Browser threat

[PtBetsie]

This weeks issue of New Scientist has a piece on the new threat. ... "YOU are surfing the net, and stop at a sports site you regularly visit to read the latest headlines. You are always careful to avoid sites that appear suspect, so you feel safe online. Unbeknownst to you, though, and to the innocent owner of the website, a piece of malicious code has been added to the page you are viewing. This uploads software onto your computer via your browser, turning it into a "zombie" PC under the remote control of a malicious user." ... Currently is there any approach individual pc owners can take to prevent or forstall problems?:(

[PrntRhd]

1) Keep your browser, Windows, AV, and Java RE patched and up to date.
2) Use Spywareblaster to stop Active-X installs of malware.
3) Use a firewall or hardware firewall to control ports to your PC.
4) Secure your browser. See this guide: http://www.cert.org/archive/html/securing_browser.html
5) Use a browser like FireFox and the NoScript extension.

A link to the article you are speaking of might be helpful.

[Budfred]

I am pretty sure the example given is based on a recent incident where people with inadequately patched Windows visited a site about the SuperBowl... The exploit used to infect the computers was one that MS had released a patch for some time before, but many people, as usual, had not installed it... Keeping up on Windows updates is really crucial these days... Unless you run Linux of course... :D

[classicsoftware]

It can be as simple as Google (http://news.com.com/Google+pulls+malicious+sponsored+links/2100-7349_3-6180022.html?tag=cd.top).

You need to keep your PC up to date or use Linnux.

[PtBetsie]

Thanks for the info. From the entire article, it sounded as if no matter what a pc user did, they were at risk. Does any software other than spyware blaster stop active x installs?

[Budfred]

Well yes... If you go online, you are at risk... There are many ways to reduce the risk, but there isn't any way to eliminate it...

The most powerful way to reduce it is to use Linux and, even then, install security...

Using a VM install that you can wipe out and easily rebuild is another very safe option...

Using FireFox with NoScripts is one of the best options when on Windows...

Running resident antispyware protection, an antivirus, a good firewall and all of that are good as well...

This article has a bunch of ideas to help...

http://forums.spywareinfo.com/index.php?showtopic=60955

[PrntRhd]

Does any software other than spyware blaster stop active x installs?
There is another program called IE Spyads: http://www.spywarewarrior.com/uiuc/resource.htm

[tommy]

Actually, I use both SpywareBlaster and IE-SPYADS. They both work by making additions to the registry for "restricted sites". Each list has many duplicates of the other however the entries into the register are not duplicated. Thus, you get the benefit of both lists.

Be aware that if you use either or both of those lists, any run of HJT will take considerably longer.

[Paul Komski]

The day may well be coming when using something like Knoppix on a Live CD in combination with a flash drive or CDRW (for data storage) is a good alternative to prevent infections but of course even that combination wont protect one from phishing attacks.