Re: about.blank virus

From: \\~Virus Guard~/ (vguard223_at_vgcorp.com)
Date: 05/02/04 

Date: Sun, 2 May 2004 07:47:49 -0300

Try right-clicking Internet Explorer, hit properties, and where it is
about:blank, switch it to something like Google.ca or MSN.com.

/~~Virus Guard~~\
"cquirke (MVP Win9x)" <cquirkenews@nospam.mvps.org> wrote in message
news:h78u80pviim7spvi0bk0o62fsocb853vlm@4ax.com...
> On Sat, 24 Apr 2004 12:30:06 -0700, "Trafton"
>
> >What virus are you referring to, exactly?
>
> Could be CoolWebSearch; it "infects" (troj's) About:Blank
>
> >"joe" <anonymous@discussions.microsoft.com> wrote in message
>
> >> This virus is plaguing people all over the place...where
> >> the hell is tha patch already?
>
> The problem isn't About: Blank, which is the normal thing IE uses when
> you don't want it trying to dial up every time you load it to open
> HTML files saved to HD, etc.
>
> The problem is that some malware change the contents of About: Blank
> so that it includes their malicious content. This may be invisible
> but malicious anyway, thanks to the wonders of scripts and other
> active content... and as About: Blank is a file on the local HD, it's
> likely to be processed in "anything goes" local HD (in)security zone.
>
> If IE had a clue, it would have an option to start with NO page,
> rather than loading a file that can be leveraged as a run point.
>
> But, there you are.
>
>
> >-- Risk Management is the clue that asks:
> "Why do I keep open buckets of petrol next to all the
> ashtrays in the lounge, when I don't even have a car?"
> >----------------------- ------ ---- --- -- - - - -