NASTY new Windows exploit - look out for this one!

Post Reply New Topic

http://forums.myispfinder.org/showthrea ... ge=1&pp=15

There's a new exploit out there that can infect Windows-based systems. Under IE or pre-1.5 Firefox, all you need to do is visit an affected web page. With FF 1.5, you are prompted to download a graphic file and will be infected if you choose Yes.

I got burned by this one when I was using a friend's computer a few days ago, before this exploit hit the mainstream media. I visited se ri al s.ws (DO NOT GO THERE IF YOU USE WINDOWS!! !!) in search of a replacement serial number.. Next thing I knew the web browser went nuts, a DOS box opened, and a system tray popup alerted me that I should download "Spy Sheriff". Shortly thereafter, it screwed with the desktop and brought the system to a crawl. I tried to install a few virus scanners, and immediately after installing them the trojan would run a system restore and wipe it out! I managed to get several virus and spyware scanners on there, manually deleted a bunch of files (including one text file it had made consisting of every e-mail address in the address book!), and ran them till they found nothing. But the computer STILL ran like crap. I ended up reformatting and reinstalling.

Be careful out there.. Avoid porn, warez, and other shady sites until MS gets around to patching this mess.

Wow dodgy, thanks for the warning

/runs off to install Firefox 1.5

This is particularly scary since you mentioned it run System Restore. I tend to rely on System Restore to clear our viruses its often easier to do that than running a full virus scan.

I'm glad I use Linux, oh wait, my fiancee uses windows, i'll tell her to be careful before it is too late (she won't have a clue what's going on if her system gets it, and she would probably say yes to the download as I have found lots of junk on her system which backs up that theory, i just need to remember which version of firefox i installed on to it)

You don't have to use windows to run the IE or Firefox internet browsers.

Fortunately I use Opera at home. Unfortunately my lab uses IE and Firefox. I wonder why the virus designers exempted Netscape?

Patch up guys

http://www.grc.com/sn/notes-020.htm

Although i cant guarantee this is actually a fix. I have installed it though. MS just need to get off their asses !

People still use Netscape?

MS have finally got something for us

http://www.microsoft.com/technet/securi ... 6-001.mspx

My home computer got hit with this. First thing i tried was system restore but it won't let you select a date before infection.

Any suggestions before I pay some computer geek money to help me?

Please make suggestions in non-techincal terms!


BeeBee

If you can get on the Internet, download and install AVG Free, then run a scan. They're pretty good about having up-to-date virus definitions, so hopefully it'll be able to find the problem. After that, run Windows Update and reboot.

I love OS X

Thanks, ghotistix.

My son is running AVG now and he says it seems to be finding all the %#*.

BeeBee

having dealt with a few cases of this now, I would recomend downloading and patching AdAware, and getting current versions of HiJack This and Look2me fix (often labeled l2mfix)

pull the comptuer off the net (physicially remove the network cord/modem cable)

go into safe mode, run ad-aware, reboot into normal mode, run it again, then run hijack this, come back, and post a log (you can find plenty of tutorials on how to do this) Most anyone here who has donemuch malware removal can instruct you on how to proceed, the l2mefix was needed on most of the infected machines I dealt with, but bestnot to use unless sure.