Myönnettäköön nyt, että kk0 ja nämä muut olivat oikeassa, ja se edellinen threadini oli pelkkää vinoilua, jossa ei ollut oikeastaan edes järkeä.
Minulla on ollut nuo IPt, jotka tuossa seuraavassa kirjoituksessa mainitaan ja monet muutkin roskat jo kauan palomuurin bannissa, eikä niitä sheriffin applet tiedostoja, löydy koneelta.
"Red Sheriff
is a Java applet that many websites are using to spy on visitors internet usage, it sends data to imrworldwide.com servers.
Information is available from :
http://www.cexx.org/sheriff.htm
IS RED SHERRIF SPYWARE ?
- RedSheriff sends information from your computer to a third party.
- RedSheriff sends this information out without your knowledge.
- RedSheriff enforces its behavior on your system: you are powerless to control it in any way.
- It is intentionally clandestine: designed to circumvent the user's security tools.
- It is stealing the use of your processor, and slowing down your system.
QUOTE
PCWorld / CNET / HOTMAIL uses RedSheriff too. It's often called server-side spyware because it loads in an applet which does the dirty work. (although real server-side spyware actually tracks you on the server site, suchas a P2P service collecting data on what you search for.)
Like any Java applet loaded from the Internet is supposed to,RedSheriff goes away when you close out your browser completely, but sites that use IMRWorldwide leave behind a cookie, so it can pick up where it left off.
Note: spyware detectors will not find it, but closing your browser and emptying the cache should remove it,
and any of the above options should prevent any further infection.
Hunt For RED SHERRIF Spyware:
http://www.bluetack.co.uk/forums/index.php...?showtopic=2055
Block these IPs, theres a lot more out there :( :
203.166.18.106 - NS01-AU.IMRWORLDWIDE.COM
62.189.244.232 - NS01-UK.IMRWORLDWIDE.COM - UUNET UK -
62.189.244.254 - lycos-eu.imrworldwide.com#IMRworldwide (Red Sheriff)
194.192.187.192 - server-ee.imrworldwide.com#IMRworldwide (Red Sheriff) - Infomediary (ads/tracking)
202.42.119.181, 202.42.119.182, 202.42.119.183 ,202.42.119.184 - server-hk.imrworldwide.com#IMRworldwide (Red Sheriff)
203.89.243.231 - fe3-gc.imrworldwide.com#IMRworldwide (Red Sheriff)
203.89.243.232 - devfw.imrworldwide.com
203.97.10.171, 203.97.10.172 - server-nz.imrworldwide.com#IMRworldwide (Red Sheriff)
203.166.18.222, 194.192.187.193, 194.192.187.194, 194.192.187.195, 194.192.187.196 - server-au.imrworldwide.com
206.112.99.110, 206.112.99.111 - secure-us.imrworldwide.com#IMRworldwide (Red Sheriff)
210.81.223.222/255.255.255.255 - secure-jp.imrworldwide.com#IMRworldwide (Red Sheriff)
212.187.205.148, 212.187.205.149 - fe3-uk.imrworldwide.com#IMRworldwide (Red Sheriff)
212.239.21.164/255.255.255.255,fe1-it.imrworldwide.com#IMRworldwide (Red Sheriff)
213.92.92.105, 213.92.92.101, 213.92.92.102, 213.92.92.103, 213.92.92.104 - server-it.imrworldwide.com
203.89.243.235 - eagle.redsheriff.com
203.166.18.222 - fe1-au.imrworldwide.com
203.166.91.246,REDSHERIFF-AU-UUNET
203.166.91.244/203.166.91.247,REDSHERIFF-AU-UUNET"
Lähde: http://www.bluetack.co.uk/forums/index.php?showtopic=76
Tuolla on paljon hyödyllistä tietoa spywareista, jne...
jos redsheriffistä keskustelua haluatte nähdä, niin kelatkaa vaan siihen kohtaan. :>
Lopetankin keskustelun aiheesta tähän.
Johan tuosta aiheesta on jauhettu liikaa aikoja sitten.
Eliminoikoon ne kaikki mahdolliset roskat, jotka sen katsovat tarpeellisiksi (minä ainakin).
Jos jotain järkevää kommenttia tulee ehkä vastaan, mutta saas nähdä.
No nyt kaikkien pitäisi olla tyytyväisiä. :)
Minulla on ollut nuo IPt, jotka tuossa seuraavassa kirjoituksessa mainitaan ja monet muutkin roskat jo kauan palomuurin bannissa, eikä niitä sheriffin applet tiedostoja, löydy koneelta.
"Red Sheriff
is a Java applet that many websites are using to spy on visitors internet usage, it sends data to imrworldwide.com servers.
Information is available from :
http://www.cexx.org/sheriff.htm
IS RED SHERRIF SPYWARE ?
- RedSheriff sends information from your computer to a third party.
- RedSheriff sends this information out without your knowledge.
- RedSheriff enforces its behavior on your system: you are powerless to control it in any way.
- It is intentionally clandestine: designed to circumvent the user's security tools.
- It is stealing the use of your processor, and slowing down your system.
QUOTE
PCWorld / CNET / HOTMAIL uses RedSheriff too. It's often called server-side spyware because it loads in an applet which does the dirty work. (although real server-side spyware actually tracks you on the server site, suchas a P2P service collecting data on what you search for.)
Like any Java applet loaded from the Internet is supposed to,RedSheriff goes away when you close out your browser completely, but sites that use IMRWorldwide leave behind a cookie, so it can pick up where it left off.
Note: spyware detectors will not find it, but closing your browser and emptying the cache should remove it,
and any of the above options should prevent any further infection.
Hunt For RED SHERRIF Spyware:
http://www.bluetack.co.uk/forums/index.php...?showtopic=2055
Block these IPs, theres a lot more out there :( :
203.166.18.106 - NS01-AU.IMRWORLDWIDE.COM
62.189.244.232 - NS01-UK.IMRWORLDWIDE.COM - UUNET UK -
62.189.244.254 - lycos-eu.imrworldwide.com#IMRworldwide (Red Sheriff)
194.192.187.192 - server-ee.imrworldwide.com#IMRworldwide (Red Sheriff) - Infomediary (ads/tracking)
202.42.119.181, 202.42.119.182, 202.42.119.183 ,202.42.119.184 - server-hk.imrworldwide.com#IMRworldwide (Red Sheriff)
203.89.243.231 - fe3-gc.imrworldwide.com#IMRworldwide (Red Sheriff)
203.89.243.232 - devfw.imrworldwide.com
203.97.10.171, 203.97.10.172 - server-nz.imrworldwide.com#IMRworldwide (Red Sheriff)
203.166.18.222, 194.192.187.193, 194.192.187.194, 194.192.187.195, 194.192.187.196 - server-au.imrworldwide.com
206.112.99.110, 206.112.99.111 - secure-us.imrworldwide.com#IMRworldwide (Red Sheriff)
210.81.223.222/255.255.255.255 - secure-jp.imrworldwide.com#IMRworldwide (Red Sheriff)
212.187.205.148, 212.187.205.149 - fe3-uk.imrworldwide.com#IMRworldwide (Red Sheriff)
212.239.21.164/255.255.255.255,fe1-it.imrworldwide.com#IMRworldwide (Red Sheriff)
213.92.92.105, 213.92.92.101, 213.92.92.102, 213.92.92.103, 213.92.92.104 - server-it.imrworldwide.com
203.89.243.235 - eagle.redsheriff.com
203.166.18.222 - fe1-au.imrworldwide.com
203.166.91.246,REDSHERIFF-AU-UUNET
203.166.91.244/203.166.91.247,REDSHERIFF-AU-UUNET"
Lähde: http://www.bluetack.co.uk/forums/index.php?showtopic=76
Tuolla on paljon hyödyllistä tietoa spywareista, jne...
jos redsheriffistä keskustelua haluatte nähdä, niin kelatkaa vaan siihen kohtaan. :>
Lopetankin keskustelun aiheesta tähän.
Johan tuosta aiheesta on jauhettu liikaa aikoja sitten.
Eliminoikoon ne kaikki mahdolliset roskat, jotka sen katsovat tarpeellisiksi (minä ainakin).
Jos jotain järkevää kommenttia tulee ehkä vastaan, mutta saas nähdä.
No nyt kaikkien pitäisi olla tyytyväisiä. :)
Vastaukset
Vanhimmat
Ei vielä vastauksia
Aloittaja odottaa vastauksia. Kerro oma näkemyksesi ensimmäisenä.