TROJANS! (And not the condoms)

by **Murgatroyd** » Sat Mar 27, 2004 9:04 pm

I just had a nervewracking experience, I was playing Vietnam (through ASE), and my girlfriend calls, and needs directions from mapquest. So, I alt-tab out and open up internet explorer, and it opens to some weird page that I've never heard of that gives me 50 million pop-ups, and all of a sudden both of my CD-ROM drives open.

So, as I write this, I'm panicking, just ran Spybot S&D and doing a full scan of my system with norton.

The strange thing is, prior to this happening, IE opened up to my regular default page, until I played Vietnam through ASE. Unless there was some timebomb on my computer somewhere, ASE (or Vietnam) could be the only ways in.. right?

Other than that, I'm lost.. any help/suggestions?

by **LeVar Burton** » Sat Mar 27, 2004 9:20 pm

Something similar happened to me a while back. When I opened IE, it went to some webpage I had never been to and alot of popups and whatnot, but I just ran Ad aware. I'm pretty sure Spybot is basically the same thing but you might want to download Adaware and get the latest update and run it.

But I'm pretty sure someone that knows more than me will respond pretty soon.

by **Murgatroyd** » Sat Mar 27, 2004 9:24 pm

Ok, I just figured out what the problem was, apparently there's a trojan that comes with certain copies of AIM, which was used on my computer earlier today. I had to go into the registry to get rid of some of it's hijacking maneuvers.. pain in the arse...

by **Camel toe joe** » Sat Mar 27, 2004 9:26 pm

it was me sorry

we had a similar probem at work, not sure how it was resolved, one thing it does is say if you cd drive opened, they your computer is not safe or something similar, and your home page was changed, check out what your home page was set to and look it up in google should find some answers, btw i've been using ASE and haven't had this problem

by **Murgatroyd** » Sat Mar 27, 2004 9:30 pm

Originally posted by Camel toe joe
it was me sorry we had a similar probem at work, not sure how it was resolved, one thing it does is say if you cd drive opened, they your computer is not safe or something similar, and your home page was changed, check out what your home page was set to and look it up in google should find some answers, btw i've been using ASE and haven't had this problem

Yeah, check out my most recent post, figured out where this bugger came from... changed the subject of the thread..

Working on getting everything cleaned up.. looks like it had just struck and I was lucky enough to hit the "stop" button on IE before it did its big & nasties.. found a good site on exactly what it was.. I think I stopped it mid-script.

by **RCglider** » Sat Mar 27, 2004 9:53 pm

Yet another reason not to use Exploder

by **Chacal** » Sat Mar 27, 2004 10:24 pm

You had Active scripting enabled for the Internet Zone !?! :eek:

by **LeVar Burton** » Sat Mar 27, 2004 10:47 pm

Hey Chacal, I just checked mine and I have it enabled also for the internet zone. I know I haven't messed with it so it was that way by default. What is so bad about having it enabled and what would happen if I disable it?

by **Fat Bastard** » Sat Mar 27, 2004 11:32 pm

To keep it short, if it's enabled and you visit a site that has a hidden script then your allowing it to run itself on your computer without you knowning.

by **PudriK** » Sat Mar 27, 2004 11:52 pm

Friggin' Microsoft... I hate having to figure this stuff out just to keep from getting screwed. I don't have to know what my valve timing is to safely operate my car, why should I have to mess around with system settings on my PC.

So what do you all recommend? I was running "Medium" security in the Internet Zone, but just customized it by chaning all the scripts settings from "enable" to "prompt." That'll probably be a pain in the ass...

PS yep it is... now I have to say yes twice just to post this message

by **Murgatroyd** » Sun Mar 28, 2004 9:20 am

Originally posted by RCglider
Yet another reason not to use Exploder

What are some good browsers (other than Navigator) that I should look into?

by **Rocky Dennis** » Sun Mar 28, 2004 9:29 am

I have Mozilla as a back up just in case my IE goes down.
http://www.mozilla.org/releases/

by **BeCynical** » Sun Mar 28, 2004 10:39 am

FireFox is a good one, includes tabbed browsing. http://www.mozilla.org/products/firefox/releases/0.8.html

by **BladeRunner** » Sun Mar 28, 2004 10:52 am

for those that may not know how to disable active scripting:
http://www.antionline.com/showthread.php?s=&threadid=241676
thanks to Tonybradley:
With so many of the vulnerabilities in Windows / Internet Explorer being based off of the ability to execute Active Scripting within a web page or HTML email message, it would benefit many to simply disable the ability to do so.

However, some sites require that functionality or you may want that functionality to be able to view or interact with certain things. For those sites you would need to move them to your Trusted Sites zone (assumes you are using Internet Explorer to begin with).

I wrote a brief tutorial for novice users to walk them through disabling Active Scripting in Internet Explorer. You can view the tutorial here:

Rather than having you click on the link in my original post, I am presenting the tutorial information here:

Here's How:

1. Click on Tools on the menu bar at the top of Internet Explorer
2. Click on Internet Options from the Tools drop-down menu
3. When Internet Options opens up, click on the Security tab
4. Select the Security Zone you wish to disable Active Scripting for- Internet, Local Intranet, Restricted or Trusted
5. Selecting the default level High will automatically disable Active Scripting but may be too restrictive
6. You may opt to use Medium as a baseline and customize it. Select the Custom Level button
7. Set Reset Custom Settings to Medium and click the Reset button
8. Set the options under ActiveX Controls and Plug-ins to Disable
9. If you encounter sites that require Active Scripting to function you can add them to the Trusted Sites zone
10. If you encounter sites that contain malicious code you can add them to the Restricted Sites zone

Tips:

1. Restricted Sites security zone should be set to High
2. Trusted Sites security zone can be set to Medium or Low
3. Local Intranet security zone includes only those sites from your own Intranet so should be safe on Medium or Low
4. Internet security zone should be set to High or Medium with Active Scripting turned off

:beer:

by **LordShard** » Mon Mar 29, 2004 3:36 am

Easy solution! Install Sun Microsystem's java version! And DO NOT USE A BROWSER THAT USES ACTIVE X! (In other words, DO NOT USE INTERNET EXPLORER!)

EDIT: My grandfather recently had that problem even after I installed mozilla and told him to use it, he didn't use it so after I fixed it he decided to use them

He's currently using mozilla and thunderbird.

Also if you get popups like that hit ALT+F4 don't rick clicking ANWHERE on the popup just in case you accidently click on the wrong X (which many popups mimik so you still end up clicking the popup). You should also try Ctrl+Alt+Delete and close all IE pages at once.

TROJANS! (And not the condoms)

TROJANS! (And not the condoms)

Who is online