[Merged]Online banking - Should we be worried? (Spyware)

[greencreeper]

I posted about it here http://www.cableforum.co.uk/board/sh...ad.php?t=13887

Safe to say that the machines infected with spyware aren't likely to be owned by those who know what they're doing with PC. I.e. it's the muppets again

Originally Posted by monkeybreath

no mention in that article of spyware blaster a very handy tool for stopping the spyware from getting onto the pc in the first place which is so often overlooked.

I'll give that a go MB..............thanks

[greencreeper]

Originally Posted by iadom

This is also a cause for concern, the author of CWS shredder is basically throwing in the towel.
http://www.cableforum.co.uk/board/sh...90&postcount=6

From the shredder site:

We are pretty sure now CoolWebSearch is part of a new strain of trojans that have recently been identified that all have one thing in common: they install through the ByteVerify exploit in the MS Java VM and change the IE homepage, search page, search bar, etc.

That exploit is patchable - i.e. if users patched in the first place they wouldn't need tools to remove nasties

[MetaWraith]

Originally Posted by Paul

From CNET
Don't know how new this is but....

It's old news (to me anyway) being that it was out last week

http://www.f-secure.com/v-descs/padodorw.shtml
http://www.f-secure.com/v-descs/scob.shtml
http://www.microsoft.com/security/in...load_ject.mspx

I still say the best defence is the MK-I grey matter, and being safely paranoid about what you let in.

Disable Active-X, Spyware Blaster, Registry Monitor, Startup Manager, etc,etc etc

[ian@huth]

What I tend to do, besides making sure AV and spyware checkers are up to date and used regularly, is to use a password rememberer (AiRoboform) to automatically enter user name and password on sites and then modify the entered data by manually adding the bits missing from the saved data. For example username saved on AiRoboform may be "myname" but I then manually alter this to "myname36ad" by adding "36ad" to the already filled in data. Hopefully this will confuse any new keylogger that may have crept onto my system.

[zovat]

Originally Posted by Earl of Bronze

Glad I dont bank online.

I'm glad I don't use IE (Netscape/Mozilla only for years now).

Oh and I rarely use windows other than for playing counterstrike.

Linux+Mozilla Thunderbird+Software firewall+h/w firewall+64bit WEP= no viruses/trojans/malware/spyware for me thanks

[basa]

Originally Posted by Paul

My record to date was a friends PC, I left it running adaware after the number of spyware etc infections went past 200 Went back to it 20 mins later and scrubbed it all out, 1 week later it was back up to 95, the browser was locked down and certain tools were installed

Had a customer recently whose PC had 518 malware entries (discovered by AdAware) and 69 viruses !!!

Needless to say it had slowed to a crawl !!

I couldn't get rid of all the infections despite numerous attempts.

I installed Adaware, Spywareblaster and recommended AvastAV.

Her AVG hadn't been updated since install a year ago !

[greencreeper]

I've been neglecting my mum's PC. Tried doing a Windows Update on her main PC but it wouldn't run. Something very odd had happened to all the certificates - whole lot had vanished. Poof. She's a fiddler - you know the sort of user I mean. Can't wait til the expert gets there - has to have a go herself. Can she remember what she did? Can she hell. Anyways, I had to install IE 6, then do an update. All this on dial-up. Ended up walking half the way home. Paled a bit when I discovered the firewall (Zone Alarm) was ancient, so that's down for upgrade, though not to version 5. Gonna install a few other bits and pieces, then tackle the laptop. It's Windows ME. Anything could happen.