[Full-Disclosure] Question about the new Xupiter toolbar

From: Richard M. Smith (rms@computerbytesman.com)
Date: 01/30/03

  • Next message: qobaiashi: "Re: [Full-Disclosure] LAFFING MY SOCKZ OFF" 
    From: "Richard M. Smith" <rms@computerbytesman.com>
To: <full-disclosure@lists.netsys.com>, "'Richard M. Smith'" <rms@computerbytesman.com>
Date: Thu, 30 Jan 2003 12:40:20 -0500

    Hi,

    Has anyone looked into this new Xupiter toolbar to see how it is being
    installed on people's computer? In particular is it using some IE
    security hole for the install or does it just use the standard ActiveX
    drive-by download mechanism?

    Here's more info about Xupiter from Slashdot:

    World's Most Annoying IE Toolbar
    Posted by michael on Thursday January 30, @09:02AM
    from the someone-will-surpass-it-soon dept.

    nautical9 writes "Following the same devious footsteps of the infamous
    Bonzi Buddy, Gator, and Comet Cursor "enhancements", Xupiter now has
    their own self-installing toolbar for IE. There are many claims that if
    you leave your security preferences at their default level, it will
    install itself without your express permission. And once on your system,
    it's gracious enough to reset your homepage to xupiter.com, forward all
    your searches to their search engine, download and automatically launch
    applications (like gambling applets), and blocks all attempts to set
    these back to normal. Removing it isn't trivial either - it
    automatically checks for updates upon reboot, where it constantly
    changes the registry settings it uses, making the jobs of spyware
    removal programs like AdAware or Spybot Search & Destroy much harder. No
    word yet if it collects and forwards personal data."

    http://slashdot.org/articles/03/01/30/1314236.shtml?tid=113

    Richard M. Smith
    http://www.ComputerBytesMan.com

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

    Relevant Pages

    • Re: How do I insert a square root sign?
      ... If Microsoft Equation Editor is not available, you may need to install it. ... (toolbar: A bar with buttons and options that you use to carry out commands. ...
      (microsoft.public.word.docmanagement)
    • Re: Add Macro to Toolbar in Word 2007
      ... some of which have been added to a toolbar (via ... I also have created some custom OL forms, ... and the other page on that web site referred to there. ... I am not sure if you can simply install Word 2003 in another folder once ...
      (microsoft.public.word.customization.menustoolbars)
    • Re: Customize the Toolbar
      ... opportunity to work on a Mac, and I'd like to continue using Eudora. ... when you install the Esoteric Settings), you get the option to set the ... Toolbar on Steroids also ...
      (comp.mail.eudora.mac)
    • Re: Internet explorer has been "modified"....
      ... > the toolbar, it's still there, in the list. ... Disconnect your system from the internet. ... also install all security related patches ... system to other networks and restore your backed up data. ...
      (comp.security.misc)
    • Re: HOW to DELETE XpressUpdate from CONTROL PANEL in WinXP [2]
      ... > A FREE method to uninstall xupiter... ... Make sure of these settings and nothing will install without you ... I've now switched from Ad-Aware to SpywareBlaster. ...
      (microsoft.public.windowsxp.general)