Jump to content


Photo

Programs Containing spyware - wanted !


  • Please log in to reply
21 replies to this topic

#1 MikeNash

MikeNash

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 18 April 2005 - 07:33 PM

Hi Everyone,

I'm looking for some products/sites/emails of known spyware. I've seen many sites with names of malicious programs, but I want to actually obtain a copy of them for fingerprinting purposes.

Can anyone give me any pointers in the right direction?


regards


Mike

#2 CyberQurious

CyberQurious

    Member

  • Full Member
  • Pip
  • 17 posts

Posted 19 April 2005 - 06:55 PM

Hi Everyone,

I'm looking for some products/sites/emails of known spyware.  I've seen many sites with names of malicious programs, but I want to actually obtain a copy of them for fingerprinting purposes.

Can anyone give me any pointers in the right direction?


regards


Mike

 



Well, Mike, I would say that reputable site, Dictionary.com, would give you a small sized pop-up window which was either called mediaclick.com, or clickmedia.com(which is known to be spyware), that even the best anti pop-up programs can't filter out, but I just went to Dictionary.com(with my anti pop-up filter off) and looked up several words, but I got absolutely no pop-up ads from them. So, I guess Dictionary.com has discontinued using pop-up ads. :wtf: But anyway, I googled "mediaclick.com" and "clickmedia.com," and there are actual sites for both domain names. I didn't want to visit either of those sites, therefore, you'll have to have the pleasure of doing so if you're interested in finding out more about these sites. Posted Image

Also, I don't know if this will help, but I just found this: http://www.pchell.co...eycentral.shtml

Edited by CyberQurious, 19 April 2005 - 06:57 PM.


#3 CyberQurious

CyberQurious

    Member

  • Full Member
  • Pip
  • 17 posts

Posted 20 April 2005 - 11:52 PM

Actually, it's called media.fastclick.net(I think) and you can get one by going to tvtome.com.

#4 MikeNash

MikeNash

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 21 April 2005 - 01:07 AM

Also, I don't know if this will help, but I just found this: http://www.pchell.co...eycentral.shtml

 


Thanks a lot for your help, although what I am actually looking for is the executables. I know, for example that cool web search is nasty - and I know how to remove/prevent its installation. But, I need a copy of it - and as much malware as I can get.

I guess I'll have to go surfing porn sites....

#5 Tuxedo Jack

Tuxedo Jack

    Creator of TuxPE, a Cat5-o'-9-Tails, Etherkillers, and more

  • Expert
  • PipPipPipPipPip
  • 1,758 posts

Posted 21 April 2005 - 01:27 AM

Kazaa Media Desktop.

That's all I need to say.
Signature file is under revision. This will be back shortly.

#6 MikeNash

MikeNash

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 22 April 2005 - 04:08 AM

Kazaa Media Desktop.

That's all I need to say.

 


:-))) One of the first tests I did. Gee, that installs a load of stuff - after a kazza install if I remember rightly there are something like 5 BHO or Toolbars added to Internet Explorer, and around 8 or so exes run during the infect.. I mean, installation process.

#7 ErikAlbert

ErikAlbert

    Typical User

  • Full Member
  • PipPipPipPipPip
  • 787 posts

Posted 22 April 2005 - 05:44 AM

MikeNash,
IE-SPYAD/HOSTS File contain alot of infected websites.
Visit them and enjoy the malware infection.

(Apparently, SM exists also in the Malware World)
ErikAlbert
Simplicity is always brilliant.

#8 Tuxedo Jack

Tuxedo Jack

    Creator of TuxPE, a Cat5-o'-9-Tails, Etherkillers, and more

  • Expert
  • PipPipPipPipPip
  • 1,758 posts

Posted 22 April 2005 - 03:53 PM

Certain lyrics sites try to install ISTbar. Try Googling for "Barry Manilow lyrics" and you'll see one.
Signature file is under revision. This will be back shortly.

#9 wreck

wreck

    Always Learning!

  • Full Member
  • PipPipPipPip
  • 285 posts

Posted 22 April 2005 - 05:32 PM

Try Googling for "Barry Manilow lyrics" and you'll see one.

LOL :hmmm: :blink:
How did you come across THAT one???? (self-incriminating!)
"It's not the size of the dog in the fight -- it's the size of the fight in the dog."

#10 MikeNash

MikeNash

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 22 April 2005 - 07:03 PM

Certain lyrics sites try to install ISTbar. Try Googling for "Barry Manilow lyrics" and you'll see one.

 


Thanks Tuxedo Jack. Fortunately for me, I was able to get a copy of IST without the risk of getting Barry Manilow on my computer :-)

#11 Tuxedo Jack

Tuxedo Jack

    Creator of TuxPE, a Cat5-o'-9-Tails, Etherkillers, and more

  • Expert
  • PipPipPipPipPip
  • 1,758 posts

Posted 23 April 2005 - 03:36 AM

Wreck, it was in a report that someone put out a while back (I think it was Eric Howes or Ben Edelman, I forget who). Apparently, a lyrics site with spy in the FQDN installed it through ActiveX.
Signature file is under revision. This will be back shortly.

#12 Armodeluxe

Armodeluxe

    Forum Deity

  • Retired Staff
  • PipPipPipPipPip
  • 1,896 posts

Posted 23 April 2005 - 04:01 PM

There is a comprehensive list of malicious sites stored already on every computer.Just take a look at the restricted sites list at IE/Tools/Internet Options/Security..

#13 wreck

wreck

    Always Learning!

  • Full Member
  • PipPipPipPip
  • 285 posts

Posted 23 April 2005 - 04:12 PM

I was just foolin' with you TuxedoJack! I didn't really think you were a Barry Manilow fan!! :D
"It's not the size of the dog in the fight -- it's the size of the fight in the dog."

#14 Tuxedo Jack

Tuxedo Jack

    Creator of TuxPE, a Cat5-o'-9-Tails, Etherkillers, and more

  • Expert
  • PipPipPipPipPip
  • 1,758 posts

Posted 23 April 2005 - 05:55 PM

Armodeluxe, that's assuming you have IE-SPYAD installed, and that mostly comes from tracking cookies.
Signature file is under revision. This will be back shortly.

#15 Alpha_Blue

Alpha_Blue

    Malware Fyta

  • Full Member
  • PipPipPipPip
  • 417 posts

Posted 29 April 2005 - 10:02 PM

I was wondering, why would you WANT to get spyware on your computer...? lol

#16 Alpha_Blue

Alpha_Blue

    Malware Fyta

  • Full Member
  • PipPipPipPip
  • 417 posts

Posted 29 April 2005 - 10:03 PM

honestly, though, I'm guessing that an easy way to get it is to go to porn/illegal sites- google words like warez, crackz, serialz, free porn, etc, and you should get some ina hurry!

#17 MikeNash

MikeNash

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 29 April 2005 - 10:28 PM

I was wondering, why would you WANT to get spyware on your computer...?  lol

 


I'm working on an Anti-spyware program - I want to check it can identity as much spyware as possible.

#18 Alpha_Blue

Alpha_Blue

    Malware Fyta

  • Full Member
  • PipPipPipPip
  • 417 posts

Posted 30 April 2005 - 12:00 PM

Oh, makes sense.

#19 Tuxedo Jack

Tuxedo Jack

    Creator of TuxPE, a Cat5-o'-9-Tails, Etherkillers, and more

  • Expert
  • PipPipPipPipPip
  • 1,758 posts

Posted 30 April 2005 - 08:42 PM

I was wondering, why would you WANT to get spyware on your computer...?  lol

 


Some of us who have advanced knowledge of malware like to get our hands on it and test it on certain spare machines or VMWare containers so our real machines don't get infected. That way, we can see what it does and how to kill it.
Signature file is under revision. This will be back shortly.

#20 jcuz

jcuz

    Member

  • Full Member
  • Pip
  • 25 posts

Posted 01 May 2005 - 09:53 AM

Actually, it's called media.fastclick.net(I think) and you can get one by going to tvtome.com.

 



This may not be relevant to the subject, but my daughter picks up a fastclick cookie or spyware bit each time she uses MSN Messenger. That's almost daily. She gets 'em, and I zap 'em. None of my "protectors" catch it, and disabling cookies won't stop it. Ad-Aware finds it pretty well. So does Spybot-S&D, but it won't stop it at the gate, so to speak.

#21 Tuxedo Jack

Tuxedo Jack

    Creator of TuxPE, a Cat5-o'-9-Tails, Etherkillers, and more

  • Expert
  • PipPipPipPipPip
  • 1,758 posts

Posted 01 May 2005 - 04:50 PM

Jcuz, just add this line to your hosts file:

127.0.0.1 rad.msn.com

That's MSN's adserver for MSN Messenger. Blocking that kills the ads and disables the cookie.

Alternatively, I prefer Trillian, which connects to all 5 major IM services at once - AIM, MSN, Yahoo, ICQ, and IRC - and it's freeware. On top of that, there are no ads, no spyware, and it's skinnable - I use an iChat skin.

http://www.ceruleanstudios.com
Signature file is under revision. This will be back shortly.

#22 CyberQurious

CyberQurious

    Member

  • Full Member
  • Pip
  • 17 posts

Posted 02 May 2005 - 04:20 AM

MikeNash, I don't know if this will help, but I was doing a search on a related topic this morining and found this thread from this forum which you might be instereted in, particularly the Aug 26 2004, 01:14 PM post:

http://www.spywarein...opic=1127&st=15




Member of UNITE
Support SpywareInfo Forum - click the button