Computing.Net > Forums > Security and Virus > Exploit/iframe and IE 6 & XP

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Exploit/iframe and IE 6 & XP

Reply to Message Icon

Name: Connie
Date: October 5, 2002 at 10:49:04 Pacific
OS: XP
CPU/Ram: n/a
Comment:

Recently got an email that was fake. It was returned as if I sent it and it could not be delivered. It had an Exploit/iframe code in it. My anti virus picked it up. This Exploit/iframe is suppossed to be only affecting Internet Explorer 5.0 and 5.5.

Anit virus "Neuturalize" it but I kept getting messages everytime I closed a page or went into explorer folder.

The thinkg about this Exploit/iframe email is that you do not have to open any attachments or click on anything in the email. I ended up reformatting,

Anyone have any info on this.?



Sponsored Link
Ads by Google

Response Number 1
Name: Tim
Date: October 5, 2002 at 11:14:12 Pacific
Reply:

you need to delete the outlook express deleted items file!
windows>application data>Identities>{41763900-D228-11D6-B28E-CE9006196D7F}>Microsoft>Outlook Express>Deleted Items

dont worry it will create it again next time you start outlook express


Exploit.IFrame.FileDownload

Exploit takes advantage of a security breach in MS Internet Explorer 5.01, 5.5 and Outlook.

Some Internet worms use this breach to activate themselves from HTML e-mail messages. Examples of such worms are: Aliz, BadtransII, Nimda, and Toil.

This vulnerability allows for the opening or previewing of an infected HTML e-mail message to activate any file or program attached to a message without any security warning from MS Internet Explorer. This breach may also be used in any HTML page (as I-Worm.Nimda does).

This security breach in MS Internet Explorer was discovered in March 2001, and described in the Microsoft Security Bulletin at http://www.microsoft.com/technet/security/bulletin/MS01-020.asp.

The patch eliminating this breach was released by Microsoft on 29 March 2001, and is available for downloading at http://www.microsoft.com/windows/ie/downloads/critical/q290108/default.asp.


0

Response Number 2
Name: Connie
Date: October 5, 2002 at 20:25:17 Pacific
Reply:

I did download that patch and it said I did not need it. I am using EI 6. I did get the email through Yahoo in my IN box. There were about 4 emails and I just clicked on the link to open up the email.

This is the link you were talking about it changed. http://www.microsoft.com/windows/ie/downloads/critical/q290108/default.asp

I believe IE 6.0 and XP still have this vulnerability since this happened to me about a week ago. I was current on all my patches and updates.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Exploit/iframe and IE 6 & XP

IE 6 Security pop ups www.computing.net/answers/security/ie-6-security-pop-ups/8951.html

Internet Access with IE 6.0 and NIS www.computing.net/answers/security/internet-access-with-ie-60-and-nis/13974.html

ie 6 HELP!!! www.computing.net/answers/security/ie-6-help/1718.html