| Mission | Technology |
| Computer's & Government   |
|
Privacy & Security  |
| Bo's Microsoft Bug of the Month |

 

| Computer Security Alerts |
|
Help & How To's |
Bo's Internet |
|
Bo's News & Reviews |

Home Browsers Microsoft Office 97 Site Search Windows

| Security | Freeware | Freeware by CategoryLatest Virus Info |

All You Ever Wanted To Know About Web3000


Windows links
     Bo's Got Windows?
     Windows Tips Index I
     Windows Tps Index II
     Windows Me Tips Index I
     Win Me Tps Index II
     Windows XP Info
     Windows FAQ
     Windows Error Messages and Meaning

How Web 3000 Works:

Warning: Registering software embedded with Web3000 does not ensure the software will stop transmitting information. If programs containing Web3000 are uninstalled incorrectly, severe problems may occur. Web3000 replaces winsock32.dll and possibly other Windows system files. To remove Web3000, see "Removing Web3000" (below).

About Web3000: www.web3000.com

Web3000 Ad Network provides an ad-serving component to software developers. It's use is similar to Aureate and Conducent Timesink: Integrating the component into software turns it into adware.

"As users install your product they are connected to the Web3000 Ad Network. The Web3000 Ad Network ad component runs independent of your software. The ad component allows the Web3000 Ad Network to serve users advertising in their Browser whenever and wherever they are on the Internet. Marketing messages are delivered via browser headlines, splash screens, status bar messages, opt-in email newsletters and installation offers."

Although Web3000 is on Steve Gibson's Index of Known Spyware grc.com/oo/spyware.htm, it's never been investigated for compliance with his Code of Backchannel Conduct grc.com/oo/cbc.htm. Transcom's Beeline, a program that includes Web3000, is also on that list. As is the problem with many applications, there are simply too many programs containing Web3000 and too many updates to those programs to fully investigate their "spyware" properties. The included GRC newsgroups posts address some of the Code of Backchannel Conduct issues for some Web3000-embedded programs

Return to index

Removing Web3000  

Warning: Do not use AD-aware to remove Web3000 without first removing the host software. Web3000 replaces wsock32.dll (C:\Windows\System\Wsock32.dll) and possibly other Windows system files. These will not be restored if AD-aware is used first. By default, users of Windows Millennium, may be protected. Windows Me stores files in protected form. The System File Protection (SFP) prevents a user from installing software that might make the operating system unstable. To learn more about SFP see my Windows Millennium Help and How to page.

Keep Windows Me safe with System File Protection

First figure out which software installed is using Web3000, then uninstall that software using the Windows Control panel, add/remove software window. This should also uninstall most of Web3000 also, and restore the Windows files that were replaced. Then run Lavasoft's AD-aware utility www.lavasoft.de to clean up the loads of junk left behind by Web3000.

If the software title isn't listed in the Windows Control panel, add/remove software window, try reinstalling it. This may force it into the list. Then uninstall it as outlined above, then run AD-aware. If you can't get the software host to show up in the uninstall window, contact Tech Support for the particular program for exact directions on removing it, including Registry keys and all files.

Before installing any software it is always a good idea to install and run some kind of program installation monitor. In this way you will know what was installed and where. If you should need to completely remove the program, at least you will know where everything is so you can be sure it is completely gone. Norton Utilities SnapShot and Registry Tracker do a good job at this. McAffee's Nuts-n-Bolts Image forge also is good. System Mechanic's System Snap is a very good one. I know, you are saying, "Come on Bo, there must be a freebie somewhere that can do the same thing". Ah, you know me to well! Bo says, why pay for it if you can get it for free? And, sure enough, just such a program has shown up. Get PC Magazine's InCtrl5 v1.0 to monitor changes made by install programs  Armed with this, and Add-Aware you will never be stymied by a poor uninstall again.

Return to index

SpyWare Eradicators

There are several tools available that let you detect and remove Spyware from your system. We have picked the best of them and listed them in this section with a description, a screenshot and links to the download and home page of the developer. Click on the product name for a detailed description.

Of course no security for you Internet connected PC can be complete with out a good firewall.


Ad-aware 6.0
With Ad-aware 6.0, maintain a higher degree of privacy while you surf the Web. This software removes tracking devices from your computer's RAM, registry, hard drive, and external storage devices.

Visit LavaSoft

Ad-aware Standard Edition is THE award winning, free*, multicomponent detection and removal utility that has consistently lead the industry in safety, user satisfaction, support and reliability.

 

Ad-aware 6 Standard Edition

Full install

RegHance 2.12

Spybot

Spybot - Search & Destroy can detect and remove a multitude of adware files and modules from your computer. Spybot can also clean program and Web usage tracks from your system, which is especially useful if you share your computer with other users. Modules chosen for removal can be sent directly to the included file shredder, ensuring complete elimination from your system. And for advanced users, it allows you to fix Registry inconsistencies related to adware or mailicious program installations. The handy online update feature ensures that Spybot always has the most current and complete listing of adware, dialers, and other uninvited system residents.

Version 1.2 adds a variety of new and updated features, including an immunization option that allows you to block many spyware downloads before they get to your computer, and improved detection mechanisms for morphing files.

Download Now
Free download 3.5MB


SpywareBlaster v1.1 [447k] W9x/2k/XP FREE


Click image to
enlarge

SpywareBlaster doesn't scan and clean for so-called spyware - it prevents it from being installed in the first place. It achieves this by disabling the CLSIDs of popular spyware ActiveX controls, and also prevents the installation of any of them via a Web page. This allows you to run Internet Explorer with ActiveX enabled, but it will never download or even prompt you for any of the known ActiveX controls. All other Active-X controls or plug-ins will work fine. The SpywareBlaster database contains information on these known spyware ActiveX controls, and can be updated with the click of a button. The application window displays a list of all controls that it is able to detect (this is NOT a list of what was found on your computer). The program cannot detect if you have any of the known objects already installed, but if you do, they will be disabled. SpywareBlaster has no documentation and does not provide any details as to why those ActiveX controls are considered to be spware - most of them appear to be advertising- related, though. Get it at:  http://www.mywebattack.com/gnomeapp.php?id=105693


new Spychecker
Try a little desktop tool to access the Spychecker database from your system tray

Silencer
A different approach to "silence the mothership" by BloatBusters ...


ZoneAlarm

Basic PC Protection

Zone Labs Home

 

Powered by the same core technology as our award-winning ZoneAlarm Pro, ZoneAlarm provides solid PC protection for the home user. It's free* for personal and non-profit use (excluding government and educational entities) - or just $19.95 for business users.

Download FREE ZoneAlarm Now!
This is the Freeware Version

A free personal firewall that allows you to regulate any software that uses the internet, it can be used to block spyware communication ... Unlike regular Firewall's, which are sometimes hard to use, ZoneAlarm takes a somewhat different approach. While it does what a good firewall is supposed to do (Keeps intruders from getting at your data) it also keeps programs from accessing the Internet. If they can't get out, they can't cause you any problems. And it is a snap to configure and use. Try it for yourself.

 


Aureate/Radiate DLL Remover
Made by Radiate, this will remove all Aureate/Radiate spy files ....

No-Aura
Fools Radiate ad servers by using the Windows host file ...

Brodcast Removal Utility for Windows
Removes the Mattel Interactive bradcast utility...

Found a broken link, or a link that sends you to a site not expected? Click here and let me know about it.

Return to index

If you wish to explorer this new Trojan techneque, this is where much of my information came form. It works for me, it will work for you too. Find more info here:

http://www.spychecker.com/spyware.html

Read the official definitions for Spyware and Adware from Whatis.com

Steve Gibson's site, the author of OptOut

The SpyWare Watch There're Brits, but pretty good blokes mate.

Voice of the Public.com

Back Orifice Detection Program 

This handy freeware scans your hard drive to make sure it's free of Back Orifice, a tool that allows outside users to control your system remotely. If this detector finds the offending program on your PC, it will prompt you to remove it. Download Now

For more information, check out these great resources:
Courtisey of SpyCheckere.com

GRC.com
The Trouble With Advertising-Supported Software
Adware, Badware & Spyware Profiles
Deja Usenet discussions about spyware
The Code of Backchannel Conduct

Found a broken link, or a link that sends you to a site not expected? Click here and let me know about it.

Top 3 Freeware Firewalls:

1.Tiny Personal Firewall
This handy application gives you some control in determining how your applications transmit and receive data from the Web. It has three security levels that offer high, medium, and low security. If you're not sure which to choose, you don't have to worry: the program can also operate in learning mode, letting you decide to deny or accept data in each situation. You can then establish rules to determine how you want to deal with similar situations in the future. The program can also check for digital signatures and it can restrict applications to certain ports or destination IP addresses. You can also create reports of all intrusion attemps.
http://www.pcworld.com/downloads/file_description/0,fid,8051,00.asp or
Author: Tiny Software | Version: 2.0.15 | File Size: 1417KB | Price: Free |
Operating System(s): Windows 9.x, Windows Me, Windows 2000, Windows XP, Windows NT


 
2.ZoneAlarm (Our Personal Favorite)
If you have an "always-on" connection with a permanent IP address, your PC is especially vulnerable to hacker attacks. This free utility offers you some protection. You can block uninitiated and unwanted traffic, even while your PC is unattended or while you're not using your connection. You can also limit your exposure by specifying which applications can access the Internet. This update lets you stop e-mail-borne Visual Basic Script worms, such as the "ILove You" virus.
Note: This file is free for personal use; for business use it is $19.95.
http://www.pcworld.com/downloads/file_description/0,fid,7228,00.asp or
Author: ZoneLabs | Version: 2.6.362 | File Size: 2924KB | Price: Free
 
3. Sygate Personal Firewall
If you're concerned about unauthorized users accessing data on your PC, this program can give you an added line of defense. The program features a number of security levels that alert you of possible
intrusion. You can configure it to alert you of unauthorized activity but still ignore inbound packets that you specifically request, such as Web pages or file downloads. You can also use the program in tandem with another firewall, to add an extra level of security. The program can create reports of all Internet activity. You can run it automatically when Windows loads or you can launch it from its icon in the system.
http://www.pcworld.com/downloads/file_description/0,fid,8132,00.asp or Author: Sygate Technologies

What is spyware?
Also known as "adware," this hidden software program transmits user information via the Internet to advertisers in exchange for free downloaded software.

What if you could download for free a robust application that allowed you to do almost everything that an expensive, brand-name program did? In exchange for having this incredible application program for free, all you have to do is give your name, address, phone, e-mail, and some other general information. Sounds great, doesn't it? But, what if your personal information was also stored elsewhere on your hard drive, and in this instance, routinely transmitted your personal data via Internet back to advertisers in exchange for more advertising? Now we are talking about spyware, aka adware.

The Anatomy of Spyware
Spyware applications may generate pop-up ads, hijack browser home pages, redirect Web searches, steal Web traffic via DNS poisoning, track Internet activity, and steal personal information, posing a serious security threat to your network. This quick-reference chart looks at infection methods, signs of infection, spyware components, and common types of stolen information, as well as outlining spyware removal techniques and prevention measures.

Different forms of these types of parasites and the list is growing every day:

Snoopware. This software is virtually undetectable, costs under $100 and allows real-time monitoring of computer usage, including reading e-mail and screen shots of documents as they are prepared. For an example of what snoopware can do, take a look at the numerous features of the $100 WinWhatWhere Investigator software. This inexpensive software has the ability to invisibly monitor and record all computer activity including keystrokes.

KEYSTROKES -- Logs every keystroke as it is pressed. It also works out the backspaces, arrows, delete keys and other edits to display an easy to read final output. Investigator records keystrokes and window information in the local language of the monitored computer.

SCREEN CAPTURE -- Provides screen shots of the computer monitor, and can save snapshots or send these to a remote location.

URLs -- It stores hyperlinks to visited Web sites. Clicking on the link returns the monitoring individual to the visited site.

WINDOW CONTENTS -- Retrieves the text content of many types of windows, including incoming e-mail and dialog box contents, and allows you to recover user passwords.

WEBCAM -- Provides images of who was sitting at the computer.

KEY PHRASE ALERTS -- Watches for phrases and words typed or appearing in Windows in real time. When the phrase is detected, the software will immediately send a notification e-mail and can include data from previous days, including previous e-mails.

STEALTH E-MAIL -- Sends the collected data silently and invisibly from the monitored computer. The data arrives as a standard e-mail message with the data contained in an attachment.

FILE ACTIVITY -- Reports on files being moved, renamed, copied and deleted.

HIDE & SEEK -- Randomly renames and moves itself on the installed computer. It cannot be found by searching for a file name.

REMOTE INSTALLATION -- Generates an executable file that will install and start Investigator using pre-set parameters on a remote target machine.

For more information about snoopware, visit www.winwhatwhere.com, www.trisys.com, www.cyber-snoop.com or www.spectorsoft.com.

Return to index

Thanks for Visisting
Bo

Found a broken link, or a link that sends you to a site not expected? Click here and let me know about it.

Questions and answers submitted to Bohunky0 are the property of Blaisdell's Little Corner of the Web and are not open for negotiation.

Attention Telemarketers:

I do not allow organizations to use my name or to contact me to make solicitations other than as permitted in my Junkbusters Declaration.

Version Dec 7 Copyright © 2001 Larry Blaisdell