Posted on 12/01/2005 7:41:41 AM PST by ShadowAce
The release of a Trojan that exploits an unpatched IE hole has prompted speculation that Microsoft may release an emergency out-of-cycle security patch. The Delf-DH Trojan downloader uses an Internet Explorer vulnerability to infect unprotected Windows users who stray onto maliciously constructed websites. Delf-DH downloads other malware onto infected machines changing settings in order to monitor user activity and redirect surfers onto porn sites.
The attack relies on a flaw in the way IE handles requests to the window() object, highlighted by proof-of-concept code last week and now used in anger by VXers. Even fully patched Windows 2000 and Windows XP systems are vulnerable. Until a patch is available to address this vulnerability, US-CERT strongly encourages Windows users to disable Active Scripting.
Security experts at the SANS Institute Internet Storm Centre speculate that the attack, though not widespread, is serious enough for Microsoft to release an out of cycle patch rather than waiting for its scheduled monthly patching day, which this month falls on 13 December. Microsoft isn't commenting on when a patch might be available but the smart money is on Redmond following a June 2004 precedent and releasing an emergency security fix outside its regular Patch Tuesday updates. ®
WOW!!!! Clearing cookies stopped it...
Interesting. Have you tried to run Spybot, Ad-Adware, etc.? I'd try those next. Be sure to update all their definitions first.
Ahh. Good. Be sure you don't accept cookies from NewsMax anymore. :)
People who spread internet viruses and worms and whatever deserve mandatory jail minimums.
bump
You are much, much too forgiving. I'd vote to hang their carcasses from highway overpasses with with a large sign to label what-for.
LOL! I hadn't clicked on that before.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.