Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Spybot search and destroy

0 views
Skip to first unread message

MoiInAust

unread,
May 27, 2009, 8:10:40 PM5/27/09
to
I heard good things about this facility for detecting spyware, and I am
using it. Will it also detect viruses? What are people's other
recommendations and prices (if not free)?

Cheers

FromTheRafters

unread,
May 27, 2009, 8:15:02 PM5/27/09
to
"MoiInAust" <us...@user.com> wrote in message
news:4a1dd684$1...@dnews.tpgi.com.au...

>I heard good things about this facility for detecting spyware, and I am
>using it. Will it also detect viruses? What are people's other
>recommendations and prices (if not free)?

The name you used scares me...

NOT this one:

http://searchdestroydownload.com/

but this one:

http://www.safer-networking.org/en/spybotsd/index.html


Kayman

unread,
May 28, 2009, 2:28:59 AM5/28/09
to

Use one (1) only real-time Anti-Virus (AV) application.
I use Avira AntiVir� Personal - FREE Antivirus
http://www.free-av.com/

Use one (1) only real-time Anti-Spy (A-S) application.
I use Windows Defender - Free (build-in in Vista)
http://www.microsoft.com/athome/security/spyware/software/default.mspx

You can, if you wish, use several on-demand AV and A-S applications.
On-demand AV applications:
(add them to your arsenal and use them as a "second opinion" av scanner).
David H. Lipman's MULTI_AV Tool
http://www.pctipp.ch/ds/28400/28470/Multi_AV.exe
http://www.pctipp.ch/downloads/dl/35905.asp
English:
http://www.raymond.cc/blog/archives/2008/01/09/scan-your-computer-with-multiple-anti-virus-for-free/
Additional Instructions:
http://pcdid.com/Multi_AV.htm (is currently unavailable)
--and/or--
Malwarebytes� Corporation - Anti-Malware
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=mncol
--or--
http://majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html
--direct--
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
--and/or--
Kaspersky� Virus Removal Tool
http://www.kaspersky.com/support/viruses/avptool?level=2
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/
http://devbuilds.kaspersky-labs.com/devbuilds/AVPTool/
http://ftp.kaspersky.com/devbuilds/AVPTool/
--and/or--
Dr.Web CureIt!� Utility - FREE
http://www.freedrweb.com/cureit/
--and/or--
a-squared (a�) Free or a-squared (a�) Command Line Scanner
http://www.emsisoft.com/en/software/download/
--and/or--
BitDefender10 Free Edition (*NOT FOR VISTA*)
http://www.bitdefender.com/site/Downloads/browseEvaluationVersion/1/42/

NOTE:
Kaspersky� Virus Removal Tool, Dr.Web CureIt!�' the free version of
Malwarebytes� [and SuperAntispyware] are not capable for real-time
protection of your computer.
Kaspersky� Virus Removal Tool, Dr.Web CureIt!� have no update feature (so
they don't turn into full blown scanners). As soon as your computer is
cleaned you are supposed to remove these tools from your operating system
and revert back to your (updated) resident (real-time) AV application.
Re: Kaspersky� Virus Removal Tool; To uninstall/move this program 'enable
self-defense' must be unchecked!

On-demand A-S scanners:
SuperAntispyware - Free
http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
http://www.superantispyware.com/superantispywarefreevspro.html
--and--
Spybot S&D
http://www.safer-networking.org/en/spybotsd/index.html

Good luck :)

De Zundappmuts

unread,
May 28, 2009, 5:57:26 AM5/28/09
to
You can download this programm directly from : www.lavasoft.com and it's a
freeware programm.
Janus
"MoiInAust" <us...@user.com> schreef in bericht
news:4a1dd684$1...@dnews.tpgi.com.au...

David H. Lipman

unread,
May 28, 2009, 6:25:48 AM5/28/09
to
From: "De Zundappmuts" <henbr...@home.nl>

| You can download this programm directly from : www.lavasoft.com and it's a
| freeware programm.
| Janus

You can't download SpyBot S&D from Lavasoft - WRONG company.

Lavasoft produces Ad-aware not SpyBot S&D.

Download SpyBot S&D from - http://www.safer-networking.org/en/spybotsd/index.html

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


Message has been deleted

De Zundappmuts

unread,
May 28, 2009, 7:12:55 AM5/28/09
to
The same to you sunny
"FredW" <fr...@blackholespam.net> schreef in bericht
news:d6qs15dk6o348nl2v...@4ax.com...

> On Thu, 28 May 2009 11:57:26 +0200, "De Zundappmuts"
> <henbr...@home.nl> wrote:
>
>>You can download this programm directly from : www.lavasoft.com and it's a
>>freeware programm.
>>Janus
>
> You are the same idiot (troll) as in all Dutch newsgroups you frequent.
>
> You don't even know the difference between
> - AdAware (Anniversary Edition) of Lavasoft
> http://www.lavasoft.nl/
> - Spybot Search & Destroy
> http://www.safer-networking.org/en/
>
> --
> Fred W. (NL)


What's in a Name?

unread,
May 28, 2009, 8:22:26 AM5/28/09
to

you're a real jokester aren't you?
--
Virus Removal http://max.shplink.com/removal.html
Change nomail.afraid.org to gmail.com to reply by email.
nomail.afraid.org is specifically set up for use in USENET.
Feel free to use it yourself.

Dave Baker

unread,
May 28, 2009, 10:34:22 AM5/28/09
to

"MoiInAust" <us...@user.com> wrote in message
news:4a1dd684$1...@dnews.tpgi.com.au...
>I heard good things about this facility for detecting spyware, and I am
>using it. Will it also detect viruses? What are people's other
>recommendations and prices (if not free)?

I've used it and there's nothing wrong with it however most of what it
detects are tracking cookies which aren't really a major problem. I suggest
you use CCleaner (Crap Cleaner) regularly, like at least once a day or even
after every browsing session, to remove any cookies and temp files your
system doesn't need. Be sure to set it to save any cookies you do want which
store preferences for sites you regularly use. You do this in the Options -
Cookies section. Before finding CCleaner it was always a major pain going
through hundreds of cookies to delete the ones I didn't want or simply
deleting all of them and then having to set up the ones I did want again
when I revisited the sites. CCleaner automates this into a painless breeze
which runs in only a few seconds each time I use it.

Then I suggest MBAM every now and then to make sure there isn't anything
really nasty lurking around.

Finally I suggest you look at my recent post on using the XP Recovery
Console (if you have XP of course) because you'll amost certainly need it if
you do get anything nasty which has integrated itself into the system such
that it can't be deleted in either normal or safe mode or by the usual
utilities.

Having used various things in the past like Adaware and SpybotSD I now
mainly just rely on the two above.

Oh, I also recommend Registrar Registry Manager 6.01 which recently helped
me shift a few registry entries that MBAM found and didn't like but couldn't
delete.
--
Dave Baker


Slarty

unread,
May 28, 2009, 11:48:31 AM5/28/09
to
On Thu, 28 May 2009 15:34:22 +0100, Dave Baker wrote:

> I suggest
> you use CCleaner (Crap Cleaner) regularly, like at least once a day or even
> after every browsing session, to remove any cookies and temp files your
> system doesn't need.

Madness!

CCleaner is massive overkill for cookies, and is capable of removing far
more than you've bargained for. Use of a decent browser, e.g. Firefox or
Opera, will enable you to have full control over which cookies you accept
or reject without the neccessity of any such 'cleaner'.

I looked at CCleaner in the past, ran it, but didn't let it do anything to
my PC, before I rapidly uninstalled it. It allows insufficiently fine
control over what it does or doesn't do for my liking. I know it has many
fans, but even some of them will admit it has bitten them from time to
time. By chance I read this only this morning*, "I like CCleaner, I really
do. I have a copy on my PCs, but I rarely use the program because it has
caused problems like this for me, too." the writer is referring to
customisations of Windows being completely removed without warning. And -
"CCleaner has left my systems in the lurch too many times for me to want to
use the program for routine PC maintenance. If you're still interested,
you'll find more information about the product on the CCleaner site."

To read the whole of that, very interesting, article you'll have to get
the current paid for version of Windows Secrets. Widows secrets is well
worth the donation, of how ever much you choose to donate, or for
cheapskates the free version runs it close.

*Article by Fred Langa.

Cheers,

Roy

Dave Baker

unread,
May 28, 2009, 12:26:40 PM5/28/09
to

"Slarty" <plink.1...@spamgourmet.com> wrote in message
news:sbse8ovs906r.6...@40tude.net...

Ccleaner has had over 275 million downloads according to Wiki yet if you
search for "Ccleaner problems" in Google you find an absolute minimal number
of people reporting any and most of those appear to be related to something
else they'd installed and forgotten about. If it really didn't work there'd
be a damn sight more people complaining about it.

I've used it for over 2 years multiple times a day without a single issue as
have many people I know and it's one of the best little apps I've ever come
across. I wouldn't dream of trying to manage without it now. It lets you
customise every possible option but in any case the defaults are completely
safe. Anyone who pays for access to so called "Windows Secrets" which there
are thousands of free sites covering every topic imaginable must be nuts but
don't let that stop you from touting for more business.

To the OP, like any topic on Usenet you'll tend to find the good advice
drowned out by the scammers and the noise but no one can help you decide
which is good advice and which not. It's all worth at least exactly as much
as you're paying for it :) When you spot someone with what appears to be a
vested interest you can generally safely ignore them though.
--
Dave Baker


MoiInAust

unread,
May 28, 2009, 4:03:47 PM5/28/09
to

"What's in a Name?" <maxwa...@nomail.afraid.org> wrote in message
news:op.uum3bozycxu3pg@max...

> On Thu, 28 May 2009 05:57:26 -0400, De Zundappmuts <henbr...@home.nl>
> whose name means "your balls are blocking my sun" wrote:
>
>> You can download this programm directly from : www.lavasoft.com and it's
>> a
>> freeware programm.
>> Janus
>> "MoiInAust" <us...@user.com> schreef in bericht
>> news:4a1dd684$1...@dnews.tpgi.com.au...
>>> I heard good things about this facility for detecting spyware, and I am
>>> using it. Will it also detect viruses? What are people's other
>>> recommendations and prices (if not free)?
>>>
>>> Cheers
>
> you're a real jokester aren't you?
> --
Is that the depth of wisdom on this group? As a newbie I asked a serious
question and expected a sensible reply. If by that stupid post you meant NO
then why not say it?


MoiInAust

unread,
May 28, 2009, 4:04:40 PM5/28/09
to

"Dave Baker" <Nu...@null.com> wrote in message
news:gvm7dr$2mt$1...@news.datemas.de...
Thanks Dave for this helpful info.


Message has been deleted

What's in a Name?

unread,
May 28, 2009, 4:34:46 PM5/28/09
to
In <4a1eee2a$1...@dnews.tpgi.com.au> MoiInAust aka us...@user.com thought
it would be fun to share this little dity with the class:

I was responding to the post by the nut guy. You want my opinion- well
here goes....

***************begin canned response*******************

What I use to clean and maintain Windows -

Windows Update (free to use)
http://www.update.microsoft.com/windowsupdate/v6/default.aspx?ln=en-us

Secunia Online Software Inspector (free to use)
http://secunia.com/vulnerability_scanning/online/

Avira AntiVir� Personal - FREE Antivirus
http://www.free-av.com/

(The free version won't scan your emails.)

Why You Don't Need Your Anti-Virus Program to Scan Your E-Mail
http://thundercloud.net/infoave/tutorials/email-scanning/index.htm

Ensure your e-mail program is configured to display e-mail messages in
'Plain Text' only.

Thunderbird for e-mail (free), set to �default� e-mail
http://www.mozilla.com/en-US/thunderbird/

You may wish to consider removing the 'AntiVir Nagscreen'
http://www.elitekiller.com/files/disable_antivir_nag.htm

ThreatFire (free version)
http://www.threatfire.com/download/

Windows Defender (free)
http://www.microsoft.com/windows/products/winfamily/defender/default.mspx
for w2k users, see instructions here:
http://www.compatdb.org/support/topics/175747_windows_defender_windows_2000.html

SUPERAntiSpyware (free version-no Real-Time scanning)
http://www.superantispyware.com/download.html
If you can�t download def. files you can get them here:
http://www.superantispyware.com/definitions.html

Malwarebytes' Anti-Malware (trial version is free version-no Real-Time
scanning)
http://www.malwarebytes.org/index.php
If you can�t download def. files, you can get them here:
http://www.malwarebytes.org/mbam.php

SpywareBlaster (free)
http://www.javacoolsoftware.com/spywareblaster.html

Windows Firewall (free)- w2k users can get sygate (old free version)
http://www.oldversion.com/program.php?n=sygate

Firefox with AdBlock/NoScript/WOT/LE installed (free), set to �default�
browser

http://en-us.www.mozilla.com/en-US/firefox/

AdBlock https://addons.mozilla.org/en-US/firefox/addon/1865

NoScript https://addons.mozilla.org/en-US/firefox/addon/722

W-O-T https://addons.mozilla.org/en-US/firefox/search?q=WOT&cat=all

LinkExtend https://addons.mozilla.org/firefox/addon/10777

MVPS Hosts file (free)
http://www.mvps.org/winhelp2002/hosts.htm

Manange your hosts file http://www.funkytoad.com/
Hostsxpert http://www.funkytoad.com/download/HostsXpert.zip
Homer http://www.funkytoad.com/download/Homer.zip

Turn off un-needed Windows Services
http://www.jasonn.com/turning_off_unnecessary_services_on_windows_xp

Update Java (delete old versions before update)
http://www.java.com/en/download/index.jsp

Decrapify your PC
http://pcdecrapifier.com/download

Remove Adobe Acrobat Reader and use PDF-XChange Viewer
http://www.docu-track.com/downloads/users/

CrapCleaner
http://www.ccleaner.com/

JKDefrag
http://www.kessels.com/Jkdefrag/

Routinely practice Safe-Hex.
http://www.claymania.com/safe-hex.html

Hundreds Click on 'Click Here to Get Infected' Ad
http://www.eweek.com/article2/0,1895,2132447,00.asp

Buy a router w/built-in firewall (under $50)

***************end canned response********************

max

What's in a Name?

unread,
May 28, 2009, 4:36:25 PM5/28/09
to
In <lnrt15hld7n07elm3...@4ax.com> FredW aka
fr...@blackholespam.net thought it would be fun to share this little
dity with the class:

>On Fri, 29 May 2009 06:03:47 +1000, "MoiInAust" <us...@user.com> wrote:
>
>>
>>"What's in a Name?" <maxwa...@nomail.afraid.org> wrote in message
>>news:op.uum3bozycxu3pg@max...
>>> On Thu, 28 May 2009 05:57:26 -0400, De Zundappmuts
>>><henbr...@home.nl> whose name means "your balls are blocking
>>>my sun" wrote:
>>>
>>>> You can download this programm directly from :
>>>>www.lavasoft.com and it's a
>>>> freeware programm.
>>>> Janus
>>>> "MoiInAust" <us...@user.com> schreef in bericht
>>>> news:4a1dd684$1...@dnews.tpgi.com.au...
>>>>> I heard good things about this facility for detecting
>>>>>spyware, and I am using it. Will it also detect viruses?
>>>>>What are people's other recommendations and prices (if not
>>>>>free)?
>>>>>
>>>>> Cheers
>>>
>>> you're a real jokester aren't you?
>>>

>>Is that the depth of wisdom on this group? As a newbie I asked a
>>serious question and expected a sensible reply. If by that stupid
>>post you meant NO then why not say it?
>
>

>As "What's in a Name" was reacting to a message with very clear
>disinformation, I suppose you are replying to the wrong poster.
>
>NO, Spybot Search & Destroy does not, repeat not, scan for viruses.
>(it never did and never claimed to do so.)
>Spybot Search & Destroy is against spyware/adware:
>http://www.safer-networking.org/en/
>
>Spybot was once very good, but not anymore.
>I used to use the combination of Spybot and AdAware.
>
>But long time ago I switched to SuperAntiSpyware (SAS) and
>Malwarebytes' Anti-Malware (MBAM).
>
>Please reread the message of Kayman for a complete and very good
>advice.

thanks Fred

max

ma...@hhhherqa.net

unread,
May 28, 2009, 4:38:24 PM5/28/09
to
On Fri, 29 May 2009 06:03:47 +1000, "MoiInAust" <us...@user.com> wrote:

Get a newsreader with strong filtering. Usenet these days is filled with
malicious fools who wish to destroy it.

What's in a Name?

unread,
May 28, 2009, 4:40:59 PM5/28/09
to
In <6ett15tm2vfn45js9...@4ax.com> ma...@hhhherqa.net aka

thought it would be fun to share this little dity with the class:

>On Fri, 29 May 2009 06:03:47 +1000, "MoiInAust" <us...@user.com> wrote:

and you think that your self-censorship is going to stop it??

nob...@nowhere.com

unread,
May 28, 2009, 4:53:54 PM5/28/09
to
On Thu, 28 May 2009 17:26:40 +0100, "Dave Baker" <Nu...@null.com>
wrote:


CCleaner is excellent. It does, contrary to a previous post, give
complete control over what it does,

ma...@hhhherqa.net

unread,
May 28, 2009, 5:04:23 PM5/28/09
to
On Thu, 28 May 2009 20:40:59 +0000 (UTC), "What's in a Name?"
<maxwa...@nomail.afraid.org> wrote:
>>
>>Get a newsreader with strong filtering. Usenet these days is filled
>>with malicious fools who wish to destroy it.
>
>and you think that your self-censorship is going to stop it??

If you refuse to insulate yourself from these fools and their insults,
then shut up and quit whining when you become the butt of their jokes.

What's in a Name?

unread,
May 28, 2009, 7:12:44 PM5/28/09
to
In <ouut15t3345a5407q...@4ax.com> ma...@hhhherqa.net aka

thought it would be fun to share this little dity with the class:

>On Thu, 28 May 2009 20:40:59 +0000 (UTC), "What's in a Name?"

The only one who seems to be whining is you.

FromTheRafters

unread,
May 28, 2009, 8:46:26 PM5/28/09
to
<ma...@hhhherqa.net> wrote in message
news:6ett15tm2vfn45js9...@4ax.com...

> Get a newsreader with strong filtering. Usenet these days is filled
> with
> malicious fools who wish to destroy it.

Worse than that is all of the web to usenet gateways.


David H. Lipman

unread,
May 28, 2009, 10:25:16 PM5/28/09
to
From: "FromTheRafters" <err...@nomail.afraid.org>


Y E S !

Gerontius

unread,
May 29, 2009, 1:22:40 AM5/29/09
to
On May 28, 4:12 am, "De Zundappmuts" <henbros...@home.nl> wrote:
> The same to you sunny
> "FredW" <fr...@blackholespam.net> schreef in berichtnews:d6qs15dk6o348nl2v...@4ax.com...

>
>
>
> > On Thu, 28 May 2009 11:57:26 +0200, "De Zundappmuts"
> > <henbros...@home.nl> wrote:
>
> >>You can download this programm directly from :www.lavasoft.comand it's a

> >>freeware programm.
> >>Janus
>
> > You are the same idiot (troll) as in all Dutch newsgroups you frequent.
>
> > You don't even know the difference between
> > - AdAware (Anniversary Edition) of Lavasoft
> >http://www.lavasoft.nl/
> > - Spybot Search & Destroy
> >http://www.safer-networking.org/en/
>
> > --
> > Fred W. (NL)- Hide quoted text -
>
> - Show quoted text -

Fuckin Krauts need to learn to use English correctly. Get a life, in
Germany! Make Holland beautiful--leave it.
G.

Slarty

unread,
May 29, 2009, 10:44:49 AM5/29/09
to
On Thu, 28 May 2009 17:26:40 +0100, Dave Baker wrote:

> When you spot someone with what appears to be a
> vested interest you can generally safely ignore them though.

I have absolutely no vested interest in this, and I rather resent your
implied slur. I'm sorry if I misjudge you, but you'll hear no more from
anyway. I can't be bothered.

Slarty

unread,
May 29, 2009, 10:48:49 AM5/29/09
to
On Thu, 28 May 2009 22:25:16 -0400, David H. Lipman wrote:

>| Worse than that is all of the web to usenet gateways.
>
> Y E S !

Sconded, or should that be thirded? :-)

Alexander Farquad

unread,
Jun 1, 2009, 4:59:58 PM6/1/09
to

"MoiInAust" <us...@user.com> wrote in message
news:4a1dd684$1...@dnews.tpgi.com.au...
> I heard good things about this facility for detecting spyware, and I am
> using it. Will it also detect viruses? What are people's other
> recommendations and prices (if not free)?
>
> Cheers

I've been using SPYBOT S&D (free) for YEARS and it's been nothing short of
great. Easy to use and a better bug catcher and destroyer you'll not find,
period.


Heather

unread,
Jun 1, 2009, 5:31:03 PM6/1/09
to

"Alexander Farquad" <grea...@younameit.com> wrote in message
news:aYCdnX69A9z03LnX...@earthlink.com...

I have been using it for years as well and just had to disable the
Immunization part. It (and 2 or 3 others) interfere with Internet
Explorer 8 and it barely crawls. Once I got the information from the MS
guys, I disabled it and also SpywareBlaster seems to be part and parcel
of it because many of its protection features were disabled as well.

I miss having them working........well, I was going to get rid of Spybot
cuz it is too slow. But it was also slowing down Firefox which is the
only browser I use, so I had no choice but to disable Spybot. Firefox
was immediately back to normal as well once I did that.

Just my 2 cents worth.......Heather
>
>


Slarty

unread,
Jun 2, 2009, 12:47:07 PM6/2/09
to
On Mon, 1 Jun 2009 17:31:03 -0400, Heather wrote:

> I miss having them working........well, I was going to get rid of Spybot
> cuz it is too slow. But it was also slowing down Firefox which is the
> only browser I use, so I had no choice but to disable Spybot. Firefox
> was immediately back to normal as well once I did that.

Heather, how can Spybot slow down any browser? It runs and then it
finishes. The immunisation feature is the ony thing I can think of which
has a more or less permanent effect, and I can't see how that could slow
down any browser. What am I missing, or do you in fact have some other
problem with your PC?

Regards,

Roy

Message has been deleted

Heather

unread,
Jun 2, 2009, 3:41:06 PM6/2/09
to

"Slarty" <plink.1...@spamgourmet.com> wrote in message
news:1pn3wi7ga9pk0$.1k1lc2f3dtd79.dlg@40tude.net...
Hi Hon.......read what Fred put out there. I have been back and forth
with PA Bear (MS MVP) and yes, the Immunization feature was just killing
both IE8 and FF. But worse with IE8. I was going to remove it, but
since FF was now much faster decided to stay with a disabled Spybot.

The link Fred gave refers back to discussions in March, I believe. But
I know that they knew around Mar. 20th that Spybot and 2 or 3 others
were playing havoc with IE8. I don't use IE very often, so was a bit
slow off the mark on that. MS sneakily downloaded it when I wasn't
looking!! (G)

Cheers......Heather

PS....I would have to find the exact name, but it is a security feature
in IE8 that Spybot is tangling with. If you want the name, I will find
it.


Slarty

unread,
Jun 3, 2009, 11:30:34 AM6/3/09
to
On Tue, 02 Jun 2009 19:14:07 +0200, FredW wrote:

> The immunization feature of Spybot *can* cause the slowing down of IE8.
> http://forums.spybot.info/showthread.php?t=46906
> http://msmvps.com/blogs/donna/archive/2009/03/20/ie8-issues-if-immunization-by-spybot-s-amp-d-is-enabled.aspx

I would never use that, Firefox for me, but that's far from being the only
reason. I'm not sure why there should be that problem though. I like
learning new things. Thanks.

Cheers,

Roy

Slarty

unread,
Jun 3, 2009, 11:33:13 AM6/3/09
to
On Tue, 2 Jun 2009 15:41:06 -0400, Heather wrote:

> Hi Hon.......read what Fred put out there. I have been back and forth
> with PA Bear (MS MVP) and yes, the Immunization feature was just killing
> both IE8 and FF. But worse with IE8. I was going to remove it, but
> since FF was now much faster decided to stay with a disabled Spybot.

Hm, I've had no such problems with neither Firefox nor Opera on XP or
Vista.

Ah the wonders of Microsnot!

Cheers,

Roy

Wolf K

unread,
Jun 3, 2009, 12:17:44 PM6/3/09
to

FF is no longer secure, on account of a .NET update from MS.

From the mozilla.support.firefox group:

................................................
NightStalker wrote:
> It appears that Microsoft, in its unmitigated arrogance, has
installed an addon into Firefox in one of the recent Windows updates.
It shows in the Addons list as "Microsoft .NET Framework Assistant"

Interesting article in TechRepublic this morning...

http://blogs.techrepublic.com.com/security/?p=1716&tag=nl.e019

The article...

Microsoft pushed out its .NET Framework 3.5 Service Pack 1 update this
February. The �List of changes and fixes� article about this update says:

The .NET Framework 3.5 SP1 is a full cumulative update that
contains many new features. These new features build incrementally upon
the .NET Framework 2.0, the .NET Framework 3.0, and the .NET Framework
3.5. It also includes cumulative servicing updates to the dependent .NET
Framework 2.0 and .NET Framework 3.0 subcomponents. This update should
be applied as an important update for the .NET Framework 2.0 and later
versions, and it is recommended for all other supported operating systems.

The article then goes on to list a dizzying array of changes delivered
by the update.

According to Annoyances.org, however, it does something that isn�t
listed there � it installs the Microsoft .NET Framework Assistant
extension for Firefox, silently, without informing the user. If you had
Firefox on your computer when this update was installed, you may be
subject to some dire consequences. In Remove the Microsoft .NET
Framework Assistant (ClickOnce) Firefox Extension, Annoyances.org says:

This update adds to Firefox one of the most dangerous
vulnerabilities present in all versions of Internet Explorer: the
ability for websites to easily and quietly install software on your PC.
Since this design flaw is one of the reasons you may�ve originally
choosen to abandon IE in favor of a safer browser like Firefox, you may
wish to remove this extension with all due haste.

Yes, that�s right � the long-time, well known security hole present in
Internet Explorer that consists of essentially letting Websites install
dangerous, untrusted code on your computer willy-nilly has now been
shoehorned into your MS Windows install of Firefox without your
knowledge or permission.

Worse yet, Microsoft isn�t satisfied with just giving you
vulnerabilities without your permission or even you knowledge. It has
also gone out of its way to ensure that you�ll have a difficult time
removing the vulnerability from your system if you should happen to
become aware of it. The Uninstall button for this extension in Firefox
has been deactivated. In Uninstalling the Clickonce Support for Firefox,
Microsoft employee Brad Abrams says:

We added this support at the machine level in order to enable the
feature for all users on the machine. Seems reasonable right? Well,
turns out that enabling this functionality at the machine level, rather
than at the user level means that the �Uninstall� button is grayed out
in the Firefox Add-ons menu because standard users are not permitted to
uninstall machine-level components.

Brad Abrams explains that an update has been produced, in response to a
lot of negative reaction from people who realized that MS was monkeying
around with their Firefox installs without permission or notification,
that turns the extension into a �per-user component�. Of course, he
thoroughly downplays the negative reaction, saying:

Clearly this is a bit frustrating for some users that wanted an
easy way to uninstall the Clickonce Support for Firefox.

Reading some of the Slashdot commentary, I�d say it was far worse than
�a bit frustrating� for some user. It was downright enraging for some,
and I don�t blame them.

He claims turning the .NET Framework Assistant into a per-user component
makes uninstalling it �a LOT cleaner�. In some respects, this is true.
The process for a full uninstall that was necessary to get it out of
your hair as a standard system user can be pretty scary for someone who
isn�t a bona-fide expert computer user. Even most so-called Power Users
should be vary leery of following those instructions. Those of us who
have actually gotten to the point where we edited registry keys for a
living (yes, I had a job a few years back that included that unenviable
task, and I got quite good at doing so quickly and safely), on the other
hand, should find it pretty simple.

On the other hand, making it a per-user component means that when one
user uninstalls it, another can still have it. If you�re uninstalling it
for security reasons, this should set off a warning klaxon in your head,
complete with flashing red lights. If you�re the only person who ever
uses your computer, this might mitigate the problem somewhat, but anyone
who manages to remotely exploit your system as another unprivileged user
account may then be able to make use of the security hole represented by
the .NET Framework Assistant to increase his or her hold on the system
(among other nightmare scenarios that may spring to mind).

I guess you have to admire the sheer chutzpah of someone like Brad
Abrams trying to put a bright, happy face on this situation. It takes
real courage to stand out front telling users about this major hose-job
and try to find a way to spin it so the users won�t turn into a lynch
mob. At least he has the decency to tell us how to do the work necessary
to remove the unwanted Firefox extension. Go read his Weblog post
(linked above) now, and make the necessary changes, if you�re using
Firefox on MS Windows.

I recommend you do the registry hacking necessary to carve this thing
out of the guts of your system, get rid of Firefox entirely and use some
other third-party Web browser that isn�t known for screwing its users,
or just get rid of MS Windows entirely, at this point. Do you remember
when I listed 5 characteristics of security policy I can trust? Yeah.
Anything that Microsoft can modify from afar like this doesn�t even
begin to satisfy my criteria, and this incident is an excellent example
of that.

It looks like the biggest security vulnerability in Mozilla Firefox this
year is Microsoft.

--
Jordon
........................................

cheers,

wolf k.

Message has been deleted
Message has been deleted

Wolf K

unread,
Jun 3, 2009, 10:07:22 PM6/3/09
to
Michael Cecil wrote:
> On Wed, 03 Jun 2009 19:38:43 +0200, FredW <fr...@blackholespam.net> wrote:

>
>> On Wed, 03 Jun 2009 12:17:44 -0400, Wolf K <wek...@sympatico.ca> wrote:
>>
>>> Slarty wrote:
>>>> On Tue, 02 Jun 2009 19:14:07 +0200, FredW wrote:
>>>>
>>>>> The immunization feature of Spybot *can* cause the slowing down of IE8.
>>>>> http://forums.spybot.info/showthread.php?t=46906
>>>>> http://msmvps.com/blogs/donna/archive/2009/03/20/ie8-issues-if-immunization-by-spybot-s-amp-d-is-enabled.aspx
>>>> I would never use that, Firefox for me, but that's far from being the only
>>>> reason. I'm not sure why there should be that problem though. I like
>>>> learning new things. Thanks.
>>> FF is no longer secure, on account of a .NET update from MS.
>> I removed all .NET Framework from my PC.
>> (I use no programs requiring any version of Framework.)
>>
>> I am confident my Firefox (3.5.b4) is safe.
>> I have no strange extensions or plugins.
>> ;-)
>
> Even if you left .NET installed you could just uninstall that addon I bet.


See:

http://blogs.techrepublic.com.com/security/?p=1716&tag=nl.e019

I tried it, works well.

HTH

wolf k.

Message has been deleted

Slarty

unread,
Jun 4, 2009, 12:12:06 PM6/4/09
to
On Wed, 03 Jun 2009 12:17:44 -0400, Wolf K wrote:

> Slarty wrote:
>> On Tue, 02 Jun 2009 19:14:07 +0200, FredW wrote:
>>
>>> The immunization feature of Spybot *can* cause the slowing down of IE8.
>>> http://forums.spybot.info/showthread.php?t=46906
>>> http://msmvps.com/blogs/donna/archive/2009/03/20/ie8-issues-if-immunization-by-spybot-s-amp-d-is-enabled.aspx
>>
>> I would never use that, Firefox for me, but that's far from being the only
>> reason. I'm not sure why there should be that problem though. I like
>> learning new things. Thanks.
>>
>> Cheers,
>>
>> Roy
>
> FF is no longer secure, on account of a .NET update from MS.
>
> From the mozilla.support.firefox group:

Thank you for all that, but I am already well aware of the problem and have
taken steps to remove it. Permanently.

Too much to post here, and good advice can easily be found on the net with
a modicum of searching, but 'Windows Secrets' is a good place to start.
They were on to this in February with advice. It may have been in the
subscription version, I can't recall now.

Cheers,

Roy

Alexander Farquad

unread,
Jun 6, 2009, 6:30:27 PM6/6/09
to

"De Zundappmuts" <henbr...@home.nl> wrote in message
news:4a1e7116$1...@news4us.nl...

> The same to you sunny
> "FredW" <fr...@blackholespam.net> schreef in bericht
> news:d6qs15dk6o348nl2v...@4ax.com...
> > On Thu, 28 May 2009 11:57:26 +0200, "De Zundappmuts"
> > <henbr...@home.nl> wrote:
> >
> >>You can download this programm directly from : www.lavasoft.com and it's

a
> >>freeware programm.
> >>Janus
> >
> > You are the same idiot (troll) as in all Dutch newsgroups you frequent.
> >
> > You don't even know the difference between
> > - AdAware (Anniversary Edition) of Lavasoft
> > http://www.lavasoft.nl/
> > - Spybot Search & Destroy
> > http://www.safer-networking.org/en/
> >
> > --
> > Fred W. (NL)

Sunny? Duh...it's Sonny.


0 new messages