練習與鳴奏

防堵間諜程式！保護個人隱私！！

 

 
各位朋友：

剛剛我掃了一下毒，發現我電腦被植入了近五十個間諜程式。我是聽說過許多網站為了營利，會跟 spyware 專家或公司簽約合作、或付出 spyware 的使用權利金，向每一個訪問其網站的 user 電腦植入 spyware, 以搜集使用者個人資料，目的在於向使用者發送「更精確的廣告訊息」。這是非常要不得的侵害個人隱私的行為，我今天若不掃毒，恐怕還不會發現我在莫知其情的情況下、早就被植上了這麼多的間諜程式！

拜趨勢科技 PCcillin 2006 最新版核心程式及最新病毒碼之賜，我終於揪出了這些間諜程式、還鎖定了它們是來自於哪些網站。注意了，您一定也拜訪過以下這些網站（或其中部份）：real.com, realmedia.com, sohu.com, 3721.com, 163.com。我抓出來的完整清單列在此文最後一部份。

前兩部份則是對此間諜程式（Data Miner, 或稱 Tracking Cookie）的描述。

請各位若也有防毒軟體，勿忘更新至最新版後進行掃毒，將所有抓到的間諜程式手動＜永遠刪除＞；並將清單中的那些網站，盡量都列為拒絕往來戶，或去信向其表達嚴重抗議。清單中那些網站我從來都沒有主動拜訪過，都是那些跳出式瀏覽器視窗、那些不請自來的廣告信中夾帶的html或其他主動式程式，所帶來給我的；所以，也不妨在你的瀏覽器（至少 IE 有此功能，若無，你也可下載外掛程式以特別防堵跳出式視窗）設定「攔截」跳出式視窗。

（→可以下載 Google 工具列，即可自動攔截你一定也很討厭的那些跳出式視窗了）

祝各位電腦健康！人圓意滿！ ^_^

stone
Feb 1 2006  Wed  2:15pm  @Taipei

－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－

Data Miners(Tracking Cookies）間諜程式資料及網站清單：

●

COOKIE_3130

廣泛傳播 : No 
 
偵測報告 :   Low 
 

Description:

Data Miners (Tracking Cookies) are cookies that are used by two or more Web sites to track a user's Web habits for the purpose of providing the user with ads or other material that the user might be interested in.

Similar to adware, data miners can collect a user's information for a third party recipient.

This cookie is installed when you visit the following URL: "yimg.com"

 

Solution:

Minimum scan engine version needed: 6.810

Trend customers：

Keep your pattern file and scan engine updated. Trend Micro antivirus software can clean or remove most types of viruses. Certain viruses, such as Trojans, scripts, overwriting viruses and joke programs which are identified as "uncleanable", should simply be deleted.

All Internet users：

For a quick check-up of your PC, use HouseCall - Trend Micro's online virus scanner. This will check for viruses which may already be on your PC.
To keep your computer healthy by catching viruses before they have a chance to infect your PC or network, get the best antivirus solution available today. Trend Micro offers antivirus and content security solutions for home users, corporate users, and ISPs. To look through our entire product line, click here.

建立的描述:  Aug 17, 2004 

Copyright 1989-2005 Trend Micro, Inc. All rights reserved. Legal Notice and Privacy Policy

●

COOKIE_3182：

至少需要的掃描引擎版本 : 7.100

 
解決方案:

Important Windows ME/XP Cleaning Instructions

Users running Windows ME and XP must disable System Restore to allow full scanning of infected systems.

Users running other Windows versions can proceed with the succeeding procedure set(s).

Running Trend Micro Antivirus

Download and unzip the latest grayware pattern file and scan your system. Then, delete all files detected as COOKIE_3182.

－－－－－－－－

細節:

Data Miners (Tracking Cookies) are cookies that are used by two or more Web sites to track a user's Web habits by providing ads or other material users might be interested in.

Similar to adware, data miners collect a user's information for a third party recipients.

This cookie is installed when you visit the following URL:
statcounter.com

分析來自:  Pastor Benjamin Cruz 
 
●

COOKIE_3235  This cookie is installed when a target user visits the following URL:
casalamedia.com

COOKIE_6853  This data miner is installed on a system when an affected user accesses the following URL:
z1.adserver.com

COOKIE_3201  This cookie is installed when a target user visits the following URL:
belnk.com

COOKIE_3195(& 3196)  This particular cookie is installed on a system when an unsuspecting user visits the Web site http://revenue.net.

COOKIE_3190(& 3191)  This cookie is installed when you visit the following URL:
bs.serving-sys.com

COOKIE_3188(& 3189)  This cookie is installed when you visit the following URL:
Server.iad.liveperson.net

COOKIE_3182  This cookie is installed when you visit the following URL:
statcounter.com

COOKIE_3163  This cookie is installed when you visit the following URL: "zedo.com"

COOKIE_3130  This cookie is installed when you visit the following URL: "yimg.com"

COOKIE_3117  This cookie is installed when you visit the following URL: "yadro.ru"

COOKIE_3081  This cookie is installed when you visit the following URL: "xiti.com"

COOKIE_3014  This cookie is installed when you visit the following URL: "webtrendslive.com"

COOKIE_2994  This cookie is installed when you visit the following URL: "weborama.fr"

COOKIE_2900  This cookie is installed when you visit the following URL: "valueclick.net"

COOKIE_2842  This cookie is installed when you visit the following URL: "tribalfusion.com"

COOKIE_2817  This cookie is installed when you visit the following URL: "trafficmp.com"

COOKIE_2574  This cookie is installed when you visit the following URL: "spylog.com"

COOKIE_2548  This cookie is installed when you visit the following URL: "sohu.com"

COOKIE_2346  This cookie is installed when you visit the following URL: "ru4.com"

COOKIE_2281  This cookie is installed when you visit the following URL: "realmedia.com"

COOKIE_2275  This cookie is installed when you visit the following URL: "real.com"

COOKIE_2250  This cookie is installed when you visit the following URL: "questionmarket.com"

COOKIE_2136  This cookie is installed when you visit the following URL: "pointroll.com"

COOKIE_2060  This cookie is installed when you visit the following URL: "overture.com"

COOKIE_1843  This cookie is installed when you visit the following URL: "moreover.com"

COOKIE_1802  This cookie is installed when you visit the following URL: "mediaplex.com"

COOKIE_1738  This cookie is installed when you visit the following URL: "hb.lycos.com"

COOKIE_1698  This cookie is installed when you visit the following URL: "list.ru"

COOKIE_1543  This cookie is installed when you visit the following URL: "imrworldwide.com"

COOKIE_1474  This cookie is installed when you visit the following URL: "hotrank.com.tw"

COOKIE_1469  This cookie is installed when you visit the following URL: "hotlog.ru"

COOKIE_1433  This cookie is installed when you visit the following URL: "hitbox.com"

COOKIE_1236  This cookie is installed when you visit the following URL: "focalex.com"

COOKIE_1198  This cookie is installed when you visit the following URL: "fastclick.net"

COOKIE_1020  This cookie is installed when you visit the following URL: "doubleclick.net"

COOKIE_878  This cookie is installed when you visit the following URL: "coremetrics.com"

COOKIE_722  This cookie is installed when you visit the following URL: "centrport.net"

COOKIE_650  This cookie is installed when you visit the following URL: "burstnet.com"

COOKIE_611  This cookie is installed when you visit the following URL: "bluestreak.com"

COOKIE_442  This cookie is installed when you visit the following URL: "atwola.com"

COOKIE_281  This cookie is installed when you visit the following URL: "advertising.com"

COOKIE_255  This cookie is installed when you visit the following URL: "adultfriendfinder.com"

COOKIE_238  This cookie is installed when you visit the following URL: "adtech.de"

COOKIE_222  This cookie is installed when you visit the following URL: "adserver.com"

COOKIE_48  This cookie is installed when you visit the following URL: "3721.com"

COOKIE_25  This cookie is installed when you visit the following URL: "163.com"

－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－