Bah! Spyware. Whinging ahead!

[Michael Morris]

Also remember that, barring active X controls and javascript, port 80 doesn't normally let executable code in. Infectious worm attacks (such as MS Blaster) require the use of other ports which firewalls are good for.

Don't understate the value of firewalls. Recently a company in Louisville conducted a test where it connected multiple machines to the internet without a firewall or anti-virus and did nothing with them - just let them idle for a week. The two XP service pack 1 machines where infected within 2 hours and both where serving up spam and acting as zombie computers in 18 hours.

There are still hundreds of thousands of infected XP Sp1 machines out there with worms just itching for new hosts - those worms scan the net constantly looking for victims.

Again, this test was conducted without any user browsing or acting. The machines where simply turned on, their connections to the internet verified, and left alone.

 

[TheAuldGrump]

I gave it a go... a whole new list appeared.

Just looked again and they're all back. Guess there's something lurking away that my software can't find.

So far, it's been Spybot and Ad-Aware...

Anyone know any other solution I could try?

Anyway, definitely off to bed for me, else I'll turn into a pumpkin.

1. Turn off your system restore.
2. Reboot in safe mode.
3. Run every single anti spyware you have.
4. Repeat 2-4..
5. Reboot in normal mode, and turn system restore back on.

The Auld Grump, the evil blighters hide these days...

*EDIT* Throw IE out the bloomin' window, followed by Outlook Express...

 

[reanjr]

Tried to log onto the internet about 2 hours ago... for a quick ENWorld browse. My browser collapsed under 200 ft of spyware, spewed forth a couple of pitiful messageboxes and then gave up.

The next hour and a half went something like: spybot, reboot, adaware, reboot, spybot, etc, vomit, etc... until the last persistant little blighter was removed (Huntbar). Can anyone think of a better way to spend a Monday evening?

Here's some sensible options:
1) Get a non microsoft browser.
2) Check for spyware when the thing starts to slow down, rather than when it implodes.
3) Get a non microsoft operating system. One made out of Linux or Wicker or Something.

#1 and 3 are only stop gaps. In recent months, Firefox has experienced more security problems than IE due to its increased popularity.

I suggest not clicking on things to start. Add to that a firewall, and you're pretty much set. Oh, and software exists in one of 3 available states: amateur, open source, and commercial. If it's not open source, and you are not paying for it (directly or indirectly), then it usually has spyware/adware.

Education is the biggest thing. Add to that a decent firewall. And be aware of what you are doing. Try to consciously decide whether or not you want to <<click here>>. Also, don't support companies that use it. The only spyware I've ever gotten I got from Real Networks (a long time ago; a friend who subsequently lost his login to my computer installed it) and AOL (AIM). I immediately removed all AOL products from my computer and have not used one since (includes AIM, ICQ, WinAmp, and many other "popular" applications).

I've heard Real Player 10 is spyware free, but it makes no difference to me. I'll never use another product from them again. (now that I think about it, I think Real is owned by AOL as well)

 

[reanjr]

Indeed IE can be a real pain - I still use it myself however LOL I'm used to it. I do have Opera installed, but to be honest I always forget about it and just click on the "E" when I want to get online. There are plenty of non-MS browsers out there to choose from - my friend installed Opera for me saying it was good, but really with my setup I haven't had any problems as-is, so haven't bothered to play with Opera.

You should. There's a lot more benefit to using Opera over IE than added security. You could always remove the E. I almost never some across websites anymore than require IE and I can't think of anything IE is actually better at than other mainstream browsers.

 

[reanjr]

Migrating to Linux is another possible solution but not for the faint of heart. Consider using a dual boot configuration and playing with it first. Linux doesn't have as wide a software library as Windows and it will take you awhile to get used to it's idiosyncracies. Once you learn it though, it is 1000 times more secure (and securable) than winbloze.

Even better for those who just want to try it out are what are called Linux Live CDs. Basically, you pop in the CD, reset, and you're running Linux. Doesn't write anything to your hard drive at all, so there's no impact and no real chance of messing anything up.

Unless you know what you're doing, then you can mess thing up just fine, which is exactly opposite of how things normally work...

I had good luck with the SUSE Live CD and many find Knoppix to be be one of the most solid.

 

[TheAuldGrump]

Firefox 1.02 just came out, and addresses some security issues. As far as I know no exploits had yet targeted those vulnerabilities - Unlike IE they are updating as soon as they find out about them rather than waiting for a few months...

The Auld Grump

 

[Darth K'Trava]

*EDIT* Throw IE out the bloomin' window, followed by Outlook Express...

I don't even use outlook express due to all the problems associated with it. Unfortunately, getting rid of IE isn't something I can do as AOL uses it for their in-house browser.

 

[Elephant]

I don't even use outlook express due to all the problems associated with it. Unfortunately, getting rid of IE isn't something I can do as AOL uses it for their in-house browser.

Um, you can use any browser you want once you've signed on. There's nothing forcing you to use AOL's (crappy) in-house browser.

 

[RandomPrecision]

Although I'm considering plan 3:

Build some really clever tracking software.
Use it to hunt down spyware writers.
Go round their house.
Put piles of MY rubbish on THEIR lawn.
See how much they like it.
Laugh.

I once traced the sender of many spam e-mails that had irked me for quite a long time, and using some whois programs and google searches, found out where the guy lived (a condominium in California near Silicon Valley). I sent him a can of Spam and reported him to his ISP.

Haven't gotten any new e-mail from him since.

 

[Darth K'Trava]

Um, you can use any browser you want once you've signed on. There's nothing forcing you to use AOL's (crappy) in-house browser.

I could but it's annoying going from one window to another..... the in-house one is easier to deal with.... I already have multiple windows open for other stuff as it is....

I know.... I'm lazy......