Microsoft Releases Anti-Spyware Beta 1 To Public Today.

Microsoft.com ^

[Arkinsaw]

There is a very big flaw in Firefox that i have posted in there forum. Remember, when you draw a lot of attention to yourself (like mozilla did in the last year with there 10,000,000 downloads) people will try to punch holes your software just to be a d*ck and prove a point.

Oh sure, as it becomes more popular it will be targeted more. No doubt about that. I doubt it will be as much as Microsoft because, frankly, a lot of those d*cks have a bug up their a** for Microsoft that they won't have for Mozilla. There will be more though.

That said, I have to go with my experiences with the two browsers. I won't use IE6 any more. There have been many recommendations that users use any other browser. I just have to agree with those warnings.

[KneelBeforeZod]

[Bloody Sam Roberts]

Post the place which will plant something via firefox.

Browse around grc.com (Gibson Research) and you'll find tests that will poke holes in any browser. I use Firefox and have tried them and when not running a firewall, Firefox hasn't been able to stop grc.com from obtaining plenty of info on my browser.

[isom35]

does it have an un-install feature? did you have system restore turned off or on?

[Entrepreneur]

The best site I've found for defending against spyware, repairing browser hijacks, and other irritating aspects of life on the Internet is www.majorgeeks.com. My father-in-law managed to get his PC really fouled up. Using a few of the freeware and shareware programs from MajorGeeks, he cleaned it all up. He's not a Luddite, but he's not exactly a tech either. Hit the site. Bookmark it. Some day you will need it.

From MajorGeeks you can download Spybot and AdAware, which have been recommended (I use both). I also recommend SpywareGuard.

Entrepreneur

[Next_Time_NJ]

Yes you can uninstall it

[Next_Time_NJ]

hehe ok:

1. http://cool-search.biz/traf/30955/in.html <--- this is the URL that will install software if you are running firefox. If you have a new version of norton it will pick up all the nasty things it wants to install (notice, firefox says nothing). If you have norton, disable it, and check out your task manager and Hard Drive light when you go to this URL. After, use a spyware program to remove all the spyware it installed on your computer.

[general_re]

And just try to open an X-box to see if it`s dirty inside, impossible. You literally have to smash the thing apart.

I think I've figured out why your Xbox is having trouble playing DVDs.

[Next_Time_NJ]

Adaware is my choice to. This new MS anti-spyware is nice though.. has some stuff others dont have it seems, so far.

[Deltaforceeoo7]

I just downloaded and ran the Microsoft Spyware and did it ever do a neat job of cleaning up my puter. Found 9 spyware threats, 19 spyware files infected and 92 Registry Keys infected. Even found so real old spyware embeded from long ago such as Kazaz... Was thinking of taking my puter in for service because everything was running at snail pace, but now it's running like a sewing machine.... Really satisfied.

[TomGuy]

A couple of freepers keep a running list of free and inexpensive software for virus checking, spam filtering, and anti-spying. They usually post the list on these kinds of threads.

Majorgeeks.com is one good site for current freeware. There are numerous other sites and numerous good programs available.

[Hodar]

From MajorGeeks you can download Spybot and AdAware, which have been recommended (I use both). I also recommend SpywareGuard.

I would agree; all are fine products, and my wife and I regularily use them.

However, we just finished with the MS Anti-Spyware install; and MS found 8 spyware threats that all of the above missed. Yes, I first updated the definitions for them, then ran them on both machines, and cleared both of our machines off.

After both LavaSoft and Spybot pronounced our machines clean, I ran the Microsoft product. It found 'features' from the good ol'days of Kazaa, eDonkey plus a handful of other sites I'll not mention here. My wife was similarily infected with stuff like SaveU.cash.xxx and other spyware. MS found it, cleaned it; and I'm pretty darn impressed.

[Hodar]

Not true. Mac's do not get 'hit' because they constitute only a small minority of the PC population. If you are going to invest time and energy to cause grief; people gun for the largest possible number of targets. MacIntosh's are comparitively rare. You can read up on the shinigans on virus's on Macs here. I've enclosed a list for your convenience.

http://www.faqs.org/faqs/computer-virus/macintosh-faq/

AIDS - infects application and system files. No intentional damage.
(nVIR B strain)

Aladin - close relative of Frankie

Anti (Anti-A/Anti-Ange, Anti-B, Anti Variant) - can't spread under
system 7.x, or System 6 under MultiFinder. Can damage applications
so that they can't be 100% repaired.

CDEF - infects desktop files. No intentional damage, and doesn't
spread under system 7.x.

CLAP: nVIR variant that spoofs Disinfectant to avoid detection
(Disinfectant 3.6 recognizes it).

Code 1: file infector. Renames the hard drive to "Trent Saburo".
Accidental system crashes possible.

Code 252: infects application and system files. Triggers when run
between June 6th and December 31st. Runs a gotcha message ("You
have a virus. Ha Ha Ha Ha Ha Ha Ha Now erasing all disks...
[etc.]"), then self-deletes. Despite the message, no intentional
damage is done, though shutting down the Mac instead of clicking to
continue could cause damage. Can crash System 7 or damage files,
but doesn't spread beyond the System file. Doesn't spread under
System 6 with MultiFinder beyond System and MultiFinder. Can cause
various forms of accidental damage.

Code 9811: hides applications, replacing them with garbage files
named "something like 'FIDVCXWGJKJWLOI'." According to Ken Dunham
who reported this virus in November, "The most obvious symptom of
the virus is a desktop that looks like electronic worms and a
message that reads 'You have been hacked by the Pretorians.'"

Code 32767: once a month tries to delete documents. This virus is
not known to be in circulation.

Flag: unrelated to WDEF A and B, but was given the name WDEF-C in
some anti-virus software. Not intentionally damaging but when
spreading it overwrites any existing 'WDEF' resource of ID '0', an
action which might damage some files. This virus is not known to be
in circulation.

Frankie: only affects the Aladdin emulator on the Atari or Amiga.
Doesn't infect or trigger on real Macs or the Spectre emulator.
Infects application files and the Finder. Draws a bomb icon and
displays 'Frankie says: No more piracy!"

Fuck: infects application and System files. No intentional damage.
(nVIR B strain)

Init 17: infects System file and applications. Displays message
"From the depths of Cyberspace" the first time it triggers.
Accidental damage, especially on 68K machines.

Init 29 (Init 29 A, B): Spreads rapidly. Infects system files,
applications, and document files (document files can't infect other
files, though). May display a message if a locked floppy is
accessed on an infected system 'The disk "xxxxx" needs minor
repairs. Do you want to repair it?'. No intentional damage, but can
cause several problems - Multiple infections, memory errors, system
crashes, printing problems, MultiFinder problems, startup document
incompatibilities.

Init 1984: Infects system extensions (INITs). Works under Systems 6
and 7. Triggers on Friday 13th. Damages files by renaming them,
changing file TYPE and file CREATOR, creation and modification
dates, and sometimes by deleting them.

Init-9403 (SysX): Infects applications and Finder under systems 6
and 7. Attempts to overwrite whole startup volume and disk
information on all connected hard drives. Only found on Macs
running the Italian version of MacOS.

Init-M: Replicates under System 7 only. Infects INITs and
application files. Triggers on Friday 13th. Similar damage
mechanisms to INIT-1984. May rename a file or folder to "Virus
MindCrime". Rarely, may delete files.

MacMag (Aldus, Brandow, Drew, Peace): first distributed as a
HyperCard stack Trojan, but only infected System files. Triggered
(displayed a peace message and self-deleted on March 2nd 1988, so
very rarely found.

MBDF (A,B): originated from the Tetracycle, Tetricycle or
"tetris-rotating" Trojan. The A strain was also distributed in
Obnoxious Tetris and Ten Tile Puzzle. Infect applications and
system files including System and Finder. Can cause accidental
damage to the System file and menu problems. A minor variant of
MBDF B appeared in summer 1997: Disinfectant and Virex have been
updated accordingly.

MDEF (MDEF A/Garfield, MDEF B/Top Cat, C, D): infect System file
and application files (D doesn't infect System). No intentional
damage, but can cause crashes and damaged files.

MDEF-E and MDEF-F: described as simple and benign. They infect
applications and system files with an 'MDEF' resource ID '0', not
otherwise causing file damage. These viruses are not known to be in
circulation.

nCAM: nVIR variant

nVIR (nVIR A, B, C - AIDS, Fuck, Hpat, Jude, MEV#, nFlu): infect
System and any opened applications. Extant versions don't cause
intentional damage. Payload is either beeping or (nVIR A) saying
"Don't panic" if MacInTalk is installed.

nVIR-f: nVIR variant.

prod: nVIR variant

Scores (Eric, Vult, NASA, San Jose Flu): aimed to attack two
applications that were never generally released. Can cause
accidental damage, though - system crashes, problems printing or
with MacDraw and Excel. Infects applications, Finder, DA Handler.

SevenDust-A through G (MDEF 9806-A through D, also known as 666, E
was at first called "Graphics Accelerator"): a family of five
viruses which spread both through 'MDEF' resources and a System
extension created by that resource. The first four variants are not
known to be in circulation. Two of these viruses cause no other
damage. On the sixth day of the month, MDEF 9806-B may erase all
non-application files on the current volume. The SARC encyclopedia
calls MDEF 9806-C, "polymorphic and encrypted, no payload," and
MDEF 9806-D, "encrypting, polymorphic, symbiotic," and says the
symbiotic part, "alters a 'WIND' resource from the host
application." SevenDust E, not to be confused with the legitimate
ATI driver "Graphics Accelerator", began as a trojan horse released
to Info-Mac and deleted there on or about September 26, 1998. Takes
two forms, 'INIT' resource ID '33' in an extension named
"\001Graphics Accelerator" and an 'MDEF' resource ID '1' to '255'.
Between 6:00 a.m. and 7:00 a.m. on the sixth and twelfth day of any
month, the virus will try to delete all non-application files on
the startup disk. John Dalgliesh describes "Graphics Accelerator"
on his Web page for AntiGax, a free anti-SevenDust E utility; any
errors here in translation are not his. SevenDust F uses a trojan
"ExtensionConflict", common extensions names, and creator 'ACCE'.[SL]

T4 (A, B, C, D): infects applications, Finder, and tries to modify
System so that startup code is altered. Under System 6 and 7.0,
INITs and system extensions don't load. Under 7.0.1, the Mac may be
unbootable. Damage to infected files and altered System is not
repairable by Disinfectant. The virus masquerades as Disinfectant,
so as to spoof behaviour blockers such as Gatekeeper. Originally
included in versions 2.0/2.1 of the public domain game GoMoku.

T4-D spreads from application to application on launch by appending
itself to the 'CODE' resource. Deletes files other than the System
file from the System Folder, and documents, and is termed dangerous.
The D strain is not known to be in circulation [SL].

WDEF (A,B): infects desktop file only. Doesn't spread under System
7. No intentional damage, but causes beeping, crashes, font
corruption and other problems.

zero: nVIR variant.

Zuc (A, B, C): infects applications. The cursor moves diagonally
and uncontrollably across the screen when the mouse button is held
down when an infected application is run. No other intentional
damage is done.

[Imaverygooddriver]

No I didn`t smash it at all, it`s still together but the only way I can see opening it is to literally smash it apart. If you have one or see one, take a look and tell me how you can open it. There are no screws and no seperate panels. It`s just one welded together piece of plastic. One year ago I bought that thing and it now barely plays DVD`s never mind the games. The games don`t even work anymore, the evil box doesn`t even recognize them, the disk just spins and spins and the "X-box does not recognize this disk" message comes up. Bugs bugs bugs bugs bugs...That`s the Microsoft way. How this Gates is the richest person in the world is something I`ll never understand in a million years, because anyone else would have went out of business before he even got his foot in the door with all the crap that idiot puts out. Him and his "products"..Everything is called "products" with Bill Gates, yet his products have consistently produced cheap crap year after year after year.

[El Gran Salseron]

Anytime anyone goes to the windows update site it checks for the legitimacy of the windows installation. This is nothing new.

[El Gran Salseron]

If this anti-spyware software is being released as part of the windows "package" then all updates, upgrades, hotfixes, etc are on the windows update site. Anytime one updates windows it checks to see that the windows installation is legitimate.

[Necrovore]

There are Allen bolts under the rubber feet pads on the bottom of the box. Remove those and the case will come apart. All game systems hide the bolts under the feet or under stickers so they can detect if the system is tampered with while under warranty.

[cooldog]

In the News/Activism forum, on a thread titled Microsoft Releases Anti-Spyware Beta 1 To Public Today., Next_Time_NJ wrote:

hehe ok:

1. http://cool-search.biz/traf/30955/in.html <--- this is the URL that will install software if you are running firefox. If you have a new version of norton it will pick up all the nasty things it wants to install (notice, firefox says nothing). If you have norton, disable it, and check out your task manager and Hard Drive light when you go to this URL. After, use a spyware program to remove all the spyware it installed on your computer.

Interesting ... I'll have to take a closer look at this in the morning. I got tired of waiting for it to run out of memory on my Linux box, so I killed the process. It's a javascript program that eats memory. Don't know yet what it'd do on Firefox running on XP. Here's what's there: