IE and Spyware Problem

[Aneirin]

Last week I was visiting a website with less than 5 ads on
it (amazed to find one with so few, but that's another
story), and found out why. All of a sudden my antivirus
program popped up stating I had a virus coming in when I
knew very well that my firewalls blocked out everyone. I
found out that there's a bug back in IE 6 (don't know about
previous versions) that allows hosts to download and
install anything on your computer they want. This was
noticed 2 (yes, two) years ago, supposedly fixed, but is
still a problem. There's a security focus report on this,
bugtraq id 3867, but I can't find out how to get this
fixed. Any ideas on how to fix this or at least yell so
someone gets the patch working again? Thanks

 

[PA Bear]

Copy/paste the following line into an IE Addressbar, click on GO, then
copy/paste the results into your reply:

javascript:navigator.appMinorVersion

Also state your Windows version.

Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm

CoolWebSearch Chronicles
http://www.merijn.org/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the preferred
tool to use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/ or
http://forum.mvps.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also update your virus definitions and then run a full system scan. From
now on, do both daily.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
Before You Connect a New Computer to the Internet
http://www.cert.org/tech_tips/before_you_plug_in.html

Protect Your PC
http://www.microsoft.com/security/protect/default.asp
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

What You Should Know About Spyware
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx

 

[Guest]

Whoa, information overload. Ok, i guess I wasn't completely clear on the question. I don't have any spyware installed, I keep Ad Aware and Avast Antivirus (faster and better detection than Norton) running, so I know I'm clean. What I'm wondering is, besides switching to a different browser, is there any way to fix the flaw in IE that allows those downloads, or do I have to wait for Microsoft to release a patch

----- PA Bear wrote: ----

Copy/paste the following line into an IE Addressbar, click on GO, the
copy/paste the results into your reply

javascript:navigator.appMinorVersio

Also state your Windows version

Check your system for "hijackware"

Help with Hijackwar
http://aumha.org/a/parasite.ht
http://aumha.org/a/quickfix.ht
http://mvps.org/winhelp2002/unwanted.ht
http://www.mvps.org/inetexplorer/Darnit.ht

CoolWebSearch Chronicle
http://www.merijn.org/cwschronicles.htm

Run these tools in the following order with nothing else running i
background

1. CWShredder (fix all found

2. Ad-Aware (fix all found

3. Spybot (RTFM but generally fix everything in red

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before eac
and every use, even "right out of the box". But even they can't catc
everything, 24/7. When all else fails, HijackThi
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the preferre
tool to use. It will help you to both identify and remove an
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/ o
http://forum.mvps.org/viewforum.php?f=30 for expert analysis, not here.*

[Alternate download pages for many of the above tools may be found a
http://aumha.org/a/parasite.htm.

Also update your virus definitions and then run a full system scan. Fro
now on, do both daily

So How Did I Get Infected Anyway
http://boards.cexx.org/viewtopic.php?t=95
-
Before You Connect a New Computer to the Interne
http://www.cert.org/tech_tips/before_you_plug_in.htm

Protect Your P
http://www.microsoft.com/security/protect/default.as
--
HTH - Please Reply to This Threa

~Robear Dyer (PA Bear
MS MVP-Windows (IE/OE), AH-VSO

AumHa Forum
http://forum.aumha.or

What You Should Know About Spywar
http://www.microsoft.com/mscorp/twc/privacy/spyware.msp

Aneirin wrote

 

[Frank Saunders, MS-MVP]

Whoa, information overload. Ok, i guess I wasn't completely clear on
the question. I don't have any spyware installed, I keep Ad Aware
and Avast Antivirus (faster and better detection than Norton)
running, so I know I'm clean. What I'm wondering is, besides
switching to a different browser, is there any way to fix the flaw in
IE that allows those downloads, or do I have to wait for Microsoft to
release a patch?

Copy/paste the following line into an IE Addressbar, click on GO, then
copy/paste the results into your reply:

javascript:navigator.appMinorVersion

Also state your Windows version.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

----- PA Bear wrote: -----

Copy/paste the following line into an IE Addressbar, click on GO,
then copy/paste the results into your reply:

javascript:navigator.appMinorVersion

Also state your Windows version.

Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm

CoolWebSearch Chronicles
http://www.merijn.org/cwschronicles.html

Run these tools in the following order with nothing else running
in background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc.,
before each and every use, even "right out of the box". But even
they can't catch everything, 24/7. When all else fails,
HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the
preferred tool to use. It will help you to both identify and
remove any hijackware/spyware. **Post your files to
http://forums.spywareinfo.com/ or
http://forum.mvps.org/viewforum.php?f=30 for expert analysis, not
here.**

[Alternate download pages for many of the above tools may be
found at http://aumha.org/a/parasite.htm.]

Also update your virus definitions and then run a full system
scan. From now on, do both daily.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
Before You Connect a New Computer to the Internet
http://www.cert.org/tech_tips/before_you_plug_in.html

Protect Your PC
http://www.microsoft.com/security/protect/default.asp
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

What You Should Know About Spyware
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx

Last week I was visiting a website with less than 5 ads on
it (amazed to find one with so few, but that's another
story), and found out why. All of a sudden my antivirus
program popped up stating I had a virus coming in when I
knew very well that my firewalls blocked out everyone. I
found out that there's a bug back in IE 6 (don't know about
previous versions) that allows hosts to download and
install anything on your computer they want. This was
noticed 2 (yes, two) years ago, supposedly fixed, but is
still a problem. There's a security focus report on this,
bugtraq id 3867, but I can't find out how to get this
fixed. Any ideas on how to fix this or at least yell so
someone gets the patch working again? Thanks

 

[PA Bear]

The mere presence of Ad-aware (even if it's updated and run daily) and an AV
app does /not/ protect you from hijackware installs. Do a little reading,
please. Unless you follow the triage procedure I suggested, you cannot be
certain you're hijackware-free.

E.g., Did you know that there are some nasties out there which actually
disable your anti-virus application's "auto-protect" though it appears to be
fully functional, complete with automatic updating, to you? (Ad-aware
doesn't identify many of these, BTW.)
--
~PAB

Whoa, information overload. Ok, i guess I wasn't completely clear on the
question. I don't have any spyware installed, I keep Ad Aware and Avast
Antivirus (faster and better detection than Norton) running, so I know
I'm clean. What I'm wondering is, besides switching to a different
browser, is there any way to fix the flaw in IE that allows those
downloads, or do I have to wait for Microsoft to release a patch?

----- PA Bear wrote: -----

Copy/paste the following line into an IE Addressbar, click on GO,
then copy/paste the results into your reply:

javascript:navigator.appMinorVersion

Also state your Windows version.

Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm

CoolWebSearch Chronicles
http://www.merijn.org/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc.,
before each and every use, even "right out of the box". But even
they can't catch everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the
preferred tool to use. It will help you to both identify and remove
any hijackware/spyware. **Post your files to
http://forums.spywareinfo.com/ or
http://forum.mvps.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also update your virus definitions and then run a full system scan.
From now on, do both daily.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
Before You Connect a New Computer to the Internet
http://www.cert.org/tech_tips/before_you_plug_in.html

Protect Your PC
http://www.microsoft.com/security/protect/default.asp
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

What You Should Know About Spyware
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx

Last week I was visiting a website with less than 5 ads on
it (amazed to find one with so few, but that's another
story), and found out why. All of a sudden my antivirus
program popped up stating I had a virus coming in when I
knew very well that my firewalls blocked out everyone. I
found out that there's a bug back in IE 6 (don't know about
previous versions) that allows hosts to download and
install anything on your computer they want. This was
noticed 2 (yes, two) years ago, supposedly fixed, but is
still a problem. There's a security focus report on this,
bugtraq id 3867, but I can't find out how to get this
fixed. Any ideas on how to fix this or at least yell so
someone gets the patch working again? Thanks

 

[PA Bear]

PS: Unless you...

Copy/paste the following line into an IE Addressbar, click on GO,
then copy/paste the results into your reply:

javascript:navigator.appMinorVersion

Also state your Windows version.

....we don't know if your system has all Critical Security Updates installed,
any of which /may/ have addressed your problem.

 

[PA Bear]

Is there an echo in here?
--
~PAÞ

Whoa, information overload. Ok, i guess I wasn't completely clear on
the question. I don't have any spyware installed, I keep Ad Aware
and Avast Antivirus (faster and better detection than Norton)
running, so I know I'm clean. What I'm wondering is, besides
switching to a different browser, is there any way to fix the flaw in
IE that allows those downloads, or do I have to wait for Microsoft to
release a patch?

Copy/paste the following line into an IE Addressbar, click on GO, then
copy/paste the results into your reply:

javascript:navigator.appMinorVersion

Also state your Windows version.

----- PA Bear wrote: -----

Copy/paste the following line into an IE Addressbar, click on GO,
then copy/paste the results into your reply:

javascript:navigator.appMinorVersion

Also state your Windows version.

Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm

CoolWebSearch Chronicles
http://www.merijn.org/cwschronicles.html

Run these tools in the following order with nothing else running
in background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc.,
before each and every use, even "right out of the box". But even
they can't catch everything, 24/7. When all else fails,
HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the
preferred tool to use. It will help you to both identify and
remove any hijackware/spyware. **Post your files to
http://forums.spywareinfo.com/ or
http://forum.mvps.org/viewforum.php?f=30 for expert analysis, not
here.**

[Alternate download pages for many of the above tools may be
found at http://aumha.org/a/parasite.htm.]

Also update your virus definitions and then run a full system
scan. From now on, do both daily.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
Before You Connect a New Computer to the Internet
http://www.cert.org/tech_tips/before_you_plug_in.html

Protect Your PC
http://www.microsoft.com/security/protect/default.asp
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

What You Should Know About Spyware
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx

Last week I was visiting a website with less than 5 ads on
it (amazed to find one with so few, but that's another
story), and found out why. All of a sudden my antivirus
program popped up stating I had a virus coming in when I
knew very well that my firewalls blocked out everyone. I
found out that there's a bug back in IE 6 (don't know about
previous versions) that allows hosts to download and
install anything on your computer they want. This was
noticed 2 (yes, two) years ago, supposedly fixed, but is
still a problem. There's a security focus report on this,
bugtraq id 3867, but I can't find out how to get this
fixed. Any ideas on how to fix this or at least yell so
someone gets the patch working again? Thanks

 

[Frank Saunders, MS-MVP]

Is there an echo in here?

Yep.
I saw that he had ignored your question so I repeated it.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/