Informal Adware Risk Survey in Security http://www.dslreports.com/forum/r13912417 en Sat, 05 Dec 2009 20:56:46 EDT Sat, 05 Dec 2009 20:56:46 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13970404 Mowergun : I have no first hand experience with any of those listed except new.net.

I have removed "about" easily from a relative's computer using aboutbuster and hyjackthis. I have removed new.net and comet cursor from another relative's computer. I had my own experience with Conducent Timesync and Webhancer when they first appeared a few years ago.

So, I am not qualified to rank the twelve threats listed. I am surprised that so many rated new.net so high. As I understand it new.net usually appears in add/remove and the uninstaller does a pretty good job of uninstalling new.net. For those installs that do not appear in add/remove, new.net provides pretty good instructions along with a down-loadable uninstaller at »www.newdotnet.com/removal.html. Of course if you use a ready made hosts file, chances are it has a redirection to your local machine for the new.net domain so you cannot access the new.net removal instructions or download the uninstaller. Sort of shooting yourself in the foot.

A couple of people have mentioned that an improper removal of new.net can break a users internet connectivity due to the removal of LSP's without restoring continuity to the remaining LSP's. My understanding is that this is usually caused by the improper removal of the LSP by some anti-spyware program. I would blame the anti-spyware program for that, especially when an effective uninstaller is readily available, and also because this is an old known issue. Any anti-spyware program that is still improperly removing new.net and breaking a users internet connectivity, I would not regard as trustworthy.]]> http://www.dslreports.com/forum/remark,13970404 Sun, 24 Jul 2005 02:17:20 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13966929 Uncle Jean : OK and I thank you, Eric. Yes, interesting and informative.

Regards,
UJ]]> http://www.dslreports.com/forum/remark,13966929 Sat, 23 Jul 2005 16:04:46 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13966582 eburger68 : Jean:

There's no single "right list," but I will post the list as I called it:

1. CoolWebSearch (HomeSearchAssistant)
2. SearchMiracle/Elitebar
3. ABetterInternet (Aurora)
4. IBIS Websearch/Wintools
5. 180search Assistant
6. New.net
7. GAIN OfferCompanion
8. Hotbar
9. WhenU Save!
10. Weatherbug
11. Download Accelerator Plus
12. Tracking cookie (Doubleclick)

A few observations:

1) Most users who posted here or on Suzi's blog came up with rankings that generally resemble the above. Here and there folks ranked a particular program vastly differently than I did, but if you look over all the rankings, a general pattern emerges and my list certainly fits the pattern.

2) This survey was obviously non-scientific and highly biased, as the respondents were entirely self-selected. The folks who would respond to such a survey would tend to be people who already had some familiarity with the programs involved, unlike the vast majority of "normal" users.

3) Despite the self-selection, there were a few people who posted who admitted that they recognized one or two programs, but that the majority of them were an undifferentiable mass, given their general unfamiliarity with the software. I suspect this would be the case with the majority of "normal" users.

4) It needs to be reiterated that my list should not be taken as the definitive list, that there is plenty of room for disagreement. Most disagreements among knowledgeable folks, I expect, would stem from different weightings given to various functionality and behavior associated with the programs. Some people regard LSP hijackers as more dangerous than others, for example, and would tend to push New.net further up the list than others would based on that functionality.

In any case, I hope readers here found this informal survey interesting, informative, and thought-provoking.

Best regards,

Eric L. Howes]]> http://www.dslreports.com/forum/remark,13966582 Sat, 23 Jul 2005 15:09:31 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13966486 Cudni : I would like to post the list, however, as it is constantly being adjusted/lowered maybe ...;)

Cudni
--
Help yourself so God can help you]]> http://www.dslreports.com/forum/remark,13966486 Sat, 23 Jul 2005 14:54:50 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13966394 Uncle Jean : Hi all,

I'd just like to know if Eric will post here what he considers to be "the right list".

Thanks,
UJ]]> http://www.dslreports.com/forum/remark,13966394 Sat, 23 Jul 2005 14:39:14 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13958766 TeMerc : Here is my .02 on the list:
ABetterInternet (Aurora)
SearchMiracle/Elitebar
CoolWebSearch (HomeSearchAssistant)
180search Assistant
IBIS Websearch/Wintools
Hotbar
GAIN OfferCompanion
WhenU Save!
New.net
Download Accelerator Plus
Weatherbug
Tracking cookie (Doubleclick)

This is pretty much based on experiences with users removing each, how easy\difficult they were to rid.]]> http://www.dslreports.com/forum/remark,13958766 Fri, 22 Jul 2005 14:40:12 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13955840 dalek9 : Ignore my first post, I had the numbers backwards, consider this one the correct post.

Rank
180search Assistant 1
IBIS Websearch/Wintools 2
CoolWebSearch (HomeSearchAssistant) 3
Hotbar 4
Tracking cookie (Doubleclick) 5
New.net 6
SearchMiracle/Elitebar 7
GAIN OfferCompanion 8
WhenU Save! 9
ABetterInternet (Aurora) 10
Download Accelerator Plus 11
Weatherbug 12]]> http://www.dslreports.com/forum/remark,13955840 Fri, 22 Jul 2005 07:19:50 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13955826 dalek9 : Rank
Weatherbug 1
Download Accelerator Plus 2
ABetterInternet (Aurora) 3
WhenU Save! 4
GAIN OfferCompanion 5
SearchMiracle/Elitebar 6
New.net 7
Tracking cookie (Doubleclick) 8
Hotbar 9
CoolWebSearch (HomeSearchAssistant) 10
IBIS Websearch/Wintools 11
180search Assistant 12]]> http://www.dslreports.com/forum/remark,13955826 Fri, 22 Jul 2005 07:15:26 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13943867 CalamityJane : Heh! I have your names now and know you're registered....sometimes I have to put a call in to the Calvary on a difficult infection and ~gets out pencil~ to jot you in :D
mu-ahahahahahahahaha

So, back to topic before I'm busted, many thanks for your input on Eric's survey here :)
--
It takes a disaster to make a woman out of a female
Gladiator Security Forum
Proud Member of ASAP (Alliance of Security Analysis Professionals)]]> http://www.dslreports.com/forum/remark,13943867 Wed, 20 Jul 2005 21:16:45 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13943767 Trpm : Hey there Calamity,

Nice to see you as always!
I have been reading this board off and on for awhile, just never posted much. (Member since 2003-10-11.)

Rex :) ]]> http://www.dslreports.com/forum/remark,13943767 Wed, 20 Jul 2005 21:04:01 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13943265 CalamityJane : Wow! Hi Rex, welcome to BBR/DSLR :) Another great talent shows up in this thread! Glad to see you here!! :)]]> http://www.dslreports.com/forum/remark,13943265 Wed, 20 Jul 2005 20:07:26 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13943250 Trpm : It's a tough call between ABetterInternet and CoolWebSearch for 1st place, but here it goes.

CoolWebSearch (HomeSearchAssistant)
ABetterInternet (Aurora)
IBIS Websearch/Wintools
SearchMiracle/Elitebar
180search Assistant
New.net
GAIN OfferCompanion
Hotbar
WhenU Save
Download Accelerator Plus
Weatherbug
Tracking cookie (Doubleclick)

Rex :) ]]> http://www.dslreports.com/forum/remark,13943250 Wed, 20 Jul 2005 20:04:37 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13943096 keith2468 : 1. CoolWebSearch (HomeSearchAssistant)

2. WhenU Save!

3. ABetterInternet (Aurora)
180search Assistant
SearchMiracle/Elitebar
Tracking cookie (Doubleclick)
New.net
IBIS Websearch/Wintools
GAIN OfferCompanion
Hotbar

4. Download Accelerator Plus

I don't regard Weatherbug as malware -- by my definition.

I tested Weatherbug myself several months ago, and regardless of the fact that my KAV labelled it as adware, and regardless of the fact that an Ad-aware SE scan removed a registry entry required for its uninstall to work, because:
(a) it came with a working un-install utility (that worked when I didn't let Ad-aware and KAV muck with it), and
(b) because it didn't appear to do any more tracking than a browser with a tracking cookie, and
(c) even after being on my machine for 12 hours I didn't see anything else install (so no unauthorized installs of other software).

Weatherbug may have changed since then. Since it doesn't cover weather in Canada, I uninstalled Weatherbug after my tests.
--
(Virus&Hijacking FAQ + Submit suspected malware + Backups FAQ + Security FAQ TOC)]]> http://www.dslreports.com/forum/remark,13943096 Wed, 20 Jul 2005 19:46:44 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13943004 anon : To me, a snake is a snake no matter what size and shape. Even a tracking cookie has no place in my world as I refuse to let anyone profile my unique individual habits for any reason. Nor do I allow any process to take control of any aspect of my sys without my personal cfg.

So I ask; What difference does it make which order of severity you find them? They are all snakes.]]> http://www.dslreports.com/forum/remark,13943004 Wed, 20 Jul 2005 19:35:07 EDT Re: Welcome miekiemoes! http://www.dslreports.com/forum/remark,13942268 CalamityJane :
said by miekiemoes See Profile:

Still trying to find out how this board works. :D
So are we! {just kidding but the custom board features can be a challenge} If you ever need help or have a question feel free to click on my name and send me an IM :)

For those here who don't know her, miekiemoes See Profile is an extremely talented spyware removal specialist and researcher (and a very nice lady)! We're honored to see you here :)
--
It takes a disaster to make a woman out of a female
Gladiator Security Forum
Proud Member of ASAP (Alliance of Security Analysis Professionals)]]> http://www.dslreports.com/forum/remark,13942268 Wed, 20 Jul 2005 17:58:53 EDT Re: Welcome miekiemoes! http://www.dslreports.com/forum/remark,13942177 miekiemoes : My pleasure. Still trying to find out how this board works. :D]]> http://www.dslreports.com/forum/remark,13942177 Wed, 20 Jul 2005 17:50:11 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13934849 LoPhatPhuud : Aurora, CWS,and Elitebar, to me, are real close. I would say the persistance award for being the biggest PITA for the longest time goes to CWS.

Anyway, here is my ranking...

ABetterInternet (Aurora)

CoolWebSearch (HomeSearchAssistant)

SearchMiracle/Elitebar

IBIS Websearch/Wintools

New.net

180search Assistant

WhenU Save!

Hotbar

GAIN OfferCompanion

Weatherbug

Download Accelerator Plus

Tracking cookie (Doubleclick)
--
When angry count four; when very angry, swear.


Microsoft MVP Windows-Security 2005

Gladiator Security Forum
]]> http://www.dslreports.com/forum/remark,13934849 Tue, 19 Jul 2005 21:41:45 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13933996 anon : all of these items are direct intrusions on a personal computer.

aren't you the one screwing around on the ADVANCED MICRO DEVICES support website that tried to remove something from a compromised computer and you replied that you did not need supervision?

i think you are.

you sure get around.]]> http://www.dslreports.com/forum/remark,13933996 Tue, 19 Jul 2005 20:02:35 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13928822 anon : OK. Here is my two cents starting with the worst to least offender!

CoolWebSearch (HomeSearchAssistant)
ABetterInternet (Aurora)
SearchMiracle/Elitebar
IBIS Websearch/Wintools
180search Assistant
New.net
WhenU Save!
GAIN OfferCompanion
Hotbar
Download Accelerator Plus
Weatherbug
Tracking cookie (Doubleclick)]]> http://www.dslreports.com/forum/remark,13928822 Tue, 19 Jul 2005 09:40:23 EDT Welcome miekiemoes! http://www.dslreports.com/forum/remark,13928673 CalamityJane : [OT] miekiemoes, Welcome to Broadband Reports (aka DSLReports...DSLR)

Nice to see you here :) Thanks for your input.]]> http://www.dslreports.com/forum/remark,13928673 Tue, 19 Jul 2005 09:09:09 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13928587 miekiemoes : My list:

CoolWebSearch (HomeSearchAssistant)
ABetterInternet (Aurora)
SearchMiracle/Elitebar
IBIS Websearch/Wintools
Hotbar
180search Assistant
New.net
WhenU Save!
GAIN OfferCompanion
Download Accelerator Plus
Weatherbug
Tracking cookie (Doubleclick)]]> http://www.dslreports.com/forum/remark,13928587 Tue, 19 Jul 2005 08:51:02 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13927905 bcastner : ABetterInternet (Aurora)
CoolWebSearch (HomeSearchAssistant)
SearchMiracle/Elitebar
IBIS Websearch/Wintools
New.net
180search Assistant
GAIN OfferCompanion
WhenU Save
Hotbar
Download Accelerator Plus
Weatherbug]]> http://www.dslreports.com/forum/remark,13927905 Tue, 19 Jul 2005 04:09:16 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13927318 suzi : I'd rate these three at the top of the list, just about tied based on personal experience, having downloaded them for testing, and due to difficulty in removal & pervasiveness with what I've seen in HijackThis logs on SWW. I've never before seen such anger, as CalamityJane noted, toward any spyware/adware as people have expressed about Aurora. There are over 100 angry comments on my blog about Aurora including people posting death wishes and thoughts of violence against DirectRevenue. I've seen some anger toward CWS, but nothing like I've seen toward DirectRevenue (Abetterinternet). SearchMiracle/Elitebar has a nasty habit of hiding and being invisible to detection with usual methods. I've had the second group, too, and though they are extremely annoying, they are not that difficult to get rid of.

ABetterInternet (Aurora)
CoolWebSearch (HomeSearchAssistant)
SearchMiracle/Elitebar

Then, in this order:
IBIS Websearch/Wintools
180search Assistant
New.net
GAIN OfferCompanion
Hotbar
WhenU Save!

Very low risk, about even:
Download Accelerator Plus
Weatherbug
Tracking cookie (Doubleclick)
--
aka Suzi, Spyware Warrior
Microsoft MVP Windows Security 2005]]> http://www.dslreports.com/forum/remark,13927318 Tue, 19 Jul 2005 01:10:36 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13925199 wng_z3r0 : ABetterInternet (Aurora)
IBIS Websearch/Wintools
CoolWebSearch (HomeSearchAssistant)
SearchMiracle/Elitebar
Hotbar
180search Assistant
WhenU Save!
GAIN OfferCompanion
New.net
Weatherbug
Download Accelerator Plus
Tracking cookie (Doubleclick)

reasons:
1. Nail is a pain in the but to remove, and it causes havoc on computer.
2. wintools. This is kinda tied with CWS, but wintools is so freaking unstable, and the OS suffers greatly from the program
3. Note above comments
4. Elitebar is also a pain to remove. It acts like a rootkit in the sense that it loads itself in the memory so it can't be deleted, and then reincarnates itself.
5. This is kinda a tie with elitebar, but it is slightly easier to remove.
6-8 These are middle of the road crapware. They are pretty much a tie IMO
9 new.net hijacks the LSP chain, making it sometimes dangerous to remove by the uninformed.
10. WB displays popups, and I dont trust the creators
11. DAP is completely harmless, except for a few popups
12. A cookie is... a big yawn IMHO. easy to take care of, and not dangerous

wng]]> http://www.dslreports.com/forum/remark,13925199 Mon, 18 Jul 2005 20:46:21 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13919613 ilago : 1. ABetterInternet (Aurora)
2. CoolWebSearch (HomeSearchAssistant)
3. 180search Assistant
4. SearchMiracle/Elitebar
5. IBIS Websearch/Wintools
6. GAIN OfferCompanion
7. New.net
8. WhenU Save!
9. Download Accelerator Plus
10. Hotbar
11. Weatherbug
12. Tracking cookie (Doubleclick)

I'm a Malware remover on a couple of other forums so I have based my list on that experience, rather than personal experience. I have chosen to install several of these products to work with removal methods.

They are all gross abuse of personal property - your computer. Coowebsearch and Aurora are, to me, in the same class as housebreakers.:mad: They have no redeeming features.

However, if you have installed sponsored software then you have a resonsibility to remove the software that was only available through the sponsorship - Messenger Plus! 3, for example, has a sponsor infection, lop.com, that is not in the list above. That is the price of the free software. ]]> http://www.dslreports.com/forum/remark,13919613 Mon, 18 Jul 2005 07:27:29 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13919575 anon : ABetterInternet (Aurora)
SearchMiracle/Elitebar
IBIS Websearch/Wintools
CoolWebSearch (HomeSearchAssistant)
180search Assistant
Hotbar
GAIN OfferCompanion
WhenU Save!
Download Accelerator Plus
Weatherbug
Tracking cookie (Doubleclick)
New.net

I put them in that order based on how annoying they are, how difficult it is to remove and how often they pop up ads or simply crash the machine. If you had included Virtual Bouncer, I would have put that at the top just for being so annoying.]]> http://www.dslreports.com/forum/remark,13919575 Mon, 18 Jul 2005 07:14:01 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13918843 Curiosity : I am not familiar with all of those things, but CoolWebSearch would be the worst, with the toolbars probably next, and the tracking cookies the least problematic.]]> http://www.dslreports.com/forum/remark,13918843 Mon, 18 Jul 2005 01:35:52 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13915244 anon : 1. IBIS Websearch/Wintools
Ever try to kill Wintoolsa? Nasty.
2. New.net
Seen it make XP boot in 125 minutes.
3. CoolWebSearch (HomeSearchAssistant)
So many CWS spyware - so little time.
4. SearchMiracle/Elitebar
A frequent IE hijacker.
5. ABetterInternet (Aurora)
Sounds like a dialer.. evil concept.
6. WhenU Save!
No idea on its potentcy. Very common.
7. 180search Assistant
Same here. Just very common.
8. GAIN OfferCompanion
Anything by Gator is bad.
9. Hotbar
If it hijacks IE, it's bad.
10. Download Accelerator Plus
Just don't do it.
11. Weatherbug
Glad it's being seen as spyware.
12. Tracking cookie (Doubleclick)
Don't care about cookies.]]> http://www.dslreports.com/forum/remark,13915244 Sun, 17 Jul 2005 16:34:35 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13914801 CalamityJane :
said by Grinler See Profile:

Jane, lets post our answers anyways :) I would love to see other hijackthis helpers opinions on this.
Hi Lawrence! Good to see you here :)

Ok...twist my arm :D

Eric wants to know how we rate them for potential risk and threat. In addition to privacy threats (some of these collect more personally identifiable information than others - so on that alone the list would look different) but I would also have to consider changes to the system, how it installs (stealth or not), annoyance factor to the user (Aurora rates high on that alone), potential to download additional software/malware to a system and difficulty of removal. So this is a tough question. But CWS Homesearch assistant absolutely has to be on the top of my list as pure evil. Aurora, Elitebar and Wintools/Huntbar are kind of all about the same level and mostly evil. Newdotnet as you noted is dangerous because of it's potential to damage the LSP stack in removal (causing loss of internet connectivity)- we've seen a LOT of that. 180, GAIN, & WhenU I lump those together in the next level. Hotbar and Download Accelerator Plus further down the list. The cookie is next to last and Weatherbug is, I think, completely innocent as the newer version doesn't have the trickler and people really enjoy and use the program. I see that about as harmless as AIM

CoolWebSearch (HomeSearchAssistant)

ABetterInternet (Aurora)

SearchMiracle/Elitebar

IBIS Websearch/Wintools

New.net

180search Assistant

GAIN OfferCompanion

WhenU Save

Hotbar

Download Accelerator Plus

Tracking cookie (Doubleclick)

Weatherbug

Edit to add: CWS evil also changes security settings on a system...I could go on and on about that one! - But that alone makes it's intention malicious
--
It takes a disaster to make a woman out of a female

Gladiator Security Forum


Proud Member of ASAP (Alliance of Security Analysis Professionals)]]> http://www.dslreports.com/forum/remark,13914801 Sun, 17 Jul 2005 15:29:35 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13914348 Grinler : Jane, lets post our answers anyways :) I would love to see other hijackthis helpers opinions on this.

ABetterInternet (Aurora) (Major PITA)

CoolWebSearch (HomeSearchAssistant) (This, IMHO, is one of the first hijackers to have viral characteristics with its use of ADS files on legit windows files. Since then we have seen a few more)

New.net (Only higher than searchmiracle/elitebar because of the potential damage a bad uninstall can cause)

SearchMiracle/Elitebar

IBIS Websearch/Wintools

WhenU Save!

GAIN OfferCompanion

180search Assistant

Hotbar

Download Accelerator Plus

Weatherbug

Tracking cookie (Doubleclick)

--
Lawrence
BleepingComputer.com]]> http://www.dslreports.com/forum/remark,13914348 Sun, 17 Jul 2005 14:19:47 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13913937 PA Bear1 : Not putting a lot of thought/research on this:

ABetterInternet (Aurora)
CoolWebSearch (HomeSearchAssistant)
180search Assistant
SearchMiracle/Elitebar
IBIS Websearch/Wintools
WhenU Save!
GAIN OfferCompanion
New.net
Hotbar
Download Accelerator Plus
Weatherbug
Tracking cookie (Doubleclick)
--
Robear Dyer, MS MVP-Windows (IE/OE) & Security, Aumha Forums VSOP & Moderator]]> http://www.dslreports.com/forum/remark,13913937 Sun, 17 Jul 2005 13:11:27 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13913356 Doctor Four : 1)ABetterInternet (Aurora)
2)CoolWebSearch (HomeSearchAssistant)
3)IBIS Websearch/Wintools
4)180search Assistant
5)SearchMiracle/Elitebar
6)New.Net
7)Hotbar
8)WhenU Save!
9)GAIN OfferCompanion
10)Download Accelerator Plus
11)Weatherbug
12)Tracking cookie (Doubleclick)

The first 4 are especially bad, and IMO, Direct Revenue's
crap has now surpassed CoolWebSearch as being the
nastiest adware on the planet.
--
"Kayura or Badamon, whichever you are, you should know that I will never give up this battle. By the will of the Ancient, I shall succeed!" - Shuten (Anubis) from the Ronin Warriors.
To RIAA/MPAA - You can sue but you can't catch everyone!]]> http://www.dslreports.com/forum/remark,13913356 Sun, 17 Jul 2005 11:44:04 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13913338 anon : CoolWebSearch (HomeSearchAssistant)
SearchMiracle/Elitebar
IBIS Websearch/Wintools
ABetterInternet (Aurora)
180search Assistant
Hotbar
GAIN OfferCompanion
Download Accelerator Plus
New.net
WhenU Save!
Weatherbug
Tracking cookie (Doubleclick)]]> http://www.dslreports.com/forum/remark,13913338 Sun, 17 Jul 2005 11:41:21 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13913275 Shriyash :
said by DiscipleMike See Profile:

1. (most severe)
CoolWebSearch (HomeSearchAssistant)

2-12 (I don't really have an order preference for these)
WhenU Save!
Download Accelerator Plus
ABetterInternet (Aurora)
180search Assistant
SearchMiracle/Elitebar
New.net
IBIS Websearch/Wintools
GAIN OfferCompanion
Hotbar
Tracking cookie (Doubleclick)
Weatherbug
Ditto :huh:]]> http://www.dslreports.com/forum/remark,13913275 Sun, 17 Jul 2005 11:31:44 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13913256 DiscipleMike : 1. (most severe)
CoolWebSearch (HomeSearchAssistant)

2-12 (I don't really have an order preference for these)
WhenU Save!
Download Accelerator Plus
ABetterInternet (Aurora)
180search Assistant
SearchMiracle/Elitebar
New.net
IBIS Websearch/Wintools
GAIN OfferCompanion
Hotbar
Tracking cookie (Doubleclick)
Weatherbug
--
Mike ... For the things which are seen are temporary, but the things which are not seen are eternal. 2 Cor. 4:18]]> http://www.dslreports.com/forum/remark,13913256 Sun, 17 Jul 2005 11:27:53 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13913240 CalamityJane :
said by RobertLudlum See Profile:

I see quite a few people ranked Aurora No 1, I wonder why.
Very common ?
Interesting question! I am a HijackThis expert so I can't answer Eric's survey with an unslighted opinion. But as to your question about Aurora....I can. It is quite common, but more than that, it is the most hated I have seen from all of the victims I have helped. One of my first sightings of Aurora intrigued me to help the young man posting at another forum because the username he had signed up with was: IWishDeathUponDirectRevenue (Direct Revenue aka abetterinternet) Now who could not resist a piqued curiosity on what single malware could cause that much hate? (It was Aurora)

Edit: To clarify DirectRevnue aka abetterinternet
--
It takes a disaster to make a woman out of a female

Gladiator Security Forum


Proud Member of ASAP (Alliance of Security Analysis Professionals)]]> http://www.dslreports.com/forum/remark,13913240 Sun, 17 Jul 2005 11:23:54 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13913080 jmorlan : 1. CoolWebSearch (HomeSearchAssistant)
2. ABetterInternet (Aurora)
3. SearchMiracle/Elitebar *
4. IBIS Websearch/Wintools *
5. 180search Assistant
6. GAIN OfferCompanion
7. Hotbar
8. New.net
9. WhenU Save!
10. Download Accelerator Plus
11. Weatherbug
12. Tracking cookie (Doubleclick)

* NOTE: Items marked by a * are just guesses. I have very little personal knowledge of those programs.

I am comfortable with the first two as severe threats and the bottom two as relatively benign. The rest of the pack in the middle could be rearranged, but I ranked the ones near the bottom that I thought could be most easily removed by the end user.]]> http://www.dslreports.com/forum/remark,13913080 Sun, 17 Jul 2005 10:53:10 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13913021 RobertLudlum : Like most others here who are relatively security conscious but not involved directly as HJT log helpers, I have not kept up with the exact details of what they all do, but almost all the names are familar. The only one I haven't heard of is IBIS Websearch/Wintools.

As such my impressions is exactly the same as "Your Kung-fu is Not strong". Eg 1. CWS 11. Webbug 12. Tracking cookies 2-10 All others (are they all toolbars except for Newnet?).

I see quite a few people ranked Aurora No 1, I wonder why.
Very common ?]]> http://www.dslreports.com/forum/remark,13913021 Sun, 17 Jul 2005 10:39:49 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13913001 mens rea : CoolWebSearch (HomeSearchAssistant)
New.net
ABetterInternet (Aurora)
IBIS Websearch/Wintools
180search Assistant
Hotbar
SearchMiracle/Elitebar
WhenU Save!
GAIN OfferCompanion
Download Accelerator Plus
Weatherbug
Tracking cookie (Doubleclick)

New.net and CoolWebSearch, at least in my limited experience in delousing family and friends computers, (outside of the doubleclick cookie) have been the most prevalent. Depending on which version of New.net inflicts itself upon the user ie whether it appears in the add/remove programs list or not, seems to be reflective of the difficulty of removal. ]]> http://www.dslreports.com/forum/remark,13913001 Sun, 17 Jul 2005 10:36:30 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13912964 MapleLeaf : 1-2. (Pure Evil)
ABetterInternet (Aurora) and CoolWebSearch (HomeSearchAssistant)
3.
IBIS Websearch/Wintools
4.
180search Assistant and WhenU Save!
5-10.
The rest, except for 11 and 12:
Weatherbug and Tracking cookie (Doubleclick)
--
Remember, I'm pulling for you - we are all in this together...]]> http://www.dslreports.com/forum/remark,13912964 Sun, 17 Jul 2005 10:30:11 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13912884 mem357 : I think CoolWebSearch is the worst, most insidious
spyware pest of all. I confess I don't know much about
ABetterInternet or most of the others, but I don't think
they could match CWS for total spyware maliciousness.
Sorry I couldn't be more helpful, Eric, and thanks for
all you do in the fight against these costly pests. ]]> http://www.dslreports.com/forum/remark,13912884 Sun, 17 Jul 2005 10:13:02 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13912870 winxp_fin : 1.ABetterInternet (Aurora)
2.CoolWebSearch (HomeSearchAssistant)
3.IBIS Websearch/Wintools
4.SearchMiracle/Elitebar
5.180search Assistant
6.WhenU Save!
7.New.net
8.GAIN OfferCompanion
9.Hotbar
10.Weatherbug
11.Download Accelerator Plus
12.Tracking cookie (Doubleclick)

:uhh: :)]]> http://www.dslreports.com/forum/remark,13912870 Sun, 17 Jul 2005 10:10:12 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13912707 fatdcuk : 1)ABetterInternet (Aurora)
2)CoolWebSearch (HomeSearchAssistant)
3)IBIS Websearch/Wintools
4)New.net
5)SearchMiracle/Elitebar
6)180search Assistant
7)WhenU Save!
8)Hotbar
9)GAIN OfferCompanion
10)Download Accelerator Plus
11)Weatherbug
12)Tracking cookie (Doubleclick)

HTH:)]]> http://www.dslreports.com/forum/remark,13912707 Sun, 17 Jul 2005 09:31:18 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13912684 ctrip :
said by eburger68 See Profile:

I'm curious as to how you, the users of such anti-spyware prorgrams, perceive the potential risks or threat potentials inherent in these detections.
Being fairly uninformed about spyware, I never heard of many of the items in your list. I purposely made no effort to learn about any of them prior to making my list. So what you are going to get from me is a list of my (typical oblivious computer user) impressions. I don't think it will be very useful to you but figured I'd throw my 2 cents in just in case you were looking for the general population's impressions, rather than any real information.

1. (most severe)
CoolWebSearch (HomeSearchAssistant)

2-11 (don't really know)
WhenU Save!
Download Accelerator Plus
ABetterInternet (Aurora)
180search Assistant
SearchMiracle/Elitebar
New.net
IBIS Websearch/Wintools
GAIN OfferCompanion
Hotbar

12. (least severe)
Tracking cookie (Doubleclick)
Weatherbug

I placed CoolWebSearch in the most severe category because I seem to remember that there was a specialized piece of software needed it to remove it from computers because a lot of regular anti-crapware software couldn't remove it. This could be wrong but its what I think I remember.

The majority, I placed in my I don't know category (in no particular order) because I have either heard of them (like New.net, Hotbar, and WhenU Save!) and couldn't remember if they were truly bad or were like the things getting downgraded in MSAS and maybe not really so bad. Or I hadn't heard of them at all.

I put Weatherbug in my least severe category because I used it in the past and while it had advertisements...I remember knowing that going in and figured that was the trade off in using the free piece of software. In other words, it was my own choice to install it, knowing about the ads ahead of time.

Finally, I always delete tracking cookies when they show up in my Ad-Aware scans but never really thought that they were harmful.

--
Spread Internet Explorer! - The browser you can trust to not have those annoying Firefox twits pushing it!]]> http://www.dslreports.com/forum/remark,13912684 Sun, 17 Jul 2005 09:23:59 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13912672 Biscuit_AB : ABetterInternet (Aurora)
CoolWebSearch (HomeSearchAssistant)
IBIS Websearch/Wintools
180search Assistant
Hotbar
SearchMiracle/Elitebar
New.net
WhenU Save!
GAIN OfferCompanion
Download Accelerator Plus
Weatherbug
Tracking cookie (Doubleclick)

Just a couple of changes from Merlyn's list. I think one thing that is extremely important in considering risk of various spyware/adware pieces is the relative prevalence of the installers out in the wild. In which case, seems anything by DR is top-of-the-list.]]> http://www.dslreports.com/forum/remark,13912672 Sun, 17 Jul 2005 09:20:35 EDT Re: Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13912458 CajunTek : ABetterInternet (Aurora)
IBIS Websearch/Wintools
CoolWebSearch (HomeSearchAssistant)
180search Assistant
SearchMiracle/Elitebar
New.net
Hotbar
WhenU Save!
GAIN OfferCompanion
Download Accelerator Plus
Weatherbug
Tracking cookie (Doubleclick)

Note Eric:
These
CoolWebSearch (HomeSearchAssistant)
180search Assistant
SearchMiracle/Elitebar
New.net
Hotbar

Could go in just about any order IMHO.. They are all crap and all have some difficulty to remove..
--
Lost in Texas]]> http://www.dslreports.com/forum/remark,13912458 Sun, 17 Jul 2005 08:04:13 EDT Informal Adware Risk Survey http://www.dslreports.com/forum/remark,13912417 eburger68 : Hi All:

I've put together a list of 12 items that are typically detected by many anti-spyware programs. I'm curious as to how you, the users of such anti-spyware programs, perceive the potential risks or threat potentials inherent in these detections.

WhenU Save!
Download Accelerator Plus
ABetterInternet (Aurora)
Weatherbug
180search Assistant
SearchMiracle/Elitebar
Tracking cookie (Doubleclick)
New.net
CoolWebSearch (HomeSearchAssistant)
IBIS Websearch/Wintools
GAIN OfferCompanion
Hotbar

What I'd like those interested to do is respond to this post. In your response rank the above 12 programs in terms of the severity of the threat to users' privacy and security, with 1 being the most severe and 12 being the least severe, thusly:

1. Program 1 (most severe)
2.
(...)
11.
12. Program 12 (least severe)

I encourage you to copy the list of items from this post (above) and sort/rank them as you deem appropriate. Also, you're welcome to consult online sources, if you wish (this is not a quiz or exam of any sort). Finally, feel free to add notes or explanations to justify your rankings.

Please note that the original list (above) is sorted in no particular order.

In case you're wondering, I'm conducting this informal survey more for my own edification -- to learn how real users actually perceive the potential risks of a range of threat detections.

Best,

Eric L. Howes]]> http://www.dslreports.com/forum/remark,13912417 Sun, 17 Jul 2005 07:46:10 EDT