Spyware, Popups, etc., DDR Freak, and you.

JB4GDI · Trick Member Joined: 13 Sep 2003 Location: Derby, CT

I'm not an expert on Spyware, but I have picked up some tricks on how to find and deal with it.

*This is just for future reference, I realize it probably won't solve everyone's problem but it will help with some of this undeletable spyware that programs haven't caught yet.*

http://36echo.com/jb4gdi/mscpbo.txt

Basically, run a search for files created on the day you first noticed the problem. Isolate the files (they are normally .exe and .dlls) and like someone said, try the 'Hijack This!' program.

I've also heard you can boot up in safe mode and permanently destroy duplicating .exes without that safeerase program I found.

This is just for the hope that it helps someone.

-Jaime

IRONMONKIE · Basic Member Joined: 27 Mar 2004 Location: NYC

This may help.

Any computer user who sees a window flash followed by a homepage switch has NOT patched their computer since June of 2003. Microsoft has offered a fix to this problem for over 8 months now. It's not the actual iframe that is causing the problem. It's users who installed kazaa or imesh or have adware that reacts to certain banners, especially music related banners. If the user's computer has this adware, it changes a homepage based on certain banners. Sometimes the adware changes the banner itself to a different banner too. The original banners themselves are innocent. The users need to remove the adware from their system and they need to patch their computer using microsoft auto-update or from microsoft.com. The patch is ms-032 and ms-040.

princessangelic · Trick Member Joined: 25 Nov 2003 Location: western mass

Neither Spyware search and destroy nor ad aware will work for me as I have a mac and macs cannot open .exe files or .zip files. And house call won't work because my browser isn't supported by it. Anyone have any ideas or file names that I can manually search for.
_________________

SWEET DDR SHIRTS

Cutriss · Staff Member Joined: 24 Jan 2002

princessangelic · Trick Member Joined: 25 Nov 2003 Location: western mass

Cutriss · Staff Member Joined: 24 Jan 2002

Dross · Trick Member Joined: 26 Jan 2002

Firefox, Firefox, Firefox. Cutriss knows what he's talking about. It's faster, has better support for new standards, blocks popups and background installs, has tabs, does everything on its own that you have to install huge memory-eating addons to IE to do (including search bars for many search engines), is skinnable...

Need I go on?

Edible Bondage Tape · Trick Member Joined: 26 Jan 2002 Location: Kerri

has anyone made plugins to make the menus auto hide to the side and pop back out at a mouse movement yet nad how about makeing a full screan mode that dosnt suck
_________________

xphoguytonyx · Trick Member Joined: 26 Dec 2003 Location: Haltom City, TX

use zonealarm pro. it keeps spywares,viruses and popups out of ur computer. it works too.

Chealion · Posted: Fri May 14, 2004 2:28 pm Post subject:

I didn't see this posted, so if you ever get hit by a virus check out Stinger, free and great for removing viruses that have infected your system.

Personally I just use my Mac and Safari's pop-up blocking, but that's me. Firefox is an awesome program if you are using a PC as echoed numerous times in this thread.
_________________

Chealion - The one and only.

Cutriss · Staff Member Joined: 24 Jan 2002

Does anyone get a message/warning from their spyware/virus apps about W32.Pariti.B when they visit the site?

I just set up a new PC strictly for playing FFXI, and the only things I've done on that PC are:

Run Windows Update
Updated drivers from Asus and Nvidia
Updated PlayOnline
Visited Asus.com, Nvidia.com, Slashdot, and DDRFreak *in Internet Explorer*

And now it has Pariti.B apparently, and I can't run PlayOnline anymore.

I doubt it was delivered through any Blaster-type DCOM exploits, as I'm tunneling my connection through my Win2K laptop, which has DCOM shut off.

Considering prior problems, I figured I'd ask here.
_________________

Sentient Mode is capable...

xphoguytonyx · Trick Member Joined: 26 Dec 2003 Location: Haltom City, TX

omfg, i find a win32 and winsassar on my computer. it came from ddrfreak.com (this site). bc thats the only site i been on ever since i bought the computer.
_________________

Site coming sooN....
www.DDRTX.Net
Dont come to my site if u going to spam...

~~~Tony~~~

VxJasonxV · Posted: Sat Jun 19, 2004 10:15 pm Post subject:

Congradulations, you didn't get that virus from DDR Freak.
You know why you got that virus? Because you haven't run Windows Update.

Sasser doesn't require web sites to spread, it spreads from computer to computer, just over the plain 'ol internet.

If Sasser were spreading around DDR Freak, a lot more people would have it.

I'm sorry for being so rude, but it's a major pet peeve of mine when people blame their problems on something that isn't the cause.
_________________

Amusing Pictures: lolddrfreak | Road of LoQ

clubbinguy · Trick Member Joined: 19 Jan 2003 Location: USA

EDIT: nevermind this.

I made a long post about the IntelliTXT ads before finding the thread where JDogg announced it.

Terra (Red) · Trick Member Joined: 24 Jan 2002

This came up everytime I go to the ddrfreak.com front page. The address I got for it anyway.

http://search200.com/passthrough/index.html?http://www.ddrfreak.com/

It's some kinda search toolbar that appears on the bottom of the screen. And it just showed up either yesterday, or a day or two before. The normal add on the DDR Freak front page was blank when this poped up as well.

That's what it changes my homepage address to as well. Just wondering what's going on with this. Deleting a folder in my program files did stop this yesterday. But it did come back. And I had to do the same thing again today.

Also spybot didn't seem to help either. And there isn't anything on windows update.

Thanks for any help I can get here. ^.^;;

J Dogg · Administrator Joined: 16 Jan 2002 Location: Sunnyvale, CA

Tekara Asagiri, did you try Ad-Aware? Also, did you make sure your spybot had the latest info?
_________________

Terra (Red) · Trick Member Joined: 24 Jan 2002

Spybot was up to date. But I didn't have Ad-Aware.

That did find 77 different things including a nester search toolbar. It was the only one I saw on the list. So I guess that was it. Thanks for the help.

Nanashi · Trick Member Joined: 24 Feb 2003

Really long link #1

Really long link #2

Really long link #3

I get these pop-up ads every site I visit, exclusive to DDRfreak. Main page, forum index, site feedback, this thread, and the reply page. Five popups, two of which were attempted exploitive auto-installs blocked by Spybot. As I said, this is exclusive to DDRfreak, as no other site I've visited today has tried to do this, and while typing this, I browsed a number of other webpages with no popups.

Edit (Cutriss) - Trimmed those URLs...

Nanashi · Trick Member Joined: 24 Feb 2003

Okay, now this is just ridiculous.

An attempt to add a BHO (aka: an attempted browser hijack): http://server224.smartbotpro.net/7search/?n

This is not a result of spyware on my computer, these are being generated by the ads on DDRfreak.

Cutriss · Staff Member Joined: 24 Jan 2002