How Do RC Sites Morph to Porn?
|
|
Thread rating:  |
Tom Johnson - 15 Feb 2004 08:44 GMT An earlier posting (RE: AMA and Porn sites) brought to mind a problem I had a few weeks ago. I had book marked a Webpage on gaming with the Microsoft Combat Simulator for future reference. A few days later I clicked on the link and it led to a porn site, in spite of having the correct address displayed for the original site. It was impossible to enter the original webpage any longer. It always went back to the porn site. The only thing I could do was to delete the link. I have since lost the page for the game forum and tips.
On another occasion a fellow club member submitted a list of links on various RC topics for publication in our on-line club newsletter. After the list was published I got a note back from a member telling me that a giant scale pylon racing link had led to a porn site. This was very disturbing because our newsletter is sent out to a few children who are club members too.
I have no idea how this happens. I have the latest version of Norton Anti-virus, and my PC had just been in the shop for a tune up. I don't think the morphed links came from my computer, a friend had the same problem on his PC and the same links morph on him.
Is there anyone out there who has heard of this happening, know how it morphs, know how to stop it, know how to avoid it? I need to find out before the next issue of our newsletter comes out in a couple of weeks. It is a shame that a wholesome activity like RC models becomes polluted with this trash.
I can imagine the humorous responses this posting might generate (I hate to spoil my own fun...like... it is bad enough that my planes morph back into balsa sticks when I am not looking), but this is a serious problem.
Thanks,
Tom
Frank - 15 Feb 2004 09:06 GMT Spyware maybe? Do you run spyware software, like Adaware or Spybot? There are spyware now that can hijack your browser.
> An earlier posting (RE: AMA and Porn sites) brought to mind a problem > I had a few weeks ago. I had book marked a Webpage on gaming with the [quoted text clipped - 31 lines] > > Tom W4JLE - 15 Feb 2004 09:45 GMT Neither of the programs you mention do this.
It is simply a URL being hijacked. A google search will explain it all.
> Spyware maybe? Do you run spyware software, like Adaware or Spybot? There > are spyware now that can hijack your browser. Frank - 15 Feb 2004 18:23 GMT What I meant is that these programs remove spyware. Adaware recently removed malicious little hijack that prevented me from visiting security related websites like Symantec and McAfee.
> Neither of the programs you mention do this. > > It is simply a URL being hijacked. A google search will explain it all. > > > Spyware maybe? Do you run spyware software, like Adaware or Spybot? There > > are spyware now that can hijack your browser. Jim Lilly - 15 Feb 2004 11:54 GMT Tom,
> I have no idea how this happens. I have the latest version of Norton > Anti-virus, and my PC had just been in the shop for a tune up. Some of those exploits are fixed by keeping your PC updated with MS' latest patches.
Another good tool is IE-SPYAD (Internet Explorer Restricted sites list) available at http://www.staff.uiuc.edu/~ehowes/resource.htm
Here's a few more good security ideas....
1) Get an anti-trojan program. I recommend TrojanHunter 3.8...... http://www.misec.net/trojanhunter/
2) Get an anti-spyware program. I use SpyBot Search & Destroy.... http://spybot.eon.net.au/
Another is Ad-Aware 6.x....... http://www.lavasoftusa.com/news/20030127.jsp
3) Keep your 'hosts' file updated, info at...... http://www.smartin-designs.com/
Also....... http://www.staff.uiuc.edu/~ehowes/resource.htm#IESPYAD
4) Get the following great tool for backing up your WinXP 'registry' (similar is on the Win98 CD for that OS)......
ERUNT The Emergency Recovery Utility NT http://home.t-online.de/home/lars.hederer/erunt/
5) VERY cautiously, look over & try some of the tweaking suggested at...... http://www.blkviper.com/WinXP/servicecfg.htm http://www.markusjansson.net/exp.html http://www.techspot.com/tweaks/winxp_services/index.shtml
6) Some great WinXP web sites......
http://www.practicallynetworked.com/sharing/xp/network_protocols.htm
http://www.labmice.net/windowsxp/default.htm
http://www.kellys-korner-xp.com/xp.htm
http://www.aumha.org/kbwin2k.htm
http://www.wown.com/j_helmig/winxppro.htm
--
Jim L. https://sourceforge.net/projects/virtual-access/ Using - Virtual Access(OLR), ZAP 4.5, & WinXP Pro w/SP1
Tom Johnson - 15 Feb 2004 23:48 GMT Jim, http://www.lavasoftusa.com/news/20030127.jsp
This link for Ad-Aware does not work. I can find it on Google, I'm sure.
Thanks
> 2) Get an anti-spyware program. I use SpyBot Search & Destroy.... > http://spybot.eon.net.au/ > > Another is Ad-Aware 6.x....... > http://www.lavasoftusa.com/news/20030127.jsp Fred McClellan - 16 Feb 2004 00:51 GMT >Jim, >http://www.lavasoftusa.com/news/20030127.jsp > >This link for Ad-Aware does not work. I can find it on Google, I'm >sure. Try http://www.lavasoftusa.com/
Cheers, Fred McClellan The House Of Balsa Dust http://home.mindspring.com/~the-plumber
MJC - 15 Feb 2004 15:22 GMT A common method of porn spammers is to hijack another site. If the legitimate owner of the URL discovers this soon enough, it can be stopped. The problem is when the URL owner doesn't check his own site very often. Then, if no one complains to the owner, the hijack will continue until someone does notice it.
MJC
> An earlier posting (RE: AMA and Porn sites) brought to mind a problem > I had a few weeks ago. I had book marked a Webpage on gaming with the [quoted text clipped - 31 lines] > > Tom W4JLE - 15 Feb 2004 15:44 GMT There is a guy in Japan that has hijacked all the major sites at one time or another. For example Amazon was copied, porn links added and republished to the search engines with the expected result.
> A common method of porn spammers is to hijack another site. If the > legitimate owner of the URL discovers this soon enough, it can be stopped. [quoted text clipped - 39 lines] > > > > Tom Thomas Scherrer - 15 Feb 2004 18:56 GMT Get used to it.. The world is full of lame people that have a hobby that is to mess up the net. dont waste your time on all the crap, coz it is all over. just enjoy your fantistic hobby of RC planes and stuff.
Thomas Scherrer OZ2CPU www.webx.dk
xman Charlie - 15 Feb 2004 20:33 GMT I recall watching this dumb a.s rc'r, try taking off several times, with a bad c/g.
Went right up into the air, then nosed into the ground.
I laughed so hard, my tummy ached!!!
my 2 cents
> Get used to it.. > The world is full of lame people that have a hobby that is to mess up the [quoted text clipped - 5 lines] > OZ2CPU > www.webx.dk Doug McLaren - 15 Feb 2004 20:56 GMT | Get used to it.. | The world is full of lame people that have a hobby that is to mess up the | net. It's not so much that they want to mess up the net -- they're trying to make a buck off of it, and don't really care that what they're doing is immoral at best.
In any event, as a summary, there's three possible things that may have happened :
1) the web site let their address lapse (didn't pay for it), and somebody else bought it and pointed it at their porn site. Happens all the time. Usually doesn't get fixed, because the new person usually wants thousands of dollars to get the address back. This is morally suspect, but not illegal.
2) the web site or it's DNS server was hacked to point at the porn site. Or the registar was tricked into pointing things somewhere else. This is usually illegal, and likely to get fixed.
3) you've got some spyware on your box that is hijacking the connection. It's morally suspect, but not really illegal because in most cases you agreed to it by clicking on something that you didn't read.
My favorite program for removing these programs (I rarely get them myself, but others ask me to help) is SpyBot. Get it at http://www.spybot.info.
None of this stuff is restricted to R/C web sites. Sometimes it even happens to the big guys.
| dont waste your time on all the crap, coz it is all over. | just enjoy your fantistic hobby of RC planes and stuff. Oh, there's plenty of people who want to ruin the RC hobby too. Not usually for a buck, but instead because they want some sort of control over something, or don't agree with somebody else. But that's another matter entirely ... (and I'll not rant now :)
 Signature Doug McLaren, dougmc@frenzy.com `Conservative: A statesman who is enamored of existing evils, as distinguished from the liberal, who wishes to replace them with others.' -- Ambrose Bierce
CG - 15 Feb 2004 21:23 GMT I had the same crap - turned out to be spy bots as mentioned by the other guys. I think mine came in via e-mail or something.
Anyway, a good spyware program will probably solve your problem. Go to www.webroot.com and try Webroot. Works incredibly well for $29 a year. My sh.t's over and done with. The thing even murdered Microsoft's spybots as well. Did you know that Microsoft ships a spybot as part of Internet Explorer as standard with Windows XP? Called Alexa Toolbar.
Hope that helps.
> An earlier posting (RE: AMA and Porn sites) brought to mind a problem > I had a few weeks ago. I had book marked a Webpage on gaming with the [quoted text clipped - 31 lines] > > Tom Vance Howard - 15 Feb 2004 22:11 GMT there are two programs available for free that do the same thing. Spybot Search and Destroy, and Spyware Blaster. http://download.com.com/3000-2144-10194058.html This link will get you Spybot Search and Destroy http://www.javacoolsoftware.com/spywareblaster.html This link will get you Spyware Blaster.
 Signature Hugs are great gifts, one size fits all. Have you hugged a loved one today? Vance
> I had the same crap - turned out to be spy bots as mentioned by the other > guys. I think mine came in via e-mail or something. [quoted text clipped - 42 lines] > > > > Tom Frank - 15 Feb 2004 22:53 GMT Those two, and Adaware is free as well. I use Adaware and Spybot S&D. One always finds something the other skipped, which leads me to believe they both probably miss something, but there is only so much we can do, alas.
> there are two programs available for free that do the same thing. Spybot > Search and Destroy, and Spyware Blaster. [quoted text clipped - 54 lines] > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.588 / Virus Database: 372 - Release Date: 2/13/2004 Fred McClellan - 16 Feb 2004 00:51 GMT >I had the same crap - turned out to be spy bots as mentioned by the other >guys. I think mine came in via e-mail or something. [quoted text clipped - 4 lines] >well. Did you know that Microsoft ships a spybot as part of Internet >Explorer as standard with Windows XP? Called Alexa Toolbar. Close, no cigar.
Surf to http://www.safer-networking.org/ and use Search to find all the Alexa entries.
Read the question in the FAQs about Spy-Bot not removing the Alexa key in Internet Explorer.
Turns out it's a MicroSoft (legal) key pointing to an MS .dll and .html file which point to an MS page that redirects to the Alexa search engine.
The "Alexa" key in IE is not spy-ware.
Cheers, Fred McClellan The House Of Balsa Dust http://home.mindspring.com/~the-plumber
Tech Zero - 16 Feb 2004 03:49 GMT The voice of "CG" drifted in on the cyber-winds, from the sea of virtual chaos...
<snipage>
> The thing even murdered Microsoft's spybots as well. Did you know > that Microsoft ships a spybot as part of Internet Explorer as > standard with Windows XP? Called Alexa Toolbar. Alexa isn't Spyware, just potently abuse-able...
http://www.pestpatrol.com/PestInfo/a/alexa.asp
"Your use of \%windir%\web\related.htm, which helps you located pages related to those found in a search, transmits the complete url of your search result to both "msn.com" and "alexa.com". In some cases this could contain sensitive information such as username, password, session id, search string, "secret paths", and more. The vulnerability has been confirmed for Internet Explorer 6 on Windows 2000 and Windows XP with all Service Packs and hotfixes.
"The Alexa registry entry is created by an IE 6 install or installation of an IE Service Pack. It is nothing to worry about. It is simply a registry key that creates a menu item that points to a local web page that points to an MSN search page that uses the Alexa engine. The issue is the 'related links' feature of IE which appears as the 'Tools'/'Show Related Links' menu item, and a corresponding toolbar button if you added it (from the 'Customize...' link on the toolbar).
"If you have removed this registry entry, it will be restored the next time you add a service pack for IE. Its absence does not cause any harm to IE's operation; its presence causes no real benefit. If you use 'related links', IE will contact the Alexa servers to obtain information about other web pages which might be related. But you will not be spied on UNLESS you intentionally install other Alexa software, in which case PestPatrol will find and report a possible problem."
 Signature The Tech Zero, Maxwell C.G. Pollare
Tom Johnson - 15 Feb 2004 23:10 GMT Thanks for all the postings guys. This is a big help. I will get right on several of the suggestions here.
Tom
M Dennett - 16 Feb 2004 16:59 GMT Reminds me in some way of the time I wanted to dial up Bob Violett models, so tried a couple of obvious URL's before typing in www.violett.com .
I suggest you do not go to this link if porn sites offend you. Even if they do you shouldn't...
No, it is not the site for BVM jets.
Mike D.
|
|
|