• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Oh noes! Winfixer has penetrated Firefox!

Page 2 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.
I still do not understand. To get spyware on a properly configured IE (or firefox, for that matter), you MUST click "OK" or "Yes" to download it. ("medium" security settings or higher) It cannot be loaded on your system without your active acceptance.

I have NEVER had my system infected with ANY spyware. I cannot understand why anyone HERE would.
 
Originally posted by: jamesbond007
Ok, I've got a question.

Is it possible for one of us to write a script/program kind of like the RC5/Distributed client computing where we would donate our bandwidth to someone that would target spam e-mailers' IP addresses? I'm sure if we got a lot of people who could 'donate' their bandwidth at night to DDOS some dorks around the world who do nothing anyways but fill our inboxes with junk mail, we at ATOT could make a difference.

Is this possible?

I could care less about spam mail... but think that this would be great for sites that advertise, manipulate, and install spyware. Yeah, some might say it's unethical but the internet is like the wild west. Where's the law in stopping any of this? It takes them 4 years to do anything and by then it's too late. I say, grab whatever weapons (ddos, bandwidth saturation, etc) and inflict some old school vigilanteism.
 
Originally posted by: Amused
I still do not understand. To get spyware on a properly configured IE (or firefox, for that matter), you MUST click "OK" or "Yes" to download it. ("medium" security settings or higher) It cannot be loaded on your system without your active acceptance.

I have NEVER had my system infected with ANY spyware. I cannot understand why anyone HERE would.

If that was the case, IE and Firefox would never have to plug any security holes.
 
Originally posted by: mchammer
Please explain what u guys are talking about, what is winfixer?? I thought Firefox was secure to use??

You know I hate to see so many people switching from IE to FF thinking it's more secure. FF has had more security fixes than IE in the year it's been out. If you want secure, you should switch to Opera.
 
Originally posted by: sciencewhiz
Originally posted by: Amused
I still do not understand. To get spyware on a properly configured IE (or firefox, for that matter), you MUST click "OK" or "Yes" to download it. ("medium" security settings or higher) It cannot be loaded on your system without your active acceptance.

I have NEVER had my system infected with ANY spyware. I cannot understand why anyone HERE would.

If that was the case, IE and Firefox would never have to plug any security holes.

The security holes are usually plugged BEFORE a problem exists. The vast majority of problems really start when hackers target non-updated machines after learning about the hole from the fix itself.

And, again, I have NEVER been infected with spyware. Winfixer (and ALL other spyware) REQUIRES you to OK it before it downloads and installs on IE with medium security settings or higher.
 
Originally posted by: Amused
Originally posted by: sciencewhiz
Originally posted by: Amused
I still do not understand. To get spyware on a properly configured IE (or firefox, for that matter), you MUST click "OK" or "Yes" to download it. ("medium" security settings or higher) It cannot be loaded on your system without your active acceptance.

I have NEVER had my system infected with ANY spyware. I cannot understand why anyone HERE would.

If that was the case, IE and Firefox would never have to plug any security holes.

The security holes are usually plugged BEFORE a problem exists. The vast majority of problems really start when hackers target non-updated machines after learning about the hole from the fix itself.

And, again, I have NEVER been infected with spyware. Winfixer (and ALL other spyware) REQUIRES you to OK it before it downloads and installs on IE with medium security settings or higher.

It's true. You don't need anti-virus or anti-spyware if you just keep up to date and practice safe internet usage.
 
WINFIXER.COM


66.244.254.63
Record Type: IP Address


OrgName: Big Pipe Inc.
OrgID: BGPP
Address: Suite 400
Address: 630 - 3rd Ave. SW
City: Calgary
StateProv: AB
PostalCode: T2P-4L4
Country: CA

ReferralServer: rwhois://204.209.209.80:4321

NetRange: 66.244.192.0 - 66.244.255.255
CIDR: 66.244.192.0/18
NetName: BIGPIPE-2
NetHandle: NET-66-244-192-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: DNS1.BIGPIPEINC.COM
NameServer: DNS2.BIGPIPEINC.COM
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2002-03-14
Updated: 2002-05-21

RTechHandle: ZB106-ARIN
RTechName: Big Pipe Inc
RTechPhone: +1-403-750-7428
RTechEmail: ipadmin_bigpipe@bigpipeinc.com

OrgAbuseHandle: BPA15-ARIN
OrgAbuseName: BIG PIPE ABUSE
OrgAbusePhone: +1-866-244-7474
OrgAbuseEmail: abuse@bigpipeinc.com

OrgTechHandle: ZI94-ARIN
OrgTechName: Big Pipe Inc.
OrgTechPhone: +1-403-750-7428
OrgTechEmail: ipadmin_bigpipe@bigpipeinc.com

 
Originally posted by: jamesbond007
Originally posted by: dighn
Originally posted by: jamesbond007
Ok, I've got a question.

Is it possible for one of us to write a script/program kind of like the RC5/Distributed client computing where we would donate our bandwidth to someone that would target spam e-mailers' IP addresses? I'm sure if we got a lot of people who could 'donate' their bandwidth at night to DDOS some dorks around the world who do nothing anyways but fill our inboxes with junk mail, we at ATOT could make a difference.

Is this possible?

I think that's illegal

Then why the hell isn't spam illegal and why can't we use unjustified methods against someone elses' unjustified methods of advertisements AKA crap?

spam is illegal dumbass, its just impossible to enforce spammers to stop
 
Originally posted by: Ameesh
spam is illegal dumbass, its just impossible to enforce spammers to stop

Yikes! No need to get hasty here, Ameesh. On the other hand, though, what is stopping the governments from DDOSing the IPs/servers that send the junk out? Or the ones who infest a computer with spyware and endless pop-ups? Technically, everything should have an IP of a sort, which makes it attackable with enough bandwidth behind your computer.
 
I still dont get how it could get into a system provided it is not exploiting an unpatched vulnerability. In Firefox the only way would be to download a file and run it, afaik.
 
Apparentlyly it loads the popup stuff when you close internet explorer...as a BHO helper.

Then uses system restore to reintroduce itself should you manage to delete it.
 
Originally posted by: jamesbond007
Originally posted by: dighn
Originally posted by: jamesbond007
Ok, I've got a question.

Is it possible for one of us to write a script/program kind of like the RC5/Distributed client computing where we would donate our bandwidth to someone that would target spam e-mailers' IP addresses? I'm sure if we got a lot of people who could 'donate' their bandwidth at night to DDOS some dorks around the world who do nothing anyways but fill our inboxes with junk mail, we at ATOT could make a difference.

Is this possible?

I think that's illegal

Two wrongs don't make a right, although 3 rights DO make a left 🙂

Then why the hell isn't spam illegal and why can't we use unjustified methods against someone elses' unjustified methods of advertisements AKA crap?

 
Originally posted by: jamesbond007
Ok, I've got a question.

Is it possible for one of us to write a script/program kind of like the RC5/Distributed client computing where we would donate our bandwidth to someone that would target spam e-mailers' IP addresses? I'm sure if we got a lot of people who could 'donate' their bandwidth at night to DDOS some dorks around the world who do nothing anyways but fill our inboxes with junk mail, we at ATOT could make a difference.

Is this possible?

It's been tried before
 
Originally posted by: Macro2
Apparentlyly it loads the popup stuff when you close internet explorer...as a BHO helper.

Then uses system restore to reintroduce itself should you manage to delete it.
If that is true, then this is not a firefox issue at all.
 
Originally posted by: Macro2
Apparentlyly it loads the popup stuff when you close internet explorer...as a BHO helper.

Then uses system restore to reintroduce itself should you manage to delete it.

If you already have System Restore disabled, is it possible for the winfixer program to re-enable it and use it against you?

Originally posted by: Spacehead
It's been tried before

That is AWESOME! :thumbsup:
 
Originally posted by: Amused
Originally posted by: sciencewhiz
Originally posted by: Amused
I still do not understand. To get spyware on a properly configured IE (or firefox, for that matter), you MUST click "OK" or "Yes" to download it. ("medium" security settings or higher) It cannot be loaded on your system without your active acceptance.

I have NEVER had my system infected with ANY spyware. I cannot understand why anyone HERE would.

If that was the case, IE and Firefox would never have to plug any security holes.

The security holes are usually plugged BEFORE a problem exists. The vast majority of problems really start when hackers target non-updated machines after learning about the hole from the fix itself.

And, again, I have NEVER been infected with spyware. Winfixer (and ALL other spyware) REQUIRES you to OK it before it downloads and installs on IE with medium security settings or higher.

Sorry, but that's flat out wrong. The reality is that most times the holes are NOT plugged before there's the potential for trouble. Basically someone finds a hole, within days there's sample exploit code available, and some time after that (depending on how critical the hole is), a patch will be released. Further, from time to time people find holes in IE (and probably FF as well) that allow a malicious site to install software WITHOUT the user expressly allowing it. Those are the 'critical' level patches that MS will release outside their normal monthly patching schedule.

True, you can reduce your exposure quite a bit by using common sense and avoiding shady sites (pr0n, warez etc), but that's not *always* the case.
 
Originally posted by: jamesbond007
Ok, I've got a question.

Is it possible for one of us to write a script/program kind of like the RC5/Distributed client computing where we would donate our bandwidth to someone that would target spam e-mailers' IP addresses? I'm sure if we got a lot of people who could 'donate' their bandwidth at night to DDOS some dorks around the world who do nothing anyways but fill our inboxes with junk mail, we at ATOT could make a difference.

Is this possible?


Isn't night subjective?
 
Originally posted by: logic1485
Originally posted by: jamesbond007
Ok, I've got a question.

Is it possible for one of us to write a script/program kind of like the RC5/Distributed client computing where we would donate our bandwidth to someone that would target spam e-mailers' IP addresses? I'm sure if we got a lot of people who could 'donate' their bandwidth at night to DDOS some dorks around the world who do nothing anyways but fill our inboxes with junk mail, we at ATOT could make a difference.

Is this possible?


Isn't night subjective?

Yes, it is. Then how about we just run the damn program when we feel our bandwidth can be 'used for vigilante purposes'. 😀
 
Originally posted by: RyanSengara
I thought I was safe from it.. then I opened up firefox just now and was greeted by winfixer.

Fvck.

No ones safe now!

So let me get this straight. Somehow you got a program installed that normally costs $39.95, and you are complaining? Sheesh... :roll:








😛
 
Back
Top