Sunday, May 10, 2015

Malware Addendum

There is a site I utilize to watch tv not otherwise available. I have used it for a year or more with nary an issue. Then all of a sudden I started seeing popups that told me I needed to update Shockwave/Java/Media Player et cetera.
I know these type of popups are malware inducing, click "Ok" to install their update and you have installed a rootkit piece of malware. The nastiest kind.

And then I remembered that because I found some malware associated with Adblock, which is an extension for Google Chrome, I had removed it.

Ah ha.

Found an equivalent extension (AdKiller for Chrome) and installed it, voila - no more popup garbage.
Wear your protection out there.

Sunday, May 3, 2015

Shopglider Malware Odyssey

All of a sudden I was getting popups for "deals" at various merchants through some entity known as Shopglider. It had a nice X that I availed myself of...to no avail.
Over and over it would show up. Any double clicking on single click pads would cause it to open.

I tried everything I could think of:
Malwarebytes
Runscanner
Adwcleaner - I suspect this is garbage
TDSSkiller - a rootkit finding program.
My AV - a total system scan.

Still there.
What I had noticed was it seemed to be limited to Chrome. I do not run any extension with any other browser.

Every hit on Google regarding this were the same suggestions and many suggested paid programs so I suspect they were naught but "ambulance chasers," if not the instigators themselves.

I finally started to look at threads on Google+
Lo & behold I found something unseen up until this point. A suggestion that it was somehow piggybacked along with the Adblock Pro extension and by disabling and then re-enabling the extension would remove the malware.
I decided to just replace Adblock Pro with Adblock (an unrelated extension with a similar name) and so far - 2 days, have not seen a shopglider ad yet.

Malware blows.

"ShopGlider is an adware program that displays pop-up ads, advertisement banners and sponsored links within Internet Explorer, Firefox and Google Chrome.
Unfortunately, some free downloads do not adequately disclose that other software will also be installed and you may find that you have installed ShopGlider without your knowledge.ShopGlider is advertised as a program that displays coupons for sites you are visiting and competitive prices when you are viewing product pages at sites like Amazon. Though this may sound like a useful service, the ShopGlider program can be intrusive and will display ads whether you want them to or not.The ShopGlider adware infection is designed specifically to make money. It generates web traffic, collects sales leads for other dubious sites, and will display advertisements and sponsored links within your web browser.
ShopGlider it’s technically not a virus, but it does exhibit plenty of malicious traits, such as rootkit capabilities to hook deep into the operating system, browser hijacking, and in general just interfering with the user experience. The industry generally refers to it as a “PUP,” or potentially unwanted program."