Help - Search - Members - Calendar
Full Version: Block-Checker
BleepingComputer.com > Security > AntiVirus, Firewall and Privacy Products and Protection Methods
   
Seal8
I'm running Windows XP 2. Use Free versions of the following:
ZoneAlarm, AVG AntiVirus, Prevx Intrusion Detection, MS Anti Spyware, HijackThis, Ad-Aware SE Personal, Spybot S&D, Spyware Blaster, Spyware Doctor.
Use Firefox 99.9 % of the time, but IE is still my default browser.

Since using FF seldom get any infections and if so they are limited to 1 or 2 tracking cookies.
All of a sudden in the last few days Spyware Doctor has turned up The trojan BlockChecker. No executable file only the following entries in my registry:
HKCU\Software\Windows\CV\Internet Settings\P3P\History\
bfast.com
bfast.com##
commission-junction.com
commission-junction.com##
fastclick.com
fastclick.com##
linksynergy.com
linksynergy.com##ack up first.
9ksrv.net
9ksrv.net##
On both occasions Spyware Dr. deleted each of these entries, but they came back a second time. I must be getting hit when I visit a site. Hard to believe I could get hit with all the software protection I've got. Also notice there is no .exe running or installed for Blockchecker nor is blockchecker anywhere on my system that I can find. Anyone know how this is picked up?
Also as that same registry address under History there must have been another 100-150 additional sites listed, some I never heard of but some are definately trackers. I deleted all listings under History. I made a back up of the registry first.
Can anyone tell me what all these listings are under History as wll as anything about BlockChecker. I'm usually very careful about the kind of sites I visit, but I must have visited a bad site.
Thanks for you help/input.
Seal8
Well I found the solution/answer. smile.gif The Spyware Doctore listing these infections are all false positives. Those addresses are put in the above registry and in the Privacy/sites section of IE by Spyware Blaster, blocking those trojans/adware infections. I'm not sure why I didn't have this problem before, unless one of the updates added it.
jgweed
Thanks for posting the solution. This courtesy not only saves the time of members who wish to reply after doing some research, but also provides a solution to others who may have a similar problem in the future.

I wonder why, if you use FF almost all of the time, you do not make it your default browser?

Thanks for your forum participation,
John
Scarlett
Found this through Google. Interesting.

http://forum.mess.be/index.php?showtopic=1...&st=20&p=82759&

I wonder if the "Block Checker" that is mentioned, is one and the same.
Seal8
Yes it is the same. It also apparantly works on AOL and other IM software. I became suspicious after doing a google search myself. Since I don't use any IM software and do not have them on my computer, I couldn't understand why there was no .exe.
Also, regarding FF as default. I've only been using it for a couple of months and thought I would try it for a while. Not sure what ramifications there are by making FF the default. There are some sites you can't get to via FF. Such as getting into your discussion forum. I had to go via IE before it would accept my ID and password:)
I'm a real believer in FF, since I hardly get any spyware anymore. That's why I was surprised when Spyware Dr. turned these up.
Best Regards,
Scarlett
Upon further "Googling" I came across more info. on Block Checker.

Now this linked info. is from trusted and known sites.

http://pcpitstop.invisionzone.com/index.ph...pic=98304&st=15

http://jayloden.com/blockremove.htm
jgweed
I have no problems getting into the forums with Mozilla or FF, so it must be your FF cookie/security settings. I would also add that there is a plug-in (extension) for FF (it's called IE View) that will allow you to call up IE from FF for those pages that require MS software:
https://addons.mozilla.org/extensions/morei...ication=firefox

Happy surfing!
Regards,
John
pctools
Hi all,

I am from PC Tools, maker of Spyware Doctor.

Our latest update has resolved this issue with Block-Checker.

Please ensure you have performed Live Update with Spyware Doctor to ensure you have the latest update.

Should you still have further problems with Spyware Doctor, you can also contact us directly at: http://www.pctools.com/contact/support/guide/spyware-doctor/

Thank you.

Regards,

PC Tools
Seal8
Just checked and ran Spyware Doctor with most recent updates and it still shows 12 Registry entries for Block-Checker. It is not fixed!!!!
Scarlett
QUOTE(pctools @ Sep 6 2005, 07:41 PM)
Should you still have further problems with Spyware Doctor, you can also contact us directly at: http://www.pctools.com/contact/support/guide/spyware-doctor/

Thank you.

Regards,

PC Tools

Huh... I guess you could try and contact them at the link PC Tools has provided.
Or wait and see if he checks back in.

Good Luck smile.gif
jgweed
Suggest you Email with complete information.
Cheers,
John
Seal8
Just ran Spyware Doctor again and it didn't pick up anything so it appears they have corrected the false negative regarding Block-Checker.
FYI
Scarlett
Thanks seal8, for letting us know.

Have a good day! smile.gif
Leurgy
For what its worth Block-Checker has a removal tool (not sure how effective that would be) and manual removal instructions on the website. I'll attach the manual removal instructions but be careful if you are not familiar with the registry.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.