Malware, Adware and Spyware
 

I just got done cleansing another computer of the junk that seems to creep into our daily on-line lives. Malware, Adware and Spyware are serious problems. I preach safe computing to the team and it helps, but still problems occur.

My question is what do you use to keep your systems running well? Does anyone keep Java and ActiveX turned off?

My list……

Spybot
Adaware
Hijackthis
Google Toolbar for popups
A current anti-virus program

Anything better out there??????

Re: Malware, Adware and Spyware
 

Thats my list minus Hijackthis, i'll check that out. I have IE set to medium security and privacy. But like you said, you have to teach people how not to get spyware. Most people click yes or ok on any box that they dont recognize which is very often a box asking to install "Precision Time" or "Gator".

Re: Malware, Adware and Spyware
 

I am a big fan of Spywareblaster.

It doesn't scan for currently running spyware, but keeps it from ever installing. Sort of like an antivirus patch for spyware. And like all the best antispyware programs, it's free and updated often.

For active scanning, I happen to use Adaware. Although I don't often turn up anything more malicious then tracking cookies these days.

-Andy A.

Re: Malware, Adware and Spyware
 

Switching to mozilla seems to help a lot on the pop-ups. I was using ZoneAlarm until it caused a problem with my IP. And was using Spyblaster also but got rid of it when I thought it was causing the problem but I think I might put that back on it seems like it works. Other than that I use adaware and spybot and run the corporate version of Norton Anti-Virus every night. I really need something to stop IE pop-ups. I can't get rid of it because you can't download XP updates without it.

Re: Malware, Adware and Spyware
 

I use Mozilla to block pop-ups, web-based email & don't open attachments, AdAware now & then, and reformat every 4-5 months.

Re: Malware, Adware and Spyware
 

Linux :D

Re: Malware, Adware and Spyware
 

I run Zone Alarm as one of my firewalls, I also run the one built into win XP, and my third firewall is inside my wireless router. I also run Norton Antivirus Corporate edition. (I got this from my college for free) I also have the cleaner, which is a program specialy designed to remove trojans. I have almost no pop-ups, and any spy-ware can't comunicate with the internet, because of the firewalls. :cool:

Re: Malware, Adware and Spyware
 

I use a Macintosh. :)

Re: Malware, Adware and Spyware
 

Same here. Let the PC users deal with this stuff, we have more important things to do. :)

Re: Malware, Adware and Spyware
 

I use Adware 6.0, and Norton Antivirus Corporate Edition......and msconfig haha. Our school provides most of the software we could want to all of the computers on the network (Windows XP pro, Office XP, Norton, Adware etc) for free. To stop the popups I use Mozilla Firefox.........well actually right now its calling itself Mozilla Supergoat due to an extension I added.
-Aaron

Re: Malware, Adware and Spyware
 

I use:
Opera internet browser
Ad-Aware
Spybot
Panda Platinum (Antivirus/Firewall)

Panda is pretty amazing, far ahead of norton/mcaffee

Re: Malware, Adware and Spyware
 

In our school system we only use Ad-aware or our new favorite spy sweeper which seems to catch more things than ad-aware.

Ad-aware

Spy Sweeper

Re: Malware, Adware and Spyware
 

I use the standard Spybot/Ad-Aware combo, AVG Antivirus (free for personal use), and my own manual registry hacking.

The Google Toolbar works wonders for pop-ups in IE, but I use Mozilla Firefox for everyday browsing, only opening IE for Windows updates, or the rare site Firefox won't render properly.

I must say though, that spyware/adware/crapware is becoming more of a problem than viruses. I work for a small computer repair shop, and well over 80% of the problems we fix are directly caused by this stuff- pop-ups, slow computers, even corrupt winsock files and registry entries (resulting in loss of internet connection).

I think the biggest things they come with are the file sharing programs like Kazaa, LimeWire, iMesh, etc. Lots come from fake banner ads and pop-ups posing as Windows system messages (with messages like "your clock is not set" and "if this is flashing you have ______") people unwittingly click on. What's worse is that many are accompanied by downloader trojans, so once you get one, within a few weeks you'll end up with a bunch more.

You know it's a sad world when people try (and succeed) making money by hijacking your personal property for their malicious use (either as a spam relay, or constantly producing advertising pop-ups). Makes me very happy to be part of FIRST, with the hopes that within a few generations, Gracious Professionalism will work it's way up the corporate ladder and this sort of thing will be frowned upon by the supporters of this type of marketing.

Re: Malware, Adware and Spyware
 

On all three of my machines (HP Pavilion desktop, ze4100, and zd7000)... I have always been very fond of running Zone Alarm and Ad-aware. I run Norton Corporate usually as a standard, I am running the 90-day "prescription" for the standard Norton on the new zd7000.

.... I was always fond of IE. I ran Mozilla for a short time almost two years ago, never quite liking it. Wow! I just loaded Firefox - amazing! I love the google box! :D

Re: Malware, Adware and Spyware
 

Now I am scared. I only run a Mcafee virus scan/ firewall. I only have a dial up connecton :ahh: :ahh: Is there anything that I should be afraid of?

Re: Malware, Adware and Spyware
 

I have been having one #@&*% of a time with adware and spyware. I get pop-up ads without even having a browser window open! So I am now running AVG Antivirus, Spybot, Ad-aware and Stinger. I'm probably going to add Zone Alarm, and have seriously been thinking of going to Mozilla for my browsing needs... By the time I finish, I'm going to have a safe computer, but no memory left for anything else! :mad: It kind of makes me dream of doing evil, evil things to the people who create adware and such...

Heidi

<=========>
Evil, I tell you!

Re: Malware, Adware and Spyware
 

I have Ad-aware, XP firewall, Google toolbar, Hijackthis, and have pondered installing ZoneAlarm, and when at home, dial-up so im not online that much.
Eric

Re: Malware, Adware and Spyware
 

I run Zone Alarm and Norton 2003 all the time, and Ad-Aware and Spybot about once every 2 weeks. My popup blocker is my right index finger :p

Re: Malware, Adware and Spyware
 

Most of the above, plus, to "keep my computer running well" I use registry cleaners of various sorts. Although, I wouldn't recomend that to anyone who doesn't even know what the registry is... :p

Or, just go with Linux. You are instantly protected from the most common everythings... :cool:

--EDIT--
Oh, yeah. MissInfo. I can't see your computer, but they might be Windows Messenger windows. Try "shoot the messenger." (Put that into Google.) Or, find it under the Windows services and set it to disabled.

Re: Malware, Adware and Spyware
 

My advice is to just reformat...my friend had the same problem and no matter what he did, he couldn't get the popups and all that crap off his system.

As for me, I run SpyBot: Search and Destroy on my systems about once a week, and that cleans most of the junk out...But as for anything else, we do Norton Antivirus which will *usually* protect.
*WARNING - Possibly offensive material in the next paragraph*
As for the people who repetitively get things like BonzaiBuddy and xupiter on systems, a lot of times it doesn't really help to preach to them because these are the people who don't know a lot about computers. They might just get another annoying piece of adware stuck on the system at some other point, so we just try to keep them informed on what kind of stuff to download, and what shouldn't be downloaded, as well as what should be avoided at all times.
Does that help any?

Re: Malware, Adware and Spyware
 

Hwello,

On my Windows system (my laptop) I use the IPSec Filters as a sort of makeshift firewall. I use Mozilla Firefox as my web browser. And msconfig is a good friend.

I used to run things far more securely. I had created a separate user account, stripped it of most of its rights, and ran IE under that user's context, using "runas" . But it was unnecessary once I switched to Firefox. I still run my Java interpreter under that secondary username though.

Re: Malware, Adware and Spyware
 

Mozilla Firefox
http://www.mozilla.org/products/firefox/

Firefox is, in my opinion, currently the best browser. And it's opensource!
I'm convinced that most problems on a windows computer come from Internet Explorer. I can't think of any good reason to use IE.

Try Firefox.



Other programs I use, all are free:

AVG Antivirus - free for personal use
http://www.grisoft.com/us/us_dwnl_free.php

AdAware (adware cleaner):
http://www.lavasoftusa.com/ (use the free version)
AND/OR
SpyBot S&D:
http://www.safer-networking.org/

SpyBot is probably better.

Zone Alarm (firewall):
http://www.zonelabs.com/store/conten...id=zadb_zadown

Re: Malware, Adware and Spyware
 

I dont remember what site or forums I read it on but just the other day I read where some guy was having to register with his state as a sex offender due to child porn. He swears that he never went to those sites but it was a popup program that continually opened windows while he was browsing that sent him to those sites........It would really suck to have been falsly accussed of something such as this. Remember you are responsible for the content that is on your computer.
-Aaron

Re: Malware, Adware and Spyware
 

Another program I use is Startup Mechanic www.startupmechanic.com
You see what starts up when you start your computer and can disable it.
I also subscribe to Fred Langa's langalist newsletter which contains a multitude of gret tips.
Good Hunting
Ken

Re: Malware, Adware and Spyware
 

Yeah, thats kinda funny. It was on Slashdot yesterday

Re: Malware, Adware and Spyware
 

If he could prove he had a virus he probably could beat that rap. Someone infected our work computers with a virus a couple of weeks ago, and I was the first one to notice something was wrong because I'm very aware of oddities involving my computer (computer security is what my computer Guru does for a living). Well, when our computer department finally came to the conclusion that something had indeed slipped past their firewall and virus scanner (and weren't they just eating crow...), they ran the necessary programs to clean my computer up and found lots of porn ads and what not. I was pretty embarrassed and made some comment about them now knowing how I spent my lunchtime, but they quickly reassured me that it was typical with this virus (and later I read about the virus on the Net and they were right).

Thanks Texan and Jake for the tips on "shoot the messenger" and reformatting. I'm also going to try to run some of my scanners in safe mode in case there are "problems" that initiate themselves on start-up. I use the Net a lot, but I rarely download things or register for things, so I'm a bit miffed by all of this.

Heidi

<==========>
yes, I know I actually use words like miffed

Re: Malware, Adware and Spyware
 

Okay. All these people like AVG so much...

If you don't for some reason, I use Avast! Home edition, which is free for personal use, although to get updates you have to register. I've never had a complaint with them yet though. Plus, it comes in several different OS versions. :)

Re: Malware, Adware and Spyware
 

If nothing above helps, Backup your data, Re-format. Then, don't put back your data, make sure its virus+ad-ware proof.

The greatest advice I can give: WATCH THE WEBSITES YOU GO TO.

Even what you think is "Safe" websites, might contain the worse ad-wares/spyware. Softwares such as Ad-aware, Spybot, etc. help a lot in cleaning, but sometimes, manual-editing/re-formatting is the only choice. Some get infected so strong, they are literally sending out vital information you and your computer to whoever...

Another great idea is to use Mozilla Firefox or any Mozilla browser. I have read articles of IE containing more than 30 un-fixable holes(by Microsoft) in IE. So basically, Its so easy to hack in thru IE. One famous instance is, remember those things in AIM/AOL Buddy Profiles saying "I can't believe I found your picture here, HAHAHA". That thing installed thru IE without your knowledge. All you did was go to the site and choose a buddy picture.

Also, If you don't use these, disable them: UnPlug 'n Pray and Windows Messaging system. Go to www.grc.com to get softwares to disable them. They will reduce spyware/crapware to a good extent. That site also has other good stuff you might want to look at.

A Firewall of some sort is essencial. If you don't have one, your computer is basically wide open. I personally use ZoneAlarm and it works just fine.

So if you are in a situation where you can't get rid of spyware:
1) Backup Important data
2) Re-Format computer
3) Check backed up data for virus/spyware etc.
4) Get your data back up on your computer(duh)
5) WATCH THE WEBSITES YOU GO TO

Number 5 is the key. Good Luck

Re: Malware, Adware and Spyware
 

Does a firewall on a router actually put up any substantial form of defense? I run and manage two seperate wireless networks, and I know that it claims "built in firewall", etc. but what is it actually doing inside of there? :confused:

Re: Malware, Adware and Spyware
 

A router definately helps in blocking certain viruses and spyware etc. Bascially the built in firewall blocks ports which are normally not used by websites, which therefore stop intrusions. A good firewall should provide a certain amount of software control too. If you have ZoneAlarm, you can set it so it asks you permission for every program that wants to access the internet. When a program which I don't know tries to gain access to the Internet, I block it and get rid of it. You can test your firewall here. www.grc.com is a great resource.

I am not genius in this stuff, but I learnt a lot as time went on just because I needed to protect some of my files and take extreme care of them. In the process I studied quite a bit. Another fact: When Symantec Corp.(Norton AntiVirus) work with viruses, after they test each virus, they re-format their computer, because they don't trust them, not even if its a minor worm. The Internet is wonderful, just use it carefully;)

Re: Malware, Adware and Spyware
 

Pop ups- earthlink
Spy ware- Spy bot search and destroy
Virus- Norton
Spam-Norton
Adware- Spy Bot

Re: Malware, Adware and Spyware
 

What is implemented on most gateways is not technically a firewall, but provides firewall like bennifets.
A gateway is a device that connects multiple computers through 1 internet connection and out to the internet through a technology called Network Address Translation (NAT). I think gateway is what you meant by router.
By putting the gateway in front of your network it will stop people from being able to penetrate your network and attempt to port scan or enter your computer through traditional hacking techniques. As you may have noticed, most worms propogate by connecting to a port on a computer and abusing a service. The gateway stops people from initiating connections to your computers behind it.

This is all true unless you use routing. In which case packets destined for ports on your gateway get sent to a computer of your selection.

Re: Malware, Adware and Spyware
 

norton anti-virus / always on

webroot spysweeper

pop up stopper campanion

Re: Malware, Adware and Spyware
 

You should be ok, as long as Mcafee is kept updated. I only use Norton Antivirus and Mozilla, although I did use adaware to get some spyware off my parent's computer. I've just never let any on.

The best way to prevent spyware and such from getting on your computer is to read boxes that pop-up before clicking ok. Once you get one peice of spy/adware on your PC it can add five more almost instantly. This is what happened to my parents, the day after I reformatted their HD. I don't know how the first peice of software got downloaded (my parents are usually smart about that kind of thing), but as soon as it was on there were about 6 others. When you deleted them via "Add/remove programs", it was still there. When you deleted it's directory in "c:/program files/" it came back. So my brother reccomended ad-aware, and it worked great. But there's no need to get it until you have a problem.

Re: Malware, Adware and Spyware
 

From some searching and cleaning last night on a customers computer ive found this really neat page.
Task List
It lists most tasks that can appear in task manager (right click start bar choose task manager) It lets you look up all those cryptic names and see exactly what those programs are, all listed by the first letter, and most with instructions on how to rid yourself of them. They are trying to sell their software by this site too but I have no experience with it so cannot vouch for it. But the task list was great and answered an age old question for me.. what is this alg.exe and why was it running.

Re: Malware, Adware and Spyware
 

Also, note that some spyware/adware is not going to show up your task manager instantly. It may launch when you launch another application. Sometimes you won't be able to even end the task in task manager. Sometimes, even when you end it, it comes back. These are the sort of problems you have to deal with. However, what Justin Stiltner suggested is an excellent way to check what adware/spyware you have one your computer... Good link Justin.

Re: Malware, Adware and Spyware
 

As was said before by many people, using non-ie browsers help. Firefox is popular, but I use Opera. The main difference is Opera is a product you must pay for if you want to get rid of (in my opinion completely unintrusive) banner ads while Firefox is open-source (free). I say banner ads loosly because these ads aren't bad at all - I set Opera to display the google text ads... these ads are always relavent to the site I'm on (i.e. on chiefdelphi, its always sites for robotics kits ;) ) and every now and then I find them useful. Both Opera and Firefox offer improvements over IE such as customizable interfaces, putting bookmarks directly on the interface (kinda like the windows quicklaunch bar), tabbed windows (MUCH better than having 40 ie windows open in your taskbar), automatic pop-up stopping (I don't have any popups), and my favorite, mouse gestures. Mouse gestures in particular I find awesome because once you get the hang of them, you can move forward, move back, close windows, open windows, etc. by a single quick mouse motion. Last time I checked, Firefox didn't have these, but it may have changed. My biggest complaint about Opera is it doesn't seem to be able to stream video files - if you click on a link, it downloads the whole file first rather than opening it up immidiately in WMP and have WMP stream it. I'm sure there's a way to change that, but I haven't tried looking it up. Anyways, Opera is my preference - take that for whatever you want to take it.

The important part is most spyware gets onto your computer from security holes in IE. The biggest advantage of using Opera or Firefox is spyware is designed to infect your computer using IE. If you don't use IE, spyware simply doesn't get onto your system. I have Adaware and Spybot, and I run them every now and then... the worst thing they find is a buncha cookies.

On a similar topic, KEEP WINDOWS UPDATED! Again, Spyware finds its way onto your system through security holes - many of which have patches released shortly after they become a problem. Make sure you have Windows Automatic Updates turned on - this is the easiest way to make sure your system has the latest fixes. If you don't have XP, go to windows update atleast once a week. It'll save you both from spyware and viruses.

Another thing you can do to fight spyware is something called the windows HOSTS file. Using this file, you can essentially block any ad/spyware server. If you're interested in the technical details behind this, read this paragraph. Otherwise, skip to the next paragraph. There's this file hidden in windows (C:\Windows\System32\drivers\etc if you're on XP) - its essentially a DNS lookup table (computers only know how to get to servers by their numerical adress, or IP adress - something like 148.47.12.4. When you type something like www.google.com, your computer first contacts a known DNS server and asks, "what is the ip adress registered to www.google.com?" The DNS server responds with, "148.47.12.4" or whatever it is. Your computer then queries google using that ip address). The Windows TCP/IP protocol stack checks this file for a DNS entry before it queries its default DNS server. Someone discovered that if you put the domain names of ad/spyware servers into this file and have their associated ip be the local TCP/IP loopback ip of 127.0.0.1, then even if a popup is not blocked and a request is sent to say, ads.doubleclick.com, if there is an entry for ads.doubleclick.com in the HOSTS file, Windows automatically sends that request to 127.0.0.1. But since nothing exists at 127.0.0.1, that request doesn't get a response and presto! you're saved from seeing an ad. Doesn't matter if IE sent the request, Opera, Firefox, or a malicious program - since this blocking is a Windows hack, Windows makes sure that whatever program sent the request doesn't get a reply -- in essence, using the HOSTS file in this way causes Windows to not know where to find the malicious websites. Some people have collected long lists of popular ad servers and compiled HOSTS files that you can download.

In conclusion, I present
Dan's Abridged Guide to Keeping Spyware Off Your System
1. Scan for existing Spyware using spyware programs - the most popular being Adaware and Spybot: Search and Destroy. Read this thread for other programs people use and are happy with.

2. Don't use IE. Although its hard to let go (it was for me), other browsers offer better features than IE, including built-in pop-up stopping - the most popular ones being Opera and Firefox. In addition, because IE is so popular, spyware is designed to exploit IE-specific holes. If you use a non-IE browser, a lot of spyware doesn't even know how to attack your computer

3. KEEP YOUR SYSTEM UPDATED! The main reason viruses spread is because people don't install the latest patches. This is also true of spyware - windows updates sometimes fix the holes that spyware exploits to get onto your system. Windows XP has Automatic Updates - all you need to do is turn this on and forget about it... Windows will automatically check for updates and download them. If you don't have XP, check the windows update site atleast once a week.

4. The Windows HOSTS file offers a nice hack for your system to block ads and spyware. An example HOSTS file with a long list of blocked ad/spyware servers can be found here: http://everythingisnt.com/hosts.html. If you search, I'm sure you'll find others.

The most important thing is to be intelligent. Don't go to sites that give you lots of pop-ups. If something does pop-up asking you to install something that you didn't request, obviously hit No or Decline. Hope this helps, and happy surfing.

Re: Malware, Adware and Spyware
 

I run McAfee Virus, Firewall, and Privacy Service. I also run AdAware about once a month. I use Opera 7, it took me a while to get used to it but now I can't stand anything else. It blocks the pop up ads and allows tabbing with a stylish look.

Re: Malware, Adware and Spyware
 

I wouldn't do that if I were you. It sounds like you have a varient of CWS, or Cool Web Search, which is notorious for reinstalling itself from a hidden dll after you remove it. You can try using something like CWShredder from http://www.spywareinfo.com/~merijn/, or if that doesn't work, download HijackThis (from the same site), and post your logs to the SpywareInfo Forums.

If you read through the SI forums, you will see that they were able to fix some incredibly resilient malware problems.

Re: Malware, Adware and Spyware
 

McAfee Firewall
Adaware
Spyboy
Analog POW! to block popups....with POW! you train it to block certain items, and you can unblock certain items if you accidently block the wrong one...its a nice program especially since a lot of your popups are based off a handful of sites....i really havent had a popup problem since after I got POW!

Re: Malware, Adware and Spyware
 

ZoneAlarm. I don't do pop up stuff (too many legit popups). And we have yet to find badware as it is. And in the last 44 minutes, I've gotten 48 access attempts. all blocked.

If you use a hardware router, I'd say put it on every computer. If the router is a computer, load it there.

And the best remedy: keep your computer off the web. ;)

Re: Malware, Adware and Spyware
 

Norton Antivirus
Adaware 6.0
Spybot
Zone Alarm
Default XP firewall
mozilla firefox
google toolbar if using IE