Solved WhiteSmoke Toolbar and friends rant

Gateway laptop / W322
February 4, 2014 at 22:42:03
Specs: Lubuntu Linux i686 / windows xp
Wow, not sure how common this one is but I just spent two hours picking through the registry(after running malwarebytes,adaware cleans, eset, and avast.)

malwarebytes alone detected 221 infections with only the quick scan. Talk about a jerk set of software. And media player 1.1 extension in google chrome.. Thirteen different hidden files that disallowed removal, apparently my wife thought it was a helpful add on. I finally convinced her that it was adware at its evilest.

just wanted to rant...anyone else had issues with this one.

::mike


See More: WhiteSmoke Toolbar and friends rant

Report •

#1
February 5, 2014 at 07:43:35
I'd never heard of it before your post so I quickly googled it. The result was interesting:

https://www.google.ca/#q=white+smok...

I like how 7 of the first 10 links are removal instructions...........nuff said! LOL

It matters not how straight the gate,
How charged with punishments the scroll,
I am the master of my fate;
I am the captain of my soul.

***William Henley***


Report •

#2
February 5, 2014 at 07:48:15
The worst part is I have no idea how this got on the machine, all I can think is that it was a deliberate addon that whoever was adding a program missed...(its a shared computer) At least there was nothing valuable I needed to get done on it.

::mike


Report •

#3
February 5, 2014 at 09:23:10
✔ Best Answer
Ahhh....like the "google tool bar" add-on.

I actually installed that on my computer by accident one day because I was in a hurry and updating either java or adobe reader and it's a part of the bundle and you have to specifically uncheck the box beside it or it installs.

I wasn't pleased. Bundle it with whatever if you like, but the default should be that you have to choose to install, not choose not to install. I hate that kind of sneaky crap companies do to get their useless software installed on your PC.

It matters not how straight the gate,
How charged with punishments the scroll,
I am the master of my fate;
I am the captain of my soul.

***William Henley***


Report •

Related Solutions

#4
February 5, 2014 at 13:12:37
I assume you threw ADWCleaner at it - does well on toolbars.

If you can live without Java activated on your browsers via "Java Control Panel > Security" it might keep this sort of stuff at bay (have done so myself and not missed it yet).

Thinking aloud, I wonder if Crypto Prevent would help keep some of this stuff out. It blocks popular virus initiation areas and doesn't even run in the background.

Always pop back and let us know the outcome - thanks


Report •

#5
February 5, 2014 at 14:36:54
I usually run Lubuntu with Firefox. However its installed on a computer with xp, and I dislike the risks of using wine, so I sneak back to xp to do a few things now and then, Thanks for the suggestion.

::mike


Report •

#6
February 5, 2014 at 15:58:05
Not sure why world of warcraft got added as I don't play?

::mike


Report •

#7
February 5, 2014 at 20:49:49
Had a friend with "Media Player 1.1" with the G. Chrome glitch (read: intentional?) of "Installed by Enterprise Policy" and had to run Malwarebytes along with re installing Chrome after manually removing it from the extensions folder.

~oldie
Not everyone can decipher Klingon script...
chay' ta' SoH tlhe' vam Doch Daq

message edited by OLDISGOOD


Report •

#8
February 6, 2014 at 05:25:22
Yeah, I had to run extensions in developer so I could get the name. Something like

ieeeefpghreptzolompe

which of course made me curious to begin with. Found multiple files in the appdata/chrome folder. Which I scrapped.

I am tempted to just remove chrome entirely, but I am a fan of the convience of google, so I might just switch to a chromium based browser, or Firefox entirely.

If I didn't know better I would say that google is behind it, just to show advertising to the unwitting public.

it would seem that there should be an update to block enterprise installing software without knowledge. Though that might be Linux bias

::mike


Report •

Ask Question