bvw Posted October 3, 2003 Report Share Posted October 3, 2003 Trojan uses MS hole to hijack Web browsers......Computer hackers have found another way to exploit an unpatched hole in Microsoft Corp.'s Internet Explorer Web browser, using a specially designed attack Web site to install a Trojan horse program on vulnerable Windows machines.The Trojan program changes the DNS (Domain Name System) configuration on the Windows machine so that requests for popular Web search engines like www.google.com and www.altavista.com bring the Web surfer to a Web site maintained by the hackers instead.Read it here: http://www.infoworld.com/article/03/10/02/...ojanhack_1.html Quote Link to comment Share on other sites More sharing options...
andsome Posted October 3, 2003 Report Share Posted October 3, 2003 Can anyone advise how to set security NOT to allow this? I have already ticked Spybot Search and Destroy in the box wich says, Lock IE Start page against user changes, and also the box which says, Lock hosts file read setting against user changes. Is this sufficient? Quote Link to comment Share on other sites More sharing options...
bvw Posted October 3, 2003 Author Report Share Posted October 3, 2003 http://securityresponse.symantec.com/avcen...jan.qhosts.htmlThey've sorted it by the looks of it andsome :) Keep them virus definitions updated :) Quote Link to comment Share on other sites More sharing options...
Redhat Posted October 3, 2003 Report Share Posted October 3, 2003 Side note.... currently 31 unpatched vulnerabilities in IE, one that is three eyars old which is an SSL Fraud vulnerability! Quote Link to comment Share on other sites More sharing options...
bvw Posted October 3, 2003 Author Report Share Posted October 3, 2003 Unpatched IE security holes.http://www.pivx.com/larholm/unpatched/ :blink: Quote Link to comment Share on other sites More sharing options...
andsome Posted October 3, 2003 Report Share Posted October 3, 2003 http://securityresponse.symantec.com/avcen...jan.qhosts.htmlThey've sorted it by the looks of it andsome :) Keep them virus definitions updated :)Norton 2003 AV set for automatic update, but I also check manually every other day. How about these settings which lock IE in Spybot, does it do any good? Is there any good reason to tick the third box also? Quote Link to comment Share on other sites More sharing options...
Redhat Posted October 3, 2003 Report Share Posted October 3, 2003 It does no good. Quote Link to comment Share on other sites More sharing options...
bvw Posted October 3, 2003 Author Report Share Posted October 3, 2003 Spybot can't protect you from this one andsome. Rely on your anti-virus. Quote Link to comment Share on other sites More sharing options...
andsome Posted October 3, 2003 Report Share Posted October 3, 2003 OK folks Quote Link to comment Share on other sites More sharing options...
Nite Posted October 3, 2003 Report Share Posted October 3, 2003 Is it beginning to look like it's a losing battle against these bozo's who try to screw things up? And what about the vunerabilities that MS either refuses to, or simply won't fix? Not to mention the patches that need patches. I'm seriously thinking about changing to another OS. I don't know about ya'll, but I still hold on to my theory of planned obsolescence on the part of MS. How many techs do they have working on solutions? How many programmers do they have working on developing new OS's? Seems like it may be only 3 or 4 for each, the way things are going. Quote Link to comment Share on other sites More sharing options...
bvw Posted October 3, 2003 Author Report Share Posted October 3, 2003 Probably, nite. Always something needing to be patched isn't there?I used to use Microsoft Money on my machine.......formatted and put nothing of interest on here now, as it just isn't secure is it? Quote Link to comment Share on other sites More sharing options...
artist Posted October 4, 2003 Report Share Posted October 4, 2003 Trojan uses MS hole to hijack Web browsers......Computer hackers have found another way to exploit an unpatched hole in Microsoft Corp.'s Internet Explorer Web browser, using a specially designed attack Web site to install a Trojan horse program on vulnerable Windows machines.The Trojan program changes the DNS (Domain Name System) configuration on the Windows machine so that requests for popular Web search engines like www.google.com and www.altavista.com bring the Web surfer to a Web site maintained by the hackers instead.Read it here: http://www.infoworld.com/article/03/10/02/...ojanhack_1.htmlI just read this thoroughly- and it certainly seems to fit the problems I've had.I did a scan though - see other thread - and nothing showed up.I reinstalled the google toolbar and all seems ok for a minute.But if it was a ghost why didn't all my security stuff stop it - and do I need to do anything else to check if it's there or gone now? Quote Link to comment Share on other sites More sharing options...
Redhat Posted October 4, 2003 Report Share Posted October 4, 2003 Which antivirus / antitrojan are you using? Quote Link to comment Share on other sites More sharing options...
artist Posted October 4, 2003 Report Share Posted October 4, 2003 Which antivirus / antitrojan are you using?Anti trojan??AVGZone AlarmAd AwareXP Anti-spyscrip-TrapSpycheckerSurely that's enough? Quote Link to comment Share on other sites More sharing options...
andsome Posted October 4, 2003 Report Share Posted October 4, 2003 How about 'Old Uncle Tom Cobley and all'? Quote Link to comment Share on other sites More sharing options...
Redhat Posted October 4, 2003 Report Share Posted October 4, 2003 I do have issues with AVG.. sometimes they don't update for 2 weeks, and during the "blaster week" they didn't issue update either (If I remember correctly). Unless your very happy with AVG I could maybe suggest Avast instead of AVG, it has Automatic updates too. But it is up to you :) Anti-Trojan : You don't really need one when you have a beast like Kaspersky Antivirus, but for something such as AVG which has a lower detection rate of trojans it can be a good idea to get an AT.There isn't a free one though. Quote Link to comment Share on other sites More sharing options...
artist Posted October 4, 2003 Report Share Posted October 4, 2003 I do have issues with AVG.. sometimes they don't update for 2 weeks, and during the "blaster week" they didn't issue update either (If I remember correctly). Unless your very happy with AVG I could maybe suggest Avast instead of AVG, it has Automatic updates too. But it is up to you :) Anti-Trojan : You don't really need one when you have a beast like Kaspersky Antivirus, but for something such as AVG which has a lower detection rate of trojans it can be a good idea to get an AT.There isn't a free one though.I'll stick with Avg :) Got enough complications with Virgin! :( Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.