Malware

TheMSsForum.com: The Microsoft Software Forum

Despite having installed the firewall, and spysotfware
such as Ad-Aware 6.0; Spywareblaster; cwshredder; Spybot
S&D; xp-Antispy I am not able to get rid of something
changing my IE search page, my IE homepage and my IE
local machine search page. In addition I do not know what
to do to avoit two files to penetrate my PC: 1)
Class3SoftwarePublisher.crl -
http://crl.verisign.com/Class3SoftwarePublishers.crl; and
2) Class3CodeSigningCA2001.crl -
http://crl.verisign.com/Class3CodeSigningCA2001.crl

Could you help me?

Thanks
Top

Re: Malware by S

S
Mon Apr 19 06:11:49 CDT 2004

If no software can clean up your system and you have no clue, reformat and
rebuild it, installing full set of updates first. Restore documents from
backups and do thorough AV check, disable all macros in Office docs.

As for the CRLs, they are certificate revocation lists and generrally are
harmless. However, if malware manipulates your PKI trust, it will
potentially open the route to more malicious code - thus, follow the above
suggestion.

--
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-

"Sebastien" <anonymous@discussions.microsoft.com> wrote in message
news:0d8301c425f5$7e641540$a401280a@phx.gbl...
> Despite having installed the firewall, and spysotfware
> such as Ad-Aware 6.0; Spywareblaster; cwshredder; Spybot
> S&D; xp-Antispy I am not able to get rid of something
> changing my IE search page, my IE homepage and my IE
> local machine search page. In addition I do not know what
> to do to avoit two files to penetrate my PC: 1)
> Class3SoftwarePublisher.crl -
> http://crl.verisign.com/Class3SoftwarePublishers.crl; and
> 2) Class3CodeSigningCA2001.crl -
> http://crl.verisign.com/Class3CodeSigningCA2001.crl
>
> Could you help me?
>
> Thanks


Top

Re: Malware by N

N
Mon Apr 19 15:34:03 CDT 2004

In article <0d8301c425f5$7e641540$a401280a@phx.gbl>,
anonymous@discussions.microsoft.com says...

> Despite having installed the firewall, and spysotfware
> such as Ad-Aware 6.0; Spywareblaster; cwshredder; Spybot
> S&D; xp-Antispy I am not able to get rid of something
> changing my IE search page, my IE homepage and my IE
> local machine search page. In addition I do not know what
> to do to avoit two files to penetrate my PC: 1)
> Class3SoftwarePublisher.crl -
> http://crl.verisign.com/Class3SoftwarePublishers.crl; and
> 2) Class3CodeSigningCA2001.crl -
> http://crl.verisign.com/Class3CodeSigningCA2001.crl

> Could you help me?

After following Mr. Pidgorny's advice, assuming that you can't get rid of
the browser hijacker using some tool such as CWShredder, make sure that you
know how to secure your browser against unwelcome guests. Firewalls and
adware killers can't stop your browser from making requests, or acting on
remote commands to execute code, if your browser permissions are so
promiscuous as to allow execution of code without warning you first.

Yes, it is a pain to surf the web when MSIE keeps asking if you want to
allow code to run. But it is a worse pain to clean up the mess when the code
is executed automatically, and it turns out to be malicious.

--
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint
Top