Now I Got Worry

I didn’t like antivirus software. Even Microsoft‘s advice included in the notorious WinXP Service Pack 2 didn’t convince me. “Just be careful with drive-by downloads and email attachments, and you’ll be fine”, i told myself. Until today.

Ginat’s place was empty this weekend, so Hadar and me spent it there. Hadar studied to her Physics exams and i fixed Ginat’s PC, which was infested with spyware. Internet Explorer hardly worked with all the popups. I thought that it would be simple. AdAware detected a little something called CoolWebSearch. And it even removed it. But then it came back, under a different name. I tried to fight, but it mutated and fought back — changed the names of it’s dll’s to random four-letter combination, forced Notepad and AdAware to close, etc. After each cleanup it somehow reinstalled itself. Some websites said that even installing the service pack wouldn’t help — only restoring the registry (yeah, right) or complete Windows reinstall.

And then i came upon the alternative anti-spyware “tool” — HiJackThis. It collects a generous log of suspicious, but not necessarily malicious registry keys. That log can be posted to security forums, such as AumHa (but there are also others), where volunteers will check it and suggest further actions. To make a long a story short — i did it, got a reply and it worked perfectly.

This cleanup took me almost the whole day. I did it out of sheer curiosity and will to help Ginat, and i swear i wasn’t fishing for compliments. I am amazed that these volunteers dedicate their time and patiently help strangers to clean the mess on their computer for free. It’s good to know that there are still some good guys left.

On the other hand, it taught me a sad lesson — there are bad guys, too. And sometimes they are really nasty, they just won’t let go, they’ll do their best to bog down innocent people’s PC’s. And if a stupid adware program can be so nasty, then what is there to say about truly destructive viruses? Maybe i’ll succumb and install one myself. Maybe i’ll even pay for it (goodness!)

In the meantime, i installed Firefox and Thunderbird. Service Pack good, alternative browser better.

4 Responses to “Now I Got Worry”


  1. 1 nev 2004-09-12 at 21:18

    yeah, i totally agree. I’ve been using thunderbird for over three months already (i only wish it would look a bit better, obviously)

    And Firefox rocks, too…except when it makes me climb up the walls and commit suicide for not reading anything of my valid html as i’d expect :'(

  2. 2 Amir 2004-09-13 at 17:25

    That’s one of the cool things about op3n 5ource: you can change the way it looks yrself.

    And did you report a bug about HTML incompatibilities?

  3. 3 roz 2004-09-13 at 18:03

    CoolWebSearch is indeed the nastiest motherfucker i have ever seen. My cousin in NYC had(still has?) it, and i just couldn’t get rid of it.
    Everytime he tried to get to Google, he was directed to some lame search page. I checked the ‘hosts’ file and it was butched with links to porn and stuff like that. I deleted everything there and still he got the redirection. It seemed like an IE problem actually. As anticipated, Firefox didn’t have that problem, but I still just couldn’t figure out how to remove this bad seed…
    The people who wrote this shit are indeed very BAD. Are they stupid white men?

  4. 4 Amir 2004-09-13 at 19:40

    Stupid white men? Not very stupid. And probably some of them are Russian. But the target audience for the ads produced by that malware are definitely stupid American white men: “Tax returns”, “Adult entertainment”, “Home finance”, “Escorts”, “Fishing” and “Debt consolidation”. Whatever that is. An interesting cultural notion.


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s




Archives


%d bloggers like this: