Ramblings of an old Doc
Published on September 6, 2014 By DrJBHL In Personal Computing

 

“The best way to infect thousands of computers is to set up a malicious website. Better still, hack a popular website and insert malicious code. That way, thousands of website visitors will be affected when they visit the website. Badware is the name given to the malware present on websites – in the site code or in the malicious advertisements or malvertisements being displayed on the website.” – TWC

It basically ignores your choice as to how your computer or your network connection is used, and it distributes malware either because it is intentional or because it became infected unintentionally.

How to know if a site is infected?

  1. Fail-proof: Reputation based (remember, the shortcoming here is when your software recognizes this: Depends on updating and crowd reporting). When you attempt to visit the infected site using any of the standard browsers, you will get a message that visiting the site may be dangerous. The wording of message can be different, but you will see an alert about the website. Since there can be false positives, most browsers give you an option to continue visiting the website at your own risk. Your security software too could throw up a warning, that it could be dangerous visiting a website.
  2. Searching for a website using popular search engines give out a description that is not related to the website. If you have been visiting the website before, you can instantly tell that something is not right after seeing the site description in the search engine result pages (SERPs).
  3. If you are a website owner and have webmaster accounts with Google, you will receive notifications about possible malware on your website.
  4. You find that file permissions have been changed.
  5. You may encounter unwanted and unexpected redirects when you click your website name when it appears in search engine results pages.
  6. In some cases, you can see new users on the webmaster dashboard; in other cases, the permissions for users may have changed. – ibid

Browsers: IE has SmartScreen Filter, and an XSS Security feature preventing cross-site scripting.

If you browse to an infected site, you get this:

Chrome has this in settings:

So, it's quite important to have the proper options checked off, and to keep your security software and browsers updated DAILY.

Sources:

http://www.thewindowsclub.com/what-is-badware

http://www.thewindowsclub.com/how-to-enable-or-disable-smartscreen-filter-in-internet-explorer-9

http://www.thewindowsclub.com/smartscreen-filter-xss-security-features-in-ie-8


Comments
on Sep 06, 2014

Thanks, rechecked to make sure I had it turned on.

on Sep 06, 2014

Yup, mine too.

on Sep 06, 2014

Once again Doc, another piece of great information. 

on Sep 07, 2014

And what about Firefox?

on Sep 07, 2014

kona0197

And what about Firefox?

If you read the first source, you'd have seen:

"Mozilla Firefox has the option turned on and do not enable you to turn them off. In some cases, Firefox may simply refuse to load a website it considers is not safe for you."

on Sep 07, 2014

Sorry - I don't click on links given very often.

on Sep 07, 2014

kona, a short guide to my articles: I generally write about a topic which (for whatever reason) interests me. I generally quote a part of that article which might or might not be characteristic of it, and supply a link to it (download, etc.). I don't necessarily provide all the info in that article.

The most relevant link appears first among the sources (apart from quotes which are immediately attributed), so that readers might avail themselves of information I haven't directly related to or quoted.

on Sep 07, 2014

 Good one Doc! Checked mine, they are fine! 

on Sep 07, 2014

I understand Doc, I'm simply not interested in clicking on links and reading long articles that are not very interesting to me. It's my fault. :/