Click to See Complete Forum and Search --> : Spyware and Adware: WAY out of hand


Syngin
08-07-2004, 10:05 AM
I'm usually careful about which freeware programs I install on my main windows box but something snuck past me when I installed a codec pack. Now, anything I type in IE's address bar gets jacked and routed through dnscaching.net and then is posted to the MSN search engine as a search variable. Talk about screwed up. Even then, I click on a link there and THAT shortcut gets posted back as a search variable.

Mozilla here I come. This is just too much of a pain. I've got Ad-Aware scanning and its already found 132 rogue objects. These days, half of the spy/ad ware acts like a trojan once installed and goes and installs a bunch of OTHER programs along with it. I can't count the number of times I've come across a commandline install argument in the startup area of my or other people's computers. Yes, yes, I realize that its probably mentioned in the license but seriously, if people had to stop and read every license agreement on every bit of software they installed, it'd probably cost the global economy a billion/day in lost productivity.

Why are these people not being prosecuted? Being a computer professional you'd think that these would be hard to sneak past me but they still occasionally get in. Makes you feel bad for the average user.

It actually really reminds me of Monty Python sketch called Wizzo Chocolate Company found here. (http://www.fortunecity.com/bennyhills/jones/724/sounds/wizzoskit.wav) Praline: Lark's vomit?

Milton: Correct.

Praline: Well it don't say nothing about that here!

Milton: Oh yes it does, on the bottom of the box, after monosodium glutamate.

Praline: (looking) Well I hardly think this is good enough. I think it would be more appropriate if the box bore a LARGE red label: WARNING: LARK'S VOMIT!!.

XiaoKJ
08-07-2004, 10:33 AM
law enforcers are already bogged down with malicious virus and worm writers. They don't have time for those relatively simple spywares and the likes, and some spywares have licenses that make them legal.

keyshawn
08-07-2004, 11:18 AM
btw,
may i ask what codec pack were you trying to install ?

On-topic,
It's been out of hand for a while now....at my school, with all win98&2k boxes, the spyware on them is usually horrid...windows isnt updated, IE is used as the internet browser, its crazy...

But hey - that's what knoppix is for ^_^

daYz
08-07-2004, 12:01 PM
I think the problem is caused by a virus, not by spyware. I have seen this before.

Syngin
08-07-2004, 12:05 PM
Found out what it was: Confusearch. AdAware lists it as malware. Strange that Norton AV didn't pick it up.

hard candy
08-07-2004, 12:06 PM
Spybot S&D (http://www.safer-networking.org/en/index.html) -works better than adaware, IMHO, and is freeware.

Spyware Blaster (http://www.javacoolsoftware.com/spywareblaster.html) - keeps spyware and cookies fromo being installed via IE and Mozilla/Firefox. Free also.

Both are for windows. But check your cookie file in linux as well.

XiaoKJ
08-07-2004, 12:17 PM
I always download mozilla firefox and mask the difference by making them as similar as possible.

There is the luna theme for mozilla firefox, and it runs fast enough not to have the splash screen.

Finally, I will always replace IE's icon with Mozilla's and use IE's icon for mozilla, tricking everybody to use it. Most ppl can't see the diff, and many can't see the diff even if they use XP and I don't change the theme to luna. Its quite sad that ppl don't even know the diff between browsers with the themes.

bwkaz
08-07-2004, 01:51 PM
Spyware? Adware? Huh?

What is this?

:p

(And yes, ActiveX is the spawn of the devil. Just in case anybody's wondering about that, I can honestly say that it has to be. What other explanation is there? :D)

SunOfTux
08-07-2004, 02:01 PM
I don't know how much this really helps, but there is a website called SpywareKilla (http://www.geocities.com/spywarekilla/) that offers a hosts file for download.

It basically reroutes a number of spyware server sites to your loopback interface (127.0.0.1), so they can't go back to their intended destination.

I simply merge it with my original /etc/hosts file and reboot. It also has instructions for Windows.

Does anyone have any comments or thoughts on this technique? I have reviewed the download file and it doesn't contain any malicious tricks to my knowledge.

Regards,
SunOfTux

Syngin
08-07-2004, 03:09 PM
Interesting idea SunofTux. I think I'll give it a go (and maybe mention that domain to them.

Syngin
08-07-2004, 03:16 PM
Geez, there's even a supposed spyware remover that has spy/adware in it hehe.

Give the review here (http://www.spywareguide.com/product_show.php?id=514) a read.

GigaShadow
08-07-2004, 05:08 PM
Although nothing is 100%, my Help Desk crew has found that the combination of AdAware and Spybot is most effective in getting rid of the majority of various little creatures that our Users let in......


Just My $.03....................G :D

Alex Cavnar, aka alc6379
08-08-2004, 08:03 PM
The most amusing thing about spyware is how ignorant regular users are of it.

I work M-F doing Technical Support. My job description is to "support the hardware we sell, and the OS we install on it". So, why am I constantly fighting spyware? Because my users are morons.

It's NEVER their fault that spyware is on their computers. WE must have put it on there! Consequentially, since WE put it on there, WE have to take it off. Well, I've got news for them....

My company has very recently instituted a spyware removal queue for phone support. If you call with a spyware-type problem, and our techs determine that you've got spyware, then they have two options for you: we tell them they've got spyware, and we say good bye, and wash our hands of them, or we tell them they've got spyware, and we send them to the spyware removal queue where they'll be charged $39.99 an incident to remove the spyware from their computer or do an OS reinstall.