The Ongoing Proactive fight for your box Ad's Suck! And Spyware sucks too...	Removing banners
September 2000	by XXXX
	Courtesy of Fravia's searchlores.org
fra_00xx 981607 [blue] 1000 AA RB	"I found out where my box was going... I was pissed!", writes XXXX, and indeed, as many current discussions (inter alia on the warez discussion thread) attest, more and more people are disgusted by the ruthless violations of all privacy by wannabies programmers and their malwares. This is an interesting small essay, especially because it delivers a very nice HOSTS file, that you can immediately use (with great profit, eheh :-) I'll take this opportunity to note here a most recent finding: a new french service: http://www.nopub.com/ seems to offer now the first (afaikj) free access to the web WITHOUT any advertisement whatsoever. A great idea, that deserves to be spread and that I hope will make waves. Of course this service has been prontly boicotted by the tv-chains and all other commercial bastards, who have refused to advertise an anti-advertisement system :-)	Anti-advertisement
	There is a crack, a crack in everything That's how the light gets in Yada Yada
~S~ Rating	(x)Beginner ( )Intermediate ( )Advanced ( )Expert

an editor, and ztree, @guard, browser, and .01% of a brain.

You are going to have to know some DOS. Just read. This goes off the "0 byte file" or "directory with
same name principle."


rem c:\ = my windows drive
rem c:\z = my windows directory
rem c:\z\system = my windows system


c:\
md tsadbot.exe


cd \z
deltree /y TEMP
deltree /y Recent
deltree /y Temporary Internet Files
echo 1 >Recent


rem There is a registry hack for moving the Recent aka History aka Documents 
rem to the Recycle Bin - Search for it 

echo 1 >Temporary Internet Files
echo 1 >Favorites
md advert203.ocx
md advertx.ocx
md amc
md amcis.dll


cd \system
echo 1 >amc
echo 1 >adcache
md adimaglce.dll
md advert.dll
md advpack.dll
md amcis.dll
md amcis2.dll
md amcompat.tlb
md amstream.dll
md anadsc.ocx
md anadscb.ocx
md htmdeng.exe
md ipclient.dll
md msipcsv.exe
md tfde.dll


cd \Program Files
rem you could just rename this very file to "TimeSink"
rem and copy it to your \Program Files root dir.
echo 1 > TimeSink


rem you need to get unix command line tools 
rem (hell just install linux...

rem or search.... they're out there probably on Simtel
rem I keep all the batchfiles and tools like this in a
rem directory in the path. For Example C:\x 
rem and I keep the path *SHORT*

cd\RECYCLED
rm *.*
rm -r c:\z\TEMP
cd\z
md TEMP



That's it for the DOS part, there are some rules that
surfaced for @guard (sorry I do not remember the original 
sources for everything)


Spyware & AT-Guard


1.Add firewall rule:


Name: Aureate
Action: Block
Direction: Outbound
Protocol: TCP or UDP


Any application
Remote service:
Single
port 1749
Local service:
Single
port 1749
Address: any address
Logging: as required


2. In the Firewall tab move this new rule to the verytop

3. Add the following firewall rules:

adimage.dll
advert.dll
advpack.dll
amcis.dll
amcis2.dll
amcompat.tlb
amstream.dll
anadsc.ocx
anadscb.ocx
htmdeng.exe
ipclient.dll
msipcsv.exe
tfde.dll
Cd_clint.dll
CD_FlashInstallAX.exe
CD_Gif.dll
Cd_load.exe
Cd_swf.dll
rundll.exe
rundll32.exe
tsadbot.exe



Name: as above for each
Action: Block
Direction: Outbound
Protocol: TCP or UDP


Aplication shown above. name as shown above (no path)
Any service Any address
Logging as required


Then move each rule to the top of the list.


The LAST Rule (At the bottom of the list)
I made was ALL OTHERS
TCP or UDP in Either Direction.


Overkill???

Just wait till you see this "hosts" file, 
Courtesy of http://www3.sympatico.ca/teampowerhouse/

(c) 2000: [fravia+], all rights reserved