Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Internet Attack Exploits Microsoft Software Flaws ( Internet Explorer vulnerable )
Reuters ^ | Fri Jun 25, 2004 08:25 PM ET | Duncan Martell

Posted on 06/25/2004 10:41:28 PM PDT by Ernest_at_the_Beach

Reuters

 

 
Internet Attack Exploits Microsoft Software Flaws

Fri Jun 25, 2004 08:25 PM ET

By Duncan Martell

SAN FRANCISCO (Reuters) - A potentially dangerous attack on personal computers by a virus designed to steal financial data and passwords from Web users rippled across the Internet on Friday, computer security experts said.

The attack, which surfaced earlier this week and is known as the "Scob" outbreak, exploits a vulnerability in servers using Microsoft Corp.'s IIS software and has been called more dangerous than the recent "Sasser" and "Blaster" infections.

The infected servers in turn exploit another vulnerability in Microsoft's Internet Explorer browser to install a Trojan Horse virus on the PCs of Web surfers who visit the infected Web sites, said Alfred Huger, senior director of engineering at Internet security company Symantec Corp.

"All of this takes place while it looks like you're viewing the same Web page," Huger said. "You don't even know that parts of your browser have been redirected to another Web site."

The U.S. Computer Emergency Readiness team warned on its Web site that "any Web site, even those that may be trusted by the user, may be affected by this activity and thus contain potentially malicious code."

The Trojan Horse places a keystroke logger on users' PCs and is designed to capture credit card numbers and passwords and send them back to a server in Russia, said Michael Murray, director of vulnerability and exposure at computer security firm nCircle Network Security.

By late Friday, however, the threat to users' personal data has been diminished, at least for now.

"The server appears to have been shut down in the last eight hours," Murray said. "We don't know if it was shut down by authorities or whether it was accidental."

The attack is more alarming than most because there are no patches available yet from Microsoft to fix the vulnerability in Internet Explorer that lets the hackers take control of computers, security researchers said.

On its Web site, Microsoft said users could search for the files "Kk32.dll" or "Surf.dat" to see if their PCs were infected. The company also suggested users set their browser security level to "high."

Experts also urged computer users to update their anti-virus software protection software

Most anti-virus software has been updated so that it can prevent the Trojan Horse from being installed, but because there is no patch yet available, there's no way to prevent future attacks to install the virus, Huger said.

"The truly alarming part is there is no patch available for that vulnerability," Huger said.



TOPICS: Extended News; Front Page News; News/Current Events; Technical
KEYWORDS: getamac; ieproblems; internetattacks; internetexploiter; lookoutexpress; lowqualitycrap; securityflaw; techindex; trojan; viruses; whoops; windows
Navigation: use the links below to view more comments.
first previous 1-20 ... 101-120121-140141-160161-175 next last
To: TomServo

Say if I want to do the whole thing, right down to the OS. Do I have to know DOS codes in order to reinstall the OS?


121 posted on 06/29/2004 8:50:51 PM PDT by Lauren BaRecall (Just give the kid a pack of cigarettes - you know he's only gonna go out and smoke anyway!)
[ Post Reply | Private Reply | To 120 | View Replies]

To: Lauren BaRecall
Do I have to know DOS codes in order to reinstall the OS?

Just set your computer to boot off the CD, slap the CD in, follow the instructions (and know what you're doing) and let 'er rip.

Remember - backup all files you want to keep and write down any settings you need to beforehand.(Internet/Email,etc)

Which OS you installing?

122 posted on 06/29/2004 8:55:58 PM PDT by TomServo ("I'm so upset that I'll binge on a Saltine.")
[ Post Reply | Private Reply | To 121 | View Replies]

To: B Knotts

I may give it a whirl. I've visited the project website a few times in the last year or so but never got around to trying it out.


123 posted on 06/30/2004 4:15:27 PM PDT by Philip_the_evangelist
[ Post Reply | Private Reply | To 104 | View Replies]

To: Lauren BaRecall
"I have a really crummy thing going on. My monitor screen looks lighter, and for every line of print, there is a shadow that runs across the screen. The symptoms did not become worse, and I saw that the problem did not involve the monitor"

It might be your video card. Check the connection between your monitor and video card first. Then turn your computer off and open it up and take the video card out, clean the contacts with an eraser and re-seat it. Turn your computer on with the case off and see if all your fans are working, especially if the fan on the video card is working.

You could get one of those cans of air and blow all the dust and cobwebs out at this time too:)

The 2nd to last thing to do is feel the temperature of the processor on the video card. Use your other hand to touch the metal frame of the box to prevent static!!! If the processor is really hot, get a new card.

The last thing is to reload the video drivers. If that doesn't work, one of the rendering engines in the video processor went bad and you need another card.

All you need is a phillips screwdriver, an adult beverage of your choice, a can of air, a pizza, and maybe a flashlight to explore with:):)

I had a video card go bad once, that's why I buy my own $ parts:)

Some date huh? Sure! Why not? After the computer is cleaned up, you just take the girl out for dinner and a movie. :o)

If it doesn't get too late where we are:):):)

124 posted on 06/30/2004 4:47:07 PM PDT by BobS
[ Post Reply | Private Reply | To 117 | View Replies]

To: Lauren BaRecall

Once everything plays well with each other, use the Norton Ghost corporate version to image the system partition(s) to another partition on another drive; and burn it to sequential CDs also. I DON'T want to spend 3 days re-creating my monster:):)


125 posted on 06/30/2004 5:10:45 PM PDT by BobS
[ Post Reply | Private Reply | To 97 | View Replies]

To: TomServo
Just set your computer to boot off the CD....

I need that in American English, please. :o)

...(and know what you're doing)....

Oh, okay!

...and let 'er rip.

Oh, I can do that part just fine! Don't know where I'll end up ripping to! LOL!

Which OS you installing?

I have the feeling that if I told you the truth, and said I would be reinstalling my Win98SE OS, you'd only say, "What!? And not take advantage of the opportunity to install XP?!?"

126 posted on 06/30/2004 5:16:04 PM PDT by Lauren BaRecall (Just give the kid a pack of cigarettes - you know he's only gonna go out and smoke anyway!)
[ Post Reply | Private Reply | To 122 | View Replies]

To: Lauren BaRecall
I need that in American English, please. :o)

When the computer is first posting (booting), you need to get to the BIOS, usually by pressing the delete key while it's booting. Then look for an option that may say 'Boot Sequence'. Select that and then choose to boot off your CD drive. And yes - I'd get off 98SE, unless you don't have the horsepower to drive XP.

127 posted on 06/30/2004 5:19:58 PM PDT by TomServo ("I'm so upset that I'll binge on a Saltine.")
[ Post Reply | Private Reply | To 126 | View Replies]

To: BobS
It might be your video card.

So, a part of a video card can be bad? The whole thing isn't bad, because a part of it is still operational? Or else I wouldn't be able to read anything, etc.?

I wonder if I stressed it by flipping back and forth between the screens. Is that possible? Or was it something that could have happened anyway?

Oh, my video card is soooooooo stressed! Maybe a little biofeedback would help?

Check the connection between your monitor and video card first.

1. I can find the video card by following the wires on the back of the monitor.

2. I have to find the fans.

Then turn your computer off and open it up and take the video card out, clean the contacts with an eraser and re-seat it. Turn your computer on with the case off and see if all your fans are working, especially if the fan on the video card is working.

What do I have to unplug, and plug back in, when I do this?

You could get one of those cans of air and blow all the dust and cobwebs out at this time too:)

Can of air. I know what that is - they sell them at Staples. You can probably tell that's something I never tried before! LOL! And I have cats, too. Who love to go back there.

The 2nd to last thing to do is feel the temperature of the processor on the video card. Use your other hand to touch the metal frame of the box to prevent static!!! If the processor is really hot, get a new card.

I'm trying to phrase my next question in such a way as NOT to bring up images of Bill Clinton. That having been said, I can account for only one hand in this part of your instructions. :o)

Oh, the other hand is holding my drink! LOL!

I saw someone open up a CPU, quite a while ago. I remember that he had it on its side some of the time. I saw the big HD, and the motherboard, and I watched him put in some kind of card.

The last thing is to reload the video drivers. If that doesn't work, one of the rendering engines in the video processor went bad and you need another card.

If I have to buy a new video card, where can I get one? And do they come with a disk with the compatible drivers? If I reload the video drivers, do I have to uninstall them first?

All you need is a phillips screwdriver, an adult beverage of your choice, a can of air, a pizza, and maybe a flashlight to explore with:):)

A couple of ice-cold bottles of Bud, a can of air, Pizza - extra thin crust, extra sauce, mushrooms and sausage, a flashlight, a screwdriver, and maybe one of those things on wheels that they use to fix underneath the car....

128 posted on 06/30/2004 6:20:56 PM PDT by Lauren BaRecall (Just give the kid a pack of cigarettes - you know he's only gonna go out and smoke anyway!)
[ Post Reply | Private Reply | To 124 | View Replies]

To: BobS
Once everything plays well with each other, use the Norton Ghost corporate version to image the system partition(s) to another partition on another drive; and burn it to sequential CDs also.

Ahhhhhhhhhhhh, the system partitions! Wow, you think of everything!

WHAT did he say?

I think I need a screwdriver, a pizza, a couple of Buds, and to find a guy who'll do this for me. :oD

129 posted on 06/30/2004 6:29:05 PM PDT by Lauren BaRecall (Just give the kid a pack of cigarettes - you know he's only gonna go out and smoke anyway!)
[ Post Reply | Private Reply | To 125 | View Replies]

To: TomServo
When the computer is first posting (booting), you need to get to the BIOS, usually by pressing the delete key while it's booting.

I haven't a clue as to what that looks like. I think I'd feel a whole lot more comfortable if I could see someone do it first. What is a BIOS? And I take it that I don't need to know DOS code.

As far as speed goes, my computer is a little over 4 years old. I was cutting edge for about one week. :o) It's not even 1 Gig - about a 750, I think.

Whatever I end up doing, and when, you, and the other guys, are giving me a really good education. And I sincerely appreciate it. :o)

130 posted on 06/30/2004 6:41:05 PM PDT by Lauren BaRecall (Just give the kid a pack of cigarettes - you know he's only gonna go out and smoke anyway!)
[ Post Reply | Private Reply | To 127 | View Replies]

To: Lauren BaRecall
Gee Lauren! I will entertain you here explaining how things work together with a break for beer and pizza and a swim in the pool. I have spare parts if needed. A computer isn't a coffee maker:) It is a highly evolved species of things you plug in a wall:)

The processor chip on the video card has many rendering processes inside which create the image on your monitor. It also has memory chips near it, just like your motherboard.

Just be armed with a can of air. Pull the plug on the box and unscrew the cover. 4-6 screws. Mine has eight. Take the cover off and blow all the dust out so you can peek around. Plug the power plug back in with the cover off. Turn the computer back on and make sure all the little fans are working everywhere, and there isn't a bird's nest preventing air flow:):)

It get's better. Just freep mail me:):)

131 posted on 06/30/2004 7:01:28 PM PDT by BobS
[ Post Reply | Private Reply | To 128 | View Replies]

To: Lauren BaRecall
I think I'd feel a whole lot more comfortable if I could see someone do it first.

Click here to get an idea. This may not match your BIOS Screen(s). It's simply an illustrative guide. Check that 4th screenshot down. See where it says 'First Boot Device'? At this point you'd normally highlight that selection and press [ENTER]. You'd then be shown a screen of bootable devices - one of which will be your CD drive. You'd select your CD drive, press [ENTER] and press F10 to save the changes and exit. Forget DOS codes. And stick with 98SE (or buy a new machine and this whole discussion is moot ;-)).

132 posted on 06/30/2004 7:02:28 PM PDT by TomServo ("I'm so upset that I'll binge on a Saltine.")
[ Post Reply | Private Reply | To 130 | View Replies]

To: BobS
Just be armed with a can of air.

Heh heh - I take mine outside and use a leaf blower. Serious...:-)

133 posted on 06/30/2004 7:03:48 PM PDT by TomServo ("I'm so upset that I'll binge on a Saltine.")
[ Post Reply | Private Reply | To 131 | View Replies]

To: Lauren BaRecall
"Ahhhhhhhhhhhh, the system partitions! Wow, you think of everything!"

I am dual-booting two different operating systems. And have a seperate image from both on a seperate HD and sets of CDs.

In simple terms, I am dating two different women. Their registries don't know about each other. If one woman gets defective, the other will keep me going while I reconstruct another from stored DNA from the first one. If BOTH women find out about each other and destroy my HD, I have a spare SCSI HD that can reproduce the DNA of both women:):)

You should try that with men:):):)

134 posted on 06/30/2004 7:30:35 PM PDT by BobS
[ Post Reply | Private Reply | To 129 | View Replies]

To: TomServo

LOL! You ignore it that much?


135 posted on 06/30/2004 7:32:04 PM PDT by BobS
[ Post Reply | Private Reply | To 133 | View Replies]

To: BobS

Oh no. It's just every now and then (usually 3-4 months) I take it out for a cleanin'. And when I do, I use a leaf blower. :-) The cans of air are more expensive and less effective than the electricy it takes to run the leaf blower.


136 posted on 06/30/2004 7:41:22 PM PDT by TomServo ("I'm so upset that I'll binge on a Saltine.")
[ Post Reply | Private Reply | To 135 | View Replies]

To: BobS
I am dating two different women.

Swine.

If I weren't married - I'd be jealous.

Oh - to hell with it.

I am jealous.

137 posted on 06/30/2004 7:42:44 PM PDT by TomServo ("I'm so upset that I'll binge on a Saltine.")
[ Post Reply | Private Reply | To 134 | View Replies]

To: TomServo

I can't do that. I have a wiring job that is very delicate. I have a front panel with lights that tell me the health of all the SCSI HDs, card, temp and soldered wires tie-wrapped neatly all around. SCSI-320. 15K RPM drives and very fast. My sound system needs an upgrade, though. Video runs great!


138 posted on 06/30/2004 7:48:17 PM PDT by BobS
[ Post Reply | Private Reply | To 136 | View Replies]

To: TomServo
"I am dating two different women."

I am NOT dating 2 different women. Re-read the description I gave to Lauren about dual-booting. It's as simple as I could get!

139 posted on 06/30/2004 7:50:40 PM PDT by BobS
[ Post Reply | Private Reply | To 137 | View Replies]

To: BobS

Jeez Bob - just yanking your chain a little. ;-)


140 posted on 06/30/2004 8:06:35 PM PDT by TomServo ("I'm so upset that I'll binge on a Saltine.")
[ Post Reply | Private Reply | To 139 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-20 ... 101-120121-140141-160161-175 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson