Page 1 of 1
New crapware / Spyware RapidBlaster
Posted: 2003-06-11 03:55am
by Faram
Scumware of the highest order.
General Info: RapidBlaster runs as a task at Windows startup. It downloads advertising from the Internet and displays it periodically.
ALERT REGARDING THE NEWEST VARIANT(S) OF RAPIDBLASTER
The most recent variants of RapidBlaster will "morph" themselves to evade detection. Periodically, RapidBlaster will download data from its controlling server that contains a new folder and filename. It will then copy itself to that folder, terminate the original process, delete the original file, and run the new file in the new location.
Since the folder and filenames that RapidBlaster uses are randomly sent from the server, and are not contained within the executable itself, it is very easy for the makers of RapidBlaster to simply update the list of folders/filenames that RapidBlaster uses. Thus, looking for the following folders/filenames should not be the only method of detection, and will not guarantee a RapidBlaster-free system.
Wilderssecurity.net
Protect yourself
If you do porn surfing and use IE check out the site in the link provided.
Some of my co workers hawe this shit....
Posted: 2003-06-11 04:04am
by Yuri Prime
This is also why everyone should have a firewall.
Posted: 2003-06-11 04:09am
by Faram
Yuri Prime wrote:This is also why everyone should have a firewall.
A firewall don't help you in this instanse. If you allow IE to access the web = compromise in 99.9% of all home systems. Because it is the active-x sub component in IE that has to low default settings.
The safe way is to block active-x from the web or use an other browser.
Try
Opera or
Mozilla
Posted: 2003-06-11 04:09am
by Brother-Captain Gaius
Goddamn those fuckheads. This shit has got to be stopped.
Posted: 2003-06-11 04:12am
by Yuri Prime
Faram wrote:Yuri Prime wrote:This is also why everyone should have a firewall.
A firewall don't help you in this instanse. If you allow IE to access the web = compromise in 99.9% of all home systems. Because it is the active-x sub component in IE that has to low default settings.
The safe way is to block active-x from the web or use an other browser.
Try
Opera or
Mozilla
I am using Mozilla, actually. I love it.
Posted: 2003-06-11 10:13am
by phongn
You should be blocking ActiveX from automatically installing anyways, anyone who doesn't do that is foolish.
Posted: 2003-06-11 11:47am
by Einhander Sn0m4n
Only problem with completely turning RadioActiveHaX completely off is that Micro$uck decided to hard-code a warning box that comes up _EVERY_ time you do anything on a website with the slightest bit of the shit on the website. Basically it's M$'s way of saying 'You're gonna leave ActiveX ON or to hell with you!!'
Keine Mitleid fur Micro$oft!
Posted: 2003-06-11 11:49am
by Vympel
I must have it off, I always get that Active shit.
I really need to get a better browser.
Posted: 2003-06-11 12:02pm
by phongn
Einhander Sn0m4n wrote:Only problem with completely turning RadioActiveHaX completely off is that Micro$uck decided to hard-code a warning box that comes up _EVERY_ time you do anything on a website with the slightest bit of the shit on the website. Basically it's M$'s way of saying 'You're gonna leave ActiveX ON or to hell with you!!'
That has not occured to me since IE3 and I keep the security settings on rather high. For that matter, I've never been hit by an ActiveX attack, either.
If something attempts to install, the system prompts me. If an ActiveX control plays (e.g. Flash or whatever), I get no problem.
Posted: 2003-06-11 12:14pm
by Einhander Sn0m4n
phongn wrote:Einhander Sn0m4n wrote:Only problem with completely turning RadioActiveHaX completely off is that Micro$uck decided to hard-code a warning box that comes up _EVERY_ time you do anything on a website with the slightest bit of the shit on the website. Basically it's M$'s way of saying 'You're gonna leave ActiveX ON or to hell with you!!'
That has not occured to me since IE3 and I keep the security settings on rather high. For that matter, I've never been hit by an ActiveX attack, either.
If something attempts to install, the system prompts me. If an ActiveX control plays (e.g. Flash or whatever), I get no problem.
I prefer the option of not having activex on at all. Couple that with a popup blocker that works practically as good as Proxomitron minus the craptacular side effects, and Mozilla is the best browser for me.
