|
XP exploit on either Torrentz or TorrentSpy
First I went to TorrentSpy and then Torrentz.
Upon loading torrentz.com my firewall immediately caught mshtml2.exe attempting to connect to the internet.
The file was located in C:\Documents and Settings\Owner\Local Settings\Temp and it was just created, but I went immediately from TorrentSpy to Torrentz so I don't know which one put it there.
Here is the IP info it was trying to connect to:
Search results for: 63.251.135.24
Internap Network Services NETBLK-PNAP-11-99 (NET-63-251-0-0-1)
63.251.0.0 - 63.251.255.255
ClickSpring LLC INAP-BSN-CLICKSPRING-0971 (NET-63-251-135-0-1)
63.251.135.0 - 63.251.135.63
I have XP all up to date, so I'm not sure how this got on there and ran on it's own.
|