Authors of the Storm Worm Trojan are targeting machines running adware packages from Zango, and the developer is anxious to point out that it wouldn't touch said botmasters with yours.

The circulation of an 'AdPack' exploit toolkit on the botnet maintained by the Storm Trojan initially provoked speculation that the botmasters behind the Worm might have decided to sign up as affiliates with Zango. Further analysis (http://blog.trendmicro.com/zango-and-storm-possibly-in-cahoots) by net security firm Trend Micro over the weekend suggests the Storm authors are actually targeting systems with Zango-related software installed.

Zango, the developer of tool bars and games of questionable utility that come bundled with adware packages, is also investigating the attack. It is keen to stress that it wants nothing to do with those behind the Storm Worm.

"We have no evidence that Storm is 'pushing Zango'," Zango said in a blog posting (http://blog.zango.com/PermaLink,guid,7a6b1a02-fb8e-42e7-83ac-75a70dd7c426.aspx). "We confirm that we have no known business relationship with those behind the Storm bot - nor would we seek, accept or authorize such a relationship."

Zango (formerly 180 Solutions) has a long-standing beef with anti-malware firms, who commonly label its software as potentially unwanted. The firm is continuing to sue anti-malware firms despite recent failures in previous similar actions. In November 2006, Zango agreed to pay $3m to settle (http://www.ftc.gov/os/caselist/0523130/index.shtm) a lawsuit brought by the FTC over allegations that "unfair and deceptive" methods were used to install its software and prevent users from removing it. Zango didn't admit to doing anything wrong, but agreed to be bound by an agreement against illicit installs or making its software hard to remove in future.

Even Zango's most vociferous critics are inclined to believe that the firm would have nothing to do with the crooks behind the Storm Worm. "We have a really hard time believing that Zango would knowingly work with distributors of Storm," writes (http://sunbeltblog.blogspot.com/2008/05/zango-and-storm.html) Alex Eckelberry, president and chief exec of anti-spyware firm Sunbelt Software. "While there’s no love between us, they're not complete idiots, and they know that if they got caught they'd be in serious trouble with the FTC." ®

Related stories

Feds not scouring Facebook for terrorists (say Feds) (31 July 2008)
http://www.theregister.co.uk/2008/07/31/facebook_fed_hunt_storm_worm_ruse/
Trend Micro's CEO says 'AV industry sucks' (22 June 2008)
http://www.channelregister.co.uk/2008/06/22/trend_micro_eva_chen/
Zango's adware fox desperate to guard net henhouse (30 April 2008)
http://www.theregister.co.uk/2008/04/30/zango_files_appeal_against_kaspersky/
Malware removes rival rootkits (28 February 2008)
http://www.channelregister.co.uk/2008/02/28/rootkit_wars/
Storm Worm turns one (18 January 2008)
http://www.theregister.co.uk/2008/01/18/storm_worm_botnet/
Facebook blocks Secret Crush over adware row (8 January 2008)
http://www.theregister.co.uk/2008/01/08/facebook_blocks_secret_crush/
Storm Worm retaliates against security researchers (25 October 2007)
http://www.theregister.co.uk/2007/10/25/storm_worm_backlash/
The balkanization of Storm Worm botnets (15 October 2007)
http://www.theregister.co.uk/2007/10/15/storm_trojan_balkanization/
Judge pours generous portion of cold water on Zango (6 June 2007)
http://www.theregister.co.uk/2007/06/06/zango_request_denied/
Adware firm sues over adware classification (18 May 2007)
http://www.theregister.co.uk/2007/05/18/zango_sues_pc_tools/
Bogus YouTube clip installs Zango Cash (8 November 2006)
http://www.theregister.co.uk/2006/11/08/fake_myspace_vid_installs_zango/
Adware firm 180solutions in image makeover (28 June 2005)
http://www.theregister.co.uk/2005/06/28/180_image_makeover/
180solutions answers pop-up charges (30 July 2004)
http://www.theregister.co.uk/2004/07/30/180solutions_letter/