 Mowergun
join:2004-02-15 Charleston, IL
·Consolidated Commu..
1 edit | reply to eburger68 Re: Informal Adware Risk Survey
I have no first hand experience with any of those listed except new.net.
I have removed "about" easily from a relative's computer using aboutbuster and hyjackthis. I have removed new.net and comet cursor from another relative's computer. I had my own experience with Conducent Timesync and Webhancer when they first appeared a few years ago.
So, I am not qualified to rank the twelve threats listed. I am surprised that so many rated new.net so high. As I understand it new.net usually appears in add/remove and the uninstaller does a pretty good job of uninstalling new.net. For those installs that do not appear in add/remove, new.net provides pretty good instructions along with a down-loadable uninstaller at »www.newdotnet.com/removal.html. Of course if you use a ready made hosts file, chances are it has a redirection to your local machine for the new.net domain so you cannot access the new.net removal instructions or download the uninstaller. Sort of shooting yourself in the foot.
A couple of people have mentioned that an improper removal of new.net can break a users internet connectivity due to the removal of LSP's without restoring continuity to the remaining LSP's. My understanding is that this is usually caused by the improper removal of the LSP by some anti-spyware program. I would blame the anti-spyware program for that, especially when an effective uninstaller is readily available, and also because this is an old known issue. Any anti-spyware program that is still improperly removing new.net and breaking a users internet connectivity, I would not regard as trustworthy. |
|
 Uncle Jean
join:2005-07-17 | reply to Uncle Jean OK and I thank you, Eric. Yes, interesting and informative.
Regards, UJ |
|
 eburger68 Premium,MVM join:2001-04-28
| reply to Uncle Jean Jean:
There's no single "right list," but I will post the list as I called it:
1. CoolWebSearch (HomeSearchAssistant) 2. SearchMiracle/Elitebar 3. ABetterInternet (Aurora) 4. IBIS Websearch/Wintools 5. 180search Assistant 6. New.net 7. GAIN OfferCompanion 8. Hotbar 9. WhenU Save! 10. Weatherbug 11. Download Accelerator Plus 12. Tracking cookie (Doubleclick)
A few observations:
1) Most users who posted here or on Suzi's blog came up with rankings that generally resemble the above. Here and there folks ranked a particular program vastly differently than I did, but if you look over all the rankings, a general pattern emerges and my list certainly fits the pattern.
2) This survey was obviously non-scientific and highly biased, as the respondents were entirely self-selected. The folks who would respond to such a survey would tend to be people who already had some familiarity with the programs involved, unlike the vast majority of "normal" users.
3) Despite the self-selection, there were a few people who posted who admitted that they recognized one or two programs, but that the majority of them were an undifferentiable mass, given their general unfamiliarity with the software. I suspect this would be the case with the majority of "normal" users.
4) It needs to be reiterated that my list should not be taken as the definitive list, that there is plenty of room for disagreement. Most disagreements among knowledgeable folks, I expect, would stem from different weightings given to various functionality and behavior associated with the programs. Some people regard LSP hijackers as more dangerous than others, for example, and would tend to push New.net further up the list than others would based on that functionality.
In any case, I hope readers here found this informal survey interesting, informative, and thought-provoking.
Best regards,
Eric L. Howes |
|
  Cudni La Merma - Vigilado Premium,MVM join:2003-12-20 Someshire | reply to eburger68 I would like to post the list, however, as it is constantly being adjusted/lowered maybe ...;)
Cudni -- Help yourself so God can help you |
|
 Uncle Jean
join:2005-07-17 | reply to eburger68 Hi all,
I'd just like to know if Eric will post here what he considers to be "the right list".
Thanks, UJ |
|
 TeMerc
join:2004-01-22 Phoenix, AZ
| reply to eburger68 Here is my .02 on the list: ABetterInternet (Aurora) SearchMiracle/Elitebar CoolWebSearch (HomeSearchAssistant) 180search Assistant IBIS Websearch/Wintools Hotbar GAIN OfferCompanion WhenU Save! New.net Download Accelerator Plus Weatherbug Tracking cookie (Doubleclick)
This is pretty much based on experiences with users removing each, how easy\difficult they were to rid. |
|
 dalek9
join:2005-07-02 Canada
| reply to eburger68 Ignore my first post, I had the numbers backwards, consider this one the correct post.
Rank 180search Assistant 1 IBIS Websearch/Wintools 2 CoolWebSearch (HomeSearchAssistant) 3 Hotbar 4 Tracking cookie (Doubleclick) 5 New.net 6 SearchMiracle/Elitebar 7 GAIN OfferCompanion 8 WhenU Save! 9 ABetterInternet (Aurora) 10 Download Accelerator Plus 11 Weatherbug 12 |
|
 dalek9
join:2005-07-02 Canada
| reply to eburger68 Rank Weatherbug 1 Download Accelerator Plus 2 ABetterInternet (Aurora) 3 WhenU Save! 4 GAIN OfferCompanion 5 SearchMiracle/Elitebar 6 New.net 7 Tracking cookie (Doubleclick) 8 Hotbar 9 CoolWebSearch (HomeSearchAssistant) 10 IBIS Websearch/Wintools 11 180search Assistant 12 |
|
  CalamityJane Premium,VIP,MVM join:2002-08-27 Eustis, FL
| reply to Trpm Heh! I have your names now and know you're registered....sometimes I have to put a call in to the Calvary on a difficult infection and ~gets out pencil~ to jot you in  mu-ahahahahahahahaha
So, back to topic before I'm busted, many thanks for your input on Eric's survey here  -- It takes a disaster to make a woman out of a female Gladiator Security Forum Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
 Trpm
join:2003-10-11 Louisville, KY | reply to CalamityJane Hey there Calamity,
Nice to see you as always! I have been reading this board off and on for awhile, just never posted much. (Member since 2003-10-11.)
Rex |
|
  CalamityJane Premium,VIP,MVM join:2002-08-27 Eustis, FL | reply to Trpm Wow! Hi Rex, welcome to BBR/DSLR Another great talent shows up in this thread! Glad to see you here!!  |
|
 Trpm
join:2003-10-11 Louisville, KY
| reply to eburger68 It's a tough call between ABetterInternet and CoolWebSearch for 1st place, but here it goes.
CoolWebSearch (HomeSearchAssistant) ABetterInternet (Aurora) IBIS Websearch/Wintools SearchMiracle/Elitebar 180search Assistant New.net GAIN OfferCompanion Hotbar WhenU Save Download Accelerator Plus Weatherbug Tracking cookie (Doubleclick)
Rex |
|
  keith2468 Premium,MVM join:2001-02-03 Winnipeg, MB
| reply to eburger68 1. CoolWebSearch (HomeSearchAssistant)
2. WhenU Save!
3. ABetterInternet (Aurora) 180search Assistant SearchMiracle/Elitebar Tracking cookie (Doubleclick) New.net IBIS Websearch/Wintools GAIN OfferCompanion Hotbar
4. Download Accelerator Plus
I don't regard Weatherbug as malware -- by my definition.
I tested Weatherbug myself several months ago, and regardless of the fact that my KAV labelled it as adware, and regardless of the fact that an Ad-aware SE scan removed a registry entry required for its uninstall to work, because: (a) it came with a working un-install utility (that worked when I didn't let Ad-aware and KAV muck with it), and (b) because it didn't appear to do any more tracking than a browser with a tracking cookie, and (c) even after being on my machine for 12 hours I didn't see anything else install (so no unauthorized installs of other software).
Weatherbug may have changed since then. Since it doesn't cover weather in Canada, I uninstalled Weatherbug after my tests. -- (Virus&Hijacking FAQ + Submit suspected malware + Backups FAQ + Security FAQ TOC) |
|
  mViOkPe
@ev1.net
| reply to eburger68 To me, a snake is a snake no matter what size and shape. Even a tracking cookie has no place in my world as I refuse to let anyone profile my unique individual habits for any reason. Nor do I allow any process to take control of any aspect of my sys without my personal cfg.
So I ask; What difference does it make which order of severity you find them? They are all snakes. |
|
  CalamityJane Premium,VIP,MVM join:2002-08-27 Eustis, FL
| reply to miekiemoes Re: Welcome miekiemoes!
said by miekiemoes :Still trying to find out how this board works. So are we! {just kidding but the custom board features can be a challenge} If you ever need help or have a question feel free to click on my name and send me an IM 
For those here who don't know her, miekiemoes is an extremely talented spyware removal specialist and researcher (and a very nice lady)! We're honored to see you here  -- It takes a disaster to make a woman out of a female Gladiator Security Forum Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
  miekiemoes Premium join:2005-07-19 | reply to CalamityJane My pleasure. Still trying to find out how this board works.  |
|
  LoPhatPhuud Premium,VIP,MVM join:2002-01-06 Albuquerque, NM
·Comcast
·Qwest.net
1 edit | reply to eburger68 Re: Informal Adware Risk Survey
Aurora, CWS,and Elitebar, to me, are real close. I would say the persistance award for being the biggest PITA for the longest time goes to CWS.
Anyway, here is my ranking...
ABetterInternet (Aurora)
CoolWebSearch (HomeSearchAssistant)
SearchMiracle/Elitebar
IBIS Websearch/Wintools
New.net
180search Assistant
WhenU Save!
Hotbar
GAIN OfferCompanion
Weatherbug
Download Accelerator Plus
Tracking cookie (Doubleclick) -- When angry count four; when very angry, swear.
Microsoft MVP Windows-Security 2005
Gladiator Security Forum
|
|
  AMD1-1
@65.170.x.x
| reply to wng_z3r0 all of these items are direct intrusions on a personal computer.
aren't you the one screwing around on the ADVANCED MICRO DEVICES support website that tried to remove something from a compromised computer and you replied that you did not need supervision?
i think you are.
you sure get around. |
|
  quietman7
@va.us
from: CalamityJane 
| reply to eburger68 OK. Here is my two cents starting with the worst to least offender!
CoolWebSearch (HomeSearchAssistant) ABetterInternet (Aurora) SearchMiracle/Elitebar IBIS Websearch/Wintools 180search Assistant New.net WhenU Save! GAIN OfferCompanion Hotbar Download Accelerator Plus Weatherbug Tracking cookie (Doubleclick) |
|
  CalamityJane Premium,VIP,MVM join:2002-08-27 Eustis, FL | reply to miekiemoes Welcome miekiemoes!
[OT] miekiemoes, Welcome to Broadband Reports (aka DSLReports...DSLR)
Nice to see you here Thanks for your input. |
|