RE: adware showing up

To add to this, there is a default setting in Internet Explorer Advanced Tab properties that allows ANY program to Install On Demand (which merans when the web site demands to install the app it can) when certain web sites are visited. I have had more cases of Precision Time, Date Manager, HotBar and HuntBar, & Gator show up in the last 6 months because of this. If this option is checked, then these programs can install without approval of any kind from the user. Removing this is the first step to keep these and other apps from randomly showing up on systems. Of course, there is also the option of using another browser ;)

Spencer

-----Original Message-----

From: John Canty [mailto:John.Canty@Vibro-Meter.com] Sent: Tuesday, February 04, 2003 10:52 AM To: Bev Williams; security-basics@securityfocus.com Subject: RE: adware showing up

Try uninstalling any new programs such as gator (gag), or hotbar is a good one for this. Hotbar has caused me more problems than any other program that I have ever seen. That's just one company I would love to see pull an Enron.

Sometimes these things just get installed as programs just like any other, I would check that.

//John

-----Original Message-----

From: Bev Williams [mailto:bevwilliams@inet4u.com] Sent: Monday, February 03, 2003 2:25 PM
To: security-basics@securityfocus.com
Subject: adware showing up

I just had a call from an employee that said he has adware showing up on his
print window in the office programs like excel and word.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

I went back there to check and, sure enough, there were ads for Norton firewall, EasyCD, etc. on the window where you click "OK" to print.

Anyone heard of this or have any idea how to get rid of it? AdAware didn't
find the "malware."

---

Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.445 / Virus Database: 250 - Release Date: 1/21/2003

---

Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.445 / Virus Database: 250 - Release Date: 1/21/2003 Received on Wed Feb 5 15:10:28 2003