PDA

View Full Version : 'been awhile...surfspy?..& stuff..



spybo
2007-09-04, 04:17
Hi folks.

Been a long time user 'till recently where the cable provider offered free Norton internet suite. They & others (aol) have warned for awhile now not to mix & use other stuff.

Anyway, runnin a ~ fresh vista basic right now & pretty sure my browsers have been hijacked & not detected by norton.

So, installed spybot, did a scan & some stuff come up, main one I'm wondering about is surfspy shows up
with - executable c:\windows\unInstall.exe?
Did a ggogle & there's a co. out there but dunno; wondering what it's about?

Got ~ 10 other entries but seem to be related ('cept one explorer) to mozilla.
casalemedia
doubleclick
Mediaplex
statcounter
thx

spybotsandra
2007-09-04, 10:48
Hello,

The SurfSpy entry is a false positive.

Doubleclick (and others like Advertising.com, Avenue A, Inc, CasaleMedia, Fastclick, Hitbox, Mediaplex etc.) are so-called tracking cookies. It is quite common for popular websites to employ such tracking cookies from third parties. They use them in order to track the users' surfing habits on their websites. As I said, these cookies are from third parties but they are employed by the site. There is a tool in Spybot-S&D: BrowserHelper, i.e. a bad download blocker for Internet Explorer. With this tool enabled such tracking cookies will be blocked.

Best regards
Sandra
Team Spybot

cromwell1230
2007-09-05, 10:39
I also have a detection of "SurfSpy" when i did a scan with Spybot S&D 1.4 about 3-4 days ago. I've read & came to know here in this forum that it's a false-positive. So how do I go about it? What I did was to do nothing...is it right? Or shall I instruct Spybot to ignore that entry just like when Spybot detects that my Windows Security & Firewall were disabled to avoid detection again later on? Or should I just wait for the next update and do nothing for the time being?

spybotsandra
2007-09-05, 11:13
Hello,

Please wait for the next detection update today - this should fix it. Beginning with the release of Spybot - Search & Destroy 1.4 there should be updates once a week. The official update is normally out on wednesdays.

Best regards
Sandra
TEam Spybot

spybo
2007-09-08, 04:16
Thx folks. :) Couldn't find (this) my post but found it in a roundabout way. Not sure what I did with that surfspy entry but good to know it's a false positive. Seems like alota that type stuff goes around.:rolleyes:

I'll hafta do another scan. Any prob if I told S/B to deal with that item?

Turns out my browser wasn't hijacked but ended & here:) & did read the stuff about Norton blowin steam about usin S/B so happy to be usin it again. Must be around 5 years now that I've used S/B.

spybo
2007-09-08, 21:46
Turns out I chose fix for the false hit on surfspy. Should I restore it? - executablec:\windows\unInstall.exe?

spybo
2007-09-15, 02:36
bump::red:

tashi
2007-09-15, 04:11
Hello.


I'll hafta do another scan. Any prob if I told S/B to deal with that item?


Turns out I chose fix for the false hit on surfspy. Should I restore it? - executablec:\windows\unInstall.exe?
Before or after your first post?

You can, which version of Spybot-S&D are you using?
Open Spybot Search & Destroy > Help > About. :)

spybo
2007-09-15, 05:25
Thx,

After my first post. Thought I left it but... I'll restore it (v1.4)

What is that win file for?

tashi
2007-09-15, 05:55
Hi there.

Hello,

The SurfSpy entry is a false positive.



As it pertained to your original question, the answer was 'false positive'.

Not sure why you would then go ahead and fix it.

Please update to Spybot-S&D version 1.5 and run another scan.


Spybot - Search & Destroy Version 1.5 Download (http://www.spybot.info/en/download/index.html)



Uninstall previous version (http://www.safer-networking.org/en/howto/uninstall.html)



Tutorial (http://www.spybot.info/en/tutorial/index.html)

spybo
2007-09-15, 06:56
As it pertained to your original question, the answer was 'false positive'.

Not sure why you would then go ahead and fix it.


Just some mistake.:red: Thought I had left it but when I checked again, it was fixed.:red: