PDA

View Full Version : Websites That Plant Spyware


lschmidt
November 2nd, 2004, 08:08 PM
Is there a list that shows which websites plant spyware when you visit them?

Bubba
November 2nd, 2004, 08:32 PM
Since the number of sites delivering spyware could be in the tens of thousands....would you mind providing just a little info so we can determine where you would like to head with this thread.

lschmidt
November 2nd, 2004, 09:27 PM
Just wanted to if TechGuy Forums is listed as I keep getting these CLSIDs that are attributed to 007 Keylogger and Virtual Bouncer from there.Maybe
you can tell who these really belong to.
{48E59293-9880-11CF-9754-00AA00C00908}
{48E59294-9880-11CF-9754-00AA00C00908}
{48E59295-9880-11CF-9754-00AA00C00908}
{48E59292-9880-11CF-9754-00AA00C00908}
{48E59290-9880-11CF-9754-00AA00C00908}
{48E59291-9880-11CF-9754-00AA00C00908}

Bubba
November 2nd, 2004, 09:54 PM
Would those numbers (clsid's) you posted be in reference to what a program named SpywareDoctor is showing after a scan ?

lschmidt
November 2nd, 2004, 10:02 PM
Yes they are from a SD scan.Is this a false detection?
What do these clsid's really belong too?

Bubba
November 2nd, 2004, 10:21 PM
I can not say for certain....but chances are real good that they are considering all these same False positives that are showing up lately....along with False positives for the Keylogger you mentioned. I would suggest you download another similar program called Adaware for comparison and to also help confirm if these are or are not False positives. As for what do those clsid's belong to....they belong to a legitimate ActiveX component named MSINET.OCX.

Download Adaware SE (http://www.lavasoft.de/support/download/)

lschmidt
November 3rd, 2004, 07:27 AM
I have AdAware SE,SpybotS&D and Spyware Blaster in use here.

Infinity
November 3rd, 2004, 07:42 AM
maybe you can use the blocklist manager and protowall they use a update policy two times a week on all sites that uses spyware/trojans/virii/bogus sites/dshield sites;........

thousands