HIJACK! (No, not THAT kind!)

various | Today | Me

[Bloody Sam Roberts]

Do you have any pointers about CONFIRMING that your machine is "clean"?

Probably the best way is to use Spybot S&D and AdAware since each will pick up things the other does not.

Also, run a program called "Hicjack This!" It will scan your registry for suspect items and you can pick out the obvious, alien BHOs and whatnots. Be careful with HJT though. It will list good entries as well as the bad and removing the good ones could leave you with an unusable system.

Other than that, once you think it's clean...watch the behavior of the box...look for redirects and changed Homepage settings.

[South40]

Nawp no zone alarm, I always figured that the router was acting as a firewall.

Routers are vulnerable

[VOA]

bump

[zeugma]

Not difficult at all. Just go to Mozilla.org and get the software. I also install a few "extensions" that make my browsing even better than mozilla alone. You can also get purty themes to change the look of things. There are two extensions that I highly reccommend. PrefBar puts a lot of power at your fingertips, and Calendar is just a cool calendar implementation.

If you're truely adventurous, you can even download a Nightly Release. Nightlies are basically copies of mozilla that are compiled from the latest source each evening. This is only for the brave who want to bug hunt though, as you can occasionally get a build with some nasty bugs in it. I upgrade my nightly about every 2 weeks and work it out as strongly as I can, since I can't program for mozilla. I figure if I can't code, the least I can do is search for bugs.

If you need any help, please feel free to freepmail me. I gain much joy in introducing new users to mozilla, as I truely believe it makes the internet a better place.

[the lone highschooler]

Thanks for the info;

[Long Cut]

I do that now. I'm also downloading SpyWareBlaster as we spaek.

After that, I might just stay up late and download Mozilla.

Does Firefox come WITH Mozilla, or is it separate?

[Long Cut]

BTW, HairOfThe Dog's post #49...any clues?

[supercat]

//Merjin's been under serious attack lately. He's REALLY pi$$ed off CWS, and they're retaliating.//

Do you have a real IP address? That may be harder to spoof than DNS records.

[mylife]

Thanks for the info South40.

Seems that education is a continuing lifelong process eh?

[Long Cut]

Okay, I found him...Merjin is now LOCATED AT THIS LINK.

He's using a mirror, provided by Spywareinfo.

[Long Cut]

I'm downloading Firefox right now. Do I have to do anything else to it afterwards, or will it just run when I ask it to? I mean, do I have to start from scratch with favorites, etc, and do I have to give it my dialup numbers again?

[supercat]

Pest Patrol (on-line scan) shows up "HiWire" on my machine, but I can't find any trace of hwreal.exe or any of the other files listed in Pest Patrol's information. Does that mean I'm not "really" infected, or that HiWire's creators changed its name, or what?

[mercy]

My goodness. The pain and suffering you Gates zombies go through. My PC is not allowed on the net. It's for photo editing only and of course with it's picture in picture TV monitor I can watch the fights or whatever while I'm on line with my powerbook.

Get a clue. Get a Mac.

[JoJo Gunn]

Firefox doesn't "replace" IE. You choose which one to run each time you get on the web.

I've pretty much settled in on Firefox, but it's not perfect. NOAA radar sites use that damned Java, so IE still has it's place. Yes, there's a Java "plug-in" that's over 8 megs and it's unstable as all get out. Firefox was crashing almost all the time until I removed Java. And those crashes emptied the cache every single time. Sort of a pain for dialup users.

[zeugma]

If these types of attacks start appearing in the Linux world, they will be much easier to get rid of than the windows variants because of the way that Linux and X works. Unless you are a complete moron and run as root, then cleaning up after these attacks will be a matter of deleting a few lines from a few text files. Programs executed as a user simply can't attack in places that would be hard to get rid of unless they find some new local root exploits to do their dirty work.

I'll bet that if some of these scum figure out a way to attack Mozilla for Linux, there will be scripts available within hours that you'll be able to call as a part of your 'startx' script that would automatically look for the offending strings in your config and strip them out automatically.

[mylife]

Do I have to do anything else to it afterwards, or will it just run when I ask it to? I mean, do I have to start from scratch with favorites, etc, and do I have to give it my dialup numbers again?

Nothing special, just run the file. it will install firefox and place an icon on your desk top. it will import all your favorites and settings

[Long Cut]

Oh, great! This'll be fun, I hope.

I might just get rid of all that Java crap too.

[zeugma]

Firefox is a part of mozilla. Firefox is the standalone browser. With Mozilla, you get Firefox, Thunderbird (email client-ditch Outlook if you're using it), and more. See my previous post that has some pointers to some other useful mozilla links.

[Long Cut]

I'm no expert (but there are certainly some on this thread), however, I'd assume that the files it found are "hidden" somehow from your "search" function. In my case, they were in the "restore" system folder, and I had to disable it before I could begin deleting the offenders. If it's enabled, it won't allow you to mess with it.

[Fraulein]

I have downloaded Ad-Aware and quarantined 212 finds. I have also downloaded HIjackThis, and it found a lengthy list of potential problems, but how do I know which ones to remove? All of them?