Amiga.org

The "Not Quite Amiga but still computer related category" => Alternative Operating Systems => Topic started by: Jettah on May 15, 2004, 04:55:27 PM

Title: It's about IE this time... (it really is!)
Post by: Jettah on May 15, 2004, 04:55:27 PM
Hi,

In one of my other postings I made the mistake of touting a bit about a browser NOT being Internet Explorer and later on asking a question or two about IE. Well guess right first time around: al 'answers' were about the other browser! No, I'll not make that mistake again. This question is about Internet Exploder. Strictly.

Here goes:
Whenever I change the default site at open time, it always is changed back in some homeportal afair that I'm not interested in. I want www.amiga.org as my default opening site! Anyone give me clue?

Secondly, there is, al of a sudden, a searchbar apearing from something like MySearch. While I had Google installed. I can change it and exchange one for the other, but when not looking al of that same sudden the MySearch bar is reinstalled. When refraining from hammer-and-chissel tactics, what can I do to keep MY settings as the permanent ones? Again, anyone any clue?

I did it! I did not mention Oper(oops)Aaagh! (Starting to looking into the sky, hands on my back, softly whistling 'Scotland the Brave'). Nobody noticed my near mistake, now did yeh?
 
Regards,

Tjitte
Title: Re: It's about IE this time... (it really is!)
Post by: Vincent on May 15, 2004, 05:02:39 PM
Download Spybot (http://www.safer-networking.org/index.php?page=download) and Hijack This (http://www.siena.edu/antivirus/Spyware/hijackthis.htm) and see if they solve the problems.

Oh, it might be an idea to read this Hijack This page (http://hjt.wizardsofwebsites.com/) before running it :-)
Title: Re: It's about IE this time... (it really is!)
Post by: KennyR on May 15, 2004, 05:10:19 PM
Oh, this is nasty spyware called a 'browser hijacker'. It's like a virus. This took me ages to get rid of until I figured it out (with Amiga.org's help). Spybot S&D and lots of other spyware tools won't remove it.

You need AdAware, and cwshredder. Get cwshredder here (http://www.majorgeeks.com/download4086.html) or just google for it.

Run cwshredder first, and let it do its business. That will kill the trojan. Adaware will just clean up the crap it left behind.

Then go install XP Service Pack 1 if you don't have it, and remove Java VM if you've got it installed. That'll stop it ever coming back.
Title: Re: It's about IE this time... (it really is!)
Post by: Matt_H on May 15, 2004, 05:33:43 PM
Once you've got everything cleaned up, I strongly suggest to stop using IE. Opera and Mozilla really are much, much better (and safer).
Title: Re: It's about IE this time... (it really is!)
Post by: mikeymike on May 15, 2004, 05:39:34 PM
Quote
Then go install XP Service Pack 1 if you don't have it, and remove Java VM if you've got it installed. That'll stop it ever coming back.


What's Java got to do with it?
Title: Re: It's about IE this time... (it really is!)
Post by: sir_inferno on May 15, 2004, 06:00:53 PM
some microsoft java thingies are insecure. they can lead to internet explorer exploits using browser "helper" object, e.g. a nasty header, XXX An*l toolbars etc
Title: Re: It's about IE this time... (it really is!)
Post by: melott on May 15, 2004, 08:28:05 PM
Ummm...;-) sorry to tell you this but there
is a new one Hyjacking IE now. CWShredder doesn't
kill it.
I've got it in IE and can't find a way to kill it.

Anyone know of anything else that might work??
Title: Re: It's about IE this time... (it really is!)
Post by: Ilwrath on May 15, 2004, 09:30:27 PM
Quote
Anyone know of anything else that might work??


Mozilla works quite nice.    I'll be here all week.  Try the veal.  :lol:

I typically do the three prong attack to family's infected computers.  First, for cleaning up stuff, I typically use AdAware by Lavasoft.  Make sure you download the latest definitions files.  

Next I download and install Mozilla.

Finally, I set IE's proxy to 127.0.0.1, so nothing that uses the flawed IE components can access the internet.  Then I swap the Mozilla icon for the internet explorer 'e', and tell them I upgraded their internet explorer.  (I gave up trying to explain why Netscape/Mozilla/Firefox/Firebird/Phoenix are all the same browser.  And just calling it a new version of internet explorer has cut down on other "problems" they run into.  ;-)  )

Title: Re: It's about IE this time... (it really is!)
Post by: Step on May 15, 2004, 10:25:27 PM
@Ilwrath

Tricking people to think they still use IE... so clever. I must do that, most people cant tell the difference anyway, haha. Very neat. :-)
Title: Re: It's about IE this time... (it really is!)
Post by: lazarus on May 16, 2004, 07:32:59 AM
May be worth a quick visit to http://www.doxdesk.com (http://www.doxdesk.com) and visiting the PARASITE link on the left

I've found this site invaluable many a time!
Title: Re: It's about IE this time... (it really is!)
Post by: melott on May 16, 2004, 02:26:39 PM
@Lazarus

Interesting..... I'll have to look into this site
more later.

If Ibrowse did Java better I wouldn't even go on Explorer.
Title: Re: It's about IE this time... (it really is!)
Post by: Vincent on May 16, 2004, 02:40:46 PM
Quote
CWShredder doesn't kill it.


I've used Hijack This (http://www.siena.edu/antivirus/Spyware/hijackthis.htm) to get rid of IE search bars on a few different PCs and it's worked evverytime :-)
Title: Re: It's about IE this time... (it really is!)
Post by: Jettah on May 16, 2004, 05:56:29 PM
@Lazarus

You wrote:
May be worth a quick visit to http://www.doxdesk.com and visiting the PARASITE link on the left

I've found this site invaluable many a time!

===================================================
Well, as you advised, I gave it a quick visit. It looks pretty impressive. And, honestly, I think it provides the key to the cure, maybe even is THE cure!

I'll give it a try anyway.

Thanks,

Tjitte

P.M. All those other 'scanners' have been installed to and give nice results.
- HijackThis
- SpyBot
- AdWare 6.0
- NAV2004

Downloading, installing and, LBNL, running and interpreting the results of all these software made me wonder wether Windows is meant for running suchs apps to find out whether it would have been safe to run more productive apps had there been any resources left. :-P
Just a thought.
Title: Re: It's about IE this time... (it really is!)
Post by: KennyR on May 16, 2004, 06:00:54 PM
Quote
Mikeymike wrote:
What's Java got to do with it?


"CoolWebSearch spyware uses the MS Java VM vulnerability [earlier than builds 3810] and installs itself while visiting some rogue websites."

That's here (http://www.google.co.uk/url?sa=U&start=1&q=http://www.mvps.org/sramesh2k/Defend_CWS.htm&e=747). It's also said in the cwshredder GUI after cleaning and in many other places.

I didn't have MS Java VM installed at all though when I had it, so presumably it's found a new vulnerability to exploit. Well, it's Windows, take your pick.
Title: Re: It's about IE this time... (it really is!)
Post by: Hattig on May 16, 2004, 06:08:08 PM
I use SpyBot, AdAware and common sense to try and keep bad things off my computer. Common Sense == not running IE or Outlook for the most part.

Some so called anti-spyware software is actually just vindictive spyware that gets rid of competing spyware before installing its own!
Title: Re: It's about IE this time... (it really is!)
Post by: legion on May 16, 2004, 06:31:57 PM
Stop using IE, and highjacking/spyware installation simply doesn't happen anymore.
Title: Re: It's about IE this time... (it really is!)
Post by: iamaboringperson on May 17, 2004, 04:38:32 AM
Run netscape 7

And take advantage of the tabbing feature.
Title: Re: It's about IE this time... (it really is!)
Post by: Hammer on May 17, 2004, 11:06:39 AM
Have you by chance installed "MsgPlus-254.exe"(one of many)?

Title: Re: It's about IE this time... (it really is!)
Post by: Jettah on May 19, 2004, 12:40:31 PM
@Hammer:

MsgPlus-254.exe. Should I WANT this installed or should I try getting rid of it ASAP if encountered?

If I should want it then what does it cure?
If I should get rid of it then what malicious actions does it perform?

Regards,

Tjitte
Title: Re: It's about IE this time... (it really is!)
Post by: Vincent on May 19, 2004, 01:23:19 PM
MsgPlus-254.exe is Messenger Plus, aka msn.

If you don't use msn go into Control Panel, Add/Remove software and see if it's there, if it is uninstall it, if not never install MsgPlus-254.exe.

If you do use MSN, I'm sure someone here can suggest an alternative.
Title: Re: It's about IE this time... (it really is!)
Post by: blobrana on May 21, 2004, 10:35:54 PM
Hum,
have a look at these Tweaks and hacks (http://mysite.freeserve.com/blobrana/database/xptips.htm) , they will make you machine just that bit better (er, unless you destroy it).

 :-)

WARNING: May Contain Nutty Extracts.