big security hole in IE
grix
— 06 Jul 2004 04:04
Subject: big security hole in IE
a very good reason to stop using Internet Explorer:
described here
there seems to be no patch for this yet
so don't go using IE when you do your internet banking
mex
— 06 Jul 2004 08:27
Subject: Re: big security hole in IE
on a related subject I've been cleansing a friends machine that was been used without any anti virus or firewall and had collected about 30 spyware data miners, plus about 10 viruses. Managed to get of everything off except for one file. On the net it says disable system restore and run avg againwhich i did but it still remains. I downloaded a virus removal tool (CLARV) from Kaspersky, uninstalled AVG, ran CLARV which said it had deleted the file but when I put AVG back on the file was back. I tried searching for the file to delete it manually from Windows\system32\comm.dll but I can't find it anywhere! any suggestions?
rx
— 06 Jul 2004 09:53
Subject: comm.dll sounds vaguely useful

i prefer kaspersky.
at least ie is constantly being pulled to bits ..this must help it become more secure eventually....
some of these other browsers aren't tested in the same way so i wonder what holes are waiting to be discovered once people can be arsed hacking them?
how secure is firefox? and how do we know?
grix
— 06 Jul 2004 10:08
Subject: browser security
the source of firefox is available to anyone to examine which means it can easily be audited for common programming errors that can lead to exploits
(buffer oveflows, heap overflows etc )
the main reason IE is insecure is because it is so closely integrated with Windows - this exploit is impossible to develop for firefox
secunia.com provides a lot of stats on operating system and software vulnerabilities
i'm not bashing microsoft just because they are microsoft - this latest IE hole is a zero-day exploit - the vulnerability was discovered only when an exploit was noticed working in the wild sniffing secure banking transactions.
normally vulnerabilities in software are discovered, publicised and then exploits are devised (people generally have time to fix the problem)
mex
— 06 Jul 2004 10:08
Subject: Re: comm.dll sounds vaguely useful
the Kaspersky removal tool reported finding and deleting the offending dll but after restarting and reinstalling AVG it seemed to be back again! I searched google for info and was told to manually move it the the desktop, change it from read only then delete it and restart but when I searched for it it couldn't be found
grix
— 06 Jul 2004 10:09
Subject: whats the virus name?
rx
— 06 Jul 2004 10:42
Subject: ok..
i don't know what came over me...
apart from billy's effluence
mex
— 06 Jul 2004 11:02
Subject: Re: whats the virus name?
can't remember exactly bexcause I'm back in Interlaken now and his computer is in berlin but think it was Backdoor Agent AB (the kaspersky removal tool is for backdoor agent ac)
mex
— 06 Jul 2004 12:20
Subject: Re: Re: whats the virus name?
evidently the name of the problem system32 dll is randomly generated each time it reinfects. AVG finds it but can't delete it or quarantine it, not sure why. A manual search doesn't find it! CLARV supposedly finds it and deletes it but then AVG finds it again!
Reply
providers of synthetic therapeutic virtual-chemical-combination therapy for humans since before fuckin ages ago