Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Voting Results = XP Antivrus hits?

by r. proffitt Former Forum moderator Nov 5, 2008 8:42AM PST

Anyone notice that most of the hits on Votings Results on google.com (try MA VOTING RESULTS) and more than a few of the first ten hits gets you sites that attempt in infect your machine?

Now my real question. How did they get such great rankings?
Bob

Discussion is locked

4 Posts
- Collapse + Expand Details
- Collapse -
No, not here
by jahn Nov 5, 2008 2:27PM PST

The first ten hits show clean with Dr Web and Finjan (real time scans), and I had no adverse reaction when I accessed the sites. But, I have scripts blocked in Firefox with the NoScript add-on.

I believe Google ranking is based on recent searches. No doubt there would be many election result searches on/immediatetly after election day.

- Collapse -
Any 'crazymonkey.com' hits on your page? See picture.
by r. proffitt Former Forum moderator Nov 5, 2008 7:21PM PST
- Collapse -
Yes,
by jahn Nov 7, 2008 10:07AM PST

crazymonkey was third or fourth on the list. When I went to that site a .swf tried to load but was blocked by NoScript. I chose not to let it load and moved to the next site on the list. Is that the site you think is/was infected? It still shows clean when scanned by Dr Web and Finjan.

- Collapse -
Hi, Bob! I Noted That the XP2009/AV2009 Brastk Includes
by tobeach Nov 5, 2008 3:13PM PST

re-directs to Phished(?) Google site via toolbar addition. From the description changed & created files:

o [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
+ Enable Browser Extensions = "yes"
+ Search Bar = "http://www.google.com/ie"
o [HKEY_CURRENT_USER\Software\Microsoft\Security Center]
+ AntiVirusDisableNotify = 0x00000001
+ FirewallDisableNotify = 0x00000001
+ UpdatesDisableNotify = 0x00000001
(in all 4 internet zones)

Also: Registry Values were modified:
o [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
+ Default_Search_URL = "http://www.google.com/ie"
+ Search Page = "http://www.google.com"
+ Start Page = "http://www.google.com"
o [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search]
+ SearchAssistant = "http://www.google.com"

Nasty little devil!! Grin Sandy

Back to Spyware, Viruses, & Security forum

CNET Forums

Operating Systems
Software
Electronics & Gadgets
Hardware
Tablets & Mobile Devices
General Help
Brand Forums
Roadshow Autos
Off Topic

Other Forums

Forum Info