Tech: spyware-etc..how it happens -what to do

Subject: RE: Tech: spyware-etc..how it happens -what to do
From: SueB
Date: 29 Apr 04 - 02:59 PM

Bill D, you have my eternal gratitude for creating this thread. (This morning I became aware that my computer had been violated! Having read this thread recently, I was able to recognize the symptoms, and knew what to do.)
Thank you thank you thank you -Suzanne

Subject: RE: Tech: spyware-etc..how it happens -what to do
From: Cluin
Date: 08 May 04 - 09:18 AM

A quick primer site covering the basics we should all learn before venturing forth to grandmother's house, picnic basket full of cookies in hand....    http://www.cjwd.demon.co.uk/compsafetyonline.html

Especially see the bit about malware/spyware/adware, download and run buth Spybot S&D and Ad-Aware, as per instructions here.
(Don't forget to click the IMMUNIZE button in Spybot S&D to change your browser settings to make things more secure)

Then try running the browser test at this site to see how vulnerable you are: http://www.jasons-toolbox.com/BrowserSecurity/

I ended up infected with the COOLWEBSEARCH malware (crapware, pusware, shitware, prickware, pukeware, etc.) a little while ago (I don't know how but it was definitely through web-browsing, not e-mail) but it took running CWSHREDDER (several times in fact to get it all), Spybot S&D, and Ad-Aware to finally clean it all off and get my browser back to normal. My searches were being hijacked and links and downloads all being pulled to the same justsowrong sleazy "search" page full of their targetted products. It also kept resetting my start page and putting a chubby-chasers porno site in my Favorites list, no matter how many times I deleted it. Some of this stuff even keeps Spybot S&D and its ilk from working or won't allow you to download anything else. SOMEbody out there deserves a good steel-toed boot to the groin, I tell ya...

Subject: RE: Tech: spyware-etc..how it happens -what to do
From: JohnInKansas
Date: 10 May 04 - 01:04 PM

Not really spyware, but this is the most recently active thread remotely related:

Police track down creator of Sasser worm
BY MATTHEW SCHOFIELD
Knight Ridder Newspapers

BERLIN — In the end, police discovered the source of the Sasser computer worm, which in recent days shut down Finnish banks, the British Coast Guard and millions of computers worldwide, in the homemade computer of an 18-year-old kid.
Acting on a tip from software giant Microsoft, police on Friday raced into the northern German village of Wafferisen to search the home of a technical school student-programmer and hacker. By Saturday, the student had confessed, experts had reviewed seized materials and the case was seen as a wrap. "We found the source code on a computer he had made by himself," said Frank Federau, spokesman for the police. A statement by investigators added that "as a result of the student's detailed testimony about the viruses he spread, he has been identified clearly as the author." Police declined to name the young man, whose four variants of the Sasser worm are still out there and are expected to cause damage for some time.
The teenager is being investigated on suspicion of computer sabotage, which carries a maximum sentence of five years in prison, said Detlef Ehrike, a spokesman for the state criminal office. After being questioned, he was released pending charges.
The teenager told officials that his original intention was to create a virus that would combat the "Mydoom" and "Bagle" viruses, removing them from infected computers. In the course of that effort, he developed the "Netsky" virus further - and after modifying it, Sasser. "The student did not give any thought to the resulting consequences or damage," investigators said.

Contributing: Associated Press
As published, Wichita Eagle, May 9, 2004, page 4A.

Once in while, they DO get caught.

John

Subject: RE: Tech: spyware-etc..how it happens -what to do
From: Cluin
Date: 10 May 04 - 03:29 PM

For punishment, he should be forced to do free tech support for a year to everybody's grandparents.

Subject: RE: Tech: spyware-etc..how it happens -what to do
From: Q (Frank Staplin)
Date: 18 Sep 04 - 08:20 PM

Information please-
Spyware Doctor (the pay version) has removed everything that has shown up except one item. On average, about a dozen per day show up on scan, mostly from searching the internet. The one that can't be removed doesn't cause any problems that I can find, but information on it would be appreciated.
Can it be removed? Should I subscribe to Ad-aware as well?

On the system scans it shows as:
"General Scanner. Marketed as a program to add graphical skins to IE toolbars, it also adds its own --- Location- Multiple." It cannot be removed or quarantined.

I have Norton installed and updated by Symentec.
I haven't disabled or changed Security settings on internet options. An article in Oct. 2004 PC World seems to have the "how-to" but it is for the latest X version, not 98. There are slight differences in the tools instructions.

Subject: RE: Tech: spyware-etc..how it happens -what to do
From: Q (Frank Staplin)
Date: 19 Sep 04 - 01:02 PM

refresh