Use Google's cached mode to avoid spyware!

General Topics
1

Use Google’s cached mode to avoid spyware!

Hi malware fighters.

Sometimes clicking a link on the Google search result page, this can take you to a ‘hijacked’ website with malware on it. If you experienced this once you never click the first Google hit link anymore, but always use the Google “cached” link to check the link first. Another option is to use www.scandoo.com as your search-engine, but there you could also look at the “cached” link/
When in serious doubt before clicking rely on the results from finjan, Trustwatch or DrWeb online link checker : http://online.drweb.com/ or try this link out with this scanner: http://linkscanner.explabs.com/linkscanner/

A browser is an insecure tool, but with this at the back of your mind, you are a lot safer on the WWW.
Stay away from malware…click on the picture to see how vicious it is, really diabolical!

2

http://www.explabs.com/products/lslite.asp
thanks damian-already use the online dr.web scanner but gonna download this and try it
nice self-potrait above ;D

3

Hi drhayden1,

You need admin rights to do so.
You have no illusions anymore about my looks, after this remark.

polonus

4
You need admin rights to do so.
?????? i dowloaded the pro version of the above mentioned-can revert back to lite in 15 days-nice program 8) and you can also change your looks-how talented ::)

A video and explanation of the SmartTrack google exploits
http://www.youtube.com/watch?v=iD0wdzQb8XY

click on it :stuck_out_tongue:

5

Hi Dan,

You could also use a script to see what is tracking:

<script language="JavaScript">
   1. // create object
   2. var linkTracking = {}
   3. // assign properties
   4. linkTracking.redirectUrl = '/redirect.php';
   5. // constructor (sort of)
   6. linkTracking.init = function() {
   7. // check for support of required methods
   8. if (!document.getElementsByTagName) {
   9. return false;
  10. }
  11. // get all links on the page
  12. var links = document.getElementsByTagName('a');
  13. // assign event handlers
  14. YAHOO.util.Event.addListener(links, 'mouseup', linkTracking.mouseUp);
  15. YAHOO.util.Event.addListener(links, 'keypress', linkTracking.keyPress);
  16. return true;
  17. }
  18. linkTracking.mouseUp = function(e) {
  19. linkTracking.redirectHandler(YAHOO.util.Event.getTarget(e));
  20. }
  21. linkTracking.keyPress = function(e) {
  22. // check for return key press
  23. if (YAHOO.util.Event.getCharCode(e) == 13) {
  24. linkTracking.redirectHandler(YAHOO.util.Event.getTarget(e));
  25. }
  26. }
  27. linkTracking.delay = function(mseconds) {
  28. var currentTime = new Date();
  29. var endTime = currentTime.getTime() + mseconds;
  30. while (currentTime.getTime() < endTime) {
  31. currentTime = new Date();
  32. }
  33. }
  34. linkTracking.redirectHandler = function(link) {
  35. // check for valid href, don't want to track anchors
  36. if (link.getAttribute('href')) {
  37. var url = link.getAttribute('href');
  38. function trackAS() {
  39. if (document.frames[0].event.type == "blur") {
  40. alert(document.frames[0].event.srcElement.id + " : " + document.frames[0].event.srcElement);
  41. }
  42. }
  43. function log() {
  44. bug = new Image();
  45. aURL='/pix.php?title=' + document.title;
  46. /bug.src = aURL;
  47. }
  48. <!--
  49. c_="";l_=""+screen.width;d_=document.referrer;
  50. if (self != top){try {r_=""+escape(parent.document.referrer);}catch(e_r) {r_=""+escape(d_);}}
  51  /else {r_=""+escape(d_);}
  52. if(navigator.appName!="Netscape"){c_=screen.colorDepth}
  53. else{c_=screen.pixelDepth}
  54. document.write("<a href=\"http://127.0.0.1/cgi-bin/polonusstatv.cgi?USER=tuttophp&NH=1\" Target=\"_new\"><img src=\"http://127.0.0.1/cgi-bin/polonusstat.cgi?USER=tuttophp&REFER="+r_+"&COLOR="+c_+"&SIZE="+l_+"\" border=\"0\"></a>");
  55. // -->
  56. var title = link.childNodes[0].nodeValue;
  57. // check for title attribute, otherwise use link text
  58. if (link.getAttribute('title')) {
  59. title = link.getAttribute('title');
  60. }
  61. // track click by requesting URL through new image object
  62. var currentDate = new Date();
  63. var trackImg = new Image();
  64. trackImg.src = linkTracking.redirectUrl + '?url=' + escape(url) + '&title=' + escape(title) + '&rnd=' + currentDate.getTime();
  65. linkTracking.delay(300);
  66. }
  67. }
  68. YAHOO.util.Event.addListener(window, 'load', linkTracking.init);
</script>

pol

6

nay…that to me is like reading a novel ???

7

Hi drhayden1,

It is in the news now, look at this clipping I have found.
http://getclippings.com/image.php?id=289004

polonus

8

You can use SiteAdvisor or Finjan too.
I’d rather use Finjan because the configurability…

9

Hi Tech,

But there are more hidden ways of tracking you, even when you have cleared all cookies.
Read about hidden non-re-requested browser cache tracking. Scary eh? You cannot hide from these
profilers: http://www.darknet.org.uk/2006/10/tracking-users-via-the-browser-cache/
That is why I installed the ref control add-on for Flock (also available for FF of course) where you can
set what your referer gives out.
Also blocked cookies from these sites in Options cookies exeptions:
ssl.google-analytics.com & www.google-analytics.com just for tracking reasons when webnasters run
googlesyndication’s urchin.js etc. Firefox and Flock should perhaps get a patch for a setting to clear the cache when the browser exits. I can tell you that Firefox (versions 1.5 and above) already has such a feature which can be accessed at Edit→Preferences→Privacy→Settings button. I have it tagged of course, it is the default by the PocketFlock versions. But anyways ley me say this: NoScript is still the best way to go!

polonus

10

you were the reporter damian ::slight_smile:
and one simple question if i may ask :stuck_out_tongue:
how many things do you use to go to one link and is it an all day thing ;D
no harm intended 8)

11

Well, there is the possibility to use McAfee’s siteadvisor, enabling it to highlight search results from popular search engines.

Or, if you don’t want the packaged installer (should have both MSIE and MFF compatible versions), you can use the WOT add-on for Firefox. It works in an identicle way of SiteAdvisor, but I think it has the capabilities of the Plus version (blocking a site), at the cost of slowing down browsing speed.

12

Does anybody know where can we find a review or comparison between this filters/scanners?
Specially: time of scanning, speed of browsing, accuracy, etc.?

Does anybody use Finjan?

13

Interesting … I actually never thought of searching out speed tests for filtering software … Well, if someone is to consider the tests, it has got the higly variable. I mean, with me, many security programs are active as I surf. Also, Internet Explorer and Firefox have phising filtering, affecting surfing speed more … Hmm, I wonder if there are any tests at all … ?

14

I guess scandoo is the only practical choice for us Opera users.

I really like Firefox with it’s extensions, but the high memory use drove me to Opera. Also, I went to Opera for its high speed browsing. ;D I liked Flock’s built in blog editor, but that wasn’t enough to keep it. Low RAM use & speed keep me with the world’s fastest browser.

What is internet explorer ???

15

I’d like (and I need) the configurability of Firefox extensions.
Although, browsing with Opera is quite faster…

16

Tech,

One thing up front. I de-classify any browser where I cannot disable script (ActiveX, VSB, Javascript, Ajax etc.) on the fly like with NoScript and AdBlock Plus and Stealther, not only for reasons of security but also because of privacy issues. Seipnir, an IE7 shell Japanese browser could be an alternative to the Mozilla type browsers, but it is not tweakable enough to obstruct ads and tracking without additional programs running like Admuncher, Proxomitron etc, and then you go where we came from. With Flock I can also edit what I give out (referer info, agent switcher), edit my cookies on the fly, etc.
I know why IE7 and Opera do not have this, all the track-masters in the world (those for good and evil purposes) as well as the profilers would instantly cry wolf, but in m.h.o. the balance already went way out into the wrong direction where Internet users are concerned, and I do not need Internet2 to establish such a situation permanently. IE7 is not the best of two worlds, it is very one-sided in these respects. And so the staus-quo continues, and malcreants and spamsellers thrive.

polonus

17

thanks for all the info.polonus
and already placed my order ;D ::slight_smile:

18

Referrer logging can be disabled in Opera. I do have referrer logging disabled & fraud protection enabled.

With referrer logging disabled Opera passes PC Flank’s Browser Test.

Browser identification can be switched in Opera.

I have Dr. Web link checker in my copy of Opera & with scandoo I’m as safe as any browser, only faster! ;D

19

Hi Tech,

You know Polonus is a control freak, well again that is how I was brought up here in our forum, and I am thankful every day for what I learned. Finjan is pretty good, but takes some time loading, especially for those sites it seemingly cannot scan. DrWeb’s hyperlink scanner plays in every type of browser even in sleipnir, so that is outside of this discussion, but I only use that when in doubt. TrustWatch search is quick, but I do not know whether the results are immediate results, or whenever they were updated.
Netcraft toolbar is extremely good, and saved my glorious behind several times. RefControl options is a good add-on, Fire encrypter is hepful.
This video by Ophir is a good one (it is about webtracking):
http://www.youtube.com/watch?v=gfkd-KfndgI

polonus

20

Through Quick Preferences (under Tools) you can edit/ shut off cookies & other configurations in Opera.

I not selling or pushing Opera on anyone, I’m just making aware of security options for those who use or want to try Opera.

Opera is the best browser for dial up & for those like me whose computers have limited or little RAM. Or just a speed freak. It will blow the doors off drhayden’s Mustang! ;D