Ewido reports alot of spyware cookies from Firefox

Discussion in 'ewido anti-spyware forum' started by aeis2000, Dec 19, 2005.

Thread Status:
Not open for further replies.
  1. aeis2000

    aeis2000 Registered Member

    Joined:
    Nov 23, 2005
    Posts:
    5
    Can someone please enlighten me as to why Ewido keeps reporting firefox as having spyware everytime i do a scan.

    I use counterspy and Nod32 but neither of these programs reports any spyware with firefox.

    I have tried to remove all spyware reported during a scan but the next time i run Ewido scan it reports the spyware again.

    I have attached the scan results. Please advise what is it that i'm doing wrong or not doing.
    ---------------------------------
    ---------------------------------------------------------
    ewido security suite - Scan report
    ---------------------------------------------------------

    + Created on: 12:52:41 PM, 12/19/2005
    + Report-Checksum: 2970C27E

    + Scan result:

    :mozilla.15:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
    :mozilla.16:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
    :mozilla.17:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
    :mozilla.18:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
    :mozilla.45:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Euroclick : Cleaned with backup
    :mozilla.46:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Euroclick : Cleaned with backup
    :mozilla.47:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Euroclick : Cleaned with backup
    :mozilla.90:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
    :mozilla.91:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
    :mozilla.92:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
    :mozilla.93:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
    :mozilla.105:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Hypertracker : Cleaned with backup
    :mozilla.106:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
    :mozilla.199:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup

    C:\Documents and Settings\Local Settings\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\Cache\BACF27ECd01/revolt.dll -> Trojan.Zapchast : Error during cleaning


    ::Report End
     
  2. vinzenz.ewido

    vinzenz.ewido former ewido team

    Joined:
    Dec 9, 2005
    Posts:
    425
    Location:
    Brno, Czech Republic
    Hi,

    Please proceed the following steps:

    1) update the ewido anti-malware (formerly known as ewido security suite)
    2) Restart your computer
    3) After hearing your computer beep once during startup, but
    before the Windows icon appears, press F8.
    4) Instead of Windows loading as normal, a menu should appear
    5) Select the first option, to run Windows in Safe Mode.
    6) execute a complete system scan with ewido anti-malware (formerly known as ewido security suite)


    Regarding to your cookies: If you're surfing you will alway get cookies since they come from websites. The ewido security suite guard at the moment doesn't block the creation of cookies. This feature will come with the upcoming version of ewido anti-malware

    BR

    evilissimo

    // Edit More details
     
    Last edited: Dec 19, 2005
  3. aeis2000

    aeis2000 Registered Member

    Joined:
    Nov 23, 2005
    Posts:
    5
    Thanks vinzenz.ewido!!
    Will give that a try. :)
     
  4. sweater

    sweater Registered Member

    Joined:
    Jun 24, 2005
    Posts:
    1,674
    Location:
    Philippines, the Political Dynasty Capital of the
    I also got the same thing on my pc... :eek: and I am just wondering why Ewido is the only one that can detects those spyware cookies... :rolleyes: and there are always lots of them. :mad:

    Why is it that this spyware cookies can only found on a complete system scans and not on fast scans? o_O It takes longer to scan complete scans. :p
     
  5. Elwood

    Elwood Registered Member

    Joined:
    Sep 12, 2005
    Posts:
    205
    Location:
    Mis'sippi
    Firefox can be configured to reject third party cookies; third parties are usually where tracking cookies come from. Tools > options > privacy > cookies etc.

    You might also want to try CookieCuller.

    From what I have read, Spywareblaster protects from known tracking cookies in Firefox (its' only function in Gecko based browsers, AFAIK).
     
  6. vinzenz.ewido

    vinzenz.ewido former ewido team

    Joined:
    Dec 9, 2005
    Posts:
    425
    Location:
    Brno, Czech Republic
    Unfortunately the Mozilla/Firefox cookie directory is not included in the scan locations for ewido anti-malware 3.5

    We're sorry for this inconvenience. This folder will be included in the upcoming version. The guard of the upcoming version will detect cookies while they're created too and it can be configured that the cookies will be deleted automatically.


    BR
    Vinzenz
     
  7. alan1801

    alan1801 Registered Member

    Joined:
    Feb 7, 2006
    Posts:
    2
    Location:
    New Jersey
    Hello,

    I'm really glad to hear that some one else has had the problem with Firefox cookies. I have tried other forums and no one had ever heard of it.

    I downloaded Ewido a while back and ran a scan. It found several hundred thousand of the 'spyware' cookies just like the ones in the above post. When I set it to delete them, it deleted one or two and then crashed the PC. I had to use system restore to get control of my machine back. I use a number of other security apps that never found any of these cookies. Both Firefox and Winpatrol only showed a few cookies that I normally allow. I have heard so many good things about Ewido that I wish there was a way I could use it.

    I also tried Ewido's online scan later and had the same thing happen. The funny thing about these 'cookies' is that I cannot find them anywhere on my PC. I followed the file path in windows explorer and there was nothing there.

    Definitely a mystery.
     
  8. Elwood

    Elwood Registered Member

    Joined:
    Sep 12, 2005
    Posts:
    205
    Location:
    Mis'sippi
  9. alan1801

    alan1801 Registered Member

    Joined:
    Feb 7, 2006
    Posts:
    2
    Location:
    New Jersey
    I have checked the cookies file and all other files under Firefox but there is nothing there.
     
  10. ratchet

    ratchet Registered Member

    Joined:
    Feb 20, 2006
    Posts:
    1,906
    I'm sure that is the same problem I posted about today. I have FF enabled to delete cookies when I close FF. ewidow still finds them. Two consecutive scans same result, and that is what is really annoying! My thread: https://www.wilderssecurity.com/showthread.php?t=121147

    P.S. I also delete all cookies with CCleaner all the time too!
     
Thread Status:
Not open for further replies.