New Security Hole for Internet Explorer

[Mr. Otis]

You may want to quit using Interntet Explorer. A new virus exploits several flaws in Windows and Internet Explorer to steal secure data. From the website CoolTechZone:

---
According to various security experts, a new, potentially dangerous, virus attacks personal computers to obtain financial data and passwords that are stored on the computer's hard disk drive. The reports of this virus were confirmed on Friday.

The attack started earlier this week with a code-name "Scob". Scob exploits a vulnerability in servers that utilize Microsoft's IIS software. Many security experts consider this virus to be more dangerous than the recent Sasser and Blaster attacks.

After the websites that use IIS sever software are infected, the virus exploits a vulnerability in Internet Explorer to download a Trojan Horse onto the user's personal computer.

Alfred Huger, Senior Director of Engineering at Symantec Corporation, said "All of this takes place while it looks like you're viewing the same webpage. You don't even know that parts of your browser have been redirected to another Web site."

According to online reports, any website, even the most trusted ones, can carry the malicious code. The Trojan Horse installs a keylogger onto a system, records the credit card numbers and passwords and sends the information to a server in Russia.
---

According to the article, Scob doesn't affect the Mac version of IE (which isn't very good anyway), or any version of the non-MS web browsers like Mozilla or Opera.

Since Mozilla and it's variant, Firefox, are free downloads with advanced security settings and a built-in pop-up blocker (and no ads, like the free version of Opera), I recommend those as replacements for anyone still using Internet Explorer on a Windows machine.

[wgjones3]

Great. Just great. Too bad my accelerated service isn't compatable with Mozilla. Oh well, guess it's back to slow surfing again.

[Merry]

Yikes! I wish I understood this stuff better... :( :(

Merry

[Mr. Otis]

I tried to post earlier today but the WiFi connection at the hotel here is spotty. I believe there are some steps you can take (short of buying a Mac--jooooinnnn uuuusss) that can tighten up IE's security. Unfortunately, one of them is disabling Java, and another, I think, is setting your security preference at the absolute highest level.

[wgjones3]

Hey, I did both. I also updated my A/V defs and ran a Windows Update. I've also got Firebird (the previous version of Firefox) just in case. :)

[wgjones3]

Microsoft has released an update, but so far, it's not in the Windows Update system.


Direct Link to a download page:

http://www.microsoft.com/downloads/details.aspx?FamilyId=4D056748-C538-46F6-B7C8-2FBFD0D237E3&displaylang=en

System Requirements Supported Operating Systems: Windows 2000, Windows NT, Windows Server 2003, Windows XP

-or-

This one a very few will use: http://www.microsoft.com/downloads/details.aspx?FamilyId=E7576B19-DE8B-41B0-BBD9-06C39591CECF&displaylang=en

System Requirements Supported Operating Systems: Windows Server 2003, Windows XP 64-bit

Windows XP Version 2003, 64 Bit Edition

Windows Server 2003, 64 Bit Edition

[Merry]

I wonder if I have been a victim of this new virus because yesterday I went to turn on my computer and was greeted by a blank screen. After fiddling with it, I did got this cryptic message: windows root failed. Everything was gone. Because I have a rickety machine, I at least am careful to copy everything onto disks, so it wasn't too tragic. But then began the marathon of running the disks, re-loading msn, having to call msn because as usual, there was a problem....and what is it with msn? I think they must have a law where every other employee must be from the Mid-East or India. Not that that's a terrible thing, but when computer jargon already sounds like, "Blah, blah, blah..." you add an accent and it's even worse.

My son, Techno-Lad, offered to help, but like a character in a Heinlein space-opera, I said, "No, I must do this...alone."

Eventually, I almost got it. By ten o'clock I was heading to windows update for the down loads to keep it from happening again...well, to keep it from happening immediately. Downloads in progress, I fell asleep. I woke up to find the machine still down loading at 3 AM. Thinking this couldn't be right, I fiddled around and accidentally cancelled the down load. With the words, Computers. Hate. I. ringing in my brain, I shut it off and went back to bed. At 7 AM I restarted the the download and it seemed to be working correctly. Needing to go to work, I left it all in the hands of Techno-Lad. Sigh. At least it should work when I get home.

Thanks for posting the update.

Merry

[wgjones3]

I think this latest virus was pretty stealthy. As far as I know, it's main goal was to steal credit card numbers. :eek:

Do you, by chance, have Windows 95 or Windows 98? I seem to remember running across that Windows root failure once in my Win98 days.

Oh, and the customer service reps are some of the jobs that have been "outsourced" to India to further bolster the great U.S. economy (maybe someday I'll be smart enough to figure out how shipping jobs offshore strengthens the U.S. job market--seems like at some point there need to be jobs coming here).

[Merry]

Yup, Windows 95...guilty.

Whoa, I guess you never can tell where in the world you're speaking to....it does explain a few things, however... :D :D :D :D

Merry

[Merry]

Okay, just installed it. Now to the downs loads that open zipper files...finally...

Merry