Help - IE problem

[Newc]

Re: Help - IE problem

This conversation proves my theory that people that have the same first name generally share the same type of personality - all us Matt's are somewhat confrontational by nature [img]/images/graemlins/laugh.gif[/img]

[xenophobe]

Re: Help - IE problem

[ QUOTE ]
I don't want to get into a pissing match about this Matt but you're wrong. There is really only one fundamental way for spyware to make itself undetectable and that is to inject a kernel mode driver that loads during boot and once loaded pokes around at kernel data structures and/or installs a file system filter driver to cover it's tracks. Once installed in this mode it is nearly impossible to remove it from *that* running OS. This is commonly referred to as a rootkit virus/spyware. All you need to detect one of these and remove it is a software that runs from another OS - for instance you boot from a CD. Microsoft is adding rootkit detection to it's Anti-Spyware tool (I haven't checked to see when it's being released). Sysinternals.com has a checker.

I know these guys very well - they've done some amazing stuff:
http://research.microsoft.com/rootkit/

More good links:
http://www.sysinternals.com/
http://www.f-secure.com/blacklight/

[/ QUOTE ]

+1 That's the best advice in this thread I've read so far...

Rootkit spyware/malware is the most difficult to remove, in many cases it loads with the system even in safe mode, is hidden from taskmanager and generally can't be 'uninstalled'.

NONE of the current Adaware, S&D, AVG, etc... will detect rootkit code.

The second most difficult to remove are programs that build themselves into the winsock stack, and once you remove it, you no longer have internet access until you run a winsock repair tool or run the XP SP2 netsh winsock reset command.

Another great site that lists security issues with commonly used applications:

http://secunia.com/


Oh, watch out for SONY CD's with their proprietary rootkit for protecting content... even if you uninstall it, it's still there...

http://www.sysinternals.com/blog/200...1_archive.html

[Crusher]

Re: Help - IE problem

Seems that the Spybot took care of it. Thanks!!!

[hippietim]

Re: Help - IE problem

FYI, this Sony thing has already been exploited:

http://news.com.com/Bots+for+Sony+CD...?tag=nefd.lede

Here are the instructions to disable autoplay on the Mac. A quick web search shows that this is a real problem on the Mac as well.
<ul type="square">[*]From the Apple menu, go to Control Panels and choose QuickTime Settings. [*]Choose AutoPlay from the menu at the top of the control panel window. [*]Make sure that the Enable Audio CD AutoPlay and the Enable CD-ROM AutoPlay checkboxes are not checked.[/list]