Why do certain computers get targeted?

[JM]

Five computers on my home network, behind a cable modem, Netgear RP614
router, Linksys 5 port wg switch. I run Windows Firewall, AVG Free, and
Adaware. I have been very lucky in that I almost never have problems.
Everything stays pretty clean. I also monitor the use of my home computers,
and my family practices pretty good common sense.

However, last week I was working with a friend on his computer. He needed
my help remotely, so he told me to log in using Logmein.com, a Free remote
desktop service I'd never used. The instant I saw his desktop popups
started exploding on the screen. At first I thought I was seeing popups on
his desktop, and I thought, "damn, you *do* need some help!" I asked him on
the phone if he saw what I saw, and he told me "no, my desktop is clean as
can be."

Now, I'm not saying Logmein.com was the root cause, but it definately
happened at the same time as I logged in, and it happend on a computer that
has always been clean and free of that junk. Since then popups have come
back to some degree, but I've about go things back under control.

Why do particular computers become consistent targets, while others on the
network stay clean? Is it that the MAC address of the NIC gets logged and
distributed after visiting certain sites? Can those threats spread in a
network setting?

jm

 

[Axel Hammerschmidt]

However, last week I was working with a friend on his computer. He needed
my help remotely, so he told me to log in using Logmein.com, a Free remote
desktop service I'd never used. The instant I saw his desktop popups
started exploding on the screen. At first I thought I was seeing popups on
his desktop, and I thought, "damn, you *do* need some help!" I asked him on
the phone if he saw what I saw, and he told me "no, my desktop is clean as
can be."

Now, I'm not saying Logmein.com was the root cause, but it definately
happened at the same time as I logged in, and it happend on a computer that
has always been clean and free of that junk. Since then popups have come
back to some degree, but I've about go things back under control.

Sounds more like the "free remote desktop service" logmein.com makes
money by selling ads.

Why do particular computers become consistent targets, while others on the
network stay clean? Is it that the MAC address of the NIC gets logged and
distributed after visiting certain sites? Can those threats spread in a
network setting?

What's it got to do with "particular computers"? You used logmein.com
and got popups.

 

[JM]

Sounds more like the "free remote desktop service" logmein.com makes
money by selling ads.


What's it got to do with "particular computers"? You used logmein.com
and got popups.

I didn't ask my question very well. After the logmein session was over,
this particular machine got absolutely bombarded wth popups for several
days, and internet shortcuts would get placed on the desktop over and over
again. Other computers experienced no problems. I cleaned the computer's
cache, cookies, history, ran several utilities, etc, but the machine
continued to be the target.

jm

 

[Axel Hammerschmidt]

I didn't ask my question very well. After the logmein session was over,
this particular machine got absolutely bombarded wth popups for several
days, and internet shortcuts would get placed on the desktop over and over
again. Other computers experienced no problems. I cleaned the computer's
cache, cookies, history, ran several utilities, etc, but the machine
continued to be the target.

OK. How did you get logmein?

 

[* * Chas]

I didn't ask my question very well. After the logmein session was over,
this particular machine got absolutely bombarded wth popups for several
days, and internet shortcuts would get placed on the desktop over and over
again. Other computers experienced no problems. I cleaned the computer's
cache, cookies, history, ran several utilities, etc, but the machine
continued to be the target.

jm

You may have had or still have some kind of malware that got installed
when you went to logmein.com.

Make sure that your version of Ad-Aware is the latest SE 1.06 and has
the latest definitions.

Also try Spybot Search and Destroy 1.4
http://www.safer-networking.org/en/index.html

It compliments Ad-Aware.

Chas.

 

[edgewalker]

You may have had or still have some kind of malware that got installed
when you went to logmein.com.

Make sure that your version of Ad-Aware is the latest SE 1.06 and has
the latest definitions.

Also try Spybot Search and Destroy 1.4
http://www.safer-networking.org/en/index.html

It compliments Ad-Aware.

The drunken customer in the bar kept hearing things like 'you look nice today'
and 'your aftershave smells very good' apparently coming from a large bowl of
assorted nuts on the bar beside him. Finally, he just had to ask the bartender
what was up with the bowl of nuts that seemed to be talking. The bartender
said "oh, these nuts are complimentary". ))