|
Posted by Dennis on May 1, 2007, 9:17 pm
If you were Registered and logged in, you could reply and use other advanced thread options > There are too numerous to enumerate based upon the many ways to exploit
vulnerabilities.
> This can be; Qucktime, Sun Java, RealAudio, GDI, ANI, MS Office, etc, etc.
>
> Thene there are cleveraly crafted and encoded JavaScipt in HTML files which is
most likely
> what AVG called "VBS/Psyme.N".
>
> In thwe case above the HTML file has binary information in it that has been
encoded with the
> script. The code is decrypted executed the binary is extracted saved and
executed.
>
> Many exploits work through what is called "evelvation of priveledges" This
occurs when a
> buffer overflow condition is exploited and the priocess creates an evelvation
of priveledges
> where the code can be exercuted even in a limited user account that doesn't
have admn.
> rights.
>
> The problem is this is a public News Group and I don't want to go too deep
because I may
> instruct you as well as teach miscreants ways to to do bad things to others.
>
> --
>
Davehttp://www.claymania.com/removal-trojan-adware.htmlhttp://www.ik-cs.com/got-a-virus.htm
Good info, thanks for the reply Dave. A few more questions if you
don't mind:
Regarding the above example of sleezy website, which setting(s) would
I need to adjust in IE to have it protect me from these .htm files it
put in my temporary folder? Poking around in IE settings I notice a
bunch about enable/disabling/prompting for Active X but none regarding
Java. I see one called "Binary and Script Behaviours", would this be
it? What do you personally do when surfing the net? Do you use trusted
zones?
| 
XML site map