Me too I was just thinking of a business model and adding that as some of the justification to kill those types of perms. ----- Original Message ----- From: John Aldrich To: NT System Admin Issues Sent: Wednesday, July 22, 2009 11:04 AM Subject: RE: Searches being hijacked to show results from "search.pro"
Possibly. That being said, I my case most of the users are at least power users, due to the needs of software to run with enhanced permission. L From: David W. McSpadden [mailto:[email protected]] Sent: Wednesday, July 22, 2009 10:53 AM To: NT System Admin Issues Subject: Re: Searches being hijacked to show results from "search.pro" If the users are only users and not power user or admins of the pc can the drive-by install still work?? ----- Original Message ----- From: John Aldrich To: NT System Admin Issues Sent: Wednesday, July 22, 2009 10:41 AM Subject: RE: Searches being hijacked to show results from "search.pro" That's why I have the AVG Safe Surf plugin in my Firefox. J It's stopped browser hijackers a time or two. That being said, I have also had machines which have still gotten infected, apparently in a drive-by install of spyware/malware in spite of the AVG Safe Surf/Safe Search toolbar. From: andy [mailto:[email protected]] Sent: Wednesday, July 22, 2009 10:01 AM To: NT System Admin Issues Subject: Re: Searches being hijacked to show results from "search.pro" I had a user doing a search on google and it came up with a valid PSU link. When we clicked on the link it took us to a virus page. This happened 3 times before it finally said page not found. (fortunately, the virus scanner stopped the infection.) The link worked fine at Yahoo. I have also noticed that Yahoo is running some type of virus scanner on its web site. I have gotten a few links with the message underneath them that says "possible virus site" or something like that. I think there are quite a few google hacks going on. But then again, google is the big target, just like M$ Windose. Andy0 At 09:48 AM 7/21/2009, Bill Monicher wrote: Has anyone seen this before? When I do a search using Google or Yahoo, I'm presented with the usual list of links matching the search terms. When I click on one, I am very briefly presented with a page with a beige rectangle in the centre and an arrow. The legends says "Skip this page" and "Your request is loading" When it completes I am at www.search.pro, not the seach choice I wanted. I'm using Firefox. AVG w/ all of the latest updates I looked in the usual places -- add-ons, extensions etc but to no avail. The URL on the "redirect" page seems to change several time before it shows the list of choices. shopica.com is often there, tho I've seen others. the URL of the destination is www.search.pro Has anyone seen this? It appears new -- there is little on google about it, but then searching on "search" or "pro" is hardly going to narrow the field much. My surfing habits make this sort of thing very rare, so I've no idea how I got it. It has only shown up over the past week or so. --BM ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ < http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --------Andy-Ofalt---863-3449------405-Ag-Admin-Bldg------for more information go to http://ict.cas.psu.edu/Contacts.html ---------- My little blurb to eat up bandwidth and make your mail box even larger +++++++++++++++++++++++++++++++++++++++++++++++++++ The real problem is that IP, a connectionless protocol, was never developed to be the universal protocol. ATM was developed to serve that purpose and failed. +++++++++++++++++++++++++++++++++++++++++++++++++++ No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.392 / Virus Database: 270.13.23/2254 - Release Date: 07/22/09 05:59:00 No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.392 / Virus Database: 270.13.23/2254 - Release Date: 07/22/09 05:59:00 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
<<image001.jpg>>
<<image002.jpg>>
