RE: Google changes -- MIDRANGE-NONTECH

Spybot Search and Destroy is a good "one-up" on AdAware (which I used until
just recently) in that it removes over 8000 spyware files/reg settings and
then plugs those locations with "dummy" settings hence inoculating against
repeat insertions. It's not a perfect fix but it buys a lot of peace and
quiet if you're getting hammered by pop-ups and other strange behaviors.

It does warn you in advance that if you've signed up for kazaa, gator, or
other "free" services that are spyware contingent that those apps will
probably no longer work. Chances are if you have something like that
installed on your computer you really don't need it anyway (Weatherbug, a
very worthwhile free service, makes a special effort to state that their
product is not spyware).

Alan

-----Original Message-----
From: Wills, Mike N. (TC) [mailto:MNWills@xxxxxxxxxxxxxx]
Sent: Thursday, August 14, 2003 10:10 AM
To: 'Non-Technical Discussion about the AS400 / iSeries'
Subject: RE: Google changes


Try using Ad Aware to remove the spyware. It seems to work good.

-----Original Message-----
From: Mark Villa [mailto:markvilla@xxxxxxxxxxx]
Sent: Thursday, August 14, 2003 12:24 AM
To: 'Non-Technical Discussion about the AS400 / iSeries'
Subject: RE: Google changes


~~~how did you do that?
Actually, I did several things, then as it goes, I was wrong, I got ticked
and wanted to find out exactly what was going on.
I had downloaded the Google toolbar thinking gosh, that should be friendly.
It worked but the regular search triggered the popup blocker.
I killed everything to do with history & cookies. went over the ie security
settings, still popups.
Then I realized it was something called: clientman; by searching Google
again on one of the strings it was opening...

we have a child using this CPU so I was not sure what he may have clicked
'yes' on.
To correct my earlier post, it was spyware causing the crazy behavior.
Since the computer is practically new, I thought it was a default
combination of Google and detection of XP, and that Google had caved to
market testing on XP only for now.

smart and devious of spyware to hook into Google calls.
Odysseus marketing is the owner (if they are real) and the program installs
to Program files\clientman.
the articles online say it is smart enough to update itself from the mother
server to keep outsmarting these removal tools.

It is pretty hefty piece of work. Hard for me to completely get rid of. This
thing actually relaunched itself after I killed it in the process manager,
probably on my next Google click. Three active processes, bunch of DLL's,
yada yada...
Would be a good avenue for a worm too. There is a write-up (via Google
search on clientman) that suggests it knows how to change popular firewalls
to suite it's needs. Yet another reason not to use a windows firewall.
I feel sorry for windows techies in a big shop if this breed of spywares
start getting downloaded.


I tried giving the little guy 'user' rights but he can't install his games
then. He just turned 6 and 300 Mhz was not fast enough and he kept bugging
me for game-time. So we have been shifting around some "resources" to
everyone but me. I don't know how they get the new computer and I don't. I
think I have talked him out of dual booting with redhat, for now.



~~~but, Google does give you (at times) interesting behavior.
~~~Search for "weapons of mass destruction" but hit "I'm feeling lucky"
~~~instead of "Google search" and study the error message. Try
~~~some of the remedies...

Empire Poker is what I got, sometimes I wonder if I am the only one getting
these ads.

I will never get used to extra processes launching when I close windows and
programs. Not a good way to market to me.
Microsoft or someone is going to have to add a flag to prevent loading this
spyware class, I think they call it "Browser Helper Objects"
So dangerous compared to rock solid iSeries.

-Mark


_______________________________________________
This is the Non-Technical Discussion about the AS400 / iSeries
(Midrange-NonTech) mailing list
To post a message email: Midrange-NonTech@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-nontech
or email: Midrange-NonTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-nontech.
_______________________________________________
This is the Non-Technical Discussion about the AS400 / iSeries
(Midrange-NonTech) mailing list
To post a message email: Midrange-NonTech@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-nontech
or email: Midrange-NonTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-nontech.


=== [ KI (USA) Corporation - http://www.kiusa.com ]
====================================== 
Tel. 859.986.1420  --  Fax. 859.986.1485 
This e-mail, including any attachments, contains information from KI (USA)
Corporation that may be confidential or privileged. Mail is intended only
for those to whom it is addressed. If you are not the intended recipient do
not copy, distribute, or take any action in reliance on the contents of this
message. 
If you have received this e-mail in error notify the sender immediately then
delete or destroy all electronic and hard copies of this communication,
including attachments. 
KI (USA) Corporation's anti-virus system checks for known viruses. However
you are advised to run your own virus check before opening any attachments
received. KI (USA) Corporation will not accept any liability once an e-mail
and/or any attachment is received. 
Views expressed in the e-mail are those of the author and not necessarily
those of KI (USA) Corporation. 
============================================================================