|
01 Oct 04 - 03:46 PM (#1286321) Subject: Tech: Site that keeps putting me online alone From: Sorcha Anybody have a clue what this place is? I was running my AV program and kept getting put online....by this site:http://adv1.eblocs.com/spyblocs/adv/admed_006.html I'm half afraid to go there for fear of what it will do. Something called 'Your PC is infected with spyware..click here to fix your computer' has added it's self to my tool bar. I can't seem to get rid of it.....help??? |
|
01 Oct 04 - 03:57 PM (#1286327) Subject: RE: Tech: Site that keeps putting me online alone From: MMario aren't advertizing gimmicks delightful? |
|
01 Oct 04 - 04:00 PM (#1286330) Subject: RE: Tech: Site that keeps putting me online alone From: Sorcha Oh yea......I seem to have picked up something called Side Find and the above is a site called E Blocs....I 'think' it is gone..but the white circle with red exclamation point is still on my tool bar....I went to Files and thought I deleted/uninstalled it, then rebooted...nope, still there... |
|
01 Oct 04 - 04:10 PM (#1286339) Subject: RE: Tech: Site that keeps putting me online alone From: Dave Wynn Sorcha try running a trusted anti spyware program....I use the freeware program called adaware from lavasoftusa.com it searches for planted spyware and removes it. I run mine once per week and always find hits even though I use both firewall and virus guards it still finds its way onto my machine. Spot |
|
01 Oct 04 - 04:19 PM (#1286344) Subject: RE: Tech: Site that keeps putting me online alone From: Sorcha I've DONE that, Spot....like 5 times today....and neither AdAware nor Spybot are finding this.....but I'll try again.... |
|
01 Oct 04 - 04:24 PM (#1286350) Subject: RE: Tech: Site that keeps putting me online alone From: MMario have you updated either program recently? unfortunately - like virus programs they depend on signature files to detect - and the creators of the badstuff work faster then the fixer-uppers |
|
01 Oct 04 - 04:29 PM (#1286351) Subject: RE: Tech: Site that keeps putting me online alone From: Sorcha Ok...just found 2 more...and no, I'll go and update now. Ta |
|
01 Oct 04 - 04:30 PM (#1286352) Subject: RE: Tech: Site that keeps putting me online alone From: Peace Foolish question: have you deleted your cookies too? |
|
01 Oct 04 - 04:44 PM (#1286359) Subject: RE: Tech: Site that keeps putting me online alone From: JohnInKansas Sorcha - I don't have anything on the stuff you named, but currently it's almost necessary to have AntiVirus for the viral stuff, AntiPopup for the nuisance stuff, AntiAdware for all the tracking cookies, AntiSpyware for the invasive spyware, and AntiHijack for the stuff that it sounds like is your problem. The "first line of defense" is a good AntiVirus, and a good firewall if possible. I use Norton for both, but there are lots of other good ones. The googol toolbar does a fair job on popups if you get the latest version and turn on the popup blockup. Popups are NOT VIRAL and your AV can't do anything about them, althoug some AV programs have started incorporation anitpopup as an auxiliary function. Ad-Aware and Spybot are pretty good for eliminating Adware, some of which does some pretty invasive tracking of where you go. Since "visiting a site" is an "implied permission" for them to put a cookie on your machine, and the cookie can contain info on where you've been, an AV program can't do much about these. The latest nuisance is widespread "hijack" junk, that installs a new web home page and/or replaces your search engine with one that gives you their own ads. True spyware, like keystroke loggers etc., is often "piggybacked" on some of this. The same "implied permission" lie is used to trick you and your AV/firewall/popup blocker into installing it. Sometimes you get it just by visiting a site, but usually you have to "click something" so that they can lie and say you gave permission. In the nastiest versions, clicking the "X" to close a popup actually installs the shit, but this is fairly rare. Several people here have mentioned good success with a program that I believe is called "Hijack This" or something similar for this kind of junk. Maybe someone will give us a link. You do need to recognize that "virus," "popup," "adware," "spyware," and "hijack" malware are each distinct kinds of crap, and each takes slightly different treatment, and often distincly different programs, to remove effectively. The better AV sites will often have info on most of these kinds of junk, and will sometimes have instructions for removing stuff that isn't really "viral," but recognizing the different types is almost a necessity in order to do any systematic cleanup. Sorry I can't offer any specific help for the crud you've got; but perhaps you can do a little more effective searching if you know that there's often more than just "viri" involved. John |
|
01 Oct 04 - 04:48 PM (#1286362) Subject: RE: Tech: Site that keeps putting me online alone From: Clinton Hammond All that URL you posted is, is an advertisement Sorch... |
|
01 Oct 04 - 05:01 PM (#1286369) Subject: RE: Tech: Site that keeps putting me online alone From: Sorcha Yes, I know...and it keeps putting me online....without me asking...and HOLY SHIT....I just did the update on AdAware....502 New Critical Objects....but the damn white circle with red exclmation point is still on my tool bar. When AdAware finishes deleting, I'll try a reboot and run it again. It will take a while to delete 502 thing.... |
|
02 Oct 04 - 07:57 AM (#1286776) Subject: RE: Tech: Site that keeps putting me online alone From: Rasener I just bought NoAdware which really gets stuck into all these things that are hanging on your machine, and does a really good job of eliminating all these hidden things. It calls them parasites and informs you on how serious they are and why. The program gets you to click on a button to remove them. Its very similar to virus software and you scan on a regular basis and dowload updates on a regular basis. Anybody else using NoAdware. |
|
02 Oct 04 - 08:12 AM (#1286783) Subject: RE: Tech: Site that keeps putting me online alone From: The Fooles Troupe Latest Version of * HijackThis v1.98 * Written by Merijn - merijn@spywareinfo.com http://www.merijn.org/files/hijackthis.zip http://www.merijn.org/index.html Hijack This was designed to ferret out Hijackers - it is divided into several sections, including things like checking your HOSTS file to see if someone cleverly edited that. I use a firewall, an AV, HijackThis, Adaware & Spybot, and check on updates regularly as need arises. |
|
02 Oct 04 - 10:07 AM (#1286829) Subject: RE: Tech: Site that keeps putting me online alone From: artbrooks Sorcha, did you run msconfig to see if its loading itself when you reboot? |
|
02 Oct 04 - 10:36 AM (#1286845) Subject: RE: Tech: Site that keeps putting me online alone From: Rasener http://www.noadware.net/new/?hop=myklm Noadware removes harmful adware, spyware, trojans, diallers and worms Your PC is probably infected with adware & spyware if: You have downloaded music online Your PC is running extremely slow You are pestered by those horrible popup ads Don't let people invade your privacy and slow down your PC! Try NoAdware for FREE and see for yourself if your PC is infected! What is Spyware and Adware? Spyware and Adware is software made by publishers that allow them to snoop on your browsing activity, invade your privacy, and flood you with those horrible popups. If you are like most users on the internet, chances are you are probably infected with these applications. That is why we have designed our revolutionary product. Why does Spyware and Adware affect every internet user? All information you enter via the web can be intercepted Unauthorized sites can add themselves to your desktop (icons) Unauthorized sites can add themselves to your internet favorites Your browsing activity can be tracked and monitored Unwanted toolbars and searchbars can attach themselves to your browser without your knowledge or approval Your personal information can be sold to other parties without your knowledge or consent Your default homepage and settings can be hijacked so you can't change them These malicious components not only invade your PC so they can not be removed, but take up your hard drive space and slow down your PC! |
|
02 Oct 04 - 10:55 AM (#1286853) Subject: RE: Tech: Site that keeps putting me online alone From: Sorcha Yes, Art.....found several other things but not this Eblocs ad page....and it is still there..... |
|
02 Oct 04 - 02:55 PM (#1286960) Subject: RE: Tech: Site that keeps putting me online alone From: Geoff the Duck Sorcha earlier today I happened across this page - PestScan - on Zone Alarm's website. It is a scan which you can run online if you use Internet Explorer. It tells you what nasties or questionable items it finds, and gives instructions about how to remove specific problems manually. It is essentially a taster for their product you purchase which will remove stuff automatically. It might be worth using to check your system. I've not had time to play with it yet, so can't give any indication of how useful the removal instructions are. Quack! GtD. |
|
02 Oct 04 - 03:09 PM (#1286970) Subject: RE: Tech: Site that keeps putting me online alone From: Sorcha All the 'freeware' reg cleaners I've found will scan for free, but in order to remove anything you have to register and pay.....Register Mechanic found 155+ 'problems'....... |
|
02 Oct 04 - 04:46 PM (#1286998) Subject: RE: Tech: Site that keeps putting me online alone From: Geoff the Duck This one DOES tell you what files are a problem and which entries etc. to remove. You just have to do it yourself and take precautions against meesing up your system by deleting the wrong bits. As I said - I've not had time to try removing problems it found on my computer yet. Quack! GtD. |
|
02 Oct 04 - 07:57 PM (#1287094) Subject: RE: Tech: Site that keeps putting me online alone From: The Fooles Troupe The Zone Alarm PestScan page URL given above does not exist. Sorcha... "There is nothing worse than being online alone." |
|
03 Oct 04 - 04:22 PM (#1287600) Subject: RE: Tech: Site that keeps putting me online alone From: Geoff the Duck Don't know what happened to the link. I expect it might be one of those problems when a page runs a script which then redirects you. Try here CLICK ? It should take you to Zone Labs home page. Then look for a link which says "Online Pest Scan" and click it. Quack! Geoff. |
|
22 Oct 04 - 11:14 PM (#1304462) Subject: RE: Tech: Site that keeps putting me online alone From: GUEST,Haven I too have a similar problem to Sorcha. Just out of nowhere when I'm using my PC or not, an IE window pops up out of nowhere displaying one of the following 5 URL's: http://66.33.0.35/spyblocs/adv/tdw8.html http://adv1.eblocs.com/spyblocs/adv/admed_006.html http://69.20.61.245/info@nictechnetworks.com/ad-armorie.htm http://www.cursormania.com/?partner=ZCxdm424&spu=true http://www.smileycentral.com/?partner=ZNxdm772&spu=true each one randomly, at random intervals, I can either get one popping up a second after the other, or sometimes it can be about 10-20mins in between. It's just really annoying however, I've tried scanning with Ad-Aware SE 6, SpyBot, Online Pest Scan from Zone Alarm, Norton Antivirus 2005, NoAdware and i've even enabled spyware blaster which blocks incoming spyware in advanced. all of the above programs detected something different and critical, and I was able to remove every single threat, however, none of which were related to the specific spyware threat that's causing my Internet Explorer to just execute out of nowhere. |
|
23 Oct 04 - 02:01 AM (#1304539) Subject: RE: Tech: Site that keeps putting me online alone From: GUEST,Haven a few more sites have just been coming up out of nowhere now. So either this spyware problem is just taking me to random, never ending ad sites, or its just downloading more adware that I cant seem to be able to find and get rid of. A couple new URLs it's sending me to: http://friendfinder.com/go/f47882 http://www.automotive.com/redir/newcar.asp?src_id=2193&kw_camp=ron http://69.20.62.53/KEY/AUTOS.html i'm sure there has to be something out there that just wipes your registry clean of all invalid entries or something. I got a program called WinXP Manager which deletes anything out of the ordinary inside the registry, although that has helped in speeding up my computer...this spyware is STILL here. |
|
23 Oct 04 - 07:13 AM (#1304665) Subject: RE: Tech: Site that keeps putting me online alone From: GUEST |
|
23 Oct 04 - 10:58 AM (#1304772) Subject: RE: Tech: Site that keeps putting me online alone From: The Fooles Troupe Tech: threads have traditionally been above the line - whether our anonymous GUEST 'Mudcat Thread Policeman' thinks they are BS or not... so GUEST is either very new here, or has just not been paying attention... |
|
23 Oct 04 - 11:00 AM (#1304777) Subject: RE: Tech: Site that keeps putting me online alone From: Sorcha Haven, it's all spyware. Do you by any chance have Yahoo Messenger? If so, I reccomend getting rid of it. I finally just had to to re format my computer to stop all of it. |
|
23 Oct 04 - 09:34 PM (#1305263) Subject: RE: Tech: Site that keeps putting me online alone From: mack/misophist If worst comes to worst, there are a couple of versions of linux that are user friendly. The down side is that Photoshop and a lot of other programs won't run. |
|
24 Oct 04 - 03:02 AM (#1305436) Subject: RE: Tech: Site that keeps putting me online alone From: GUEST,Haven Yeah the format would be the best medicine, however I just formatted this drive like a week ago. I dont have yahoo messenger at all though no, just MSN Messenger, but that hasnt ever given me problems before. This one has sort of embedded itself somewhere, i first noticed it when I was playing one of those pointless flash animation games on the web, once i closed it down I had all these weird shortcuts that were installed on my desktop, and ever since...non stop pop ups. This particular one also recognises afew variations when you type different things to search in google for example. like if on google i want to search for "Microsoft" and hit enter, a pop up will come up showing a bogus Microsoft update site, and it'll ask me if i want to update and to select yes. Did the same thing when I selected the automatic updates option from windows also. To my surprise I saw 2 update sites, one was the real thing, the other was the fake. and usually works with other search queries aswell, I also tried Symantec, Adobe. all of which had "bogus" sites related to them. But yeah, obviously whenever you search for something on google, you dont get your results taking you to a specific site as a pop up. |
|
26 Oct 04 - 06:31 PM (#1308041) Subject: RE: Tech: Site that keeps putting me online alone From: Stilly River Sage My system had slowed to a crawl the last couple of days, and I did a shakeup this afternoon. AdAware and Spybot Search and Destroy. They came up with several nasties I hadn't seen before. I suspect it's the browsing I've been doing that have to do with the politics of the day, following links to sites I wouldn't normally have visited. Anyway, the computer is up and running much faster, the purge was time well spent. Now to defrag. . . SRS |
|
27 Oct 04 - 03:06 AM (#1308398) Subject: RE: Tech: Site that keeps putting me online alone From: The Fooles Troupe There's so many of the little evil greeblies out there now, I no longer even try to keep up - I just use the latest versions of the purging tools, and keep the shields up. |
|
27 Oct 04 - 07:06 AM (#1308490) Subject: RE: Tech: Site that keeps putting me online alone From: JohnInKansas It does seem to be spreading. Red Hat has just issued a warning about a "phishing" exploit being sent to Linux users. It arrives as an email claiming to be a "Security Bulletin" urging people to go to Fedora-Redhat.com and download a Critical Patch. The patch is, of course, malware that attempts to invade and "use" your Linux system. Apparently a fair number of people have been fooled. The disguise is pretty good, as Fedora is a "hobby" version of Red Hat. The real site is Fedora.RedHat.com (Not Fedora-RedHat.com). A couple of real security patches have been recently put out for Linux, but aren't (yet) available for all kernal versions. The "holes" are rather difficult to exploit, and few attempts have been seen, so they're not considered especially "critical." The "hijack" malware, that redirects your home page or imposes a new default search engine (and sometimes new search bar) appears to be "gaining momentum" and has recently been pretty high on the lists of "bothers." This is probably the kind of thing that this thread originated with. Much of this stuff incorporates rather invasive spyware, so it's pretty important - but often very difficult - to get it off your system. MOST of it can be avoided by following momma's rule: "DONT TALK TO STRANGERS!" ANYTHING that "pops up" and "warns you" and "offers a free fix" is PROBABLY an offer to install SPYWARE. If you don't know them, DON'T CLICK. John |
|
27 Oct 04 - 07:49 AM (#1308512) Subject: RE: Tech: Site that keeps putting me online alone From: Geoff the Duck As a rule, if something opens an Internet Explorer pop-up window making "Wonderful offers" I would avoid closing it by clicking anywhere on the actual box itself. If you click a button which says "Close" or "Exit" or similar, it is often one which actually redirects you to the "Nasty" site/download/spyware. It is safer to go to the taskbar at the bottom of the screen and "right-click" on that to bring up the options which include "CLOSE" the window. Quack!! GtD. |
|
27 Oct 04 - 08:19 AM (#1308528) Subject: RE: Tech: Site that keeps putting me online alone From: GUEST,Jon I agree with Geoff the Duck. Be very careful not to close any pop-up with the "Close" or "Exit" button they provide. Use right-click & close or ALT-F4 which I find very useful for closing new windows that have popped up. Another Spyware tool is Spy-Sweeper from www.webroot.com, but the updates must be paid for. I think they probably update more regularly if they are paid for it. Good luck |
|
27 Oct 04 - 08:53 AM (#1308564) Subject: RE: Tech: Site that keeps putting me online alone From: pavane Here is a thought for a new approach to the problem. If programs can be written to hijack your settings and replace them as noted above, could we not hijack the spyware etc. programs own methods, and use the same process to restore our required settings? We would not then have to keep searching for, and cleaning out these parasites, just override what they do. I am sure that there are people out there who could do this. |
|
27 Oct 04 - 03:10 PM (#1308880) Subject: RE: Tech: Site that keeps putting me online alone From: JohnInKansas The programs that hijack your settings commonly do so to get you to a site where additional malicious crud is dumped on your machine. Without knowing exactly what a program does, it would be very difficult to be certain that all unwanted effects have been removed. It's fairly common for the "analyses" of these things to include "possible other unknown functions" in the description. It's difficult enough with many of these just do get them removed. Attempting to "modify them to your own purpose" is akin to having a sick person spit on your baby in hopes of making baby immune - to something - when you don't really know what disease is involved. John |
|
31 Oct 04 - 08:27 PM (#1312603) Subject: RE: Tech: Site that keeps putting me online alone From: GUEST,BobbyReo Samething happening to me, those websites are popping up for no reason even if I'm not on my browser. Scanned with Ad-Aware, Spybot, Giant Antispyware. Nothing shows up in Hijackthis, only valid entries. Starting to get really annoying spent the whole day trying to figure out the problem. I'm not a novice at getting rid of spyware either but this particular one is just really hard get rid off, nothing seems to be working. I think this is a new spyware.... thats why the scanners aren't picking it up. |
|
03 Nov 04 - 05:33 AM (#1314971) Subject: RE: Tech: Site that keeps putting me online alone From: GUEST,Haven I just booted up my computer the other day, for some reason now, that spyware seems to have totally disappeared. I mean, it very well may still be hidden somewhere in the background, but not a single popup window or automatic execution of Internet Explorer. just to be sure I went on the web, went to a number of sites, left the PC running for about 3 days straight, nothing at all. Did it give up and delete itself? Is it waiting to strike again on midnight of a specific date? IS MICHAEL JACKSON REALLY BLACK!??? I dunno the answer to those questions, but i'm glad that I can finally once more use a program or play an online game without having it interrupted to reveal yet another IE popup. Just to be safe though I installed norton systemworks 2005, which seems to be doing it's job very well, it's found a threat on my computer that it's enabled protection against W32.Beagle.AV@nm is the name of it, it could be it...not 100% sure though. wouldn't kill anyone with a similar problem to get a removal tool for it though. you can find it here http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.av@mm.html cheers :) |
|
03 Nov 04 - 05:39 AM (#1314976) Subject: RE: Tech: Site that keeps putting me online alone From: The Fooles Troupe Apparently 2 variants of Beagle are currently rife in Australia. |
|
03 Nov 04 - 07:21 AM (#1315030) Subject: RE: Tech: Site that keeps putting me online alone From: belfast Same stuff here. Anytime I tried to open my email a page would show up informing me that my pc was infected with spyware etc. Offered to get rid of it but the cost was more than I had paid for the pc. Used Spybot and other stuff. No good. Got rid of IE and downloaded Netscape Navigator. It worked for me. |
|
03 Nov 04 - 08:24 AM (#1315078) Subject: RE: Tech: Site that keeps putting me online alone From: Brían I was having problems with my computer locking up, running slow. There were strange icons, yellow hyperlinks inviting me to date, apply for credit cards, etc. I ended up bringing my computer to a shop. I upgraded from Windows ME to Windows XP, added memory, Norton System Works and the Ad-Aware program. It didn't cost me as much as I was afraid to give it to an experienced person and it seems to be running much better so far. Brían |
|
03 Nov 04 - 08:27 AM (#1315086) Subject: RE: Tech: Site that keeps putting me online alone From: The Fooles Troupe Meant to say '2 NEW variants' - suspect that fixer engines maybe can't handle them yet. |
|
03 Nov 04 - 09:37 AM (#1315160) Subject: RE: Tech: Site that keeps putting me online alone From: JohnInKansas A search at Norton for "W32." finds 1782 examples of this "W32. worm class." One of the most common, currently, will appear as "W32.Beagle@mm!rar." The "rar" indicates that this is a "search worm" that looks for machines that have been previously infected by the "W32.Beagle" worm(s). The "W32.Beagle.M@mm" and " W32.Beagle.N@mm" infected files that may have been previously "loaded" on your machine contain password-protected .rar files as email attachments. The password protection prevents your AV from scanning them. Most good AV programs will detect and remove them, but they can be successfully passed onto machines with less than optimum protection or if your viral signatures are out of date. In order for this W32.Beagle variant to be "activated" the "W32.Beagle@mm!rar" looks for machines that have the "real" worm(s) already installed so that it can execute the password and turn them on. When turned on, the W32.Beagle worms execute a mass emailing to every address in your address book. It searches for 29 or more different file extensions to find "addresses" in virtually any kind of email program. To delay detection of the mass mailings, it excludes email addresses that would send it to a selected list of places known to have detection and blocking set up for earlier versions of W32 worms. In addition, this worm appends itself to any .exe file it finds on the machine. Norton, and likely most other good AV programs can "repair" the .exe files by removing the "viral appendage," but in rare cases it may be necessary to delete the .exe (and reinstall the program after cleanup) to get rid of it. In addition, this worm class attaches itself to every file it finds designated for file sharing by including the string "shar" anywhere in the filename. As examples, you can look at full information on the W32.Beagle.M@mm or W32.Beagle.N@mm Norton has "repair tools" for both these variants at the above links. You should check to be sure that you get the appropriate tool for the variant you find on your machine by searching your AV provider's site. If you don't have a favorite, go to Symantec Search. Enter W32.name, inserting the first word of the name for the one you want to find (W32.Beagle for example.) Click the "Viruses, Trojan horses, Worms and Macros" box to limit the search to these categories. (You may want to come back later and click the "Vulnerabilities and Exploits" box for other stuff.) All W32 variants I've looked at require registry repair (regedit) to complete the removal, but these are classed as "easy removal" infections – if you read all of the instructions first, and then follow them carefully. (Interesting variant: W32.Naked@mm is a mass mailing worm that disguises itself as flash movie. The attachment is named NakedWife.exe) Additional variants that are common include "Gaobot," "Sobig," "Magistr" etc. John |
|
03 Nov 04 - 12:17 PM (#1315364) Subject: RE: Tech: Site that keeps putting me online alone From: JohnInKansas There has been a recent increase in the "hacking" of people's internet connections in order to place malware on individual machines. Where it was once sufficient to have a good AV in place to stop malicious email, it is now necessary to protect the connection itself. My firewall reports at least a dozen attempts weekly by various of the "W32" search worms mentioned above – all blocked, of course. Complaints here indicate that a fair number of people are exposing themselves to risks that I haven't encountered. While this may have a lot to do with where you go on the web, and what you do at places you visit (my browsing is pretty boring), proper machine setup can be a big help. Unfortunately, it can also be rather confusing. There is help if you want to be "more safe." Norton Security Check has been significantly improved since my last visit, and the results were pretty impressive. There are several choices there, but the one immediately of interest is the "Scan for Security Risks." If you select this one, Norton will scan your internet connection and will tell you what needs to be fixed. It immediately detected that I was behind a firewall, and "asked permission" to test the firewall. (It suggests getting permission from your network administrator before giving permission.) It immediately detected that my machine was connected via LAN and through a host. The firewall prevented it from identifying anything beyond the one machine on my LAN with the physical internet connection (the "Host"). It verified that commonly hacked ports were blocked by my firewall, with the exception of one "vulnerable" protocol that I have to leave running because of her machine where she insists on using Win2K. (Not a big concern, since the firewall should block anything malicious, but it allows a hacker to "see" her machine, and it would be better if she was completely "invisible.") If the Security Check finds vulnerabilites, it should give you links to instructions for what you can do about it. In some cases, there are simple adjustments you can make to settings. In many cases it may offer to show you what Norton products can fix things for you, and I'd suggest looking; but you don't have to buy Norton. By looking there, you can learn what kinds of help you need so that you can make an informed choice about how to get fixed. This is NOT a scan to see if you're infected. It's to tell you what you need to do to avoid being infected. Other AV/Spyware/Adware sites may have similar utilities, but this one is highly recommended for anyone who's concerned and hasn't run anything similar in a while. John |
|
03 Nov 04 - 06:06 PM (#1315721) Subject: RE: Tech: Site that keeps putting me online alone From: The Fooles Troupe A while ago, my Mailwasher was showing up a lot of emails that had an attachment, and the text said 'someword' the password - trashed all those. |
|
03 Nov 04 - 06:18 PM (#1315730) Subject: RE: Tech: Site that keeps putting me online alone From: JohnInKansas Foolestroupe - The "password protected" attachment, with the password in the text of a message, was a fairly popular gimmick a few months back. By requiring a password to open the email, some AV programs were prevented from seeing that it contained a virus. The "permission" you give, by entering the password, can also bypass normal AV protections, since you have the "authority" to override the AV to "install" any program you want to. More commonly now, entering the password just misdirects you to a malware site, where they can download trash on you. Both "methods" pop up occasionally. DELETE is the correct - and ONLY appropriate - answer. The W32.Beagle bunch uses a randomly generated password that only the malware that hacks into your machine from outside can execute. You have to have good AV to prevent the "carrier" file from getting on your machine AND a good firewall to keep them from hacking in to turn it on. John |
|
04 Nov 04 - 12:18 AM (#1316035) Subject: RE: Tech: Site that keeps putting me online alone From: JohnInKansas Sorcha – if you're still having problems, or others with similar probs: A Google on the phrase "Toolbar Hijack" got quite a few hits, but 3 of the sites on the first couple of pages of results popped up Norton warnings of virus hits while the pages were loading – apparently from infection of the pages "advertising" knowledge about this phenomenon. This is unusual, at least in my experience. I've had the impression that Google checks before listing, just based on my never having been "hit" by a page from a Google search. Keep your AV up. No real help, but I do find "spyblocs" advertised at a couple of reputable magazine sites. The ads make it appear that the program is legit, but I queried the discussion group at one of these sources to see if anyone else has had a problem with the program. First reply follows: From COMPUABLE Tell your friend Check the add/remove programs for SpyBlocs and remove if present. Then tell your friend to go to this site and download HijackThis 1.98.2 from the Merijn website. A rudimentary HijackThis log tutorial by me is available here. The official HijackThis QuickStart for posting on the SpywareInfo forums is available here. Another great and helpful site to check out would be That Computer Guy's Help Forum Viruses and Spyware/Adware/Malware section to assist with using HijackThis. Notes Regarding SpyBlocs Malware: This is ScumWare: Instead of removing spyware, they install it. Some of these types of malware will even attack whatever genuine protection your computer may already have, leaving it wide open to hackers, viruses, spyware and every other kind of malware imaginable. It is most likely that your 'friend' or someone else who has access to her computer; accidentally or otherwise clicked on the "Click Here - To Download Free Scanner" link, which accompanies many popups from music download sites like KaZaA, iMesh and others, adult sites (or others who use her PC to visit adult sites). Also SpyBlocs can be inadvertently installed by downloading from some free screensavers sites or by downloading many non-reputable freeware or shareware applications. Often unsuspecting Internet users inadvertently download this malware. This is a product associated with the pro-spyware people. The program is owned by the nefarious eBlocs Spyware Remover Company (brought to you by the spyware-proliferating monster called 'Network Dynamics Corporation Inc') and CLAIMS to rid your computer of malicious content that can harm your computer security as well as break your Internet privacy. Actually, in reality SpyBlocs is usually bundled in numerous drive-by-downloads and bundles itself in/with other spyware and adware software. It's positively designed to screw up your system. SpyBlocs uses shady practices to entice users to install and purchase the software. Tell your friend to use Ad-Aware SE Personal edition or Spybot - Search & Destroy 1.3 (or both) instead of SpyBlocs malware. End Reply. Pretty much what we've all agreed here, except for the links. If you're using Spybot, the tutorial may be helpful. Merijn, TomCoyote, and computerguy, the links given in the reply, are regularly mentioned favorably by other sources that I generally consider reliable, and the threads I've looked in on appear to bring some good talent into the solutions. I haven't had occasion to post to any of them, so can't offer personal experience; although I note that they all request that you read the FAQ and guidelines before posting. If you ask them for help you should follow their rules. Also, Just received on slightly different subject – may be of interest to those running into Bagle worms: Bagle Status Report. This is from eWeek, which is usually pretty reliable. New variants discovered within the past week with new nasties inside. |
|
04 Nov 04 - 03:56 AM (#1316131) Subject: RE: Tech: Site that keeps putting me online alone From: The Fooles Troupe I've just upgraded to the free version of AdAware SE - much better, faster than the original AdAware versions, and digs deeper - for instance it can now look at not just the processes running, but also the entire chains of modules called by all the processes - if something has hooked into the chain you will likely expose it thus. |
|
20 Nov 04 - 07:55 AM (#1333436) Subject: RE: Tech: Site that keeps putting me online alone From: GUEST,drazahoib at yahoo http://www.lavasoftsupport.com/index.php?showtopic=51172 we are not the only ones lost but I am still working on it .... let you know if I find anything else |
|
20 Nov 04 - 09:55 AM (#1333522) Subject: RE: Tech: Site that keeps putting me online alone From: GUEST,drazahoib at yahoo http://www.lavasoftusa.com/software/addons/vx2cleaner.shtml this should help |