![]() |
#1 |
Fully Converged
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 18,170
Karma: 14021202
Join Date: Oct 2002
Location: Switzerland
Device: Too many to count here.
|
Beware IE Users - Jpeg Virus in the Wild
If you happen to still use Internet Explorer, you better read this information at Easynews and seriously consider switching over to Firebird.
Once this virus has overflowed GDI+, phoned home, connected to an ftp site and downloaded almost 2megs of stuff, it installs another trojan as a service on your Windows machine. Real evil. The isolated virus file is also available there for download, so you can test if your latest virus killer can detect this one. |
![]() |
![]() |
![]() |
#2 |
Fully Converged
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 18,170
Karma: 14021202
Join Date: Oct 2002
Location: Switzerland
Device: Too many to count here.
|
I forgot to mention another part also written in the Easynews article:
The virus also installs radmin (radmin.com) running as 'r_server'. From the radmin.com site, "With Radmin you can work on a remote computer exactly as if you were right there at its keyboard." My Kaspersky AV detected the virus after a signature update and identified it as Exploit.Win32.MS04-028.gen. |
![]() |
![]() |
Advert | |
|
![]() |
#3 |
Fanatic
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 522
Karma: 14050
Join Date: May 2003
Location: Astoria, NY
Device: Zire 71
|
Don't use IE...I'm on Mozilla so hopefully I have nothing to worry about. Also at home I'm using a Mac so don't think anything will happen.
|
![]() |
![]() |
![]() |
#4 |
MR prodigal son
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 1,085
Karma: 1083739
Join Date: Mar 2003
Location: Australia
Device: Kobo Aura H2O
|
Nasty.... Glad I switched to Firefox too!
Craig. |
![]() |
![]() |
![]() |
#5 |
Evangelist
![]() ![]() ![]() Posts: 418
Karma: 281
Join Date: Jul 2004
Location: Canada
Device: Assorted older devices
|
On my Mac I've viewed images that exploit the buffer overflow (which is where the virus stems from), and nothing happened at all (not that I expected it to). It's a Microsoft product only hole.
Don't have to worry about it with any form of Unix (MacOS X, Linux, *BSD, etc.), or with Firefox/Mozilla/etc. on Windows. |
![]() |
![]() |
Advert | |
|
![]() |
|
![]() |
||||
Thread | Thread Starter | Forum | Replies | Last Post |
Scryer's Gulch: Magic in the Wild, Wild West - FREE | MeiLin | Self-Promotions by Authors and Publishers | 4 | 07-23-2010 02:17 AM |
Scan JPEG as notes | kinged | Sony Reader | 6 | 05-27-2009 12:04 PM |
Beware -- Trojan virus in 0.5.9 | nathantw | Calibre | 2 | 04-30-2009 03:31 PM |
JPEG lockups | jakeluck | Sony Reader | 0 | 11-25-2006 03:24 PM |