Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
How is it that a program (spyware) can automatically install itself on a computer without the user being asked if they want to dowload it?
Someone is trying to tell me that their software is not meant to invade my computer and it must be something in my browser settings. I do not believe that.
I am specifically referring to comet cursor which automatically installed itself on my computer without asking if I wanted to install it. The company says they do not intend for it to do that.
I complained to the company, comet systems, and the founder sent me an email saying their software is not set up to do that. I am having a hard time buying what she said.
Can anyone explain to me how that works and where I can find more info on it?
Thanks much.

I expect it was attached to something else you installed. There is no way that it could have installed itself through your browser, without giving a security warning. Unless of course, there is a problem with your browser's security settings, which is unlikely, since the default settings are usually fine.

no, I was not installing anything else when it happened. I had just surfed to a website and it was almost immediate. Wouldn't there have to be some code in the program to make it install?
Tom, thanks for answering. My browser, IE6, is set to medium security.

It actually happened 3 times at the same website. (After I removed it with AdAware each time). I went back to see if it would happen again, and it did. Thank goodness for AdAware!

new info: I just found out that the person's whose website I went to had comet cursor on her computer. Is there a way it could be programmed to download from her website? She has a personal website on freewebz.com.
Thanks.

I have to confirm what Tom said, but perhaps comet are not as scrupulous as they portray themselves to be. Browser settings are like a lock on a door: they keep the honest people out, but they will not stop the determined.
I once developed Customer Service solutions, and you would not believe how much of our time was spent plugging security holes, that both hackers and sometimes companies breeched. Furthermore, security was a significant hindrance to some things we needed to do. You'd be surprised how many developers wanted to simply work-around the security restraints, rather than deal with the headache of doing things "right", and hence getting reprimanded for taking too long. Firewalls, proxies, you name it, it's not easy to negotiate. We never stepped over the line, but I can see how it could happen.
Without getting into corporate espionage, although very real, I do not recommend a complete state of paranoia (leave that to the IT staff and James Bond). Let us just say that information gathering is big business, very high profit, costs almost nothing, and hence is nearly irresistable to many. The internet is ripe for the plucking. Most often I would say it is not malicious, but rather just easy money. A personal firewall is a good idea for anyone who wants extra security, though it saddens me to say so.
Do not forget that on the Security tab of your Internet Options, you can select Restricted Sites, and add URLs to the list. That's much more secure than generic security settings.
Peace of mind to you...

Hmm... it may be possible with ActiveX scripting or something, I've never used it. But with medium security settings, I don't think there should be a way this can be done. Try going to Tools -> Internet Options -> Security -> Custom Level, and change all the ActiveX scripting things to prompt. Then go back to the site, and if you get a prompt, you know it's done with ActiveX. If you view the page source, you should find it in there somewhere.

Thanks guys.
I did go to comet systems site after setting all my active x settings to prompt. I got a message that said "due to your active x settings some elements of this page can not be displayed properly" or something very similar to that.
I will do it again and look at the page source, I didn't think of that before. I do know some html but I am not sure I know what to look for in terms of active x.
About the browser settings, even if I had it set to allow all active x elements, why does that give something the somethitng the right to download itself to my computer without specifically asking me for permission?

The only thing I can think of is if you got some other Comet Systems product you may have ticked "Always trust content from Comet Systems".

Chances are you accidentally clicked on an ad without realizing it, programmers are getting alot trickier these days with there ads. Also, alot of the shareware programs you download come with ad software that installs itself.. such as realplayer.

no shareware here. I got it from going to a website where the comet curser was installed. On Comet's web site they have a page where you can get the html code for putting the cursers on web pages. Another way to spread the curse!
I got an email from jamie@cometsystems.com
who is the founder of the company about how their software downloads itself. She actually said that if the browser settings are set to medium-low or low (which allows unsigned or uncertified active x controls as I understand it) the nasty little program will download itself without permission. That is like saying if you forget to lock the door of your house, it is ok for *anyone* to come in your house and look around and then phone home to tell what they found there.I think not!!
I never use Real Player, have it blocked from accessing the net in firewall, and NEVER clicked "ok to trust content from Comet Systems".
Thanks guys!
I am learning a lot from spyware/secutity sites on the web as a result of this.

What exactly does the comet cursor do? It looks like comet systems has both mouse cursors and a toolbar.. but they dont really say anything else about them. Your far better off to download google's toolbar anyways..

The comet cursor is just a cute little cursor to use instead of the ususal plain arrow cursor. They have a lot of different ones, stuff like flowers, flags, cartoon characters, etc etc. I don't know about a toolbar. They have cursors for websites too and if you go to a website that has one, you might get one whether you want it or not.
I didn't want to download comet cursor, it happened without my ok, that's what made me angry. And it contains spyware.
That's the problem

I've had tons of things show up without my approval too. The best tool I've ever downloaded is from www.ad-aware.com. It scans your registry and hard drive for spyware, ads and other such things that shouldnt be there.. even possible trojan horses.

![]() |
Can't anyone help?? VB
|
Delphi audio player
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |