• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

Sneaky Toolbar Hijacks Browsers

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Exploits // System Weaknesses

View previous topic :: View next topic  
Author Message
ComSec
Trusted SF Member
Trusted SF Member


Joined: 26 Jul 2002
Posts: 16777215


Offline

PostPosted: Thu Jan 30, 2003 5:42 pm    Post subject: Sneaky Toolbar Hijacks Browsers Reply with quote

Sneaky Toolbar Hijacks Browsers

It's the most evil thing on the Internet, according to some of its victims. But it's not a virus, a scam or a raunchy porn site.
It's a browser toolbar that some swear is doing "drive-by downloads" -- installing itself without users' permission -- then taking over their systems and making it impossible to uninstall.


"When I find the bastards who programmed this thing I'd be happy to castrate them with a pair of dull pinking shears," fumed one of Xupiter's many unhappy victims in a newsgroup posting.
Xupiter is an Internet Explorer toolbar program. Once active in a system, it periodically changes users' designated homepages to xupiter.com, redirects all searches to Xupiter's site, and blocks any attempts to restore the original browser settings.
The program attempts to download updates each time an affected computer boots up, and has been blamed for causing system crashes. Several versions of Xupiter also appear to download other programs, such as gambling games, which later appear in pop-up windows.
Some said that Xupiter has taken over their browsers.
"Random words and characters now appear when I attempt to enter info on search sites or other forms. It's as if there's a ghost in my machine," New York resident Beth Vanesky said.
Xupiter.com is registered to a company called Tempo Internet, in Gyongyos, Hungary. Calls and e-mails to Tempo were not returned.......continued

http://www.wired.com/news/infostructure/0,1377,57467,00.html
Back to top
View user's profile Send private message Visit poster's website
ComSec
Trusted SF Member
Trusted SF Member


Joined: 26 Jul 2002
Posts: 16777215


Offline

PostPosted: Thu Jan 30, 2003 9:04 pm    Post subject: Reply with quote

thanks _Mhz

Quote:
It was an absolute c*nt to get ridof


do you remember how you did ? .....and were in the registry it resided ?...if so then some of our members who might have the same problem , could gain from your experience.....please feel free to post the solution

cheers
Back to top
View user's profile Send private message Visit poster's website
flw
Forum Fanatic
Forum Fanatic


Joined: 27 May 2002
Posts: 16777215
Location: U.S.A.

Offline

PostPosted: Thu Jan 30, 2003 9:16 pm    Post subject: Reply with quote

Anybody try "Spybot" ?
Back to top
View user's profile Send private message Visit poster's website
ComSec
Trusted SF Member
Trusted SF Member


Joined: 26 Jul 2002
Posts: 16777215


Offline

PostPosted: Thu Jan 30, 2003 9:59 pm    Post subject: Reply with quote

fastlanwan wrote:
Anybody try "Spybot" ?


not tried it , but Spybot works from what i have just read at another forum.
Back to top
View user's profile Send private message Visit poster's website
flw
Forum Fanatic
Forum Fanatic


Joined: 27 May 2002
Posts: 16777215
Location: U.S.A.

Offline

PostPosted: Thu Jan 30, 2003 10:13 pm    Post subject: Reply with quote

It worked well when I had a problem like the one your describing.
Back to top
View user's profile Send private message Visit poster's website
delete852
Just Arrived
Just Arrived


Joined: 19 Nov 2002
Posts: 4
Location: Washington DC

Offline

PostPosted: Fri Jan 31, 2003 3:00 am    Post subject: Reply with quote

i cought it too a while ago
I went to the registry localmachine>software>windows>current version>run and run once, that has a list of of things that start up no matter what. So I erased the one for Xjupiter, than I ended it in EndTask, thing, and then I erased the files, and changed my settings back. That thing is like a virus, i hate that shit.
Back to top
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger
ComSec
Trusted SF Member
Trusted SF Member


Joined: 26 Jul 2002
Posts: 16777215


Offline

PostPosted: Fri Jan 31, 2003 3:15 am    Post subject: Reply with quote

thanks to all ..... lets hope someone pays them back for the grief they have caused Wink
Back to top
View user's profile Send private message Visit poster's website
squidly
Trusted SF Member
Trusted SF Member


Joined: 07 Oct 2002
Posts: 16777215
Location: Umm.. I dont know.. somewhere

Offline

PostPosted: Fri Jan 31, 2003 3:24 am    Post subject: Reply with quote

ComSec wrote:
thanks to all ..... lets hope someone pays them back for the grief they have caused Wink


You know I think I'm a psychic (or psycho) but I see a defacement being asked for here.. (no nice adming lean security stuff) Twisted Evil
Back to top
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Exploits // System Weaknesses All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register