SPYWARE, and how it could be beaten.

Status
Not open for further replies.
U

Undecided

Banned
Banned
I am wary about Spy ware after watching a report on the CBC which claimed that about 90% of all computers are affected by Spy ware. Giving your personal info out to anyone who would buy it, and totally destroying your personal privacy. A example cited in the report was a program called hotbar,and others.

http://aroundcny.com/technofile/texts/tec072003.html

http://www.thundercloud.net/help/hotbar-is-spyware.htm

Just one of the many programs that infect computers.

http://www.safer-networking.org/

This software should try to detect and rid you of spy ware. Since I am apprehensive, and paranoid about spy ware. Should I d/l this program, and should you?
 
download both ad-aware from lavasoft and spybot search and destroy from safer-networking. The real homepage is security.kolla.de, but you often get redirected to safer-networking. Alternatively, you can download mozilla and not worry (about cookies anyway.) Mozilla gives you tabbed browsing as a bonus, that's the main reason I use it. It's a hassle in some cases, sometimes to download you need to right-click link and select save target as. And some pages don't display right as a lot of sites cater to internet explorer, and it doesn't stay 100% true to html specs. And don't install hotbar :p
 
Exactly what can spyware do? Can it just pick up the information you do online or can it also view things on your hard drive?
 
Spyware has gotten much worse. I was on the phone with my brother tonight. He picked up something that won't allow him to go to Ad Aware or Spybots pages! I had him disable a bunch of junk in msconfig, but no luck. He may very well end up formatting and reinstalling to get rid of it.

Here is a great link, that links to several sites about spyware, http://www.overclockers.com/tips00561/ .
 
Get him to check his HOSTS file, it's usually the way that any Canonical domain name (Like www.sciforums.com) could be pointed at a different IP address, meaning that you'll load a wrong page.

Spyware has moved from the original tracking your purchasing movements for better advertising, to hijackerware which as mentioned can hijack your ability to browse particular sites.

I suggest if you get to clean your system down, make sure you make a backup of your systems registery, this will be useful in patching anything maliciously altered in it in the future.
 
Datura said:
Exactly what can spyware do? Can it just pick up the information you do online or can it also view things on your hard drive?
Click to expand...

Spyware, once installed onto your computer, can possibly do a number of things like read data from your hard-drive, record your internet use, use a keylogger to record everything you type, etc. What is more worrying is that they also often install a backdoor into your system giving the creator of the spyware easy access to your computer.
 
Because that site is blocked as well. I thought he could go to Netscape and get that browser, but Netscape won't come up either. We went through all of the settings in Internet Options, no luck. I'd have him delete it in the registry, but we don't know what we are looking for.
 
I just redid my computer before hooking up to the internet. I have Norton, and plan to download Spy-bot first thing. Anything else?

How do you just get a backup of your registry(XP)?
 
so download adaware and spybot search and destroy on another computer, burn them to a cd, physically transport them to the infected computer. What I'd probably do is just reinstall. It's not that complicated, just back up whatever files he feels he needs and can't get on the net easily. Personally, I reinstall every month as a protest to micro$oft. I refuse to authenticate. Reinstalling cleans up the registry, speeds up the system, ensures that hackers and viruses can't get a good hold on the system. It does take an hour or so to install, then another hour or two downloading updates (come on service pack 2!!) and reinstalling software, but not that big a deal.

There's another program I've never used personally, but I've heard about several times. It's called HijackThis or something similar. It's meant to deal with just your situation.
 
gifted:
back up registry. start menu/run/regedit file menu, export. Don't know how useful this would be necesarily tho, I think most people use it before installing programs or physically editting registry to undo any mistakes made.

get adaware as well. Spybot has an inoculation feature that prevents certain types of adware, not sure how well it works, but these programs don't generally run as a "shield". After browsing for a while and you've aquired cookies and whatever, run them and they'll clean it up.

Mozilla doesn't have the same cookie problem IE has, you might think about trying it out. And netscape sucks. Talk about spyware. Maybe not necessarily spyware, but definitely intrusive.

Do you have a firewall? If you're on broadband, you should definitely consider getting a hardware router. There's also software firewalls, Zonealarm and Kerio firewall are two of the best. Both have free versions and trialware (speaking of trialware, another good reason to reinstall monthly ;)). What else? Anti-virus? AVG is good and free.
 
Stryder:
Get him to check his HOSTS file, it's usually the way that any Canonical domain name (Like www.sciforums.com) could be pointed at a different IP address, meaning that you'll load a wrong page.
Click to expand...

Where would said HOSTS file be found? I am having a similar redirect problem, but it doesn't seem to be any particular sites. It just randomly redirects me to this one site.
 
Sounds to me like a spyware program I faced called something like IEDRIVER, What it did was insert random links to Advert servers to falsely bloat someones turnover per click by selecting pieces of text at random from you accessing a webpage and then turning it into a hyperlink, so that the victim wouldn't know that the links on the site didn't actually belong to the site.

HOSTS can be found on XP at:
C:\WINDOWS\SYSTEM32\DRIVERS\etc

The only other option would be to check that you haven't had some "Proxy settings" set.
 
Another silly question, but how do I open or check to see if there are any problems with the HOSTS file?
 
You can open the hosts file either by right-clicking on it, select open, select choose program from a list, choose wordpad or notepad. (I guess double-clicking it should work too, brings up the choose program dialogue box.) Or you can open notepad or wordpad, select file, open, navigate to windows\system32\drivers\etc\ select hosts and voila! You might need to change the open file extensions to .* instead of .txt.
 
Thanks, all I needed to know was what program to use...I guess I could have tried some, but oh well. Thanks again.

Edit: Alright, I opened it and it lists a bunch of sites. What am I looking for that might be causing my redirect problem?
 
the default should have only localhost as 127.0.0.1 all the rest are the redirects. What the hosts file does is define an ip address to a name. So if you wanted, you could define dese_nutz as meaning www.sciforums.com or rather the ip address of the site. Then you could type dese_nutz in the address bar it would take you here. This is what my default host file reads

-----------------------------------
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
--------------------------------------------------------
this is for an xp machine, I think they're all the same though.
 
I'm with invert_nexus on this.

Ad-aware and Spybot are great.
And get a firewall - personally, I use Sygate.

As for Virus protection - great little thing... DL and update online: F-Prot and F-Stop.

Be weary of Browser Hi-jack attempts, stuff like Xupiter...
Many progs are suspicious even if you don't think so.

I.e:

Bonzi Buddy
and most famously,
Kazaa

They take info from your PC, see where you've been online and send you pop ups accordingly... they take up bandwidth for one... and disk space.
 
Status
Not open for further replies.
Back
Top