Jump to content

SUBIECTE NOI
« 1 / 5 »
RSS
O mostenire cu (o mica )problema

touchscreen navigatie stricat

bonsai - de unde?

Resetare Bonus Malus
 Unitatea optica DVD-rw absenta pe...

Problema configurare Wireguard

Dozatoare de apa, cu alimentare d...

Intarziere aterizare avioane
 Accident masina reparata pe CASCO

Probleme Ginseng Microcarpa

Un sunet pronuntat la BMW e90 318i

Caut sugestii pentru achizitionar...
 Acest LNB......

Salarii compensatorii?

Recomandare service in Slatina pe...

De unde cumparati piese de schimb...
 

Windows Antispyware

- - - - -
  • Please log in to reply
33 replies to this topic

#1
Courage

Courage

    Founder

  • Grup: Senior Members
  • Posts: 21,674
  • Înscris: 26.11.2001
O aplicatie antispyware de la Microsoft, bazata pe recent achizitionatul produs Geant Antispyware.

Detecteaza spyware, adware si troieni.

Arata bine, se misca bine si cat e beta este free, apoi va fi bazat pe subscrieri la semnaturi, ca antivirusii.

E clar ca urmatoarea mutare va fi un Antivirus si sa vedeti atunci scandal :)

Quote

Windows AntiSpyware (Beta) is a security technology that helps protect Windows users from spyware and other potentially unwanted software. Known spyware on your PC can be detected and removed.

This helps reduce negative effects caused by spyware including slow PC performance, annoying pop-up ads, unwanted changes to Internet settings, and unauthorized use of your private information.

Continuous protection improves Internet browsing safety by guarding over 50 ways spyware can enter your PC.

The worldwide SpyNet™ community plays a key role in determining which suspicious programs are classified as spyware. Microsoft researchers quickly develop methods to counteract these threats, which are automatically downloaded to your PC, so you stay up-to-date.

The user must be an administrator to install this application.

Current Giant AntiSpyware users with active subscriptions are advised to continue to use their existing software

Note:
This version expires on: 7/31/2005

Download Windows Antispyware ~ 6.36


[ http://www.softpedia.com/screenshots//10-17-312_2.jpg - Pentru incarcare in pagina (embed) Click aici ]

#2
Daisuke

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004
Pentru cine vrea sa testeze si sa citeasca despre noua jucarie de la MS:
http://www.microsoft...re/default.mspx

Edited by cryo, 07 January 2005 - 02:31.


#3
Daisuke

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004
Primul test cu Microsoft AntiSpyware beta 1

Dupa vizitarea unui site m-am ales cu asta:
Nota: nici un program care sa protejeze calculatorul nu a fost activ.
Am scos in evidenta programele care s-au instalat dupa simpla vizitare a unei anumite pagini.

OS: XP SP1, fara nici un patch.

Logfile of HiJackThis v1.99.0
Scan saved at 5:15:51 PM, on 1/7/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ISTsvc\istsvc.exe
C:\WINDOWS\icbbnhr.exe
C:\Program Files\Internet Optimizer\optimize.exe
C:\program files\180solutions\sais.exe
C:\Program Files\Internet Optimizer\actalert.exe
C:\WINDOWS\dod.exe
C:\Program Files\Web_Rebates\WebRebates0.exe
C:\PROGRA~1\COMMON~1\tsa\tsm2.exe
C:\PROGRA~1\COMMON~1\tsa\ts2.exe

C:\Documents and Settings\Tester\My Documents\Spyware\Spyware Tools\HijackThis\HijackThis.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\Program Files\Web_Rebates\WebRebates1.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.couldnotf...count_id=138770
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.couldnotf...count_id=138770
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.couldnotf...count_id=138770

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *new-search.net*;*x-google.net*
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O1 - Hosts file is located at: C:\WINDOWS\nsdb\hosts
O1 - Hosts: 82.179.166.192 new-search.net
O1 - Hosts: 82.179.166.190 x-google.net

O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll
O2 - BHO: BAHelper Class - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - C:\Program Files\SideFind\sfbho.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: ISTbar - {5F1ABCDB-A875-46c1-8345-B72A4567E486} - C:\PROGRA~1\ISTbar\istbar.dll
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [wYHgQ77Ac] C:\WINDOWS\icbbnhr.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [sais] c:\program files\180solutions\sais.exe
O4 - HKLM\..\Run: [Power Scan] C:\Program Files\Power Scan\powerscan.exe
O4 - HKLM\..\Run: [dod] C:\WINDOWS\dod.exe
O4 - HKLM\..\Run: [WebRebates0] "C:\Program Files\Web_Rebates\WebRebates0.exe"
O4 - HKCU\..\Run: [Tsa2] C:\PROGRA~1\COMMON~1\tsa\tsm2.exe
O8 - Extra context menu item: Web Rebates - file://C:\Program Files\Web_Rebates\Sy1150\Tp1150\scri1150a.htm
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll
O16 - DPF: {14A3221B-1678-1982-A355-7263B1281987} - ms-its:mhtml:file://C:\foo.mht!http://82.179.166.14...chm::/trs15.exe
O16 - DPF: {386A771C-E96A-421F-8BA7-32F1B706892F} (Installer Class) - http://www.xxxtoolba...0006_cracks.cab

O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcaf...84/mcinsctl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcaf...,21/mcgdmgr.cab
O18 - Filter: text/html - {4F7681E5-6CAF-478D-9CB8-4CA593BEE7FB} - C:\WINDOWS\System32\xplugin.dll
O23 - Service: McAfee.com McShield - Unknown - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: McAfee.com McShield - Unknown - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe

Internet Explorer arata asa:
http://img.photobuck.../MS-AS/00-0.gif


Primul scan cu MS AntiSpy si malware identificate
http://img.photobuck.../MS-AS/00-5.gif
http://img.photobuck.../MS-AS/00-6.gif
http://img.photobuck.../MS-AS/00-7.gif

Incep sa curat
http://img.photobuck.../MS-AS/00-8.gif
http://img.photobuck.../MS-AS/00-9.gif

Oops - aici zice ca e OK, dar nu prea e
http://img.photobuck...MS-AS/00-11.gif
Hosts file a fost modificata de malware.

Al doilea scan, ca sa ma asigur ca HDD e curat
http://img.photobuck...MS-AS/00-12.gif
Mai exista cate ceva.

Imi spune ca le-a inlaturat
http://img.photobuck...MS-AS/00-13.gif


Rezultat final

Logfile of HijackThis v1.99.0
Scan saved at 4:08:58 PM, on 1/7/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\WINDOWS\mhhmk.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\Program Files\ISTsvc\istsvc.exe
C:\Documents and Settings\Tester\My Documents\Spyware\Spyware Tools\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *new-search.net*;*x-google.net*
R3 - Default URLSearchHook is missing
O1 - Hosts file is located at: C:\WINDOWS\nsdb\hosts
O1 - Hosts: 82.179.166.192 new-search.net
O1 - Hosts: 82.179.166.190 x-google.net

O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: (no name) - {5F1ABCDB-A875-46c1-8345-B72A4567E486} - (no file)
O4 - HKLM\..\Run: [VirusScan Online] c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\McAgent.exe
O4 - HKLM\..\Run: [smccqAa] C:\WINDOWS\mhhmk.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe

O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcaf...84/mcinsctl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcaf...,21/mcgdmgr.cab
O23 - Service: McAfee.com McShield - Unknown - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe

Rezultat dupa 2 scanari succesive cu Microsoft AntiSpyware beta 1.
Nu a reusit sa curete ISTBar. Nici nu ma mira, e greu de eliminat.
Nu a reusit sa repare HOSTS file. Asta e treaba usoara, ar fi trebuit sa o faca. O fac alte programe fara pretentii.


Pentru comparatie aceiasi infectie tratata cu Ad-Aware SE 1.05.
Scan si rescan dupa REBOOT.

Rezultatul final:

Logfile of HijackThis v1.99.0
Scan saved at 5:44:40 PM, on 1/7/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\icbbnhr.exe
C:\Documents and Settings\Tester\My Documents\Spyware\Spyware Tools\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *new-search.net*;*x-google.net*
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - (no file)

O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [wYHgQ77Ac] C:\WINDOWS\icbbnhr.exe
O16 - DPF: {14A3221B-1678-1982-A355-7263B1281987} - ms-its:mhtml:file://C:\foo.mht!http://82.179.166.14...chm::/trs15.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcaf...84/mcinsctl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcaf...,21/mcgdmgr.cab
O23 - Service: McAfee.com McShield - Unknown - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe

Rezultat dupa 2 scanari succesive cu Ad-Aware SE 1.05.
A ramas un program care va reinstala ISTBar: C:\WINDOWS\icbbnhr.exe


Dupa reboot ISTBar este la locul sau.

Logfile of HijackThis v1.99.0
Scan saved at 5:49:37 PM, on 1/7/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\icbbnhr.exe
C:\Program Files\ISTsvc\istsvc.exe

c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\Documents and Settings\Tester\My Documents\Spyware\Spyware Tools\HijakThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *new-search.net*;*x-google.net*
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - (no file)

O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [wYHgQ77Ac] C:\WINDOWS\icbbnhr.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe

O16 - DPF: {14A3221B-1678-1982-A355-7263B1281987} - ms-its:mhtml:file://C:\foo.mht!http://82.179.166.14...chm::/trs15.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcaf...84/mcinsctl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcaf...,21/mcgdmgr.cab
O23 - Service: McAfee.com McShield - Unknown - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe

Ad-Aware SE 1.05 nu a reusit sa curete ISTBar.


Dar, ISTBar poate fi dezinstalata din Add\Remove Programs. :D

Dupa dezinstalare nu a mai ramas aproape nimic.

Logfile of HijackThis v1.99.0
Scan saved at 5:55:27 PM, on 1/7/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\Documents and Settings\Tester\My Documents\Spyware\Spyware Tools\HijakThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *new-search.net*;*x-google.net*
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - (no file)

O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O16 - DPF: {14A3221B-1678-1982-A355-7263B1281987} - ms-its:mhtml:file://C:\foo.mht!http://82.179.166.14...chm::/trs15.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcaf...84/mcinsctl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcaf...,21/mcgdmgr.cab
O23 - Service: McAfee.com McShield - Unknown - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe

Concluzie:
Cu ambele programe am obtinut cam aceleasi rezultate.

Microsoft AntiSpyware beta 1: nu a reusit sa elimine ISTBar si sa repare HOSTS file.

Ad-Aware SE 1.05: nu a reusit sa elimine ISTBar.

#4
UNBREAKABLE

UNBREAKABLE

    Member

  • Grup: Members
  • Posts: 886
  • Înscris: 07.12.2004

cryo, on Jan 7 2005, 18:19, said:

Nota: nici un program care sa protejeze calculatorul nu a fost activ.

Sunt curios daca infectarea cu spyware ar fi fost posibila si daca Microsoft AntiSpyware ar fi avut protectia real-time activata...

Si cred ca testul ar fi fost mai relevant daca ar fi fost facut pe un XP SP2 cu update-uri la zi...

Edited by UNBREAKABLE, 07 January 2005 - 18:56.


#5
Daisuke

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004
Asta incerc acum :D

#6
Daisuke

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004
Cu RealTime Protection activata

In prima etapa batalia parea pierduta, dar ...
ISTBar nu a reusit sa se instaleze complet.

HOSTS file a fost modificata.

Rezultatul este acelasi cu / sau fara RealTime Protection activata.

Spyware este depistat:
http://img.photobuck...sasrp/02-16.gif
http://img.photobuck...sasrp/02-17.gif

Dar ... "Congratulations ! Your toolbar installation is now complete."
http://img.photobuck...sasrp/02-19.gif

Malware depistat dupa scan:
http://img.photobuck...sasrp/02-20.gif
http://img.photobuck...sasrp/02-21.gif
http://img.photobuck...sasrp/02-22.gif
http://img.photobuck...sasrp/02-23.gif

Rezultat final:
http://img.photobuck...sasrp/02-24.gif

Programul care instaleaza si reinstaleaza ISTBar nu a fost inlaturat, dar nici ISTBar nu se poate instala.

Nu e rau. Cred ca va fi un program foarte bun. :) Va face concurenta la Ad-Aware (si la altele), iar pentru cumparatori cred ca vor exista beneficii din  aceasta concurenta.

Quote

Si cred ca testul ar fi fost mai relevant daca ar fi fost facut pe un XP SP2 cu update-uri la zi...
Nu cred ca se instalau, daca MSIE era configurat corespunzator.

Edited by cryo, 07 January 2005 - 19:50.


#7
szabo

szabo

    Junior Member

  • Grup: Members
  • Posts: 177
  • Înscris: 16.05.2004
concluzie personala :nici un program "anti..." nu este perfect !!! Deci este bine sa se foloseasca  in mod alternativ, complementar si altele ...

#8
Daisuke

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004

Quote

complementar si altele ...
In cazul de mai sus pachetul de programe care s-a instalat a profitat de o vulnerabilitate: MHTMLRedir exploit
(ms-its:mhtml:file://C:\foo.mht!http://82.179.166.14...chm::/trs15.exe)

Pentru aceasta vulnerabilitate exista un patch: vezi aici
Daca as fi avut patch-ul instalat probabil ca as fi fost intrebat daca vreau sa instalez ceva, s-ar fi cautat alta vulnerabilitate sau nu s-ar fi instalat nimic.

Cu SP2 si MSIE (default settings) am obtinut asta:
http://img.photobuck...sasrp/sp2-1.gif

A fost recunoscut SP2, si mi-a aparut un asa numit tutorial, care ma invata cum sa instalez porcarii pe propriul calculator.

Daca as fi vizitat pagina cu Firefox s-ar fi instalat cu aprobarea mea o extensie: v4.0/ist_netscape.xpi <-- extensie mozilla

Mai exista si un alt installer:
v4.0/javainstaller.jar <-- installer

#9
toni.p

toni.p

    Junior Member

  • Grup: Members
  • Posts: 38
  • Înscris: 06.09.2002
MS AntiSpyware vs Ad-Aware vs SpyBot

Cel mai bine le folositi pe toate 3. :D

Edited by toni.p, 12 January 2005 - 23:01.


#10
horatzica

horatzica

    Member

  • Grup: Members
  • Posts: 1,436
  • Înscris: 20.03.2002
Si incep scandalurile....

MS Antispyware identifica un obiect de scanare online din bitdefender ca fiind spyware, alt fals pozitiv fiind realvnc.

Detalii
aici

#11
mrproper

mrproper

    10 ani de Softpedia...

  • Grup: Senior Members
  • Posts: 13,063
  • Înscris: 13.11.2002
Greseala lor dar mai e una, daca ai flashget inregistrat, zice ca e spyware. Daca ai Spybot, recunoaste unele dll-uri ca fiinde de la versiunea Spybot-SD hackuita cu un worm.

#12
sigxcpu

sigxcpu

    Senior Member

  • Grup: Senior Members
  • Posts: 2,606
  • Înscris: 22.09.2002
si cat.exe din UNIX tools, de ce e "porn dialer" ?:D

#13
Daisuke

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004
Nu stiu de ce va asteptati sa nu faca greseli un produs BETA ...

#14
PreTXT

PreTXT

    Moderator

  • Grup: Senior Members
  • Posts: 2,053
  • Înscris: 09.01.2003

sigxcpu, on Jan 24 2005, 13:29, said:

si cat.exe din UNIX tools, de ce e "porn dialer" ?:D

<{POST_SNAPBACK}>


ete d'asta ;) :

http://www.pestpatro...in32_dialer.asp
http://www.2-spyware...le-cat-exe.html

#15
2Fst4U

2Fst4U

    Active Member

  • Grup: Members
  • Posts: 1,732
  • Înscris: 03.11.2003

mrproper, on Jan 24 2005, 13:25, said:

Greseala lor dar mai e una, daca ai flashget inregistrat, zice ca e spyware. Daca ai Spybot, recunoaste unele dll-uri ca fiinde de la versiunea Spybot-SD hackuita cu un worm.

<{POST_SNAPBACK}>


Ciudat la mine nu-i spyware.

#16
mrproper

mrproper

    10 ani de Softpedia...

  • Grup: Senior Members
  • Posts: 13,063
  • Înscris: 13.11.2002
Merge doar cu anumite versiuni si se pare ca ultima varianta nu mai face probleme.

Mia zis de dll de update de la bitdefender ca e spyware si de un dll de la NSIS ca e trian...

#17
dpar

dpar

    Member

  • Grup: Members
  • Posts: 603
  • Înscris: 30.01.2005
Da unele false positives. E suficient sa ai eMule instalat ca sa-ti spuna dupa scanare ca a gasit Grokster Adware Bundler...ma rog.
Pe mine m-a ajutat mult cu listarea Winsock LSP-urilor pe care mi le bulise Panda Titanium 2005 (instalat in paralel cu Norton, ceea ce a dus la blocarea PC-ului).

#18
mrproper

mrproper

    10 ani de Softpedia...

  • Grup: Senior Members
  • Posts: 13,063
  • Înscris: 13.11.2002
Si spybotsd are optiunea cu winsock LSPs. Am gasit un spyware care se instaleaza la userinit, la login. Windows-ul protejeaza setarile sau spyware-ul o face si nu se poate sterge. Librariile active se gasesc cu un antivirus care nu le poate scana, sunt mai protejate ca fisierele critice de windows. La shutdown isi schimba fisierele de startup. Am incercat cu stergerea din exterior a fisierelor si tot s-a reparat singur.

Anunturi

Neurochirurgie minim invazivă Neurochirurgie minim invazivă

"Primum non nocere" este ideea ce a deschis drumul medicinei spre minim invaziv.

Avansul tehnologic extraordinar din ultimele decenii a permis dezvoltarea tuturor domeniilor medicinei. Microscopul operator, neuronavigația, tehnicile anestezice avansate permit intervenții chirurgicale tot mai precise, tot mai sigure. Neurochirurgia minim invazivă, sau prin "gaura cheii", oferă pacienților posibilitatea de a se opera cu riscuri minime, fie ele neurologice, infecțioase, medicale sau estetice.

www.neurohope.ro

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Forumul Softpedia foloseste "cookies" pentru a imbunatati experienta utilizatorilor Accept
Pentru detalii si optiuni legate de cookies si datele personale, consultati Politica de utilizare cookies si Politica de confidentialitate