Spy Ware

2229/4444

DNS server settings can be changed to allow a request for one url to be directed to a server that may appear to be serving that content, but is, in fact, not. E.g. a DNS server may be set up that correctly resolves all requests, except those for a bank (such as wellsfargo.com) when it returns the address of a server setup to present the same front end as the bank, but infact collects, and delvers to "bad people" the information you enter to log in. How can you prevent this? Make sure your DNS server settings are correct in network properties for the TCP/IP service.

The "Auto Search" setting in Internet Explorer may be hijacked to misdirect mistyped web addresses. Reset this to a valid selection in the registry keys:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search
This gets activated when you put in a URL that fails to resolve through DNS (unless a SearchURL keyword is found infront of the URL)
- "SearchAssistant" = a good example would be "http://www.google.com/ie"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search
This one gets activated when you hit the View / Explorer Bar / Search
- "Search Bar"

Also:

See also:

http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml Excellent utility for tracking down programs that are being started when windows starts. Can disable, delete, and lookup information (via google) on each program. Also checks the publishers certificate and can filter out known good programs from the list.+
http://www3.ca.com/securityadvisor/pest/ CA Spyware Information Center
http://research.pestpatrol.com/HowTo/How_To_Clear_a_Hijack.asp How IE gets sent to point A when you wanted it to get to point B
http://vil.nai.com/vil/content/v_100719.htm QHosts1 is an example... It makes a new, fake hosts file in the help directory with incorrect IP addresses for popular urls and sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters "DataBasePath" = %SystemRoot%\help so that IE uses this new hosts file.

file: /techref/app/spyware.htm, 2KB, , updated: 2005/2/15 09:54, local time: 2008/7/4 22:13,

^{38.103.63.16:LOG IN}

©2008 These pages are served without commercial sponsorship. (No popup ads, etc...).Bandwidth abuse increases hosting cost forcing sponsorship or shutdown. This server aggressively defends against automated copying for any reason including offline viewing, duplication, etc... Please respect this requirement and DO NOT RIP THIS SITE. Questions?
Please DO link to this page! Digg it!
<A HREF="http://www.piclist.com/techref/app/spyware.htm"> Spy Ware</A>

Did you find what you needed?

"No. I'm looking for: "
"No. Take me to the search page."
"No. Take me to the top so I can drill down by catagory"
"No. I'm willing to pay for help, please refer me to a qualified consultant"
"No. But I'm interested. me at when this page is expanded."

PICList 2008 contributors:
o List host: MIT, Site host massmind.org, Top posters @20080704 Apptech, Jinx, Xiaofan Chen, David VanHorn, Alan B. Pearce, Bob Axtell, William \Chops\ Westfield, Cedric Chang, Gerhard Fiedler, bean,
* Page Editors: James Newton, David Cary, and YOU!
* Roman Black of Black Robotics donates from sales of Linistep stepper controller kits.
* Ashley Roll of Digital Nemesis donates from sales of RCL-1 RS232 to TTL converters.
* Monthly Subscribers: Shultz Electronics, Larry Williams, David VanHorn, Bryan Whitehouse, Timothy Weber, David Challis. Peter Todd. on-going support is MOST appreciated!
* Contributors: Neil Narwani, David Cary, Elemer AM Nyiry, Philip J Taylor, Gus Calabrese of Omegadogs.com, Gautama Venegas, Patrick B. Murphy, William Chops Westfield, Peter Todd, Leslie Ellis