Microsoft's Security Bulletin MS04-013 covering the MHTMLRedir.Exploit was released on April 13, 2004... www.microsoft.com/technet/security/bulletin/ms04-013.mspx Purgamentum initium, exitus purgamentum

0

Believe me, I love virus, worms, spywares. Why? It keep bringing us together here. Where else would you be if there was no such thing as Security & Virus Form? i_XpUser

0

typo again :-((((((((((((( as Security & Virus Form? - wrong as Security & Virus Forum? - rite i_XpUser

0

XpUser, And again; as Security & Virus Forum? - rite as Security & Virus Forum? - right ;-)~ Wouldn't it be nice, if a typo is all we had to worry about. Hmm, some typos, can really muddle things up. But, in this exchange, isn't as bad. We're all human {some may disagree}, and make mistakes. An admission of error, is a sign of strength, rather than a confession of weakness. All in fun XpUser. I've taken my fair share, of joshing also ;-) CrazyOne

0

:-)) i_XpUser

0

> Bofra/IFrame Exploits on More Web Sites (updated); IFRAME vulnerability summary John & Tommyo, there may be an answer to your question somewhere. If spy-ad blockes the sites yesterday, how would spywareblaster work if you can't access the site? And will it be updated for this? Those are My questions. I Myself go for the layered approach, whatever the update download method. Abnormal

0

There should not have been such warning from Norton by going to the site I posted above. I use Norton AV 2004 Pro and get no such warning. If you followed some of the links or looked at some Hijack logs with a line similar to: (I edited it with __ to prevent flagging by av programs) O16 - DPF: {11010101-1001-1111-1000-110112345678} - ms-its:mhtml:file://c:\___nosuch.mht!___http:__//___69.50.189.124/winsearchie32.chm:_:/winsearchie32.exe Then yes you will get the warning from either Norton or McAfee. Its just a copy of the page with that line in it located in temporary internet files. Both norton and McAfee can delete it. Refreshing the page will bring back the "virus warning" This exploit is much bigger than "MHTMLRedir.Exploit" Main servers that are vulnerable are getting hacked that host websites. It also has very little to do with people looking for p0rn, cracks, or free stuff. The websites are in turn affected. An unprotected user visits the site and ends up with a ton of crapware, spyware, downloader trojans, hijackers, junk toolbars, etc, etc, all going on in the background without user interaction... Anotherwords...very little for prompts asking for permission to install whatever. As pointed out...Good reason to have decent up-to-date antivirus on board. Also.. IE-Spyad <--as abnormal pointed out. SpywareBlaster <--this also protects from bad active x controls. It only restricts a few hundred sites as apposed to IE-Spyad which restricts thousands of sites. I use both! Spywareguard is another good one. (yes I use it) Spybot is good as well...I do use the teatimer protection. A good HOSTS file will also be of great help. It wont even let you on the sites within its list....again thousands. If you use hpgaru's host file....over 30,000 sites are blocked. No more annoying flashy ads. http://www.dozleng.com/updates/index.php?s=2e958f25903a409c4e7d421890bb4577&act=calendar&code=showevent&eventid=9267 And of course a half decent firewall. Zone alarm free: http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp Recommended security settings for IE: http://bshagnasty.home.att.net/browsersettings.htm And as been mentioned thousands of times here...keep your OS up to date!! I never give up! Windows Update

0

Ya know if I installed IE-SpyAD it would take the fun out of using the internet. To many folks are running around scared to click on something these days. I visit some pretty crazy web sites and just tonight I updated Spybot and Lavasoft. Has been a few weeks since I have run either and SpywareBlaster is not even up to date as I type this and no problems where found with either programs. I refuse to let a few words from a so called expert scare me. Every OS has security issues and so does every browser. Over the years how many HUGE exploits have been pointed out? Of these exploits how many have been used? KTTD Wanker Drivers.Com Just Go There

0

People are still using Internet Explorer?

0

iamc wrote: People are still using Internet Explorer? Read this article from ComputerWorld. There is a browsers stat on page 2. To writ, IE had the lion’s share of users (by 69.6%) in October 2004, but other browsers have hung on. i_XpUser

0

I know that. I was being sarcastic. I will now be literal: Why are people still using Internet Explorer?

0

Got it, iamc. NP :-)) i_XpUser

0

just because ie has more users doesnt mean that it is a better browser.Windows amazing os has over 65,000 strains of viruses and linux has only 40.does that mean that windows is a safer os?lol!!thats a joke!you do the math on that one,and thats not counting the trojans,spyware.I did a drive by with linux on that site with the exploits,and i couldnt even get infected.lol!!no if i use my win98 box thats collecting dust maybe i will get infected.people say that oh! linux isnt just as popular as windows and thats why linux has fewer viruses.Well,from 40 viruses to over 65,000 viruses,i guess linux has alot of catching up to do.lol!!Wow, if linux would get new viruses at a rate of 5000 a year that would take oh about 13years to catch up to windows.Now 1000 viruses sounds a little more real and that would take oh 65years to catch up to windows.i dont understand why people just dont get it.come to life and realize that windows is a virus magnet.

0

A fix is now out. http://www.microsoft.com/technet/security/bulletin/ms04-040.mspx

0

Woop dee frig, another huge Internet Explorer exploit. *points and laughs* Use the web the way it was meant to be used. Get Firefox.

0

Well said :)

0

Penn State advises students to use alternatives to Microsoft Internet Explorer link

0