Slashdot Mirror

Joogle hides truth above here & @ InfoWars cutting off ad gold https://www.youtube.com/watch?... but JOOGLE allows violent jihadist videos to get ad GOLD + JOOgle infects users w/ their ads https://blog.malwarebytes.org/... + their execs like heroin https://www.google.com/?gws_rd...

Joogle hides truth above here & @ InfoWars cutting off ad gold https://www.youtube.com/watch?... but JOOGLE allows violent jihadist videos to get ad GOLD + JOOgle infects users w/ their ads https://blog.malwarebytes.org/... + their execs like heroin https://www.google.com/?gws_rd...

Joogle hides truth above here & @ InfoWars cutting off ad gold https://www.youtube.com/watch?... but JOOGLE allows violent jihadist videos to get ad GOLD + JOOgle infects users w/ their ads https://blog.malwarebytes.org/...

Joogle hides truth above here & @ InfoWars cutting off ad gold https://www.youtube.com/watch?... but JOOGLE allows violent jihadist videos to get ad GOLD + JOOgle infects users w/ their ads https://blog.malwarebytes.org/...

Capt. Brin says "CENSOR BEAMS ON FULL!!!" we must hide truth as we do at InfoWars cutting off the ad gold but we do https://blog.malwarebytes.org/... infecting users!

Was Google charged for infecting us via ads? https://blog.malwarebytes.org/... doubleclick = Google subsidiary iirc.

APK

P.S.=> Ask yourself that WEINSTEIN as you try defend BRIN, ok? apk

Was Google charged for infecting us via ads? https://blog.malwarebytes.org/malvertising-2/2014/09/large-malvertising-campaign-under-way-involving-doubleclick-and-zedo/ doubleclick = Google subsidiary iirc.

APK

P.S.=> Ask yourself that Mr. WEINSTEIN as you try defend Mr. BRIN, ok? apk

http://www.dshield.org/diary/G...
http://www.theregister.co.uk/2...
http://www.networkworld.com/ne...
http://www.computerworld.com/s...
http://it.slashdot.org/story/1...
http://www.theregister.co.uk/2...
http://www.theregister.co.uk/2...
http://www.dshield.org/diary/g...
http://it.slashdot.org/story/1...
http://www.dshield.org/diary/S...
http://www.itnews.com.au/News/...
https://nakedsecurity.sophos.c...
https://blog.malwarebytes.org/...

APK

P.S.=> Next is DNS serving up malware & abused by malware to do it (acting as C&C data transfer + more etc.)... apk

"Boom" Aerospace?

They might as well go all the way and change the name to CRASH, which in the case of explosions comes after Boom. Think of the slogan: "Fly with CRASH."

Reminds me of Malwarebytes software which is supposed to remove malware, not be what its name implies.

"It is distributed as a typical Windows executable: When we run it what appears is a GUI with labels in Russian:" ref

According to the linked article from Malwarebytes:

It is different than most of the ransomware present nowadays. Instead of spreading to users and automatically infecting their machines, LeChiffre needs to be run manually on the compromised system. Common scenario of infection is that attackers are automatically scanning network in search of poorly secured Remote Desktops, cracking them, and after logging remotely they manually run an instance of LeChiffre.

Just how good is their security if something that has to be manually run on each system has completely pwned them?

Forbes and Yahoo seem to be the leading attack point for virus entry. I consistently read about, so you might be very lucky

and to cite sources :

Forbes https://www.hackread.com/forbe...

and yahoo's https://blog.malwarebytes.org/...

SideNote: Yahoo's finance page was considered on of the best until recently ( sorry no source to cite ), so I am going to guess that a new attack point will show up in due time

See subject & "eat your words" hypocrite -> http://tech.slashdot.org/comme...

To answer you: I stop malware of any kind of getting to you in the 1st place from online by blocking its sources via hosts & firewalls too (IF it's served by IP address - only like 1% are though - host/domain names are used HUGELY over IP addresses due to the ability to use them in "fastflux" botnets, recycling the host-domain names).

(Just like blocking ads gain you speed AND PROTECTION vs. things like this -> Google DoubleClick ad network abused in malvertising attacks https://blog.malwarebytes.org/... )

(To wit: You're using admin priveleges in other programs yet you say it's "so bad" in mine, which only protects you vs. threats? LOL, bullshit - & the ONLY WAY TO UPDATE HOSTS due to Windows' own WFP/SFP is to use ADMIN PRIVELEGES stupid... even if you did it manually, & you know it, numbskull troll that you are...)

APK

P.S.=> It has been a REAL pleasure shutting you down by letting YOU DO IT TO YOURSELF with your "illogic logic" & sheer ignorance of how things are done + why, lol... apk

See subject & Google DoubleClick ad network abused in malvertising attacks https://blog.malwarebytes.org/...

* :)

(Google & most ALL, if NOT all, advertising networks did themselves in with shenanigans like that - those types of attacks & abuses are WHY I released my program... I held off from 2003-2012 out of respect for webmasters, but NOT after that & other reports like it from other ad networks bushwhacking users with malware!)

APK

P.S.=> What's that you said again? apk

Google isn't reputable, they've served malware. They're right in line with option 2. And that's the reason why there's been such a surge in blocking all ads, because there generally is no clean source. The online ad industry has a serious problem, and they don't seem to want to fix it. If they did, they wouldn't be having such a problem with people blocking ads.

"For seven days, hackers used Yahoo’s ad network to send malicious bits of code to computers that visit Yahoo’s collection of heavily trafficked websites, the company said on Monday."

Would these be 'computers' be running Microsoft Windows ..

"When a computer — in this case, one running Windows — visited a Yahoo site, it downloaded malware code."

Yes it does !

"As with the previous reported cases this one also leverages Microsoft Azure websites" ref

"Companies whose primary revenue comes from advertising will see some of the largest reductions in revenue." - by MyFirstNameIsPaul (1552283) on Saturday June 13, 2015 @02:19PM (#49904523) Homepage

Absolutely, & I'm PROUD to have helped in fact via APK Hosts File Engine 9.0++ SR-2 32/64-bit http://start64.com/index.php?o...

I just did something about it, something that's NOT "souled-out" (adblock variants) & @ least 5++ times as efficient in memory usage, messagepassing overheads, from a higher cpu serviced mode of operations in kernelmode (vs. less serviced usermode in browsers COMPOUNDED by addons worsening it), + less CPU usage (since I'm not driving some DUMB 'regex' bloated hog but instead letting a nearly 50 yr. PROVEN & REFINED kernelmode subsystem do the job instead, with something you have natively already vs. doing "the new 'hotness'" stupidness in "bolting on 'MOAR'")

I give folks not only what they WANT today, but what they actually NEED!

Why??

Ok, heck with the speed, reliability, & anonymity gains...

LOOK @ THE REASON FOR IT IN SECURITY TERMS HERE ALONE -> https://blog.malwarebytes.org/...

* They're NEGLIGENT SHITHEADS for that aiding & ABETTING CRIME!

ON THE TOPIC THOUGH?

Hax4Bux has it right -> http://ask.slashdot.org/commen...

Yes - it's EXACTLY what I did! Computing, for me?? Just a "stepping stone" to it.

(Though I will work still on occasion, IF the moola is right, & I just finished a successful tech lead role for Hilton Hotels 2 days ago on a server + workstations migration in fact)

That's right - for the MOST part, since 2008 due to an unsteady labor market in MIS/IS/IT & no unions?

I got out, got into real estate instead: Again, something folks NEED, & not just want - it's been keeping me going great since then, no problems!

APK

P.S.=> It's key, always have that "plan B" exit strategy perfect escape route (to real freedom, not kissing ass to some undereducated STOOGE in mgt. like the ones who DOUBTLESS 'downmodded me' in effete retaliation the 1st time I posted this here to you -> http://ask.slashdot.org/commen... )... apk

"Companies whose primary revenue comes from advertising will see some of the largest reductions in revenue." - by MyFirstNameIsPaul (1552283) on Saturday June 13, 2015 @02:19PM (#49904523) Homepage

Absolutely, & I'm PROUD to have helped in fact via APK Hosts File Engine 9.0++ SR-2 32/64-bit http://start64.com/index.php?o...

I give folks not only what they WANT today, but what they actually NEED?

Why??

Ok, heck with the speed, reliability, & anonymity gains...

LOOK @ THE REASON FOR IT IN SECURITY TERMS HERE ALONE -> https://blog.malwarebytes.org/...

* They're NEGLIGENT SHITHEADS for that aiding & ABETTING CRIME!

* ON THE TOPIC THOUGH?

Hax4Bux has it right: http://ask.slashdot.org/commen...

Yes - it's EXACTLY what I did! Computing, for me?? Just a "stepping stone" to it.

(Though I will work still on occasion, IF the moola is right, & I just finished a successful tech lead role for Hilton Hotels 2 days ago on a server + workstations migration in fact)

That's right - for the MOST part, since 2008 due to an unsteady labor market in MIS/IS/IT & no unions?

I got out, got into real estate instead... again, something folks NEED, & not just want... it's been keeping me going great since then, no problems!

It's key.

APK

P.S.=> I just did something about it, something that's NOT "souled-out" (adblock variants) & @ least 5++ times as efficient in memory usage, messagepassing overheads, from a higher cpu serviced mode of operations in kernelmode (vs. less serviced usermode in browsers COMPOUNDED by addons worsening it), + less CPU usage (since I'm not driving some DUMB 'regex' bloated hog but instead letting a nearly 50 yr. PROVEN & REFINED kernelmode subsystem do the job instead, with something you have natively already vs. doing "the new 'hotness'" stupidness in "bolting on 'MOAR'")... apk

If your company is just being cheap bastards, then you deserve all the hacks, viruses, and spyware you get.

Last summer I had an interview at a multi-billion-dollar corporation (that factoid got mentioned a dozen times over), where the IT department routinely had a malware outbreaks and had to manually disinfect each system. I asked them why they weren't using Malwarebytes Anti-Malware scanner to clean up their systems. The multi-billion-dollar corporation couldn't associate itself with a small company like Malwarebytes, as it would inflate Malwarebyte's valuation in the stock market. Hence, the techs spent more time cleaning up systems than anything else. The hiring manager was offended that I turned him down for another job that paid $8/hr more for doing less work on a much larger network.

If we are talking found and reported vulnerabilities, then yes, Linux has more. Although notably, even grouping together all Linux kernel vulnerabilities regardless of version the number of HIGH vulnerabilities is not higher than the number of HIGH vulnerabilities in Windows 8.1.

But then, it's a lot easier to get fewer vulnerabilities when dropping support for one of the most used OS'es on the planet. Although XP is only on about 14% of all PC's now, it appears. And now support for Windows 8.1 is dropped as well. That seems to be the way Microsoft keeps vulnerabilities in supported systems down; by simply dumping older OS'es.

Adding these sites to your hosts file stops this threat cold:

0.0.0.0 www.jamieoliver.com
0.0.0.0 jamieoliver.com
0.0.0.0 antkai.com
0.0.0.0 rkgizp.lioretasoped.xyz
0.0.0.0 lioretasoped.xyz
0.0.0.0 bestwaytosearch.com
0.0.0.0 xml.2x2click.com
0.0.0.0 2x2click.com
0.0.0.0 jmpdirect01.com
0.0.0.0 www.advconversion.com
0.0.0.0 advconversion.com
0.0.0.0 jmpdirect01.com
0.0.0.0 b.scorecardresearch.com
0.0.0.0 scorecardresearch.com
0.0.0.0 fugupdates112.com

---

SOURCE = https://blog.malwarebytes.org/...

* :)

(Enjoy!)

APK

P.S.=> For the best possible hosts file vs. this threat & others like it, & for adding more speed, security, reliability + more?

APK Hosts File Engine 9.0++ SR-1 32/64-bit -> http://start64.com/index.php?o...

MalwareBytes' hpHosts Admin (MalwareBytes employee) hosts & recommends it -> http://hosts-file.net/?s=Downl... & MalwareBytes = BEST antivirus http://www.av-test.org/en/news...

... apk

I'm interested in anything anyone has to say about Malwarebytes.

Here's some more interesting and informative articles, even:
https://blog.malwarebytes.org/...

http://arstechnica.com/tech-po...

http://www.howtogeek.com/18051...

I never boasted that either. Attempting to "put words in my mouth" I never said? Please, lol - YOU? Fail!

APK

P.S.=> Again: "Rinse, Lather, & Repeat" you done zilch talker -> http://hardware.slashdot.org/c... & especially since you are NOTHING but "talk" & no action, whereas I can show the reverse on MY end, easily (& you? Can't... lol!).

No, show us YOURS (that you don't have) & I posted a link to a Pascal app I did!

Now - As far as my sourcecode?

Ask Mr. Steven Burn who is 1 of the sites in the security community that hosts my app for me, no less!

(He's hpHosts' malwarebytes site owner & works for malwarebytes)

Yes - he's SEEN & VERIFIED IT for passing JOTTI online tests & others (for security purposes): sburn@malwarebytes.org (OR contact him here http://blog.malwarebytes.org/a... )

YOU fail (on ALL levels) & as was said here by others in regards to yourself? The ONLY JOKE around here, is you... apk

No, show us YOURS (that you don't have) & I posted a link to a Pascal app I did!

Now - & as far as my sourcecode?

Ask Mr. Steven Burn who is 1 of the sites in the security community that hosts my app for me, no less!

(He's hpHosts' malwarebytes site owner & works for malwarebytes)

Yes - he's SEEN & VERIFIED IT for passing JOTTI online tests & others (for security purposes): sburn@malwarebytes.org (OR contact him here http://blog.malwarebytes.org/a... )

APK

P.S.=> YOU fail (on ALL levels) & as was said here by others in regards to yourself? The ONLY JOKE around here, is you... apk

A/V doesn't protect against a lot of this stuff. Malwarebytes has a new anti-exploit beta for us Windows folks.

From the FAQ:

17- What techniques does MBAE use to detect and block exploits?

MBAE incorporates multiple exploit detection and blocking techniques at different stages of the typical exploit attack to provide a truly complete solution against all types of current and future exploits.
  Stage 1 Layer: This layer of MBAE incorporates multiple techniques to detect and block exploits during stage 1 of the exploit attack, before the shellcode is allowed to run. In some cases, MBAE detects and prevents exploits before the operating system Data Execution Protection (DEP) protection.
  Stage 2 Layer: This layer of MBAE incorporates multiple memory protection and payload execution techniques which prevent exploits from executing their stage 2 payload, thereby protecting the computer even if operating system protections and stage 1 protection techniques have been bypassed.

A/V doesn't protect against a lot of this stuff. Malwarebytes has a new anti-exploit beta for us Windows folks.

From the FAQ:

17- What techniques does MBAE use to detect and block exploits?

MBAE incorporates multiple exploit detection and blocking techniques at different stages of the typical exploit attack to provide a truly complete solution against all types of current and future exploits.
  Stage 1 Layer: This layer of MBAE incorporates multiple techniques to detect and block exploits during stage 1 of the exploit attack, before the shellcode is allowed to run. In some cases, MBAE detects and prevents exploits before the operating system Data Execution Protection (DEP) protection.
  Stage 2 Layer: This layer of MBAE incorporates multiple memory protection and payload execution techniques which prevent exploits from executing their stage 2 payload, thereby protecting the computer even if operating system protections and stage 1 protection techniques have been bypassed.

Or just select the Reset Safari menu option.

See: http://blog.malwarebytes.org/intelligence/2013/07/fbi-ransomware-now-targeting-apples-mac-os-x-users/

There's a simple menu option to reset Safari, which completely eliminates the lingering web page. See: http://blog.malwarebytes.org/intelligence/2013/07/fbi-ransomware-now-targeting-apples-mac-os-x-users/

Now I know you asked for Anti-virus, and for that, I recommend Avast! Free anti-virus. Windows Defender, or Security Essentials is fine if you're pretty damn careful with your downloads, Now along with Avast, Malwarebytes is the BEST and I mean ranked THE most reliable and up to date anti-malware software available, and it's on CNET as well as their website, which I think links to cnet... I would just go here: http://www.malwarebytes.org/

Here's a link to Virus Bulletin for a comparison of free and paid packages. I'd also recommend a multi-tiered strategy of OpenDNS and and a hosts file to block bad sites, MalwareBytes to scan and check for malware (paid version provides real-time protection), and I also use Tracking Protection Lists. Takes all the joy out of it, doesn't it.

"ha. i'm not very impressed with companies that lie on their press releases.

http://www.malwarebytes.org/press_center/malwarebytes-industry-momentum-intensifies

Malwarebytes recently completed the acquisition of hpHosts, a popular and trusted blacklist of malicious websites, ad servers and tracking servers. The acquisition ensures that Malwarebytes protects against the newest malevolent internet protocol (IP) addresses" - by Anonymous Coward on Thursday April 12, @03:48PM (#39663701)

KEYWORD - the bolded part (malwarebytes, not hpHOSTS)... you fail, imo @ least, but... that's not good enough!

Either somebody made a mistake (marketers/press reps) obviously, OR, they meant the wares malwarebytes puts out, NOT hpHOSTS' data!

(Twisting words to YOUR interpretation's fairly clever, I'll give you that, but it's EASILY seen thru... in fact, didn't YOU try that on ME recently too, only to have me blow you away with far earlier statements to the effect I know that hosts files will NOT block IP addresses?)

---

"you cannot protect against malevolent ip addresses with a hosts file. a hosts file can only block host names, not ip addresses. you need a firewall to block ip addresses." - by Anonymous Coward on Thursday April 12, @03:48PM (#39663701)

Yes - that's a "fact of life" on hosts not blocking ip addresses but being able to block host-domain names for added security online (in addition to FAR greater & noticeable speed gains + more).

---

"so - lying? not impressive." - by Anonymous Coward on Thursday April 12, @03:48PM (#39663701)

It's a shame I suspect you're just playing "word games" but I'll write Mr. Burn on it, & see what he says... maybe he'll even post here, who knows?

So yes - I am fully aware of what you've said on that account.. in fact, I'll write him now (since we've been regularly corresponding) but, I do *think* you "misinterpreted that" & intentionally, troll... lol!

APK

P.S.=> In fact? He might even appear here to "clear up" your attempt @ "twisting words", lol, but... we'll see on that note, soon enough... apk

ha. i'm not very impressed with companies that lie on their press releases.

http://www.malwarebytes.org/press_center/malwarebytes-industry-momentum-intensifies

"Malwarebytes recently completed the acquisition of hpHosts, a popular and trusted blacklist of malicious websites, ad servers and tracking servers. The acquisition ensures that Malwarebytes protects against the newest malevolent internet protocol (IP) addresses"

you cannot protect against malevolent ip addresses with a hosts file. a hosts file can only block host names, not ip addresses. you need a firewall to block ip addresses.

so - lying? not impressive.

You still writing those looong AC piled links to nowhere? Notice NOBODY responds to you anymore but me, and I ONLY do so to laugh at you? Why is that APK? Could it be like on Ars everyone is on to your bullshit and nobody gives a fuck what you think? Keep dancing for me monkey boy, while I don't bother reading anything you write it gives me a warm fuzzy inside to see you jump through my hoops and follow me like a little bitch who wants another taste, dance monkeyboy, dance! LOL! Here enjoy some copypasta, hell you aren't even interesting enough to bother responding to with anything else. Enjoy fail boy!

And this coming from poor wittle APK, also know as "Petey, the idiot HOPES file guy"? As in you HOPES that one of the 300,000+ constantly changing array of websites that are infected doesn't happen to be the one you visit today? Or that you HOPES that nobody notices after repeatedly being asked you have FAILED to show even the tiniest shred of mathematical proof that your magical woobie can scale? That you HOPES nobody notices your only "proof" is anecdotes, often by your own sock puppets like Kingsjester?

And I don't have to be exact, because I'm not the one making outrageous claims If someone claims they can stretch their dick into a giant slingshot and shoot themselves to Scotland it is not the readers job to prove them wrong but the posters job to back that up with real prof, not an anecdote that says "well my cousin Joey saw me do it last Halloween!".

I have also shown repeatedly that at the absolute reported minimum number of new pieces of malweare and infections, which you are free to pick whichever reputable website you like Securina, MSFT's malware reports, AVG, which ever, that at an absolute minimum we are talking about 1.2 million sites PER DAY with that number changing by 15,000+ PER HOUR which means even if you typed at 1 IP address PER SECOND, and never slept, and had a perfect list (which doesn't exist) you would be 14 days behind by the very first day with that number growing linearly every single day, making Petey farther and farther behind.

But if you weren't completely batshit insane Petey I wouldn't have to explain this, because this is why everyone makes fun of you. It is so obvious it is like someone arguing gravity is actually invisible pants gnomes trying to steal your underwear. It is the classic "default allow" which has NEVER EVER worked. Because if a piece of malware isn't in magical HOPES file Petey you are royally fucked, and yet again I have shown that it is simply a roll of the dice whether you get creamed or not, simply because you will always be behind.

So it is all on you Petey and your magical HOPES woobie now. You made the extravagant claims, back them up with the math. If you can't? Well then you are full of shit, case closed. Notice how ALL YOU CAN DO PETEY is throw insults and trollbomb? Why is that? I'll tell you why, because math doesn't lie and you just can't show the math You just can't, it would be like trying to mathematically prove you are not an idiot. It just can't be done.

So please, keep dancing to my tune like a little bitch APK, I do so enjoy pointing out the total uber fail of your magical woobie so. I also personally consider it a public service to point people to solutions that actually work instead of relying on magical woobies and anecdotes. And of course bi

Tell me Petey, does it hurt? Does it eat and your mind, knowing that on every single post I make I not only insult your idiocy but I give a link to a laundry list of your failures? Does it keep you up at night? Does it hurt? I find that....marvelous. Now enjoy some nice insults mixed with the broken glass that is reality, something you sadly can't seem to grasp. Now wallow in your failure monkey boy, and do the dance of humiliation!

And this coming from poor wittle APK, known script kiddie and troll, also know as "Petey, the idiot HOPES file guy"? As in you HOPES that one of the 300,000+ constantly changing array of websites that are infected doesn't happen to be the one you visit today? Or that you HOPES that nobody notices after repeatedly being asked you have FAILED to show even the tiniest shred of mathematical proof that your magical woobie can scale? That you HOPES nobody notices your only "proof" is anecdotes, often by your own sock puppets like Kingsjester and MEK_Lovebug?

If there is ANYONE that should be LOLing it is me, for pointing out there are still morons that believe 16Mb HOPES files can do anything but block ads since ad servers are...what do you call it...oh yeah STATIC, just like your HOPES file, but really you are just kinda pathetic. You're like the idiot that just keeps hanging onto that three years out of date copy of Norton, because he is just so damned sure it still works, only the Norton guy is actually better protected than you are, since it did used to work in the past 5 years.

So please, keep posting APK, I do so enjoy pointing out the total uber fail of your magical woobie so. I also personally consider it a public service to point people to solutions that actually work instead of relying on magical woobies and anecdotes. And of course bitch slapping your around is also quite fun!

And this coming from poor wittle APK, also know as "Petey, the idiot HOPES file guy"? As in you HOPES that one of the 300,000+ constantly changing array of websites that are infected doesn't happen to be the one you visit today? Or that you HOPES that nobody notices after repeatedly being asked you have FAILED to show even the tiniest shred of mathematical proof that your magical woobie can scale? That you HOPES nobody notices your only "proof" is anecdotes, often by your own sock puppets like Kingsjester?

If there is ANYONE that should be LOLing it is me, for pointing out there are still morons that believe 16Mb HOPES files can do anything but block ads since ad servers are...what do you call it...oh yeah STATIC, just like your HOPES file, but really you are just kinda pathetic. You're like the idiot that just keeps hanging onto that three years out of date copy of Norton, because he is just so damned sure it still works, only the Norton guy is actually better protected than you are, since it did used to work in the past 5 years.

So please, keep posting APK, I do so enjoy pointing out the total uber fail of your magical woobie so. I also personally consider it a public service to point people to solutions that actually work instead of relying on magical woobies and anecdotes. And of course bitch slapping your retarded ass around is also quite fun, even if it is too easy!

Well if it isn't little poor wittle Petey, aka the HOPES guy, aka the legend in his own mind. Did you program the space shuttle in your badly written Delphi as well? Hell you make VB coders look like kernel developers Petey, that is why everyone made fun of your "apps" on Ars. Any apps in the app store? Oh thats right Apple takes fart apps but not "batshit crazy" apps, sorry Petey.

And I guess you're afraid to touch any of my comments that are attached to current stories huh? Must make you awful sad at how many laughed their asses off at your little HOPES rants last time, but that's what you get when you tie your crazy to a tech older than an 8-track and just about as useful. You really should talk to Twitter, he does it SOOOO much better than you do, pretty sad to be third rate even as a troll.

The simple fact is this: no matter how many times Petey says "1+1 = 3" the math simply proves you wrong and THAT is why all you can do is throw insults. You have 190,000 to 340,000 infected websites at this very moment and that list will change by the thousands per minute as sites are cleaned, new sites are infected, new vulnerabilities found, etc. Now for his HOPES file to actually be a REAL protection and not just a woobie? It will have to dynamically scale and keep up with that ever changing list of infections. Now even if he had twenty fingers and subscribed to every security list on the planet his HOPES file will ALWAYS BE OUT OF DATE and behind the curve. Always.

So please, keep posting APK, I do so enjoy pointing out the total uber fail of your magical woobie so. I also personally consider it a public service to point people to solutions that actually work instead of relying on magical woobies and anecdotes. And of course bitch slapping your around is also quite fun!

Furthermore, look at the best-of-class spyware tools:
http://www.malwarebytes.org/mbam.php -- no OSX or Linux versions
http://fileforum.betanews.com/detail/Spybot-Search-Destroy/1043809773/1 -- no OSX or Linux versions
http://www.lavasoft.com/products/ad_aware_free.php?t=techspecs -- no OSX or Linux versions

Why could that be? Maybe because OSX and Linux don't allow malware to be installed, and the MicroIdiots have their heads up your ass.

And if I give them a magical LOLCat infections rates will go down by 10,000% and magic pixies will appear to rub their little footies and...wait a tick, that is a what you call it, oh yeah an anecdote and doesn't prove jack which is why I put a disclaimer at the front instead of trying to pass it off as proof like you do Petey, but you KNOW this, don't you?

poor wittle APK, also know as "Petey, the idiot HOPES file guy" As in you HOPES that one of the 300,000+ constantly changing array of websites that are infected doesn't happen to be the one you visit today? Or that you HOPES that nobody notices after repeatedly being asked you have FAILED to show even the tiniest shred of mathematical proof that your magical woobie can scale? That you HOPES nobody notices your only "proof" is anecdotes, often by your own sock puppets like Kingsjester?

Remember Petey I'm not the ponce making outrageous claims so it is up to you to show the math instead of wasting everyone's time waving your little shriveled winkie around by making claims with no mathematical proof and nothing but anecdotes as "evidence". After all those that the earth is only 6000 years old have a full boat of anecdotes to back up THEIR claims as well, but we still think they are just as batshit as you, now don't we?

The simple fact is this: no matter how many times trollie says "1+1 = 3" the math simply proves you wrong and THAT is why all you can do is throw insults. You have 190,000 to 340,000 infected websites at this very moment and that list will change by the thousands per minute as sites are cleaned, new sites are infected, new vulnerabilities found, etc. Now for your HOPES file to actually be a REAL protection and not just a woobie? It will have to dynamically scale and keep up with that ever changing list of infections. Now even if you had twenty fingers and subscribed to every security list on the planet your HOPES file will ALWAYS BE OUT OF DATE and behind the curve. Always. Don't like those numbers? Use the ones from Securina, Grisoft, Symantec, any reputable security site. YOU CHOOSE. I have shown mathematically you are full of shit, now lets see you math that proves me wrong PETEY.

Now if you have a mathematical proof that shows how a static .txt file dropped into system 32 can magically scale dynamically? Lets see it. Otherwise it is NOTHING more a magical LOLCat pic backed up by anecdotes. That is the nice thing about math, it doesn't lie or believe in anecdotes. So it is all on Petey and your magical HOPES woobie now. YOU made the extravagant claims, back them up with the math. If you can't? Well then you are full of shit, case closed. Notice how ALL YOU CAN DO is throw insults and trollbomb? Why is that? I'll tell you why, because math doesn't lie and you just can't show the math you just can't do it or you would have by now, but it would be like trying to mathematically prove you are not an idiot PETEY. It just can't be done.

So please, keep posting APK, I do so enjoy pointing out the total uber fail of your magical woobie so. I also personally consider it a public service to point people to solutions that actually work instead of relying on magical woobies and anecdotes. And of course bitch slapping your around is also quite fun!

Hi trollie! Sorry to rip off some classic Dan Akroyd but you know it is usually considered good form to at least make a sock puppet, posting AC to plug your own AC posts? Kinda sad. And for the 400th time Correlation != Causation. I can build an XP Sp2 machine with NO patches, NO AV, and change the desktop to a LOLCat. Now if I only use this machine to check my email and go to my bank I will NEVER get a bug, but I don't think it was my magical LOLCat protecting it, do you?

The simple fact is this: no matter how many times trollie says "1+1 = 3" the math simply proves you wrong and THAT is why all you can do is throw insults. You have 190,000 to 340,000 infected websites at this very moment and that list will change by the thousands per minute as sites are cleaned, new sites are infected, new vulnerabilities found, etc. Now for his HOPES file to actually be a REAL protection and not just a woobie? It will have to dynamically scale and keep up with that ever changing list of infections. Now even if he had twenty fingers and subscribed to every security list on the planet his HOPES file will ALWAYS BE OUT OF DATE and behind the curve. Always.

Now if you have a mathematical proof that shows how a static .txt file dropped into system 32 can magically scale dynamically? Lets see it. Otherwise it is NOTHING more a magical LOLCat pic backed up by anecdotes. That is the nice thing about math, it doesn't lie or believe in anecdotes. And if there is ANYONE that should be LOLing it is me, for pointing out there are still morons that believe 16Mb HOPES files can do anything but block ads since ad servers are...what do you call it...oh yeah STATIC, just like your HOPES file, but really you are just kinda pathetic. You're like the idiot that just keeps hanging onto that three years out of date copy of Norton, because he is just so damned sure it still works, only the Norton guy is actually better protected than you are, since it did used to work in the past 5 years.

So please, keep posting APK, I do so enjoy pointing out the total uber fail of your magical woobie so. I also personally consider it a public service to point people to solutions that actually work instead of relying on magical woobies and anecdotes. And of course bitch slapping your around is also quite fun!

And this coming from poor wittle APK, also know as "Petey, the idiot HOPES file guy"? As in you HOPES that one of the 300,000+ constantly changing array of websites that are infected doesn't happen to be the one you visit today? Or that you HOPES that nobody notices after repeatedly being asked you have FAILED to show even the tiniest shred of mathematical proof that your magical woobie can scale? That you HOPES nobody notices your only "proof" is anecdotes, often by your own sock puppets like Kingsjester?

If there is ANYONE that should be LOLing it is me, for pointing out there are still morons that believe 16Mb HOPES files can do anything but block ads since ad servers are...what do you call it...oh yeah STATIC, just like your HOPES file, but really you are just kinda pathetic. You're like the idiot that just keeps hanging onto that three years out of date copy of Norton, because he is just so damned sure it still works, only the Norton guy is actually better protected than you are, since it did used to work in the past 5 years.

So please, keep posting APK, I do so enjoy pointing out the total uber fail of your magical woobie so. I also personally consider it a public service to point people to solutions that actually work instead of relying on magical woobies and anecdotes. And of course bitch slapping your around is also quite fun!

And this coming from poor wittle APK, also know as "the idiot HOPES file guy"? As in you HOPES that one of the 300,000+ constantly changing array of websites that are infected doesn't happen to be the one you visit today? Or that you HOPES that nobody notices after repeatedly being asked you have FAILED to show even the tiniest shred of mathematical proof that your magical woobie can scale? That you HOPES nobody notices your only "prrof" is anecdotes, often by your own sock puppets like Kingsjester?

If there is ANYONE that should be LOLing it is me, for pointing out there are still morons that believe 16Mb HOPES files can do anything but block ads since ad servers are...what do you call it...oh yeah STATIC, just like your HOPES file, but really you are just kinda pathetic. You're like the idiot that just keeps hanging onto that three years out of date copy of Norton, because he is just so damned sure it still works, only the Norton guy is actually better protected than you are, since it did used to work in the past 5 years.

So please, keep posting APK, I do so enjoy pointing out the total uber fail of your magical woobie so. I also personally consider it a public service to point people to solutions that actually work instead of relying on magical woobies and anecdotes. And of course bitch slapping your around is also quite fun!

And this coming from poor wittle APK, also know as "the idiot HOPES file guy"? As in you HOPES that one of the 300,000+ constantly changing array of websites that are infected doesn't happen to be the one you visit today? Or that you HOPES that nobody notices after repeatedly being asked you have repeatedly FAILED to show even the tiniest shred of mathematical proof that your magical woobie can scale? That you HOPES nobody notices your only "proof" is anecdotes, often by your own sock puppets like Kingsjester?

If there is ANYONE that should be LOLing it is me, for pointing out there are still morons that believe 16Mb HOPES files can do anything but block ads since ad servers are...what do you call it...oh yeah STATIC, just like your HOPES file, but really you are just kinda pathetic. You're like the idiot that just keeps hanging onto that three years out of date copy of Norton, because he is just so damned sure it still works, only the Norton guy is actually better protected than you are, since it did used to work in the past 5 years.

So please, keep posting APK, I do so enjoy pointing out the total uber fail of your magical woobie so. I also personally consider it a public service to point people to solutions that actually work instead of relying on magical woobies and anecdotes. And of course bitch slapping your around is also quite fun! Oh and taking a page from your book from now on ALL responses will be THIS post, with only additions being more links to your various trolls and the people making fun of them, so everyone knows who they are dealing with. Have a nice day and be sure you hug your magical woobie...err I mean HOPES file!

I don't run active antivirus at all, the trick is never to touch the internet explorer browser. Another tip is don't download a bunch of pirated program and run them without scanning them first. I suggest malwarebytes.

I also keep a copy of combofix on a usb drive just in case.

There are a couple testing files and sites that exist for testing antiviruses that might be of interest. The one that I've used to ensure anti-virus software was functioning was EICAR which is a simple text file that virus definitions recognize but which does not actively do anything. This is useful for demonstrating that software is working, what a virus response looks like and how to remove a virus if it is found. Since it does nothing, it is only useful as a test and doesn't really get into how to deal with a fully compromised system.

An alternative is Spycar which will perform actions targeted in demonstrating browser exploits. It wouldn't be available in a non-internet lab, but you might be able to adapt the links there by putting the files up on an intranet.

http://www.spycar.org/Spycar.html referenced at http://www.pcworld.com/article/125138/put_your_antispyware_apps_to_the_test.html

http://www.eicar.org/anti_virus_test_file.htm referenced in a variety of places, including http://www.sophos.com/pressoffice/news/articles/2003/01/eicar.html

Removal scenarios vary according to how messed up a machine is by an infection. I usually use Trinity Rescue Kit as a first test for computers I don't trust or know have virus issues.

TRK: http://trinityhome.org/

I use MalwareBytes from http://www.malwarebytes.org/ in some cases and found it to be more effective than many of the other solutions, even in the free version.

Actually, MalwareBytes cannot be run from a flash drive, nor is it free for Corporate use.

Mbam Forum

If you use MBam in a corporate setting, they wish for you to obtain a corporate licence by contacting them at:

Mbam Corporate Licensing.

Nope, I'm not affiliated with them, just another satisfied fan.

Actually, MalwareBytes cannot be run from a flash drive, nor is it free for Corporate use.

Mbam Forum

If you use MBam in a corporate setting, they wish for you to obtain a corporate licence by contacting them at:

Mbam Corporate Licensing.

Nope, I'm not affiliated with them, just another satisfied fan.

I've recently switched my company over to Sunbelt Systems VIPRE.
One of the triggers for this was how well this worked...
http://vipre.malwarebytes.org/

I've used Malwarebytes in many places but the standalone scanner from Vipre is pretty impressive.

I was actually hit by one of these "drive by downloads" within firefox via java 5-6 weeks ago. Browsing porn, opened a tab to a video, the browser suddenly got sluggish like crazy. Task manager showed java executable running at near 100% cpu. The processes were so locked up that an attempt to kill either the java process or firefox just wasn't doing anything. I have Avast for anti-virus, and it wasn't complaining about any virus - until the exact moment I clicked to reboot the machine. At that instant, Avast popped up a virus alert, but it was too late - I guess the reboot process shut down the Avast service/process *before* the browser. Immediately after a reboot I discovered I was, for the first time in my life, rootkitted. It took 2 rounds of Malwarebytes' Anti-Malware and a windows-xp-recovery execution of `fixmbr` to completely eradicate.

I would *not* have java installed (at least not for browsers) to begin with if not for the fact that the Canada Revnue Agency's website *requires* java just to login to one's government account. Ridiculous.

I remember when Windows was much younger and error messages were oh-so-much crueler. Those were the times.

If only those times were totally gone. BSODs are informative, but the number of apps which give some horrifically cryptic error when trying to update without an internet connection is annoying (i'm looking at you MBAM).

In response to your list, I mostly agree, though pulling all nonessentials (PCI cards, etc.) should include front panel headers.