Author Topic: Use Google's cached mode to avoid spyware!  (Read 9863 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33810
  • malware fighter
Use Google's cached mode to avoid spyware!
« on: May 27, 2007, 08:44:40 PM »
Use Google's cached mode to avoid spyware!

Hi malware fighters.

Sometimes clicking a link on the Google search result page, this can take you to a 'hijacked' website with malware on it. If you experienced this once you never click the first Google hit link anymore, but always use the Google "cached" link to check the link first. Another option is to use www.scandoo.com as your search-engine, but there you could also look at the "cached" link/
When in serious doubt before clicking rely on the results from finjan, Trustwatch or DrWeb online link checker : http://online.drweb.com/ or try this link out with this scanner: http://linkscanner.explabs.com/linkscanner/

A browser is an insecure tool, but with this at the back of your mind, you are a lot safer on the WWW.
Stay away from malware....click on the picture to see how vicious it is, really diabolical!
« Last Edit: May 27, 2007, 08:46:22 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

drhayden1

  • Guest
Re: Use Google's cached mode to avoid spyware!
« Reply #1 on: May 27, 2007, 09:38:11 PM »
http://www.explabs.com/products/lslite.asp
thanks damian-already use the online dr.web scanner but gonna download this and try it
nice self-potrait above ;D
« Last Edit: May 27, 2007, 09:40:36 PM by drhayden1 »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33810
  • malware fighter
Re: Use Google's cached mode to avoid spyware!
« Reply #2 on: May 27, 2007, 09:54:53 PM »
Hi drhayden1,

You need admin rights to do so.
You have no illusions anymore about my looks, after this remark.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

drhayden1

  • Guest
Re: Use Google's cached mode to avoid spyware!
« Reply #3 on: May 27, 2007, 09:58:48 PM »
Quote
You need admin rights to do so.
  ??????
i dowloaded the pro version of the above mentioned-can revert back to lite in 15 days-nice program 8)
and you can also change your looks-how talented ::)

A video and explanation of the SmartTrack google exploits
http://www.youtube.com/watch?v=iD0wdzQb8XY

click on it :P

« Last Edit: May 27, 2007, 10:08:46 PM by drhayden1 »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33810
  • malware fighter
Re: Use Google's cached mode to avoid spyware!
« Reply #4 on: May 27, 2007, 10:45:13 PM »
Hi Dan,

You could also use a script to see what is tracking:
Code: [Select]
<script language="JavaScript">
   1. // create object
   2. var linkTracking = {}
   3. // assign properties
   4. linkTracking.redirectUrl = '/redirect.php';
   5. // constructor (sort of)
   6. linkTracking.init = function() {
   7. // check for support of required methods
   8. if (!document.getElementsByTagName) {
   9. return false;
  10. }
  11. // get all links on the page
  12. var links = document.getElementsByTagName('a');
  13. // assign event handlers
  14. YAHOO.util.Event.addListener(links, 'mouseup', linkTracking.mouseUp);
  15. YAHOO.util.Event.addListener(links, 'keypress', linkTracking.keyPress);
  16. return true;
  17. }
  18. linkTracking.mouseUp = function(e) {
  19. linkTracking.redirectHandler(YAHOO.util.Event.getTarget(e));
  20. }
  21. linkTracking.keyPress = function(e) {
  22. // check for return key press
  23. if (YAHOO.util.Event.getCharCode(e) == 13) {
  24. linkTracking.redirectHandler(YAHOO.util.Event.getTarget(e));
  25. }
  26. }
  27. linkTracking.delay = function(mseconds) {
  28. var currentTime = new Date();
  29. var endTime = currentTime.getTime() + mseconds;
  30. while (currentTime.getTime() < endTime) {
  31. currentTime = new Date();
  32. }
  33. }
  34. linkTracking.redirectHandler = function(link) {
  35. // check for valid href, don't want to track anchors
  36. if (link.getAttribute('href')) {
  37. var url = link.getAttribute('href');
  38. function trackAS() {
  39. if (document.frames[0].event.type == "blur") {
  40. alert(document.frames[0].event.srcElement.id + " : " + document.frames[0].event.srcElement);
  41. }
  42. }
  43. function log() {
  44. bug = new Image();
  45. aURL='/pix.php?title=' + document.title;
  46. /bug.src = aURL;
  47. }
  48. <!--
  49. c_="";l_=""+screen.width;d_=document.referrer;
  50. if (self != top){try {r_=""+escape(parent.document.referrer);}catch(e_r) {r_=""+escape(d_);}}
  51  /else {r_=""+escape(d_);}
  52. if(navigator.appName!="Netscape"){c_=screen.colorDepth}
  53. else{c_=screen.pixelDepth}
  54. document.write("<a href=\"http://127.0.0.1/cgi-bin/polonusstatv.cgi?USER=tuttophp&NH=1\" Target=\"_new\"><img src=\"http://127.0.0.1/cgi-bin/polonusstat.cgi?USER=tuttophp&REFER="+r_+"&COLOR="+c_+"&SIZE="+l_+"\" border=\"0\"></a>");
  55. // -->
  56. var title = link.childNodes[0].nodeValue;
  57. // check for title attribute, otherwise use link text
  58. if (link.getAttribute('title')) {
  59. title = link.getAttribute('title');
  60. }
  61. // track click by requesting URL through new image object
  62. var currentDate = new Date();
  63. var trackImg = new Image();
  64. trackImg.src = linkTracking.redirectUrl + '?url=' + escape(url) + '&title=' + escape(title) + '&rnd=' + currentDate.getTime();
  65. linkTracking.delay(300);
  66. }
  67. }
  68. YAHOO.util.Event.addListener(window, 'load', linkTracking.init);
</script>


pol
« Last Edit: May 27, 2007, 10:47:38 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

drhayden1

  • Guest
Re: Use Google's cached mode to avoid spyware!
« Reply #5 on: May 27, 2007, 11:04:09 PM »
nay...that to me is like reading a novel ???

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33810
  • malware fighter
Re: Use Google's cached mode to avoid spyware!
« Reply #6 on: May 27, 2007, 11:48:37 PM »
Hi drhayden1,

It is in the news now, look at this clipping I have found.
http://getclippings.com/image.php?id=289004

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67198
Re: Use Google's cached mode to avoid spyware!
« Reply #7 on: May 28, 2007, 12:22:00 AM »
Another option is to use www.scandoo.com as your search-engine
You can use SiteAdvisor or Finjan too.
I'd rather use Finjan because the configurability...
The best things in life are free.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33810
  • malware fighter
Re: Use Google's cached mode to avoid spyware!
« Reply #8 on: May 28, 2007, 12:38:11 AM »
Hi Tech,

But there are more hidden ways of tracking you, even when you have cleared all cookies.
Read about hidden non-re-requested browser cache tracking. Scary eh? You cannot hide from these
profilers: http://www.darknet.org.uk/2006/10/tracking-users-via-the-browser-cache/
That is why I installed the ref control add-on for Flock (also available for FF of course) where you can
set what your referer gives out.
Also blocked cookies from these sites in Options cookies exeptions:
ssl.google-analytics.com & www.google-analytics.com just for tracking reasons when webnasters run
googlesyndication's urchin.js etc. Firefox and Flock should perhaps get a patch for a setting to clear the cache when the browser exits. I can tell you that Firefox (versions 1.5 and above) already has such a feature which can be accessed at Edit→Preferences→Privacy→Settings button. I have it tagged of course, it is the default by the PocketFlock versions. But anyways ley me say this: NoScript is still the best way to go!

polonus
« Last Edit: May 28, 2007, 12:47:18 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

drhayden1

  • Guest
Re: Use Google's cached mode to avoid spyware!
« Reply #9 on: May 28, 2007, 12:43:45 AM »
you were the reporter damian ::)
and one simple question if i may ask :P
how many things do you use to go to one link and is it an all day thing ;D
no harm intended 8)
« Last Edit: May 28, 2007, 12:46:26 AM by drhayden1 »

Happy-Dude

  • Guest
Re: Use Google's cached mode to avoid spyware!
« Reply #10 on: May 28, 2007, 02:33:14 AM »
Well, there is the possibility to use McAfee's siteadvisor, enabling it to highlight search results from popular search engines.

Or, if you don't want the packaged installer (should have both MSIE and MFF compatible versions), you can use the WOT add-on for Firefox. It works in an identicle way of SiteAdvisor, but I think it has the capabilities of the Plus version (blocking a site), at the cost of slowing down browsing speed.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67198
Re: Use Google's cached mode to avoid spyware!
« Reply #11 on: May 28, 2007, 03:16:17 AM »
At the cost of slowing down browsing speed.
Does anybody know where can we find a review or comparison between this filters/scanners?
Specially: time of scanning, speed of browsing, accuracy, etc.?

Does anybody use Finjan?
The best things in life are free.

Happy-Dude

  • Guest
Re: Use Google's cached mode to avoid spyware!
« Reply #12 on: May 28, 2007, 03:20:31 AM »
Interesting ... I actually never thought of searching out speed tests for filtering software ... Well, if someone is to consider the tests, it has got the higly variable. I mean, with me, many security programs are active as I surf. Also, Internet Explorer and Firefox have phising filtering, affecting surfing speed more ... Hmm, I wonder if there are any tests at all ... ?

rdmaloyjr

  • Guest
Re: Use Google's cached mode to avoid spyware!
« Reply #13 on: May 28, 2007, 03:55:48 AM »
I guess scandoo is the only practical choice for us Opera users.

I really like Firefox with it's extensions, but the high memory use drove me to Opera.  Also, I went to Opera for its high speed browsing. ;D  I liked Flock's built in blog editor, but that wasn't enough to keep it.  Low RAM use & speed keep me with the world's fastest browser.

What is internet explorer ???

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67198
Re: Use Google's cached mode to avoid spyware!
« Reply #14 on: May 28, 2007, 04:04:45 AM »
Also, I went to Opera for its high speed browsing.
I'd like (and I need) the configurability of Firefox extensions.
Although, browsing with Opera is quite faster...
The best things in life are free.