read about a new virus thats fucking scary - GoFuckYourself.com

tony286 · 07-01-2004, 08:28 PM

http://www.eweek.com/article2/0,1759,1618458,00.asp

Here is part of it . Also can anyone recommend a more secure browser that is also compatible with most of whats on the net. Thanks

Pop-Up Program Snatches Banking Passwords
By Dennis Fisher
June 29, 2004

Customers who use a number of the top online banking sites are at risk of falling prey to a new Web-based attack that snatches user IDs and passwords for these sites.

Among the sites targeted by the attack are some owned by Citibank, Deutsche Bank and Barclays Bank.

The attack is rather complex and appears to use a known flaw in Internet Explorer (IE) to drop a Trojan horse program on vulnerable machines. The Trojan is delivered through a malicious pop-up ad that loads a file called "img1big.gif" onto the machine. The file is in fact a compressed Win32 executable that contains the Trojan and a DLL.

Pun · 07-01-2004, 08:32 PM

Two browsers that are very nice, and compatible with most everything on the net:

Firefox

and

opera

{fusion} · 07-01-2004, 08:33 PM

firefox is really good, www.mozilla.org

there was a patch yesterday for internet explorer so maybe they have sorted it.

if they made pagerank toolbar for firefox i dont think id use IE again.

Repetitive Monkey · 07-01-2004, 09:20 PM

Quote:

Originally posted by {fusion}
there was a patch yesterday for internet explorer so maybe they have sorted it.

Yes, until next time. And there WILL be a next time, as usual.

HS-Trixxxia · 07-01-2004, 09:24 PM

Quote:

Originally posted by tony404
http://www.eweek.com/article2/0,1759,1618458,00.asp

Here is part of it . Also can anyone recommend a more secure browser that is also compatible with most of whats on the net. Thanks

Pop-Up Program Snatches Banking Passwords
By Dennis Fisher
June 29, 2004

Customers who use a number of the top online banking sites are at risk of falling prey to a new Web-based attack that snatches user IDs and passwords for these sites.

Among the sites targeted by the attack are some owned by Citibank, Deutsche Bank and Barclays Bank.

The attack is rather complex and appears to use a known flaw in Internet Explorer (IE) to drop a Trojan horse program on vulnerable machines. The Trojan is delivered through a malicious pop-up ad that loads a file called "img1big.gif" onto the machine. The file is in fact a compressed Win32 executable that contains the Trojan and a DLL.

Mmmm.....I may be wrong, but isn't this what KRL was mentioning the other day?

Wilber · 07-01-2004, 09:35 PM

That virus is a BHO (Browser Helper Object) so that means IE will popup a
Security Warning window. There is no "flaw" in IE that's a Java applet install
and they can't be forced you have to click "Yes" on the Security Warning popup
to get infected. How is it a "flaw" if the stupid shit clicked "Yes" on a Security
Warning popup.

Installing 47 third party browsers isn't going to stop a fool from clicking things
they shouldn't be clicking. You don't need to install anything just pay attention
to the Security Warning popups when they occur. M$ put the Security Warning
popup within IE to warn you when a site is trying to install something on you.

Just click "No" like your suppose to do and you'll avoid any virus like that and spyware.

Mr. Marks · 07-01-2004, 09:46 PM

Damn......

$5 submissions · 07-01-2004, 09:48 PM

Great points, Wilber.

You got to the heart of the problem.

Quote:

Originally posted by Wilber
That virus is a BHO (Browser Helper Object) so that means IE will popup a
Security Warning window. There is no "flaw" in IE that's a Java applet install
and they can't be forced you have to click "Yes" on the Security Warning popup
to get infected. How is it a "flaw" if the stupid shit clicked "Yes" on a Security
Warning popup.

Installing 47 third party browsers isn't going to stop a fool from clicking things
they shouldn't be clicking. You don't need to install anything just pay attention
to the Security Warning popups when they occur. M$ put the Security Warning
popup within IE to warn you when a site is trying to install something on you.

Just click "No" like your suppose to do and you'll avoid any virus like that and spyware.

Jonathan Quarkschowski · 07-01-2004, 10:05 PM

www.apple.com

Pun · 07-02-2004, 04:17 AM

Quote:

Originally posted by Wilber
That virus is a BHO (Browser Helper Object) so that means IE will popup a
Security Warning window. There is no "flaw" in IE that's a Java applet install
and they can't be forced you have to click "Yes" on the Security Warning popup
to get infected. How is it a "flaw" if the stupid shit clicked "Yes" on a Security
Warning popup.

Installing 47 third party browsers isn't going to stop a fool from clicking things
they shouldn't be clicking. You don't need to install anything just pay attention
to the Security Warning popups when they occur. M$ put the Security Warning
popup within IE to warn you when a site is trying to install something on you.

Just click "No" like your suppose to do and you'll avoid any virus like that and spyware.

That's not entirely true. There have been a host of security advisories where holes within IE have been found where the user has no knowledge. If you'd like, I can post links to every single one of them, but for the sake of space I won't. I haven't read what the latest patch with IE does, but in the past Microsoft has been slow at best when it comes to fixing holes in their browser.

While I would agree, there are a host of problems that can be fixed with a bit of user intelligence, there are also a wide array of holes/exploits that have been found where the user has no knowledge of what's happening, and thus is unable to prevent whatever malicious activities are going on.

joshuawk · 07-02-2004, 04:21 AM

yea i think its about time I get a nice mac myself.

think im gonna buy one on apple.com in a second

VideoJ · 07-02-2004, 04:42 AM

Quote:

Originally posted by {fusion}
firefox is really good, www.mozilla.org

there was a patch yesterday for internet explorer so maybe they have sorted it.

if they made pagerank toolbar for firefox i dont think id use IE again.

http://www.prgooglebar.org/

woj · 07-02-2004, 05:15 AM

Quote:

Originally posted by Wilber
That virus is a BHO (Browser Helper Object) so that means IE will popup a
Security Warning window. There is no "flaw" in IE that's a Java applet install
and they can't be forced you have to click "Yes" on the Security Warning popup
to get infected. How is it a "flaw" if the stupid shit clicked "Yes" on a Security
Warning popup.

Installing 47 third party browsers isn't going to stop a fool from clicking things
they shouldn't be clicking. You don't need to install anything just pay attention
to the Security Warning popups when they occur. M$ put the Security Warning
popup within IE to warn you when a site is trying to install something on you.

Just click "No" like your suppose to do and you'll avoid any virus like that and spyware.

It IS possible to install anything on the victims computer without any popups. There are even exploits out there that work on a fully patched system.

Fired · 07-02-2004, 05:49 AM

definitively firefox

Wilber · 07-02-2004, 06:33 AM

Quote:

Originally posted by Pun
but in the past Microsoft has been slow at best when it comes to fixing holes in their browser

You've got your facts all mixed up.
MBlaster and Sasser were built by examining security updates released by Microsoft.
For years Microsoft has released criticals long before any such exploit has been populated
on the Web.

Quote:

there are also a wide array of holes/exploits that have been found where the user
has no knowledge of what's happening, and thus is unable to prevent whatever malicious
activities are going on

Your mixing a little facts with a bunch of confusion again. Your referring to Blaster and Sasser
exploits again. The critical fixes for them were available long before the exploit was
used on the Web. The only people who got hit with that shit were the lamers who
don't update their Windows XP/2000.

Quote:

Originally posted by woj
It IS possible to install anything on the victims computer without any popups. There are even exploits
out there that work on a fully patched system.

Well since YOU said so then I guess it must be true (Bullshit).

jimmyf · 07-02-2004, 06:57 AM

Quote:

Originally posted by Wilber
That virus is a BHO (Browser Helper Object) so that means IE will popup a
Security Warning window. There is no "flaw" in IE that's a Java applet install
and they can't be forced you have to click "Yes" on the Security Warning popup
to get infected. How is it a "flaw" if the stupid shit clicked "Yes" on a Security
Warning popup.

Installing 47 third party browsers isn't going to stop a fool from clicking things
they shouldn't be clicking. You don't need to install anything just pay attention
to the Security Warning popups when they occur. M$ put the Security Warning
popup within IE to warn you when a site is trying to install something on you.

Just click "No" like your suppose to do and you'll avoid any virus like that and spyware.

correct

this new virus will get you no matter which browser you use I THINK

07-01-2004, 08:28 PM	#1
tony286 lurker Industry Role: Join Date: Aug 2002 Location: atlanta Posts: 57,021	read about a new virus thats fucking scary http://www.eweek.com/article2/0,1759,1618458,00.asp Here is part of it . Also can anyone recommend a more secure browser that is also compatible with most of whats on the net. Thanks Pop-Up Program Snatches Banking Passwords By Dennis Fisher June 29, 2004 Customers who use a number of the top online banking sites are at risk of falling prey to a new Web-based attack that snatches user IDs and passwords for these sites. Among the sites targeted by the attack are some owned by Citibank, Deutsche Bank and Barclays Bank. The attack is rather complex and appears to use a known flaw in Internet Explorer (IE) to drop a Trojan horse program on vulnerable machines. The Trojan is delivered through a malicious pop-up ad that loads a file called "img1big.gif" onto the machine. The file is in fact a compressed Win32 executable that contains the Trojan and a DLL.

07-01-2004, 08:32 PM	#2
Pun Confirmed User Join Date: Oct 2003 Location: Seattle Posts: 379	Two browsers that are very nice, and compatible with most everything on the net: Firefox and opera __________________ TrafficHolder.com - Buy/Sell Adult Traffic ICQ: 18771941

07-01-2004, 09:35 PM	#6
Wilber Confirmed User Join Date: May 2001 Location: De,Oh,Lei Posts: 1,295	That virus is a BHO (Browser Helper Object) so that means IE will popup a Security Warning window. There is no "flaw" in IE that's a Java applet install and they can't be forced you have to click "Yes" on the Security Warning popup to get infected. How is it a "flaw" if the stupid shit clicked "Yes" on a Security Warning popup. Installing 47 third party browsers isn't going to stop a fool from clicking things they shouldn't be clicking. You don't need to install anything just pay attention to the Security Warning popups when they occur. M$ put the Security Warning popup within IE to warn you when a site is trying to install something on you. Just click "No" like your suppose to do and you'll avoid any virus like that and spyware. __________________ Sig NOT for sale

07-02-2004, 04:21 AM	#11
joshuawk Confirmed User Join Date: Jun 2003 Location: my moms house Posts: 1,092	yea i think its about time I get a nice mac myself. think im gonna buy one on apple.com in a second __________________ i love GW

07-02-2004, 05:49 AM	#14
Fired Registered User Join Date: Jun 2004 Posts: 12	definitively firefox __________________ sorry for my $0.02 english

07-01-2004, 08:33 PM	#3
{fusion} Confirmed User Join Date: Sep 2003 Posts: 1,650	firefox is really good, www.mozilla.org there was a patch yesterday for internet explorer so maybe they have sorted it. if they made pagerank toolbar for firefox i dont think id use IE again.

07-01-2004, 09:46 PM	#7
Mr. Marks Confirmed User Join Date: Jun 2001 Location: Wherever I want Posts: 7,517	Damn......

07-01-2004, 10:05 PM	#9
Jonathan Quarkschowski So Fucking Banned Join Date: Jun 2004 Location: I made people more money than you could ... Posts: 631	www.apple.com