Scumware, plain and simple.

ByMike McBride Reading Time: 1 minute

One of my users got hit with spyware today. It seems they went to a website that used either an ActiveX or popup javascript to drop an .exe file in their Temp folder at 8:59AM. This .exe then went to work and by 10AM his PC was infected with eZula, eXact search, WhenUsearch, MaxSpeed, Bargain Buddy, and about 10 other spyware/adware programs. I was able to get it clean after a few hours of work, I think, thanks to a combination of a lot of Googling, AdAware, Spybot Search and Destroy, and the background info provided by TrendMicro on the original culprit, WinWildApp, which in turn helped me find the file and process that was restarting itself and downloading new stuff as soon as I tried to put it back on the internet!

Now I have to figure out what IE or other setting let this f#$%^r get downloaded in the first place, and how that setting got overlooked or changed. Needless to say, I am not a happy camper!

By the way, the fact that one of the very first popup ads these wonderful little programs brought up on his PC was a warning that he had been infected with spyware and a link to a cleaner made me even angrier!

Share with your friends!
LinkedInBlueskyMastodonThreadsRedditBuffer

Similar Posts

  • I hate magazine trials

    ByMike McBride Reading Time: 2 minutes

    Yes it’s true, I really do hate trial subscriptions that tech magazines seem to give away to everyone. In my former work life, there was something that I had signed up for using my home address rather than my work address. I don’t even remember what it was but whoever I gave that address to,…

  • Upgrading

    ByMike McBride Reading Time: 1 minute

    It seems that this attempt at upgrading to Movable Type version 3.32 over at the child abuse site seems to have worked. I posted an entry and a test comment without running into the Pre-Save error I was getting the last time I tried to upgrade. I think uploading the whole package instead of trying…

  • |

    Linked: The Future of Remote Work is the Opposite of Lonely

    ByMike McBride Reading Time: 2 minutes

    Unfortunately, there are a lot of people out there scaring people into thinking that if they don’t get back to the office, they’ll have a very lonely life with no friends. After all, most adults make most of their friends in the workplace nowadays. I know I’ve made plenty myself. But, part of that is because we spend so much time in the office, and nowhere else, that we struggle to maintain any relationships outside of work.

    Who has time? Between our 9-10 work day, another hour commuting, and all the extra work we do at night and on weekends, what time are we going to spend with other people?

    It doesn’t have to be that way though. Many of us can get our work done from elsewhere, and spend more time in a location that is more conducive to keeping in touch with our friends. That’s the ultimate promise of remote work, and something that employees, and employers, should be considering when we think about what our office policies are going to look like.

  • Color me surprised

    ByMike McBride Reading Time: 1 minute

    Yes, it’s true. I was completely oblivious to the fact that my wife had turned what I thought was a small get-together with Andy and Kristen into a surprise early birthday party for me. I was, in fact, quite surprised to see a handful of friends already at the Clay Cafe when the 4 of…

  • Busy, busy..

    ByMike McBride Reading Time: 1 minute

    I’ll be over here most of today, leafing through the latest Microsoft updates, 7 total, 2 critical. Then I’m going to go over here and check out a spellchecker Firefox extension, thanks to a recommendation from Geek News Central. In between, I’ll be helping set up a PowerPoint presentation for a meeting, dealing with some…

  • The other thing..

    ByMike McBride Reading Time: 2 minutes

    The other thing I need to figure out is about using Outlook to forward email. We don’t have an Exchange Server so I can’t just forward it at the server level, I have to leave my PC running with Outlook open. (Locking down the PC, naturally) Then I use Rules to simply forward all the…

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)