Jump to content
C-Fu

Warning! Spyware Zaman Baru Dah Keluar

Recommended Posts

huk alah...sedihnya top leading av company terpaksa heret org pegi mahkamah semata-mata nak update virus patch...ni symantec buat sebab kebajikan user ke atau commercial opportunity(ies)? tongue.gif

mane ade kompeni yang buat untuk kebajikan user. private kompeni buat duit, dan kalo sesatu action tu boleh buat duit (contohnye macam action ni), maka dia buat la. just "kebetulan" yang action ni jugak bagus untuk user.

and jangan pos bende offtopik macam arc.exe kat thread ako. kalo malas sangat nak bukak thread snirik then jangan masuk putera langsung.

Edited by C-Fu

Share this post


Link to post
Share on other sites

Homepage Hijacking

One of the most common symptoms of spyware infection is “homepage hijacking”, or when your default browser homepage has been forcibly changed to a new website without your permission.

Most current spyware programs will also prevent you from changing your homepage back either by disabling the functionality in your “options” menu setting or by installing some type of program that will regularly switch it back to the rogue website. Even if you can reset your homepage, upon reboot it will be reset to the Homepage Hijacker setting.

Hijackers may also route all of your website requests through an unknown third-party for tracking. Aside from being an invasion of privacy, this can dramatically slow down your browser.

These programs are more than just annoying. They can cost you your job, your relationship, or your reputation should somebody use your PC and be led to believe that you are spending a good portion of your time surfing pornographic or even criminal websites.

Here are a list of some of the more common browser and homepage hijacking programs out there:

AutoSearch

IGetNet

CommonName

NewDotNet

Share this post


Link to post
Share on other sites

About:Blank

About:Blank is another name for the CoolWebSearch morphing spyware. As mentioned in the CoolWebSearch article, this is one of the most insidious and prevalent spyware programs currently on the net, largely because it is nearly impossible to remove. This particular spyware has been unusually active over the past two weeks (October, 2004).

About:Blank displays the following characteristics:

1. Replaces your home page with a new one titled "about:blank". This page contains a pseudo-search engine with various subjects like "art", "cars", and "shopping".

2. Installs a Browser Helper Object into Internet Explorer. This BHO consumes system resources and slows down your internet connection.

3. Restores itself after its file directory is deleted.

4. Restores its registry settings once they have been deleted.

5. Is difficult to remove from memory.

6. Starts with the operating system. If you remove it from the auto-start settings, it will restore itself there.

7. Later versions change their executable to avoid detection by the simple hash recognition algorithms that most anti-spyware products use.

8. May also store executable code in your temporary internet explorer files.

Share this post


Link to post
Share on other sites

mane ade kompeni yang buat untuk kebajikan user. private kompeni buat duit, dan kalo sesatu action tu boleh buat duit (contohnye macam action ni), maka dia buat la. just "kebetulan" yang action ni jugak bagus untuk user.

and jangan pos bende offtopik macam arc.exe kat thread ako. kalo malas sangat nak bukak thread snirik then jangan masuk putera langsung.

Alamak...c-fu mare la...sowi eks

nnt aku bukak thread sendirik....=)

No offense k...hehe

Share this post


Link to post
Share on other sites

Info Putera.com...

Spyware or Slyware?

AOL caused a stir among users when it introduced AOL Instant Messenger's most recent update, version 5.5. This version installed WildTangent, which most security programs identify as spyware, yet companies such as Hewlett-Packard and Gateway deliver it preinstalled on many of their machines. The WildTangent site (www.wildtangent.com) says that its Web Driver platform is merely an enabling device for high-quality online games.

If you're an AIM user, you probably agree to upgrades fairly automatically, as insurance against bugs, hacks, and future incompatibilities. But the initial release of version 5.5 didn't tell users it was going to install WildTangent, which users deplored. In apparent response, subsequent revisions do make this clearer. But questions remain: Is WildTangent evil or is it innocent fun? Are we too quick to label as spyware any software that ends up on our machines without our knowledge? The answers depend on your level of paranoia and how protective you are of what software gets loaded onto your PC.

We tend toward the paranoid, and run Spy Sweeper, Spybot Search and Destroy, or Intermute SpySubtract weekly on our active machines. We regularly remove tracking cookies and the occasional browser helper object or registry entry. But even we were surprised when SpySubtract detected 122 WildTangent registry entries on one machine running AIM 5.5. We let SpySubtract delete them, and then reloaded AIM to see if it behaved any differently.

AIM loaded its games icon with the others on the bottom of the buddy list window, and when we clicked on it, it brought up a selection of games. We then reran SpySubtract to see if AIM had reloaded the software. It hadn't. You can choose games and invite other players, and the system doesn't attempt to redownload the WildTangent software until you actually get to the point of starting a game. Unlike the AIM 5.5 installation, however, WildTangent asks for your permission.

So how evil is WildTangent? Not very, in our estimation. Its most objectionable feature is that it uses global unique identifier (GUID) tracking when it logs into the game servers. According to WildTangent's privacy statement (www.wildtangent.com/default.asp?pageID=privacy), it may collect name, address, phone number, e-mail, and other contact information and, with your consent, may share this information with other parties. It also collects information such as your CPU speed, video card configuration, and DirectX version. The information is used for tuning WildTangent's games and product offerings, and if shared, will only be shared in an aggregated manner, without identification.

WildTangent is self-updating and it doesn't ask for permission. We prefer software that is up front about its updating, because the software's features and the privacy policy could change at any time, and we'd rather be aware of the changes. ZoneAlarm does not appear to stop WildTangent's conversations with its host; in this case, we assume that it operates under AIM's permission umbrella.

If you're not playing WildTangent games, there isn't much point in having it on your system. The easiest and most thorough way to disable it is with an application such as Spy Sweeper; it's kind of tedious to remove all of those registry entries manually. But you can do a quick and dirty removal using Windows' Add/Remove Programs. If that doesn't work, try this:

Start the Regedit and browse to HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run. Look for the value "wcmdmgr" in the right pane and delete it. Then close Regedit and restart your machine. Remove the subfolder "WT" from your WINDOWS or WINNT folder. Note that the antispyware applications will probably not remove the \WT folder or its contents; you still have to do that manually.

The debate over products like WildTangent won't end any time soon. In the meantime, monitoring what's on your machine is the best defense against truly harmful programs. We recommend scanning once a week or, preferably, using your spyware tool's active scanner to catch spyware before it gets on your PC.

Share this post


Link to post
Share on other sites

bodo ko jangan merepek kat sini leh tak

Share this post


Link to post
Share on other sites

bodo ko jangan merepek kat sini leh tak

ngeri plak cite ko................ ohmy.gif tapi kalo PC ke3 aku ade nie.......Data Rollback ..............................bleh elak ke..........utk pengetahuan ko..........software nie bila active dia...dia akan protec PC kite.........cth masa tengah protect tu kau pegi ubah regedit pastu PC lapor fail missing....................................kire lepas tu kalo kau restart balik PC ko......dia akan normal cam biasa cam tak de laku apa2.............tolong jawab yek smile.gif

Share this post


Link to post
Share on other sites

huh?! spyware ganas!!! ala aku dah guna Advance System Optimizer... Nohal lah kalo bersangkut paut ngan spyware nih!!!

cos dia bagi pakage Anti spyware ngan pop-up blocker sekali!!! senang gile nak surf internet!!!

Share this post


Link to post
Share on other sites

Kalau taknak kena spyware yang bukan² , jangan lah pergi site yang bukan²..

Share this post


Link to post
Share on other sites

Kalau taknak kena spyware yang bukan² , jangan lah pergi site yang bukan²..

btol² hehe tongue.gif

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

×
×
  • Create New...