Spyware, Internet Security, and Firefox

   / Spyware, Internet Security, and Firefox #1  

getut

Platinum Member
Joined
May 18, 2004
Messages
751
Location
NC
Tractor
Kioti CK20HST
The following is regurgitated from another thread, but ended up being general knowledge not entirely related to the original thread. Other may find it useful so here it is in its own posting with its own title so hopefully it may be searched easier in the future.

This post deals with people that have switched to true alternative browsers not JUST the Mozilla/Firefox listed in this original post:

</font><font color="blue" class="small">( If you are still getting spyware on your machine after going to firefox, then below I have listed pretty much every way that Spyware can get on your machine. If you guard against these couple of things, you should have ZERO spyware on your PC.

1) You didn't get your computer 100% clean before switching to Mozilla/Firefox. Spyware makers have gotten smart to spyware removal tools and they commonly utilize "sleeper" programs that do not get caught by the spyware removal tools. The sleeper routines nowadays are updated ***DAILY***. They go out and get a slightly modified but new copy of themselves every day. Therefore the definitions for spyware removal tools never detect the loader/sleeper routine. So in effect, as soon as you clean your machine, the next day the sleeper routing has fired up and re-downloaded all the junk to your machine again. Many true viruses are downloaders/sleepers/entry points for spyware. Only 2 ways to clean these: Leave the machine OFF the internet for about 2 weeks (long enough for spyware definitions to catch up), using another PC, download the spyware updates and put them on the infected machine with a floppy disk. The loader/sleeper program will be detected and removed. Either that or just reformat. Use antivirus to clean the true viruses from your machine.

2) You are still using IE on questionable sites. This does not NECESSARILY mean that the top level site you are going is not legit. It can also mean that the operators of that site (such as TBN for example) may inadvertently let an unsrupulous advertiser advertise. Their advertisement may link back to somewhere else that carries a spyware payload. So in effect, you can still be infected using IE on even credible, respected internet sites. All it takes is the marketing person to mess up and let one single ad slip through and be advertised on their credible site.

3) You may not be using IE, but may still be using other software that uses IE as the rendering engine. For example, some alternate browsers such as the Avant browser mentioned in this thread is just a pretty face for IE. It has all the same security issues. Or you may still be using outlook or outlook express as your email client. Web enabled email received in those browsers will still use IE as the rendering engine. So the same issues apply.

4) You have a rootkit. That involves more than I am willing to type. Google for windows rootkit and do some research.

5) You are running a very old version of Mozilla/Firefox that has a security problem. New versions have no issues that allow spyware to install themselves in a manner that the user would not know about.

6) This is the worst one and can only be protected against with user education. Some spyware is USER initiated. In other words users are TRICKED into installing software that is either directly a spyware package, or carries a spyware package with it. It uses no security hole to install itself. It simply asks the unknowing user if they want to install X or Y software package and the unknowing user allows it to happen. Many so called FREE software packages fund themselves using this tactic. You want the software, so you also unknowingly agree to allow this other package to install itself as part of the deal... but you may not know exactly what you are agreeing to.

Hopefully I havn't rambled too much, and MOST hopefully I have helped someone out by typing all this. If anyone thinks this information is helpful enough to warrant placement in its own thread, let me know and I'll post it. This is kind of general internet information that is hidden in a Netscape specific thread.

PS: Marketers ***HATE*** seeing software that enables users to eliminate advertisements from web pages. But this is fact: The internet is like a sex partner. When you trust a web site to do no harm to your computer, then you are trusting everyone that they trust as advertisers. Good security requires that you take matters into your own hands and YOU decide what displays on your own computer.

Be strong. For some sites it isn't a coincidence that they won't work well on browsers other than IE. Some sites are just coded for IE (no malicious intent), but some other big name sites don't allow anything other than IE BECAUSE they don't want you having a say in how data/images/ads/cookies are handled in alternative browsers.

Take for example.. Some web sites require cookies for their use (no REAL reason.. they just want to be able to track you). Firefox has a feature that "allows" the site to set a cookie, but firefox automatically deletes the cookie on close. Some sites actually check for this feature and make you disable it because they don't "like" it. Be strong and stay away from those types of sites no matter how compelling their content is.

I also forgot to mention one other big piece of software that uses IE as the rendering engine. It is Windows Media Player. This software is BAD, BAD, BAD. Because it uses IE as the rendering engine, it has all the flaws as IE, plus PLENTY of its own. Disable windows media player and download or purchase an alternative. I would recommend this excellent package as the replacement. I would go as far as setting a policy that disables Windows Media Player entirely. )</font>

Links relevent to the above:
Original thread of the above quote
Firefox tweaking thread
Windows Media Player replacement
Firefox itself
Adblock plugin
Pre-made filter list for adblock plugin

If anyone on TBN has the desire to get their machine more secure but needs help, I would be glad to help out. Just PM me and we'll set something up.
 
   / Spyware, Internet Security, and Firefox #2  
Interesting. I'm running Firefox. Recently I visited Chrysler's web site; I was curious about pricing for the Crossfire Roadster. It was the first time I had ever been there. Later that evening I ran Spybot and, as is usual for me even with Firefox, I had several adware programs show up. Among them was something tied to Chrysler; I don't recall the precise terms. So, Firefox managed to accept a type of adware I had never seen from a site I had never previously visited.

I suppose that means I have an older, less secure version of Firefox. What it ACTUALLY means TO ME is that the adware folks are catching up with Firefox almost as much as they are with IE. Frankly, I can't be bothered to continously download updated versions of software just because someone else has found another hole that, according to all the Firefox believers, wasn't supposed to be there in the first place. I'll live with it until it slows down the browser too much, just like I did with IE.

There is no magic bullet.
 
   / Spyware, Internet Security, and Firefox
  • Thread Starter
#3  
Whoops forgot to add links for the two most popular web viewers. These are Mozilla/Firefox specific, so the version that loads and runs in Internet Explorer will not work for Mozilla/Firefox.

Flash Player
Shockwave Player

Flash player is good software and is common, but it is often used for advertisements. It has a similar function to cookies but a little more sinister. The software itself (neither the IE version or the Mozilla/Firefox version) directly give you the ability to protect yourself from this. Macromedia made a web site available that exposed settings that you can disable, it then saves a configuration file to your PC that tells Flash to disable that stuff.
Here is the link that exposes setting for you to disable.
 
   / Spyware, Internet Security, and Firefox
  • Thread Starter
#4  
OkeeDon...
Alot of the spyware scanners just tag "items" it has found, either they don't list the type of thing found at all or it is listed pretty obscurely. Most of the time that type of stuff are just tracking cookies. Not actually bad, but most spyware software is set to the most "tin foil hattish" setting, meaning all tracking cookies get tagged.

If you dump your cookies in Firefox and then change the setting that makes cookies "session only" then you won't even get those warnings. Even with your old version of Firefox.

If slowdowns are your only concern that is great. But some people store confidential data on the PC's that can be compromised.

I personally like being the sole master of my PC. I want it to do my bidding and my bidding only and it doesn't matter whether it is a hacker trying to get in, a company trying to bounce SPAM off of me, or a company trying to make my computer cough up information about me that I didn't authorize it to, it should only do what I tell it to.
 
   / Spyware, Internet Security, and Firefox #5  
The thing is, I mostly like cookies. They're how forums like this remember what you've already read. When I dump my cookies, or set them to session only, I have to rely on my memory as to what I've already seen. That's too much like work. On the few occasions where I've lost my cookies, it's taken me weeks to get the forums back right with the world.
 
   / Spyware, Internet Security, and Firefox
  • Thread Starter
#6  
You can also set which sites are exclusions to the rule. Take for instance you set the default to be "session only" and then specifically set TBN to be "allow" so that things work the way you want, but yet still retain security.

I keep everything set to session only. The TBN settings seem to stored on the web site and work for me regardless of cookies.
 
   / Spyware, Internet Security, and Firefox #7  
To enable Firfox deleting cookies that sites set, do I just go to Tools - Options - Privacy - Cookies? I expand the Cookies category and I have these boxes checked: Allow sites to set cookies and for the originating website only. Also, for the Keep Cookies drop down box, I have until I close Firefox selected. I set some exclusions for some other trusted forums I visit.

I just know I had another question, but dang nabbit, I forgot. /forums/images/graemlins/blush.gif /forums/images/graemlins/tongue.gif
 
   / Spyware, Internet Security, and Firefox
  • Thread Starter
#8  
Yep.. those are good settings.

I would also make sure that in the content area that Enable Javascript is selected, but make sure that disable common annoyances is also selected.

Forgot.. one more link for people interested in Firefox:
Sun Java Runtime Environment
 
   / Spyware, Internet Security, and Firefox #9  
Do you have a link for the latest version of Spybot Search & destroy? for some reason my version won't update anymore.......Thanks........Tom
 
   / Spyware, Internet Security, and Firefox
  • Thread Starter
#10  
Spybot Search and Destroy link

If you click on that link and nothing happens, then you have one of the various virus/spyware packages and muck with your network settings to make certain "helpful" sites non-responsive.

If that is the case PM me, and I'll make the files available on my own web server that won't be "blocked" by the bad software.
 

Tractor & Equipment Auctions

2021 23ft Cypress Cay Seabreeze 232 Pontoon Boat with 23ft Single Axle Trailer (A48082)
2021 23ft Cypress...
2010 Cadillac SRX Luxury SUV (A48082)
2010 Cadillac SRX...
2022 Club Car Tempo Golf Cart (A48082)
2022 Club Car...
2018 FREIGHTLINER CASCADIA TANDEM AXLE DAY CAB (A50046)
2018 FREIGHTLINER...
1997 Mercedes Convertible (A48082)
1997 Mercedes...
2003 FREIGHTLINER FL80 DUMP TRUCK (A51406)
2003 FREIGHTLINER...
 
Top