Free Republic
Browse · Search
News/Activism
Topics · Post Article

This thread has been locked, it will not receive new replies.
Locked on 12/13/2003 1:39:14 PM PST by Sidebar Moderator, reason:

By poster’s request, redirecting here: http://www.freerepublic.com/focus/news/825016/posts



Skip to comments.

Heads Up! Someone is posting xupitor spyware link; Don't open it!
1/27/2003 | self

Posted on 01/27/2003 8:09:44 AM PST by FBD

Heads up to Jim Rob and all.

I clicked on a link on a post here at FR couple of days ago, and accidentaly got xupitor.com spyware installed on my computer!

It looked harmless enough, and I thought I was going to a site to look at an article; but it changed my browser settings, tool bar, and added a bunch of "favorites", like online gaming sites, etc. Now, whenever I do a search, it directs me back to xupitor.com. This AM, I got some garbage, and a whole bunch of windows popping up behind my active window. My McCaffee Firewall starting screaming at me about a port attack...

Help from the savvy, as from what I can figure out so far, this is a hard program to get rid of. Heads up to all, and help requested.


TOPICS: Free Republic; Your Opinion/Questions
KEYWORDS: adaware; extenallinks; internetparasites; spybot; spyware; xupitor
Navigation: use the links below to view more comments.
first 1-5051-100101 next last

1 posted on 01/27/2003 8:09:44 AM PST by FBD
[ Post Reply | Private Reply | View Replies]

To: Jim Robinson; Admin Moderator; MeeknMing; All
I clicked on a post that had a link here at FR, to xupitor.com.

I didn't know anything about this!

Help!
2 posted on 01/27/2003 8:12:36 AM PST by FBD
[ Post Reply | Private Reply | To 1 | View Replies]

To: Formerly Brainwashed Democrat
look in your STARTUP for a program that keeps re-setting your internet home page.

I got one like that from a dump called hand[something] or another a few years back.

I deleted it every where but it still kept resettig my home page (after I rebooted) so I fugured it also but a program in the startup (which it did)

I responded by spamming them like you have never seen before and I like to think I am at least partially responsible for their demise...
3 posted on 01/27/2003 8:12:42 AM PST by Mr. K (all your TAG LINE are belong to us)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Formerly Brainwashed Democrat
Get AdAware software, it'll kill that spyware from Lavasoft. There's a free version.
4 posted on 01/27/2003 8:13:17 AM PST by egarvue (Martin Sheen is not my president...)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Formerly Brainwashed Democrat
Go here and download LavaSoft Ad-aware...it will get rid of the "spyware" crap from your PC.

http://download.com.com/3000-2094-10045910.html
5 posted on 01/27/2003 8:15:52 AM PST by New Horizon
[ Post Reply | Private Reply | To 1 | View Replies]

To: Formerly Brainwashed Democrat
Download a program called "Ad-Aware" (you can find it at download.com).

Run it. It will wipe all spy-ware off your PC, and it's easy to use.
6 posted on 01/27/2003 8:15:57 AM PST by That Subliminal Kid
[ Post Reply | Private Reply | To 1 | View Replies]

To: Formerly Brainwashed Democrat
Getting and keeping spyware off your computer
7 posted on 01/27/2003 8:17:38 AM PST by Sir Gawain
[ Post Reply | Private Reply | To 1 | View Replies]

To: egarvue; That Subliminal Kid; New Horizon
FYI, see my #7. AdAware hasn't updated in a while.
8 posted on 01/27/2003 8:18:48 AM PST by Sir Gawain
[ Post Reply | Private Reply | To 4 | View Replies]

To: Mr. K
I went into my control panel, and tried deleting it, it won't let me.

I did get the tool bar reset.
9 posted on 01/27/2003 8:19:58 AM PST by FBD
[ Post Reply | Private Reply | To 3 | View Replies]

To: Formerly Brainwashed Democrat
What post had the link?!
10 posted on 01/27/2003 8:22:41 AM PST by HairOfTheDog
[ Post Reply | Private Reply | To 2 | View Replies]

To: New Horizon
I'm half scared to click on an external link here at FR, now. But will check it out.

I wish I could find the post. I know the person posting it did it intentionaly, that's what really ticks me off.
11 posted on 01/27/2003 8:22:55 AM PST by FBD
[ Post Reply | Private Reply | To 5 | View Replies]

To: Formerly Brainwashed Democrat
I used ad aware till I found spybot.com It also is free.
12 posted on 01/27/2003 8:22:56 AM PST by shadeaud
[ Post Reply | Private Reply | To 9 | View Replies]

To: HairOfTheDog
I guess I will have to do a self- search, I was on FR quite a bit over the week end, so it's gonna be hard to find it.
13 posted on 01/27/2003 8:24:36 AM PST by FBD
[ Post Reply | Private Reply | To 10 | View Replies]

To: Formerly Brainwashed Democrat
God, I detest garbage like Xupiter.

I would recommend that you try Spybot Search & Destroy-it's freeware that will rid your system of more than just parastic web browser tools and ad-ware, but also potentially malicious cookies and registry entries. I've been using it for several months and found it to be invaluable.

Link is here - http://beam.to/spybotsd

14 posted on 01/27/2003 8:24:51 AM PST by andy58-in-nh
[ Post Reply | Private Reply | To 1 | View Replies]

To: New Horizon; That Subliminal Kid; egarvue; Formerly Brainwashed Democrat
Definitely look at the link in post #7 by Sir Gawain. Spybot Search and Destroy is far superior to AdAware. It is free also.
15 posted on 01/27/2003 8:26:16 AM PST by Bloody Sam Roberts (Sure wish we could use HTML down here.)
[ Post Reply | Private Reply | To 5 | View Replies]

To: Formerly Brainwashed Democrat
Download Ad Aware as per post #4 and be sure to also download (from left column front page) the sig file 942-24.9.2002. I had Xupiter, too and adding that sig file to my Ad Aware pretty much got rid of it.
16 posted on 01/27/2003 8:26:56 AM PST by Lady Jag (Googolplex Start Thinker of the Seventh Galaxy of Light and Ingenuity)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Sir Gawain
AdAware hasn't updated in a while.

I use ad-aware, but I noticed in the Sunday comics that one of them was promoting a free trial of adsubtract www.adsubtract.com . Second disclaimer. I have never tried adsubtract.

17 posted on 01/27/2003 8:27:13 AM PST by PAR35
[ Post Reply | Private Reply | To 8 | View Replies]

To: HairOfTheDog
I doubt it was done on purpose by the poster.
18 posted on 01/27/2003 8:31:26 AM PST by Sir Gawain
[ Post Reply | Private Reply | To 10 | View Replies]

To: Bloody Sam Roberts
Just downloaded Spyware. Hope I knew what I was doing!! (computer illiterate-just opened file, OK? or not?)
19 posted on 01/27/2003 8:33:34 AM PST by widowithfoursons
[ Post Reply | Private Reply | To 15 | View Replies]

To: That Subliminal Kid
> Download a program called "Ad-Aware"

Before you do that, try ZoneAlarm (zonelabs.com).
It's a software firewall.

If you upgrade to ZA Pro, it has more ad blocking.

Even the free version will tell you about every
bit of spyware trying to "phone home", as well
as every probe from the outside world (and if
you are on a broadband connection, there are any
number of crackers trying to zombie your PC).

Order of Battle:
1. Install Anti-virus sfw
2. Install Firewall sfw (or use hdw f/w)
3. Install Ad blocking sfw
20 posted on 01/27/2003 8:34:38 AM PST by Boundless
[ Post Reply | Private Reply | To 6 | View Replies]

To: andy58-in-nh; Sir Gawain; Bloody Sam Roberts
Thanks for the info guys, I'm going to the spybot.com site now.
Sure wish I could find the post by that jerk that I clicked on. grrr...
21 posted on 01/27/2003 8:35:03 AM PST by FBD
[ Post Reply | Private Reply | To 14 | View Replies]

To: Formerly Brainwashed Democrat
Just taking it out of startup doesn't work - I had to erase my computer (I ghosted it from a network image so that wasn't such a big deal). Xupiter burrows down into low-level registry files, even ad-aware won't remove it (though it claimed to, when I ran that).
22 posted on 01/27/2003 8:36:55 AM PST by nina0113
[ Post Reply | Private Reply | To 1 | View Replies]

To: nina0113
Spybot S&D should find the reg files. If not, run RegScrubXP after you run Spybot.
23 posted on 01/27/2003 8:38:14 AM PST by Sir Gawain
[ Post Reply | Private Reply | To 22 | View Replies]

To: Sir Gawain
I downloaded spybot for next time, but Ad-aware said it was removing the reg files, and xupiter came back a couple of reboots later anyway. We're running Win2K here, so I'm not sure RegScrubXP will work - again, since I can just move my data files to the network & re-ghost the machine, spyware is just an afternoon's inconvenience.
24 posted on 01/27/2003 8:47:26 AM PST by nina0113
[ Post Reply | Private Reply | To 23 | View Replies]

To: nina0113
RegScrubXP will work on 2000 and XP. It's the best. I have GoBack for problems that can't be fixed.
25 posted on 01/27/2003 8:48:57 AM PST by Sir Gawain
[ Post Reply | Private Reply | To 24 | View Replies]

To: widowithfoursons
Just downloaded Spyware.

You mean Spybot Search and Destroy I think.

Yes, just double click the file you downloaded to install it then go to the "settings" area on the left side of the window and you can configure it any way you want.

For now I would recommend only allowing it to "fix" the items in red that come up checked off after a search. The items in blue/green aren't absolutely essential to the running of the machine but you'll lose a lot of settings /cookies that you may want to keep.
Even if you do delete something you want back, the software makes automatic backups and you can go to "Recovery" to get them back. Good luck!

26 posted on 01/27/2003 8:50:54 AM PST by Bloody Sam Roberts (Sure wish we could use HTML down here.)
[ Post Reply | Private Reply | To 19 | View Replies]

To: Formerly Brainwashed Democrat
I spend my life and make my living dealing with this rubbish.

Assuming you're using a variant of Win98/Me, press the 3 finger salute JUST ONCE to bring up the task list. The only two items you absolutely need are systray and explorer, and maybe Rnaapp if you have dialup modem. The explorer isn't IE, it just has the same name. You'll likely find a dozen or more things. Cancel them one at a time, works for this session only.

To stop these permanently, type in msconfig in Start->Run. Just look at all the stuff under the Startup tab. Sometimes what it is is just a mystery.

Another utility is msinfo32, often perusing its long lists will tell you where it came from.

A site that has started compiling a list of these bad actors is answersthatwork.com. Look the the "Task List."

Well, this is a running start. Better yet, get yourself a CD of Knoppix Linux and give that a whirl. It runs from the CD without munging your disk, and its cheap. Try it, you might like it.

27 posted on 01/27/2003 8:52:20 AM PST by spudsmaki
[ Post Reply | Private Reply | To 2 | View Replies]

To: Sir Gawain; Formerly Brainwashed Democrat
I wouldn't assign any kind of blame on the poster either on the amount of information we have, which is NONE. :~D

FBD.... how are you so sure which link caused it if you can't remember the post where you clicked it? Or who it was? Or when it was? This thread is just not very helpful. Doing a self-search, finding out where and when the problem was, reporting it directly so the mods can kill the link, all those things would have been more helpful than the amount of time spent on this thread.

Carry on!!
28 posted on 01/27/2003 8:52:27 AM PST by HairOfTheDog (I am sorry I am so crabby this morning.)
[ Post Reply | Private Reply | To 18 | View Replies]

To: Bloody Sam Roberts
Well, I don't know how to do that. It just downloaded, and I hit "Finish". Am I scr*wed?
29 posted on 01/27/2003 8:56:52 AM PST by widowithfoursons
[ Post Reply | Private Reply | To 26 | View Replies]

To: Formerly Brainwashed Democrat
I got hit by this Xupiter menace also (WHAT a pain!). I thought I got rid of it, but I see it's still listed when I right-click my toolbar at the top of my IE 5.5 browser.
30 posted on 01/27/2003 8:57:33 AM PST by nutmeg
[ Post Reply | Private Reply | To 1 | View Replies]

To: Cacique; evilC; toupsie
FYI
31 posted on 01/27/2003 8:57:51 AM PST by nutmeg
[ Post Reply | Private Reply | To 1 | View Replies]

To: Formerly Brainwashed Democrat
I'm half scared to click on an external link here at FR, now.

If you're running Windows, you should be scared to click on a link anywhere. It is possible to destroy the operating system just by clicking on a malicious link.

32 posted on 01/27/2003 8:58:16 AM PST by HAL9000
[ Post Reply | Private Reply | To 11 | View Replies]

To: Formerly Brainwashed Democrat
If you want to find the thread with the deadly link, type [Ctrl]+[H] to see your history list. Scroll down the list and click on the threads that seem most likely.

BTW, what are you doing rummaging around the internet with a fire wall?

--Boot Hill

33 posted on 01/27/2003 9:00:23 AM PST by Boot Hill (February 1st)
[ Post Reply | Private Reply | To 13 | View Replies]

To: Formerly Brainwashed Democrat
Sure wish I could find the post by that jerk that I clicked on. grrr...

Same here! I have no idea where I picked it up from either.

34 posted on 01/27/2003 9:00:50 AM PST by nutmeg
[ Post Reply | Private Reply | To 21 | View Replies]

To: RaceBannon
FYI
35 posted on 01/27/2003 9:03:20 AM PST by nutmeg
[ Post Reply | Private Reply | To 1 | View Replies]

To: spudsmaki
And I should have mentioned, klez has gotten popular again. I've gotten a dozen emails in the last few days from legit sources that had it. I am using Norton Antivirus.

I definitely don't use Internet Exploder and Outlook Depressed.
36 posted on 01/27/2003 9:05:04 AM PST by spudsmaki
[ Post Reply | Private Reply | To 27 | View Replies]

To: Formerly Brainwashed Democrat
I'm half scared to click on an external link here at FR, now.

You should always be half-scared to click on ANY link. That's just common sense.
You might want to consider another browser, like Mozilla.
It can be configured to block pop-ups, doesn't have the scripting security issues IE does and it's FREE.
Unfortunately, it is a BIG download, so if you're on dialup, you might be out of luck. Even Phoenix, the smaller iteration is 6 megs.
Always check your status bar and verify where you're going next. Good luck. Oh, and Ad-Aware rocks.
37 posted on 01/27/2003 9:05:51 AM PST by dyed_in_the_wool (Screw the cheese eating surrender monkeys)
[ Post Reply | Private Reply | To 11 | View Replies]

To: HairOfTheDog
Sorry, but I know it was here. I recall clicking on the link, and it appeared harmless enough, when I opened it.
It was the only thing there, and I moved on to other posts.

I was also asking for help to get rid of it, and also a heads up. Some folks(like me!) aren't as 'puter savvy as some folks, (like you!) are.
38 posted on 01/27/2003 9:15:41 AM PST by FBD
[ Post Reply | Private Reply | To 28 | View Replies]

To: Boot Hill
I deleted my history list, as well as cookies, etc, trying to get rid of xupitor.

What am I doing rummaging around with a fire wall?

I don't know, I thought that was enough. I am on cable broadband.
So I need a router, or something, right?
39 posted on 01/27/2003 9:23:56 AM PST by FBD
[ Post Reply | Private Reply | To 33 | View Replies]

To: Formerly Brainwashed Democrat
A firewall doesn't generally protect you from clicking on links or downloading malicious software.

The only things that can protect you from common malware in that regard are:

  1. a more secure web browser
  2. a more secure operating system

Even then, you always have to be wary of where you click.

Indeed, compatibility with the most common software is a double-edged sword. As is "ease of use."

40 posted on 01/27/2003 9:29:48 AM PST by B Knotts
[ Post Reply | Private Reply | To 39 | View Replies]

To: nutmeg
I will find the thread I picked it up on, as I remember posting to it.

Just got done downloading SpyBot Search and Destroy.
Xupitor had loaded 61 files to my hard drive. Only one of them was visible. After reboot, looks like it's gone.
41 posted on 01/27/2003 9:54:27 AM PST by FBD
[ Post Reply | Private Reply | To 34 | View Replies]

To: Formerly Brainwashed Democrat
What kind of computer do you have and what system are you running. I had a problem with something my son put on my computer and I finally ran Restore and it's gone. It was so easy, after spending hours trying to find the darn thing and delete it.
42 posted on 01/27/2003 9:58:11 AM PST by Eva
[ Post Reply | Private Reply | To 9 | View Replies]

To: Formerly Brainwashed Democrat
FWIW: (According to my son)

Quote:

"To remove the Xupiter crap, you have to do a regedit and search and destroy on anything Xupiter.

Then, navigate to Windows\system32\Drivers\etc and open the Hosts file (the one with NO extension) with Notepad and change ALL the settings that refer to Xupiter and (I think, 3 others) to: 127.0.0.1 in place of the ip numbers that are there.

AdAware does NOT remove this Hijackware. In fact, since AdAware has NOT been updated, and will NOT be updated until the next version, it has been suggested to NOT use AdAware any longer, as it can remove some things that you actually need.

Just went thru this on a client's machine."

Endquote__________________________

43 posted on 01/27/2003 9:58:43 AM PST by Eastbound
[ Post Reply | Private Reply | To 1 | View Replies]

To: Sir Gawain
Thanks for the link to Spy Bot! I just got done running it, and looks like I got rid of Xupitor.

What kind of creeps would design stuff like that?

Never mind, I know what kind. It was a rhetotical question...thanks again!

I've got a lot to learn. I think I won't be doing any more online banking, however. Should I cancel my accounts online, or at least reset them?


FRegards,
FBD
44 posted on 01/27/2003 10:00:44 AM PST by FBD
[ Post Reply | Private Reply | To 8 | View Replies]

To: egarvue
AdAware removes the spyware junk from your system.
45 posted on 01/27/2003 10:03:12 AM PST by TheJollyRoger (Remember the Alamo.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: Eva
I've got a new machine with a Pentium 4, running Windows XP.
According to the gurus here, Windows isn't safe. So I'm going to check out Mozilla, etc.

See post #7 by Sir Gawain.

Spyware is embedded, I guess. Clicking restore doesn't get rid of it. After running the Spy Bot, it got rid of Xupitor.
It had 61 files on my hard drive, and only 1 was visible.
It's gone now.
46 posted on 01/27/2003 10:09:29 AM PST by FBD
[ Post Reply | Private Reply | To 42 | View Replies]

To: PAR35
I use it. Good program.
47 posted on 01/27/2003 10:12:51 AM PST by jude24
[ Post Reply | Private Reply | To 17 | View Replies]

To: dyed_in_the_wool; HAL9000
Thanks for the advice, and help.
48 posted on 01/27/2003 10:14:08 AM PST by FBD
[ Post Reply | Private Reply | To 37 | View Replies]

To: Rightly Biased
bump to self for later read at home
49 posted on 01/27/2003 10:50:47 AM PST by Rightly Biased (<><)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Formerly Brainwashed Democrat
You must not have gone back far enough with the Restore, because it got rid of all my problems.

I wouldn't worry to much about Windows. There are alot of anti-Microsoft people on FreeRepublic, but there are alot more who disagree. All the information about the latest problem said that if they had downloaded the Windows updates they would not have had a problem.
50 posted on 01/27/2003 11:09:09 AM PST by Eva
[ Post Reply | Private Reply | To 46 | View Replies]


Navigation: use the links below to view more comments.
first 1-5051-100101 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson