Hotbar Installs via Banner Ads at Kids Sites] ]

In 2005–2006, Hotbar.com started to send cease and desist letters to security companies which defined Hotbar as "malware". As a countermeasure, Symantec successfully sued Hotbar.com in the court to get clear right to put it in their "low risk adware"-category. [United Press International, March 1, 2006, [http://www.upi.com/NewsTrack/Science/2006/03/01/symantec_settlement_riles_hotbar/8883/ Symantec settlement riles Hotbar] ]

Hotbar can be detected and removed by several anti-spyware and anti-virus programs, including Windows Defender, Spybot - Search & Destroy, and Norton AntiVirus. However, some utilities do not remove Hotbar completely and leave Windows Registry keys and files behind. [PC Hell, checked 12.9.2007, [http://www.pchell.com/support/hotbar.shtml Hotbar Removal Instructions and Help] ]

Seekmo

Seekmo is an adware program by Zango that claims to be a free tool to provide content such as mp3 files, screen savers, and videos. Seekmo can pop-up advertisements even if you have a pop-up blocker on your computer, and will monitor your computer usage to generate ads that you are more likely to respond to. In the process, the program can consume processing power and network bandwidth, slowing down your computer and interrupting other programs. Upon downloading a Seekmo-containing file, the program with which you are attempting to access the file will commence the process of license acquisition in which the program (Windows Media Player, for example) will display a window telling you about the content and what Seekmo is. Upon clicking "Accept", it will automatically send a file for download called "Setup.exe". After downloading this file you must install the Seekmo Toolbar which will display advertisements related to the websites you visit.

ee also

* Adware
* Spyware

References

External links

* [http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453094343 Removal of Zango] www3.ca.com