ThemeXP.org: Heaven or hell?

Paradise of beauty

If you are a beauty lover, then you are no stranger to ThemeXP.org . This is a great website, offering unique three-dimensional interfaces, wallpapers, icons, cursors, boot screens, logins, etc. for the Widows XP operating system, which are all stunning.

The first time I visited ThemeXP.org, I was surprised by the modern beauty of it. If you pay attention a little bit, you will realize that downloading files is simple because just click the Download text always under the thumbnails (thumbnails), everything is free and arranged by category. very clear. ( Figure 1 )

Figure 1

There is no such thing that this is like a "paradise" for Windows XP users. And speaking of ThemeXP.org , people mentioned StyleXP 3.18 software for $ 19.95 of TGTSoft ( Figure 2 ).

Figure 2

Spectacular trick!

If you stop here, this article is just a ThemeXP.org hymn like many other articles. Have you ever thought about what you have to pay for these free beauties? The truth aside from beauty you will get an extra trojan and adware .

Indeed, this article writer couldn't believe his eyes on the warning of the world's leading anti-spyware / anti-spyware software. To clarify this, let's take a look at the process of installing executable files that this website provides.

The procedure is quite simple, after running and clicking Next twice you will get a notification about ThemeXP.org being supported by New.net software and you must check the box I agree to install New. net Domains Software otherwise the I agree button will be hidden and cannot be installed. If the computer has previously been protected by a strong anti-virus / anti-virus software with automatic removal, sometimes it will notify Application.Adware.NewDotNet.B.Dropper will be displayed ( Figure 3 ), New.net itself is an illegal adware.

Figure 3

Next you must also agree to the software Hyperlinker or SaveNow be installed. With Hyperlinker ( Figure 4 ) you get Trojan Downloader Small BKE ( Figure 5 ) and possibly Link Maker adware, and adware SaveNow still gives negative results to BitDefender 9 Pro even though it has been discovered to be arbitrarily edited registry to launch with Windows.

Figure 4

Figure 5

However, it is still very misleading when giving notice ( Figure 6 ) recommend that you choose Allow (Ignore) or Ignore before firewall software warnings, kill viruses / spyware, and no shyly explaining that Ezthemes_WhenUSaveNow_Installer.exe is trying to connect to the Internet properly for downloading the necessary components to complete the installation process.

Figure 6

It is ridiculous that SaveNow previously advertised itself "that will help you compare ads and special offers, your privacy will be seriously protected" ( Figure 7 ).

Figure 7

In fact, you will be followed because they are always running in the background as useful software. The last "gentle" one is EZ shopper ( Figure 8 ), which works to simulate shortcuts of Internet Explorer in the Start and desktop menus ( Figure 9 ) or My.Freeze.com ( Figure 10 ), changing the default website of the program. browsing.

Figure 8

Figure 9

Figure 10

Even the most powerful anti-virus tools currently available do not recognize the threat when it is still in the installation file ( Figure 11 ).

Figure 11

One common advice is that whenever you install any software that is "turn off all heavy applications", of course, of course, the automatic protection mode which is considered to be the cause of slowing down. machine, so people often choose "disable" to make the process more smooth. After having a compressed file you will receive another invitation ( Figure 12 ) with the default requirement of rebooting the machine ( Figure 13 ).

Figure 12

Figure 13

Successfully connecting to the Internet, editing the registry and running in the background . the installation of other executable files becomes easy, the harmful components are not mentioned anymore, it's easy to understand because you have "sticky" already.

Detect conspiracy

This is an example of the "demolition" of harmful programs, instead of being secretive, sneaky and destructive, they present everything in front of your usefulness, beauty and attachment. his name with famous software, borrowed another clean company to win the trust of users. Once you have what you want, you won't bother to pay attention to them anymore. However that is one reason, the main purpose of adware spread sites is to make money, but they only receive remuneration from advertising companies when you know and agree to the installed programs ( you It is advised to read it carefully but of course there is no adware word mentioned, full of words of confidentiality . Why do they have to take such pains? Simply let you not sue these companies when you know you have been blatantly fooled, but the distribution of trojans is different, it is important that someone dares to denounce the bad deed.

While waiting for the brave people to appear, can you unmask these evil enemies yourself? Of course yes, besides the skepticism you need to ask questions about the irrational points that are happening before your eyes, carefully analyze them to find a reasonable explanation.

All free things that come out bring some benefit to the creators of them, perhaps to advertise the commercial version, to promote the development of good related services. For the purpose of building, promoting name, brand . the worst is the spread of harmful software, tracking, stealing personal information . for the sale and promotion Illegal report. You need to realize their benefits to see if there is any harm to you, if the benefits are mutual, of course we should approve.

Going back to ThemeXP.org , if it was said to be a major profitable website from legitimate advertising, it would go against the general principles of such websites. Instead of trying to extend your visitors' surfing time with cumbersome links or getting registered to gather information for marketing mail, ThemeXP.org is generous so you can get what you want easily. . Moreover, banners are not fixed but often change when changing pages, the most special is a warning that pretends that the system dialog box will appear when you have just opened the website ( Figure 14 ) or each time The link is "lagged" ( Figure 15 ), (this is actually a false lag because if there is lag, then there is an image).

Figure 14

Figure 15

So even though people can contribute $ 10 a year to website administrators, it's easy to see that ThemeXP.org doesn't sell products and is benefiting from legitimate advertising, even StyleXP, one. Important "pedals" are only briefly introduced by links without any images promoting this software. It is understandable because ThemeXP.org is not related to TGTSoft, a developer and seller of paid software, ThemeXP.org only stands out as a free website that provides "materials" for work ". make up "Windows XP. In terms of popularity, ThemeXP.org has redundancy, the number of viewers and downloads under each new thumbnails is usually up to tens of thousands, the website address alone is enough to build the trust of users. Not to mention a series of domestic and foreign articles that guide readers to use this website without proper inspection. Although ThemeXP.org has introduced authors that have generously allowed them to pack files to reduce wastage, they probably do not have to pay the authors royalties, but to maintain their operations as well. As often updated with new "materials" they must be funded from a certain source.

How?

Although you know it is dangerous, but if you have to part with beautiful "wings", you may not be satisfied, noting that you can easily recognize that this article writer is also using the theme from ThemeXP.org . The fact that we can easily "attract" attractive "secret drops" from the "trap" that "carnivorous flower" ThemeXP.org has spread. But "be careful", read the "New anti-virus weapon" with two bright candidates, BitDefender 9 Standard for $ 30 and McAfee VirusScan 2006 for $ 40. There will be 2 cases here:

If this is your first time using ThemeXP.org , installing at the Internet access point is a wise choice. You don't have to worry about abetting the bad guys, just start up the computer and everything will be the same because all public computers are protected by some "freeze" software. So you can only reboot the machine after the installation is complete, so be aware to avoid using the Enter button on the keyboard because all the default options are in favor of the most harmful programs. is the option to restart the computer to complete the installation process. Next, copy the zip files to the storage device to extract to the X: WINDOWSResourcesThemes folder (X is the partition that the operating system is running) or use with StyleXP 3.18, on your home computer. Through the writer's test, the themes provided by ThemeXP.org are not compatible with the Windows Media Center 2005 operating system, so you need to install StyleXP 3.18 or Vista Inspirat free software 1.1 . With the guidance of many Vietnamese articles about ThemeXP.org, you will not have difficulties. Please note that in the executable files from previous years (can still download them now), there are Trojan Downloader Small BKE , you should scan for viruses / trojans for your storage device, but now will there are always SaveNow and Newdotnet adware, but the " SaveNow " has a light blue image instead of the concentric circles like the old version ( Figure 16 ), the infection of both versions is still common. out.

Figure 16

You have been using ThemeXP.org for a long time and are using a computer with an Internet connection, be careful! If not protected, your private information and your loved ones have been compromised. What you need to do is to use powerful antivirus tools that often include antispyware to thoroughly scan the Program Files folder (and all data), and set up a firewall or temporarily disconnect from the Internet to prevent them from calling. "reinforcements" to support. Do not use the provided uninstall files, it can make things worse. For example, the uninst.exe file that is instructed to remove Hyperlinker is the Link Maker adware ( Figure 17 ).

Figure 17

Through testing, although BitDefender 9 automatically identifies and destroys adware and trojans immediately, adware SaveNow is only detected to have adjusted the registry ( Figure 18 ) but still "peacefully" runs the background ( Figure 19 ), Sometimes Trojan Downloader Small BKE has not been automatically killed, so you have to manually scan ( Figure 20 ).

Figure 18

Figure 19

Figure 20

McAfee VirusScan 2006 is not as fast as BitDefender 9 Standard , but it only takes a few minutes to recognize Newdotnet adware (Figure 21 ), but it captures SaveNow .

Figure 21

After scanning and copying compressed files, in Program Files you need to delete the following folders if available: Hyperlinker , e-zshopper , Ezthemes_WhenUSaveNow_Installer , Save , VVSN , themexp . Finally reset the default address of the program browse the web, delete two shortcuts to fake Internet Explorer and two shortcuts with green e-zshopper icon in the Start menu, Desktop. When you want to use more executable files, do it with the public machine as instructed above, you should not install it directly on your beloved machine, the removal is sometimes very difficult, in the future ThemeXP. org will receive more powerful and dangerous "orders".

So nothing can guarantee absolute safety when you're still in contact with ThemeXP.org . Safe solution is to buy interface from famous brands like Stardock , TGTSoft . for about 7.95 - 14.95 USD. If you are not satisfied with the small number of themes (only 21 available) provided by TGTSoft ( Figure 22 ), you should spend $ 19.95 for StyleBuilder 2.0 software of TGTSoft, too, if StyleXP 3.18 has a management effect. However, StyleBuilder 2.0 ( Figure 23 ) is the specialized tool for creating interfaces.

Figure 22

Figure 23

Spending a little time with it you will have unique themes, not being "in touch" and more importantly by yourself, there are no obstacles to sharing and showing them to your relatives and friends. friends. It will be so proud when people admire their "spirit". However, do not rush to turn away from free products, they are appropriate if you are "bag membrane" or concern about payment methods online is still difficult to do for many people. You should "drop your eyes" via Vista Inspirat 1.1 of CrystalXP and Stardock CursorXP Free ( Figure 24 ), be sure the CursorXP Free is more beautiful and vivid than any other theme that ThemeXP.org provides. You can even optionally adjust the shadow for the cursor ( Figure 25 ).

Figure 24

Figure 25

ThemeXP.org is just one of many websites that distribute harmful programs on the Internet, who write articles for example because it's quite popular and less likely to be prevented from being polite and friendly. With hacked websites, providing patches, keygen to unlock software or contain pornography, gambling or "breaking" programs contained in "pirated" discs sold at very cheap prices. The real value that the manufacturer offers can bring "bad things", especially to less experienced people.

Cracking can eliminate program stability and inexpensive CD types are often used to record "pirated" software with a very low life span, difficult to read compared to the original copy of the copyrighted software. Because it also originates from the Internet, the risk of infection from pirated discs is quite high. For example, game install CDs for MU Offline always contain StartPage KR trojans ( Figure 26 ).

Figure 26

The use of cracked software only brings immediate benefits, the consequences that it causes are not small for the users, manufacturers and society. The best solution that people should do is to buy and use copyrighted software from reputable companies, so you won't have to be afraid of fear of copyright checks or hidden enemies. installation files, which are annoying when the PC turns into "zombie"; At the same time, there are many after-sales services from the manufacturer as well as direct help if problems arise (typical example is Microsoft Windows Genuine Advantage incentive program). It is a beautiful act, contributing to building the software industry and the prestige of the country in front of world friends.

Nguyen Tien Dung