Re: what would cause this ??

"DrZaius" wrote:

Friend clicks on a link to a website:

hxxp://sajpj.eaqcfmc.cn/bupkgwd.html

That looks like the kind of link one sees in spam. A script redirects
to another site which should display the following:

ActiveX Object Error:
Your browser cannot display this image file.

You need to download new version of ActiveX
Object to view this image file.

To download and install ActiveX Object click Continue.

[Continue] [Cancel] [Details...]


Choosing [Continue] will present you with a Windows executable to run
(VideoAccessCodecInstall.exe). Choosing [Cancel] will send you into a
loop of dialogs (preventing the browser window from being closed)
until 'ok' is clicked, which has the same effect as [Continue].

This is the infamous Zlob trojan, installer of adware, bogus security
software and other malware.

What happened next, is supposedly the
printer attached to the PC, proceeded
to print off 94 pages of random words &
gibberish sentences.

The website link above is no longer
in service.

It is still live.

Question is, what kind of "attack" (if
this was one), was this ?

Social engineering.

And, what was the source of the some 94
pages of words ? (since supposedly many
of the words / sentences in the pile of
paper were contents of emails the owner
had on the machine).

Perhaps the data was intended to be sent back to the attacker.

How could just visiting a website cause a
printer to spew out 94 pages of stuff ???

I suppose your friend installed the trojan in the hope of seeing some
pr0n. Who knows what damage it has done to the system.


.

Relevant Pages

  • Re: what would cause this ??
    ... Your browser cannot display this image file. ... To download and install ActiveX Object click Continue. ...
    (comp.security.misc)
  • IE does not install ActiveX-Objects
    ... IE has stoppped to install ActiveX Objects. ... an ActiveX-Object (e.g. Microsoft Update) I get the Informationbar telling ... Then nothing happens and the ActiveX object is not installed. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • IE6 Security Certificate Dialog not appearing
    ... I'm running XPSP2 on a LAN domain, I need IE6 to install an Activex Object, ... and it usually displays a security dialog box to accept the certifcate, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • How to refresh IE display from ActiveX component
    ... HTML events are trapped and the jscript handlers call ... methods in an ActiveX object (VB dll) to process business ... The ActiveX object changes values in the HTML ... controls but I noticed that IE does not display the new ...
    (microsoft.public.windows.inetexplorer.ie6.browser)