Spyware, Internet Security, and Firefox

/ Spyware, Internet Security, and Firefox #1  

getut

Platinum Member
Joined
May 18, 2004
Messages
751
Location
NC
Tractor
Kioti CK20HST
The following is regurgitated from another thread, but ended up being general knowledge not entirely related to the original thread. Other may find it useful so here it is in its own posting with its own title so hopefully it may be searched easier in the future.

This post deals with people that have switched to true alternative browsers not JUST the Mozilla/Firefox listed in this original post:

</font><font color="blue" class="small">( If you are still getting spyware on your machine after going to firefox, then below I have listed pretty much every way that Spyware can get on your machine. If you guard against these couple of things, you should have ZERO spyware on your PC.

1) You didn't get your computer 100% clean before switching to Mozilla/Firefox. Spyware makers have gotten smart to spyware removal tools and they commonly utilize "sleeper" programs that do not get caught by the spyware removal tools. The sleeper routines nowadays are updated ***DAILY***. They go out and get a slightly modified but new copy of themselves every day. Therefore the definitions for spyware removal tools never detect the loader/sleeper routine. So in effect, as soon as you clean your machine, the next day the sleeper routing has fired up and re-downloaded all the junk to your machine again. Many true viruses are downloaders/sleepers/entry points for spyware. Only 2 ways to clean these: Leave the machine OFF the internet for about 2 weeks (long enough for spyware definitions to catch up), using another PC, download the spyware updates and put them on the infected machine with a floppy disk. The loader/sleeper program will be detected and removed. Either that or just reformat. Use antivirus to clean the true viruses from your machine.

2) You are still using IE on questionable sites. This does not NECESSARILY mean that the top level site you are going is not legit. It can also mean that the operators of that site (such as TBN for example) may inadvertently let an unsrupulous advertiser advertise. Their advertisement may link back to somewhere else that carries a spyware payload. So in effect, you can still be infected using IE on even credible, respected internet sites. All it takes is the marketing person to mess up and let one single ad slip through and be advertised on their credible site.

3) You may not be using IE, but may still be using other software that uses IE as the rendering engine. For example, some alternate browsers such as the Avant browser mentioned in this thread is just a pretty face for IE. It has all the same security issues. Or you may still be using outlook or outlook express as your email client. Web enabled email received in those browsers will still use IE as the rendering engine. So the same issues apply.

4) You have a rootkit. That involves more than I am willing to type. Google for windows rootkit and do some research.

5) You are running a very old version of Mozilla/Firefox that has a security problem. New versions have no issues that allow spyware to install themselves in a manner that the user would not know about.

6) This is the worst one and can only be protected against with user education. Some spyware is USER initiated. In other words users are TRICKED into installing software that is either directly a spyware package, or carries a spyware package with it. It uses no security hole to install itself. It simply asks the unknowing user if they want to install X or Y software package and the unknowing user allows it to happen. Many so called FREE software packages fund themselves using this tactic. You want the software, so you also unknowingly agree to allow this other package to install itself as part of the deal... but you may not know exactly what you are agreeing to.

Hopefully I havn't rambled too much, and MOST hopefully I have helped someone out by typing all this. If anyone thinks this information is helpful enough to warrant placement in its own thread, let me know and I'll post it. This is kind of general internet information that is hidden in a Netscape specific thread.

PS: Marketers ***HATE*** seeing software that enables users to eliminate advertisements from web pages. But this is fact: The internet is like a *** partner. When you trust a web site to do no harm to your computer, then you are trusting everyone that they trust as advertisers. Good security requires that you take matters into your own hands and YOU decide what displays on your own computer.

Be strong. For some sites it isn't a coincidence that they won't work well on browsers other than IE. Some sites are just coded for IE (no malicious intent), but some other big name sites don't allow anything other than IE BECAUSE they don't want you having a say in how data/images/ads/cookies are handled in alternative browsers.

Take for example.. Some web sites require cookies for their use (no REAL reason.. they just want to be able to track you). Firefox has a feature that "allows" the site to set a cookie, but firefox automatically deletes the cookie on close. Some sites actually check for this feature and make you disable it because they don't "like" it. Be strong and stay away from those types of sites no matter how compelling their content is.

I also forgot to mention one other big piece of software that uses IE as the rendering engine. It is Windows Media Player. This software is BAD, BAD, BAD. Because it uses IE as the rendering engine, it has all the flaws as IE, plus PLENTY of its own. Disable windows media player and download or purchase an alternative. I would recommend this excellent package as the replacement. I would go as far as setting a policy that disables Windows Media Player entirely. )</font>

Links relevent to the above:
Original thread of the above quote
Firefox tweaking thread
Windows Media Player replacement
Firefox itself
Adblock plugin
Pre-made filter list for adblock plugin

If anyone on TBN has the desire to get their machine more secure but needs help, I would be glad to help out. Just PM me and we'll set something up.
 
/ Spyware, Internet Security, and Firefox #2  
Interesting. I'm running Firefox. Recently I visited Chrysler's web site; I was curious about pricing for the Crossfire Roadster. It was the first time I had ever been there. Later that evening I ran Spybot and, as is usual for me even with Firefox, I had several adware programs show up. Among them was something tied to Chrysler; I don't recall the precise terms. So, Firefox managed to accept a type of adware I had never seen from a site I had never previously visited.

I suppose that means I have an older, less secure version of Firefox. What it ACTUALLY means TO ME is that the adware folks are catching up with Firefox almost as much as they are with IE. Frankly, I can't be bothered to continously download updated versions of software just because someone else has found another hole that, according to all the Firefox believers, wasn't supposed to be there in the first place. I'll live with it until it slows down the browser too much, just like I did with IE.

There is no magic bullet.
 
/ Spyware, Internet Security, and Firefox
  • Thread Starter
#3  
Whoops forgot to add links for the two most popular web viewers. These are Mozilla/Firefox specific, so the version that loads and runs in Internet Explorer will not work for Mozilla/Firefox.

Flash Player
Shockwave Player

Flash player is good software and is common, but it is often used for advertisements. It has a similar function to cookies but a little more sinister. The software itself (neither the IE version or the Mozilla/Firefox version) directly give you the ability to protect yourself from this. Macromedia made a web site available that exposed settings that you can disable, it then saves a configuration file to your PC that tells Flash to disable that stuff.
Here is the link that exposes setting for you to disable.
 
/ Spyware, Internet Security, and Firefox
  • Thread Starter
#4  
OkeeDon...
Alot of the spyware scanners just tag "items" it has found, either they don't list the type of thing found at all or it is listed pretty obscurely. Most of the time that type of stuff are just tracking cookies. Not actually bad, but most spyware software is set to the most "tin foil hattish" setting, meaning all tracking cookies get tagged.

If you dump your cookies in Firefox and then change the setting that makes cookies "session only" then you won't even get those warnings. Even with your old version of Firefox.

If slowdowns are your only concern that is great. But some people store confidential data on the PC's that can be compromised.

I personally like being the sole master of my PC. I want it to do my bidding and my bidding only and it doesn't matter whether it is a hacker trying to get in, a company trying to bounce SPAM off of me, or a company trying to make my computer cough up information about me that I didn't authorize it to, it should only do what I tell it to.
 
/ Spyware, Internet Security, and Firefox #5  
The thing is, I mostly like cookies. They're how forums like this remember what you've already read. When I dump my cookies, or set them to session only, I have to rely on my memory as to what I've already seen. That's too much like work. On the few occasions where I've lost my cookies, it's taken me weeks to get the forums back right with the world.
 
/ Spyware, Internet Security, and Firefox
  • Thread Starter
#6  
You can also set which sites are exclusions to the rule. Take for instance you set the default to be "session only" and then specifically set TBN to be "allow" so that things work the way you want, but yet still retain security.

I keep everything set to session only. The TBN settings seem to stored on the web site and work for me regardless of cookies.
 
/ Spyware, Internet Security, and Firefox #7  
To enable Firfox deleting cookies that sites set, do I just go to Tools - Options - Privacy - Cookies? I expand the Cookies category and I have these boxes checked: Allow sites to set cookies and for the originating website only. Also, for the Keep Cookies drop down box, I have until I close Firefox selected. I set some exclusions for some other trusted forums I visit.

I just know I had another question, but dang nabbit, I forgot. /forums/images/graemlins/blush.gif /forums/images/graemlins/tongue.gif
 
/ Spyware, Internet Security, and Firefox
  • Thread Starter
#8  
Yep.. those are good settings.

I would also make sure that in the content area that Enable Javascript is selected, but make sure that disable common annoyances is also selected.

Forgot.. one more link for people interested in Firefox:
Sun Java Runtime Environment
 
/ Spyware, Internet Security, and Firefox #9  
Do you have a link for the latest version of Spybot Search & destroy? for some reason my version won't update anymore.......Thanks........Tom
 
/ Spyware, Internet Security, and Firefox
  • Thread Starter
#10  
Spybot Search and Destroy link

If you click on that link and nothing happens, then you have one of the various virus/spyware packages and muck with your network settings to make certain "helpful" sites non-responsive.

If that is the case PM me, and I'll make the files available on my own web server that won't be "blocked" by the bad software.
 
/ Spyware, Internet Security, and Firefox #11  
Thanks.......Spybot downloaded just fine & the new updated version found just a couple items to fix...............Tom
 
/ Spyware, Internet Security, and Firefox #13  
<font color="blue"> I would also make sure that in the content area that Enable Javascript is selected, but make sure that disable common annoyances is also selected. </font>

Where do I select disable common annoyances? What's the content area? If I go to Tools - Options - Web Features, Enable JavaScript is already selected. If I click Advanced, there is no option to select Disable Common Annoyances. I've looked throughout the Options and didn't see it. /forums/images/graemlins/confused.gif
 
/ Spyware, Internet Security, and Firefox
  • Thread Starter
#14  
See the attachment. If your window for Tools/Options doesn't look like the one in the attachment then you are running an older version of Firefox.

***Edit: The TBN attachment seems to be dead. So here is inline image of it.
options.jpg
 
/ Spyware, Internet Security, and Firefox #15  
<font color="blue"> If your window for Tools/Options doesn't look like the one in the attachment then you are running an older version of Firefox. </font>

Older version? I just downloaded it from Mozilla's site yesterday. I'm running 1.04. Here is what my options screen looks like.

660951-FF%20Options.JPG


I've also revertaed back to having cookies deleted when they expire. Even if I put some sites on the exception list, the cookies still get deleted. It's getting old having to relogin every time. When adding them to the exception list I clicked Allow instead of Allow for Session.
 

Attachments

  • 660951-FF Options.JPG
    660951-FF Options.JPG
    31.2 KB · Views: 123
/ Spyware, Internet Security, and Firefox
  • Thread Starter
#16  
Ok.. I use the nightly build developer version (newer than new /forums/images/graemlins/grin.gif). So I wasn't sure whether the user interface in my version had not made it to the 1.0.4 version yet.

I checked and that is the case. I am running the "next" version of the interface that hasn't made it out yet. This version is still in testing and may or may not make it out as final. In your version, just click on the advanced button beside enable javascript and then uncheck all those items.
 
/ Spyware, Internet Security, and Firefox #17  
I updated to the latest version of Mozilla Firefox.
To my surprise, there is no spellchecker extension like the one I was using with the older version. /forums/images/graemlins/frown.gif
I believe it was Spellbound.
Did I miss something?
 
/ Spyware, Internet Security, and Firefox
  • Thread Starter
#18  
I'm guessing from your post that you previously had spellbound running and then upgraded your firefox and then it stopped working or doesn't show up anymore. Please correct me if I am wrong there, but I'll continue as if this is the case.

With Firefox updates, especially between major releases, the javascript handling among other things may change drastically. Most of the configuration and add-on stuff for Firefox works through javascript config files. When you upgrade the format of one or more of those files may have changed drastically, so therefore Firefox may fail to even detect installed add-ons. Add ons themselves sometimes change to support newer versions of the browser.

If you go really long times between upgrades, the best method for upgrading is to back up your favorites, uninstall the existing Firefox, manually delete any leftover folders, both in the Program Files area and under your Windows user profile, then install the new version of Firefox, then install the latest version of all your plugins.
 
/ Spyware, Internet Security, and Firefox #19  
I was not able to find a spellchecker for the new version when I did a search of the available extentions. However, maybe I had missed where to look for the extention.
 

Marketplace Items

KUBOTA SSV65 OPEN STATION CAB (A52706)
KUBOTA SSV65 OPEN...
UNUSED FUTURE 16" HYD AUGER (A52706)
UNUSED FUTURE 16"...
2012 Dodge Avenger Sedan (A59231)
2012 Dodge Avenger...
2018 GENIE GTH-5519 TELESCOPIC FORKLIFT (A59823)
2018 GENIE...
Brock 48'x16' Flat Bottom Grain Storage Tank (A57148)
Brock 48'x16' Flat...
5th wheel (A59231)
5th wheel (A59231)
 
Top