Features | Chamber Corner | Main Street News | Job Hunt
Classifieds | Calendar | Lottery Numbers | Business News Elsewhere | Tech News Elsewhere

TechLine

Computer acting quirky?

A new enemy: Bundleware       Send a link to a friend

By Jim Youngquist

[MARCH 19, 2004]  Your computer is great when it's working right. When it's not, it's a royal pain!

This is a quick note. I just recovered from one of the newest kinds of computer attacks -- it's called "Bundleware." This new nuisance attaches itself to your system when you visit certain websites (see list below), or when you install certain Internet-based software packages (see list below). Unlike most viruses, it is not transmitted via e-mail and does not replicate itself. However, it will cripple your computer.

It's part of a class of invaders known as "spyware." The underlying intent of spyware is to gather information about you, about your Internet browsing, pondering and buying habits and to ship this information off to interested parties who will design advertising schemes to further entice you.

Spyware consists of little programs that run on your computer, monitoring your activities and then transmit information back to the "mothership." These programs invade your computer as you browse the Web. It's estimated that some 15 percent of free Internet sites now have some kind of spyware that they load you down with.

Bundleware, also known as VX2.BetterInternet, is spyware on steroids. It not only contains spyware, but it also contains back doors through which hackers can invade your computer, pop-up ads and little schemes to add "features" to your computing and browsing experience.

In my wrestling match with Bundleware, my browser was hijacked every time I tried to open it and go anywhere on the Web, including some sites that were not healthy. I had pop-up ads jumping out at me continuously. It added new buttons to my browser toolbar. It rearranged my icons. It ate my documents (it ate this article and I had to start over again from scratch). While I was typing, it would cause my system to pause continuously, and when it paused my keystrokes were eaten. Whenever I looked back at the screen, I noticed that I had typed gibberish. And the most annoying thing was that my usually powerful computer system had been greatly reduced in power and speed because these little spyware programs that were doing such a good job of annoying me needed my computer's computing power to fuel their little devious plots.

Removing Bundleware is a long and difficult process. Your antivirus program will do nothing for you here. The initial invasion happens without bringing attention to itself, and so it is deeply entrenched before you even know it. Typical tools to remove typical spyware, such as the wonderful and amazing Ad-Aware, merely remove parts of Bundleware for a second or so. Bundleware seems to notice that pieces are missing and puts them back in (the monster seems to grow back any limbs that you cut off).

The telltale sign that you have been invaded by Bundleware is the presence of a file named inetadpt.dll in your \windows\system32 directory. You can find it by running a search and filling in that name. If you find that file, you have been invaded and probably need professional computer help to get rid of this nuisance.

Bundleware resides in the winsock area of Windows, the area that directs Internet communications. It installs applications off the Web that run on boot. It insidiously installs redirection routes in your hosts file. And it dumps large amounts of spyware programs on your hard drive. Dealing with any of these problems individually without dealing with the residual infection in winsock will result in reinfection with Bundleware.

If you want to try to deal with this problem on your own, be prepared to do some searching on the Internet for sources of information on Bundleware. The important keywords to search on are "Bundleware" and "VX2.BetterInternet." The best and most reliable information I found on Bundleware was on www.computercops.biz. The important tools you will find mentioned may include LSPFIX.EXE, Hijackthis.EXE and Ad-Aware. Before proceeding, know that this takes a lot of expertise and know-how to correctly remove. You have been warned: Proceed at your own risk!

 

[to top of second column in this article]

Right now there is no known way to prevent the invasion of Bundleware. Perhaps in the coming weeks and months software providers will find ways of detecting and preventing this nuisance from taking over your computer universe, but in the meantime, be on your toes. Three important instructions:

1. Be careful in your Internet browsing. If a website is described as offering any kind of free anything, there may be spyware or worse, viruses or Bundleware attached to the free offer. Browse known and safe sites offering things that are not risky.

2. Do not install software off the Web unless it is from known and safe software sources. There are thousands and thousands of "wonderful" programs offered free of charge on the Internet and described as "enhancements." They usually are not as good as they are described, not an enhancement and come with some strings attached. Usually they pollute your computer rather than enhance it.

3. Avoid fast click-click-click browsing behavior. If you are looking for a thrill, click-click-click browsing will usually bring you trouble instead. As seen often in the movies, there are obnoxious and even dangerous things lurking in the shadows behind closed doors. Avoid the thought that every area of the Internet should be explored!

Here are the lists of some of the sites and software to avoid (I found these on pcsympathy.com).

Sites
abetterinternet.com
cleangetaway.biz
mypanicbutton.com
vx2.cc
msview.cc
stop-popup-ads-now.com
tps108.org
ipinsight.com
outwar.com
mp3raid.com
chinatopnews.com
netpaloffers.net
netpalnow.com
bc777.com
f1organizer.net
n69.com
webdream.com
trafficstandard.com
internalmonkey.com
digitalrooster.com

Bundleware
nictechnetworks.com
thindivide.com
look2me.com
bundleware.com
similarsingles.com
spyban.net
gnutellaaccelerator.com
imbum.com - NetPal ActiveX
ZeroTrace.com

Software
Gnutella Accelerator (ThinDivide)
SpyBan spy remover (Spywarenuker/noadware)
ThinDivide P2P
SimilarSingles free dating form
Zero Trace Windows trace remover

[Jim Youngquist]

BOTANICA
Florist & Delivery

100 E. Cook St., Mt Pulaski

(217) 792-3868

click here to order flowers
Tuesday - Friday 9am -4pm, Sat  9am - 12
closed Sunday & Monday

 

Lincolndailynews.com

is the place to advertise


Call (217) 732-7443
or e-mail

ads@lincolndailynews.com 

 

Baker & Son Tree Service

Tree Trimming & Removal
Excellent Service & Cleanup
Free Estimates - Fully Insured

Phone: (217) 735-5066
Cell...: (217) 306-4397

Email: lbaker@lincolncollege.com

Previous article

Back to top


 

News | Sports | Business | Rural Review | Teaching & Learning | Home and Family | Tourism | Obituaries

Community | Perspectives | Law & Courts | Leisure Time | Spiritual Life | Health & Fitness | Calendar

Letters to the Editor