How to navigate away from quicksand domains which hold your browser captive until you install their software?

[Tom]

How do we get out of the browser infinite loop quicksand when we navigate
to web pages designed to lock us in and force us to hit the "pay me" button
(whatever they want to force you to do)?

These are just a sample of nasty quicksand web pages I've run into which
lock your browser into a loop and won't let you get out until you hit the
"install" or "run" or "OK" button... (whatever it is they want you to do).

http://www.spywareiso.com
http://antivirus-scanner.com
http://findyourlink.net
http://www.findyourlink.net
http://spywareiso2008.com
http://www.spywareiso2008.com
http://www.immenseclips.com
http://antivirus2009-scanner.com
http://thecatalogfree.net
etc.

When you navigate to these quicksand links, you can not get out of their
infinite loop with your browser no matter what you do. I'm forced to
control alt delete and kill the browser from the task manager ... but I ask
....

Is there a more graceful way, after the fact, to navigate away from
quicksand domains which have a hold on your browser, other than control alt
deleting the browser process?

[Bear Bottoms]

On Sun, 13 Jul 2008 08:04:02 -0500, Tom <twilson3@hotmail.com> wrote:

> How do we get out of the browser infinite loop quicksand when we navigate
> to web pages designed to lock us in and force us to hit the "pay me"
> button
> (whatever they want to force you to do)?
>
> These are just a sample of nasty quicksand web pages I've run into which
> lock your browser into a loop and won't let you get out until you hit the
> "install" or "run" or "OK" button... (whatever it is they want you to
> do).
>
>
> When you navigate to these quicksand links, you can not get out of their
> infinite loop with your browser no matter what you do. I'm forced to
> control alt delete and kill the browser from the task manager ... but I
> ask
> ...
>
> Is there a more graceful way, after the fact, to navigate away from
> quicksand domains which have a hold on your browser, other than control
> alt
> deleting the browser process?

Why not just close the tab/page? BTW, some of these links are dangerous to
persons who would navigate to them out of curiosity. Not a good idea Tom.

--
Bear Bottoms
Freeware website: http://bearware.info

[Bit Twister]

On Sun, 13 Jul 2008 06:04:02 -0700, Tom wrote:
> How do we get out of the browser infinite loop quicksand when we navigate
> to web pages designed to lock us in and force us to hit the "pay me" button
> (whatever they want to force you to do)?

download/install/run firefox 3.0.
install NoScript Add On

That blocks javascript which can hide in video/flash/gif/...
from executing, some of which can be malware.


install privoxy from http://www.privoxy.org/
then add user.action rules from
http://www.neilvandyke.org/privoxy-rules/

The add privoxy to firefox
In firefox,
Edit->Preference->Advanced
Click Network tab
Connection
Settings button

click Manual proxy configuration:
HTTP Proxy: 127.0.0.1 Port: 8118
SSL Proxy: 127.0.0.1 Port: 8118
Be sure to clear the "No Proxy for" box
Click OK
Click Close

Privoxy blocks add servers, which may have been cracked
and are serving up malware.

Check out first two of those sites you posted.
http://www.google.com/safebrowsing/d...spywareiso.com
http://www.google.com/safebrowsing/d...us-scanner.com

[Tom]

On Sun, 13 Jul 2008 08:14:37 -0500, Bear Bottoms wrote:

>> Is there a more graceful way, after the fact, to navigate away from
>> quicksand domains which have a hold on your browser, other than control
>> alt
>> deleting the browser process?
>
> Why not just close the tab/page?

That's my whole point. You CAN NOT close the tab. It just won't close!
In fact, you can't even navigate AWAY from the tab!

What Firefox flaw are they taking advantage of that hijacks your browser
and won't even let you close the tab or the browser or even switch to
another tab. You're stuck in the quicksand and can't get out.

[Bear Bottoms]

On Sun, 13 Jul 2008 09:06:32 -0500, Tom <twilson3@hotmail.com> wrote:

> On Sun, 13 Jul 2008 08:14:37 -0500, Bear Bottoms wrote:
>
>>> Is there a more graceful way, after the fact, to navigate away from
>>> quicksand domains which have a hold on your browser, other than control
>>> alt
>>> deleting the browser process?
>>
>> Why not just close the tab/page?
>
> That's my whole point. You CAN NOT close the tab. It just won't close!
> In fact, you can't even navigate AWAY from the tab!
>
> What Firefox flaw are they taking advantage of that hijacks your browser
> and won't even let you close the tab or the browser or even switch to
> another tab. You're stuck in the quicksand and can't get out.

Can't help you there, I use Opera.

--
Bear Bottoms
Freeware website: http://bearware.info

[Bear Bottoms]

On Sun, 13 Jul 2008 08:50:54 -0500, Bit Twister
<BitTwister@mouse-potato.com> wrote:

> On Sun, 13 Jul 2008 06:04:02 -0700, Tom wrote:
>> How do we get out of the browser infinite loop quicksand when we
>> navigate
>> to web pages designed to lock us in and force us to hit the "pay me"
>> button
>> (whatever they want to force you to do)?
>
> download/install/run firefox 3.0.
> install NoScript Add On
>
> That blocks javascript which can hide in video/flash/gif/...
> from executing, some of which can be malware.
>
>
> install privoxy from http://www.privoxy.org/
> then add user.action rules from
> http://www.neilvandyke.org/privoxy-rules/
>
> The add privoxy to firefox
> In firefox,
> Edit->Preference->Advanced
> Click Network tab
> Connection
> Settings button
>
> click Manual proxy configuration:
> HTTP Proxy: 127.0.0.1 Port: 8118
> SSL Proxy: 127.0.0.1 Port: 8118
> Be sure to clear the "No Proxy for" box
> Click OK
> Click Close
>
> Privoxy blocks add servers, which may have been cracked
> and are serving up malware.
>
> Check out first two of those sites you posted.
> http://www.google.com/safebrowsing/d...spywareiso.com
> http://www.google.com/safebrowsing/d...us-scanner.com

Or just use Opera!

--
Bear Bottoms
Freeware website: http://bearware.info

[Gabriele Neukam]

On this special day, Tom wrote:

> That's my whole point. You CAN NOT close the tab. It just won't close!
> In fact, you can't even navigate AWAY from the tab!

Solution #1: Disable Java/JavaScript
Solution #2: Disable automatic forwarding. This will make the backup
button functional again.
Solution #3: Use a browser different from the Internet Explorer, ie one
of the Mozillas or Opera. They cannot be manipulated via ActiveX
commands.


Gabriele Neukam

Gabriele.Spamfighter.Neukam@t-online.de

--
Reality is something, people cannot cope with.
If they could, they would not play.

[Sherman Pendley]

Tom <twilson3@hotmail.com> writes:

> How do we get out of the browser infinite loop quicksand when we navigate
> to web pages designed to lock us in and force us to hit the "pay me" button
> (whatever they want to force you to do)?

Patient: Doctor, it hurts when I do this.
Doctor: Then don't do that.

sherm--

--
My blog: http://shermspace.blogspot.com
Cocoa programming in Perl: http://camelbones.sourceforge.net

[David H. Lipman]

From: "Tom" <twilson3@hotmail.com>

| How do we get out of the browser infinite loop quicksand when we navigate
| to web pages designed to lock us in and force us to hit the "pay me" button
| (whatever they want to force you to do)?

| These are just a sample of nasty quicksand web pages I've run into which
| lock your browser into a loop and won't let you get out until you hit the
| "install" or "run" or "OK" button... (whatever it is they want you to do).

< snip >

| etc.

| When you navigate to these quicksand links, you can not get out of their
| infinite loop with your browser no matter what you do. I'm forced to
| control alt delete and kill the browser from the task manager ... but I ask
| ...

| Is there a more graceful way, after the fact, to navigate away from
| quicksand domains which have a hold on your browser, other than control alt
| deleting the browser process?

If you post possibly malicious web sites it is incumbant upon you to obfuscate the URL to
make sure said URL is NOT clickable such as...

hxxp://antivirus2009-scanner.com

This will protect others from possibly getting infected.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[VanguardLH]

Tom wrote:

> How do we get out of the browser infinite loop quicksand when we navigate
> to web pages designed to lock us in and force us to hit the "pay me" button
> (whatever they want to force you to do)?
>
> These are just a sample of nasty quicksand web pages I've run into which
> lock your browser into a loop and won't let you get out until you hit the
> "install" or "run" or "OK" button... (whatever it is they want you to do).
>
> http://www.spywareiso.com
> http://antivirus-scanner.com
> http://findyourlink.net
> http://www.findyourlink.net
> http://spywareiso2008.com
> http://www.spywareiso2008.com
> http://www.immenseclips.com
> http://antivirus2009-scanner.com
> http://thecatalogfree.net
> etc.
>
> When you navigate to these quicksand links, you can not get out of their
> infinite loop with your browser no matter what you do. I'm forced to
> control alt delete and kill the browser from the task manager ... but I ask
> ...
>
> Is there a more graceful way, after the fact, to navigate away from
> quicksand domains which have a hold on your browser, other than control alt
> deleting the browser process?

Note: comp.infosystems.www.authoring.html was removed from Newsgroups in
my reply. This discussion is definitely off-topic for the
alt.comp.freeware group.

- Started up a virtual machine (running Windows XP Pro SP-3).
- Opened Internet Explorer v7 (home page = about:blank).
- Went to http://www.yahoo.com/.
- Opened another tab.
- In 2nd tab, went to http://www.intel.com/.
- In 2nd tab, went to http://www.spywareiso.com/.
- Got "page not found error".
- "nslookup www.spywareiso.com" returns 127.0.0.1.
- I don't use a hosts file with a bunch of "bad" domains pointing at
localhost.
- Used SamSpade to do a dig on www.spywareiso.com which reports
"Nameserver has a problem and can't talk right now".
- Domain registrant says they are in Moldova
(http://maps.google.com/maps?q=%2Bmoldova).
- Domain registration says nameservers for domain are NS1.SPYWAREISO.COM
and NS2.SPYWAREISO.COM which do resolve to IP addresses from my DNS
server (I use OpenDNS, not my ISP's DNS server).
- Tried "nslookup www.spywareiso.com NS1.SPYWAREISO.COM" to use their
nameserver but the DNS requests timed out.
- So their nameserver isn't responding right now. So much for the first
site to test.

- In 2nd tab (displaying Intel site), went to next bad site in your
list: http://antivirus-scanner.com.
- OpenDNS blocks that site. The default block category of "phishing"
(to block known phishing sites) is enabled but I also had the "adware"
category blocked (blocks sites that distribute *applications* that
display ads without user's permission/choice (i.e., adware) but not
ad-serving sites). So I had to disable that block category in my
OpenDNS account. Wait 4 minutes for config changes to become effective
on my account.
- Tried the site again.
- Redirected to http://www.infectionscanner.com/.
- Yep, another "Antivirus 2008" pest/scam site. Waited until it
presented its bogus "found pest" frame.
- Hit the Back toolbar button.
- Went back to Intel site.
- Hit Forward button.
- Went back to scam site.
- Enter http://www.ibm.com in the web browser's Address bar.
- Went to IBM's site.

Didn't bother to test the rest as I already found one of your listed
sites which did NOT behave as you claim for the web browser that I used
(IE7). Reverted the VM back to is snapshot to return to my baseline
(clean) setup. Must be a problem in your UNIDENTIFIED web browser. Or
your security settings for your web browser are lower than my settings
(which are customized for the Internet security zone, not the default
settings level, but still do allow scripting).