[Full-Disclosure] Re: Spyware installs with no interaction in IE on fully patched XP SP2 box

From: Willem Koenings (isec_at_europe.com)
Date: 10/04/04

  • Next message: Berend-Jan Wever: "[Full-Disclosure] Test your windows OS" 
    To: full-disclosure@lists.netsys.com
Date: Mon, 04 Oct 2004 09:55:19 -0500

    hi,

    > I was unable to verify it, since I don't use IE, and would prefer not
    > infecting myself on accident, however I did run across this:
    >
    > http://themexp.org/about_wrap.php
    >
    > Perhaps one of the themes you downloaded was bundled with the spyware?

    two tiny links from there:

    http://WWW.addictivetechnologies.net/dm0/js/Confirm80wu03rd.js
    http://www.addictivetechnologies.net/DM0/cab/ATPartners.cab

    W. 

    -- 
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
  • Next message: Berend-Jan Wever: "[Full-Disclosure] Test your windows OS"

    Relevant Pages

    • Re: which PC
      ... "Uh...name for me just one virus or piece of spyware in the wild which ... is capable of infecting OS X ... All claiming mac OS x is secure when there is plenty of evidence it is ... the wild that are actively infecting Mac computers. ...
      (rec.photo.digital)
    • Re: which PC
      ... "Uh...name for me just one virus or piece of spyware in the wild which ... is capable of infecting OS X ... All claiming mac OS x is secure when there is plenty of evidence it is ... the wild that are actively infecting Mac computers. ...
      (rec.photo.digital)
    • Re: Msconfig wont stay running...
      ... backdoor.trojan infecting \windows\system32\win32server.exe. ... > spyware, this problem is symptomatic of virus infection. ... > reinstall your av or install a new, ... > 4) Continue the cleaning process by removing any spyware with Spybot ...
      (microsoft.public.windowsxp.general)
    • Re: which PC
      ... "Uh...name for me just one virus or piece of spyware in the wild which ... is capable of infecting OS X ... the wild that are actively infecting Mac computers. ...
      (rec.photo.digital)
    • Re: Cant Change my wall paper
      ... > my computer is infected with spyware and should not be used with out being ... Do a Google search using the name at the end of the message or any part of ... Once you have the name of the infecting program go to Symantec and search ...
      (microsoft.public.windowsxp.general)