Adware on Neowin


Recommended Posts

This is for you guys that got this spyware from that page.

My IE didn't even get infected by it and this was with my anti-virus and spyware guard programs disabled(I was trying to get it infected hoping it was a trojan because I wanted to add it to my collection), so I think my Internet Explorer settings are pretty solid. This post is more of a preventive measure than a fix and will harden internet explorers security but at the same time retaining the functionality that IE has.

First in tools, internet options, advanced uncheck "Enable Install On Demand (Internet Explorer)" and "Enable Install On Demand (Other)" and "Enable Third-Party Browser Extensions (Requires Restart)" and choose apply and ok. Also ensure your internet security setting is at least medium(unless you know what you are doing and have made it custom).

Goto http://www.windowsupdate.com and make sure you have all the latest updates.

Then download Suns Java JRE from http://java.com/en/index.jsp (the link you want to hit is the "get it now" in the top right). Running Suns Java protects you because it has less exploited vulnerabilities than microsofts Java. Lots of spyware use holes in Microsofts java to install thier spyware so switching to Sun's closes a lot of holes.

Then download Spybot Search and Destroy from http://www.safer-networking.org/ run it and make sure to let it download the newest updates. Now goto Spybots immunize function and under "permanent internet explorer immunity" choose immunize, then under "permanently running bad download blocker for internet explorer" select "ask for blocking confermation and choose install.

Now download spyware blaster from http://www.javacoolsoftware.com/spywareblaster.html run it and ensure it's fully updated. Now choose "select all" and then hit "Protect Against Checked Items". Just for reference all the items that are in red are items that Spybots immunize doesn't protect you against that's why you should use both programs.

Both Spybot search and destroy's immunize function and spyware blaster are one time set things, these programs no longer have to be running to keep you from getting infected with the stuff the block against. What they do is disallow any activeX program that's was known to them at the time you immunized from even running. With both Spybot and Spyware Blaster it is important that you check for updates every two weeks or so and re-immunize yourself when new updates are released to stay current. Spybot's other immunize function ("permanently running bad download blocker for internet explorer") installs a BHO that will ask you for permission to block other known bad BHO's from installing. BHO's are really not needed and fairly rare and most people only have the adobe acrobat BHO. You could have set this option to always block but I chose "ask for blocking confirmation" for those people that use something that I do not that uses a BHO.

Now download both DSOstop2 and HTAstop2003 from http://www.nsclean.com/freebies.html and run both of those.

In addition there's another great free utility that you can run but unlike everything above it has to always be open just like an antivirus called spywareguard from javacool. You can download it and run it as well to further increase your security against spyware if you choose. It's available here: http://www.wilderssecurity.net/spywareguard.html

That should beef things up considerably. Having a good antivirus is also helpful because many of them are starting to add spyware to thier definitions, for instance my McAfee 8 caught that spyware trying to install.

I hope this helsp you guys because these settings are pretty solid but at the same time loose enough that you can still have active scripting enabled and activeX. Granted you could disable those as well but at that point you might as well go download an old version of Mosiac browser because it isn't worth using IE with everything disabled.

They(Neowin) don't really run the ads themself, they lease the adspace to ad companies who then run thier own ads.

Now granted since the ad is on neowin's site the responsibility is primarily thiers, but I hope everyone understand they can't just drop thier ad company altogether because that's how Neowin stays up, so I hope everyone sees that they need to know the actual ad doing this so they can have it removed while keeping the other ads in place.

Ok, i have been on the post latly and when i am going to reply or start a new topic as soon as i finish and click Post this site comes up: http://www.proxyconn.com/best.asp . Does anyone know why? It is really bugging me and i'm sure it has other people. You can't even add a post or post, it just keeps coming up everytime you click it.

Help i guess...?

this is ****** up .. the admins/mods should do something about this issue. I just reinstalled Windows XP, got all the updates then got on neowin ( no other sites .. just neowin!!) ..and see what ad-ware 6.0 came up with.

Edited by Emon

^^ hey what browser are you running, looks like avant

I have had the yellow box from the post above also....hhhhhhhhmmmmmmmmmmm

Heres a topic on passthison crap

http://www.lecour.net/richard/archives/001042.html

this suck, hopefully i have rid my computer of smartbotpro and alll that other crap

mAcOdIn

They(Neowin) don't really run the ads themself, they lease the adspace to ad companies who then run thier own ads.

Now granted since the ad is on neowin's site the responsibility is primarily thiers, but I hope everyone understand they can't just drop thier ad company altogether because that's how Neowin stays up, so I hope everyone sees that they need to know the actual ad doing this so they can have it removed while keeping the other ads in place.

this is ****** up .. the admins/mods should do something about this issue. I just reinstalled Windows XP, got all the updates then got on neowin ( no other sites .. just neowin!!) ..and see what ad-ware 6.0 came up with.

Yea man, I was browsing Neowin in school and guess what!

Changed home page and search page

Lots of popups

Installed virus/cookies/trojan (yeah, the AV kicked in)

Change it ASAP! :angry:

Well I got the same crap, and I'm sorry, but I activated my NIS 2004 Banner blocking, and I activated the popup blocker on neowin.... :s

No way I'm gonna infect my computer by coming here...

No offense guys, but there is no point in getting angry about this. We are looking into it. We havent done this intentionaly, its the ad server people. if you dont want to come to neowin, then fine, but dont let it be over some adverts that you can easily block out.

No offense guys, but there is no point in getting angry about this. We are looking into it. We havent done this intentionaly, its the ad server people. if you dont want to come to neowin, then fine, but dont let it be over some adverts that you can easily block out.

I'm not blocking ads because I realize that (at least part of) the way neowin stays afloat and free. Are you saying that it doesn't really matter if we block these or not?

No, but i'm saying if you cant live with it, then its a better alternative than you not coming atall. Of course neowin lives off ad revenue, but at the end of the day, we also live of you guys- the members. You know we haven't done this intentionally, and you know we'll try and provide the best site for you guys as possible. Just give us a chance.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • "Samsung is shutting down yet another app used by millions" I will fix the clickbait title for you, free-of-charge: "Samsung shutting down it's Max VPN app"
    • Microsoft brings Planner Agent to all Microsoft 365 Copilot users by Ivan Jenic Image: Microsoft Microsoft has announced that Planner Agent in Microsoft 365 Copilot is now generally available to all users with a Microsoft 365 Copilot license. Planner Agent is the latest addition in the string of AI features that Microsoft is implementing across virtually all of its products. The agent lets you manage tasks through natural language prompts directly inside Microsoft 365 Copilot. You can create and update tasks, check priorities, and get insights about current entries without leaving the chat interface. The general availability release comes with a handful of new additions on top of what was available during the initial rollout. A new plan picker lets you search and filter your plans by name, then update task names, statuses, due dates, or priorities through the agent. There's also a goals bucket now, which lets you group tasks under specific goals. This builds on the Goals view, a feature that was introduced as part of the broader Planner refresh that rolled out earlier. Image: Microsoft | Planner Agent in Microsoft 365 Copilot All AI-generated plans and tasks are created in draft mode by default, so you can review and approve changes before anything goes through. This is actually a thoughtful safety feature, because trusting AI to handle all your tasks without a human in the loop is usually a recipe for disaster. Having tasks initially saved as drafts is the best possible middle ground. Microsoft also says that not all tasks are executed equally. Simple tasks get processed quickly, while more complex ones, like building a plan from a Word, Excel, or PowerPoint file, are handed to a more capable model. Microsoft says this approach delivers the best performance, but it could also help with usage management, as you won't have to waste tokens on performing simple tasks. Planner Agent is available now across Teams, Loop, SharePoint, and other Microsoft 365 apps for anyone on a Microsoft 365 Copilot subscription.
    • To be clear I'm anti trump, the bigger point is why review this game at all?
    • Trillion dollar Microsoft has to reduce spending by hurting more people. Good job Microsoft. Good Job Asha.
  • Recent Achievements

    • First Post
      Cosminus earned a badge
      First Post
    • One Year In
      ThatGuyOnline earned a badge
      One Year In
    • Week One Done
      Jeroen Wilms earned a badge
      Week One Done
    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      489
    2. 2
      +Edouard
      189
    3. 3
      PsYcHoKiLLa
      124
    4. 4
      Steven P.
      86
    5. 5
      neufuse
      73
  • Tell a friend

    Love Neowin? Tell a friend!