- Spyware question
- Posted by John on October 5th, 2007
I surf ebay a lot. They say they do not support spyware. From my research it
seems this tribalfusion spyware is big and it it planted in banner ads on
ebays web pages. I am continually getting a security warning dialog box that
says: The current web page is trying to open a site on the internet. Do you
want to allow this? Then it lists 2 urls: http://atribalfusion.com and
res://ieframe.dll. I am constantly having to click No to make the dialog box
go away. Does anyone know what I can do to prevent this from loading but get
rid of the annoying dialog box.
Thanks
- Posted by Sebastian G. on October 5th, 2007
John wrote:
Banners ads can't possibly contain any spyware in executable fashion.
This sounds like you're abusing MSIE as a webbrowser. Why are you then even
discussing security issue? They're inherent!
Flatten and rebuild your user profile? If not the entire machine? You should
reasonably assume it as compromised.
- Posted by Todd H. on October 5th, 2007
"Sebastian G." <seppi@seppig.de> writes:
Really? So what magical pendantic definition of "spyware" and
"executable fashion" do you ahve on your mind to back that up.
There is no shortage of reports to the contrary:
http://blog.washingtonpost.com/secur...are_to_mo.html
http://www.malwarehelp.org/news/article-6210.html
http://weblog.infoworld.com/security...eunwanted.html
http://apcmag.com/5382/microsoft_apo...to_custom ers
http://news.netcraft.com/archives/20...malware.ht ml
http://www.google.com/search?q=banner+malware
Best Regards,
--
Todd H.
http://www.toddh.net/
- Posted by ArtDent on October 5th, 2007
On 5-Oct-2007, "John" <blackberry@vintageaudioetc.com> wrote:
Download and use Firefox from mozilla.com for starters.
If you simply _must_ use ie, learn how to 'tweak' it so that it is at
least a bit less vulnerable.
--
I am not a complete idiot.
Parts are missing.
- Posted by Sebastian G. on October 6th, 2007
Todd H. wrote:
Actually this quite supports my statement: You can embed executable binary
or script code, but it won't get actually execute unless you explicitly
demand it - like, for example, by abusing MSIE as a webbrowser. On a real
webbrowser, such attempts are inherently futile.