Go back
Who says trojans, rootkits and worms only attack IE?

Who says trojans, rootkits and worms only attack IE?

General

e

timed out again

Joined
25 Apr 08
Moves
3102
Clock
12 Sep 10
Vote Up
Vote Down

Einstein on the forum claims that he doesn't run windows update (possibly from running pirated windows) and doesn't have an antivirus on the premise that viruses/rootkits/trojans/worms only attack IE.

For the misinformed/ignorant, Firefox/Safari/Chrome still allow scripts on webpages you visit. An iframe with the zeus trojan for example will get you. These ads where you see false antiviruses/fake antispywares will get you.

This is 2010 man not 1990.

leestatic
Hristos voskrese

feckin' 'ell

Joined
23 May 05
Moves
19603
Clock
12 Sep 10
2 edits
Vote Up
Vote Down

Originally posted by enrico20
Einstein on the forum claims that he doesn't run windows update (possibly from running pirated windows) and doesn't have an antivirus on the premise that viruses/rootkits/trojans/worms only attack IE.

For the misinformed/ignorant, Firefox/Safari/Chrome still allow scripts on webpages you visit. An iframe with the zeus trojan for example will get you. The ...[text shortened]... where you see false antiviruses/fake antispywares will get you.

This is 2010 man not 1990.
Jesus, did you get sexually abused by a Trojan or something? as you bunny hopped into my thread also, i usually can remove most crap from my system without a process munching waste of money virus protector, and just once in three years i was beat and unable to clear it manually, so a nice clean pirate version of windows was installed, with ..hold on to your chair..updates switched off!!

e

timed out again

Joined
25 Apr 08
Moves
3102
Clock
12 Sep 10
Vote Up
Vote Down

Firefox add-on included Trojan virus

Mozilla appears to have let it’s guard down, with a Firefox add-on that included a Trojan that could allow remote access to a users PC.

Two add-ons were affected; Master Filer which was infected with a password-stealing Trojan called Win32.LdPinch.gen, and Sothink Web Video Downloader which was infected with a backdoor Trojan called Win32.Bifrose.32.Bifrose.

Mozilla has issued a statement:

“If a user installs one of these infected add-ons, the trojan would be executed when Firefox starts and the host computer would be infected by the trojan. Uninstalling these add-ons does not remove the trojan from a user’s system. Users with either of these add-ons should uninstall them immediately. Since uninstalling these extensions does not remove the trojan from a user’s system, an antivirus program should be used to scan and remove any infections.”

Mozilla believe only 4,600 people are infected after downloading these add-ons.

How these add-ons made it online is unknown, as Mozilla scans all add-ons for viruses before they are approved. Mozilla now plans on using two different malware detection tools to try and stop this issue from reoccurring in the future.

http://www.browser-watch.com/2010/02/08/firefox-add-on-included-trojan-virus/

leestatic
Hristos voskrese

feckin' 'ell

Joined
23 May 05
Moves
19603
Clock
12 Sep 10
Vote Up
Vote Down

Originally posted by enrico20
Firefox add-on included Trojan virus

Mozilla appears to have let it’s guard down, with a Firefox add-on that included a Trojan that could allow remote access to a users PC.

Two add-ons were affected; Master Filer which was infected with a password-stealing Trojan called Win32.LdPinch.gen, and Sothink Web Video Downloader which was infected with a back ...[text shortened]... in the future.

http://www.browser-watch.com/2010/02/08/firefox-add-on-included-trojan-virus/
The one that got me was a flash player update.

e

timed out again

Joined
25 Apr 08
Moves
3102
Clock
12 Sep 10
Vote Up
Vote Down

Just to humor myself further, google displays the warning "This site may harm your computer" when you want to visit a compromised website. What do you think this means and select one of the following :-

a) I can visit the site with immunity since I have firefox. Even if firefox bans me from the site I can still force myself to visit the site.
b) I can visit the site with noscript, flashblock and javascript disabled in firefox
c) I should not visit the site.
d) I should read up more on the threat.

Z

Joined
04 Feb 05
Moves
29132
Clock
12 Sep 10
Vote Up
Vote Down

Originally posted by enrico20
Einstein on the forum claims that he doesn't run windows update (possibly from running pirated windows) and doesn't have an antivirus on the premise that viruses/rootkits/trojans/worms only attack IE.

For the misinformed/ignorant, Firefox/Safari/Chrome still allow scripts on webpages you visit. An iframe with the zeus trojan for example will get you. The ...[text shortened]... where you see false antiviruses/fake antispywares will get you.

This is 2010 man not 1990.
paranoia saves your data.

the ones that claim you don't need an antivirus and/or firewall are either morons or they only play solitaire on a computer not connected to the internet.


if you connect, you may get infected.

Sicilian Sausage

In your face

Joined
21 Aug 04
Moves
55993
Clock
12 Sep 10
Vote Up
Vote Down

Originally posted by leestatic
Jesus, did you get sexually abused by a Trojan or something? as you bunny hopped into my thread also, i usually can remove most crap from my system without a process munching waste of money virus protector, and just once in three years i was beat and unable to clear it manually, so a nice clean pirate version of windows was installed, with ..hold on to your chair..updates switched off!!
But Windows Genuine Advantage is a must!

Shallow Blue

Joined
18 Jan 07
Moves
12477
Clock
12 Sep 10
Vote Up
Vote Down

Originally posted by enrico20
Just to humor myself further, google displays the warning [b]"This site may harm your computer" when you want to visit a compromised website. What do you think this means and select one of the following :-

a) I can visit the site with immunity since I have firefox. Even if firefox bans me from the site I can still force myself to visit the site.
b) ...[text shortened]... disabled in firefox
c) I should not visit the site.
d) I should read up more on the threat.[/b]
More often than not it means a modified combination of b&c: I can visit the site with everything turned off in Opera (not, and I cannot stress this enough, Firefox), but it is more than likely that there is nothing there worth seeing anyway, so I might as well stay away.

Richard

C
Not Aleister

Control room

Joined
17 Apr 02
Moves
91813
Clock
12 Sep 10
Vote Up
Vote Down

Originally posted by Zahlanzi
paranoia saves your data.

the ones that claim you don't need an antivirus and/or firewall are either morons or they only play solitaire on a computer not connected to the internet.


if you connect, you may get infected.
May, not will.

Your statement contains serious traces of FAIL. You can use your PC connected to the web without any protection and could get away with it for years - If you know what you are doing.

While I will always have some form of anti-virus running, too many people feel SAFE just because AVG is using up too much RAM and CPU cycles.
Any program that needs to use all kinds of clever algorithms to check if a running process or file may contain malicious code is prone to eventually fail if you throw enough crap at it.

s
Fast and Curious

slatington, pa, usa

Joined
28 Dec 04
Moves
53321
Clock
13 Sep 10
2 edits
Vote Up
Vote Down

Originally posted by Crowley
May, not will.

Your statement contains serious traces of FAIL. You can use your PC connected to the web without any protection and could get away with it for years - If you know what you are doing.

While I will always have some form of anti-virus running, too many people feel SAFE just because AVG is using up too much RAM and CPU cycles.
Any program t ...[text shortened]... s or file may contain malicious code is prone to eventually fail if you throw enough crap at it.
I think the evolution of AV's will lead to computers (already with 4 and more core) that are much much faster than today and one core devoted to sandboxing all incoming and seeing how it evolves in a virtual environment. If it is benign and does what it says it is supposed to do, like I am a real email, answer me, or I am a FF of the future add on, or whatever, it gets monitored for malness, then after a certain time goes by, that core releases the email, download or whatever to the real computer.

That has a weakness of course, just having a self timer in the malicious code to not do anything in the virtual sandbox but to express its true nature after a length of time most people would not want to keep a piece of software inside a virtual environment. I would suspect if it was watched for say 5 seconds, and not evolve to scumware, it would be let go but if hackers found out that was the magic time to be in a sandbox and released, then it would be set to not unfold for 10 seconds say. Then a new time war would ensue, that is, assuming a piece of code could have a self timer inside it. There was code designed to go off on april fools but that was after it was installed and used the system timer for its countdown. Maybe it is not possible for a piece of malware to have a self timer inherent in the code. If such a thing were possible, it should be detectable in a virtual environment like a sandbox that monitors the behavior of the code.

If the code was going 'one chimpanzee, 2 chimpanzee, etc., that alone would probably be considered suspect activity.

C
Not Aleister

Control room

Joined
17 Apr 02
Moves
91813
Clock
13 Sep 10
Vote Up
Vote Down

Originally posted by sonhouse
I think the evolution of AV's will lead to computers (already with 4 and more core) that are much much faster than today and one core devoted to sandboxing all incoming and seeing how it evolves in a virtual environment. If it is benign and does what it says it is supposed to do, like I am a real email, answer me, or I am a FF of the future add on, or whate ...[text shortened]... 'one chimpanzee, 2 chimpanzee, etc., that alone would probably be considered suspect activity.
This sandboxing you describe does already happen, as most AV programs will 'hijack' files being accessed by the system and scan using heuristic methods to check if malicious code may exist in files you are accessing - hence the false-positives.

Sandboxing overall is an idea with merit, but it's best to just not download any software you are not sure about. I do use sandboxing myself sometimes, but try to stay away from situations that may require it.

e

timed out again

Joined
25 Apr 08
Moves
3102
Clock
13 Sep 10
Vote Up
Vote Down

Here is another one for the "gurus" who have PHDs in computer science which makes them think they are le invincible on the internetz.

http://kb.mozillazine.org/Firefox.exe_always_open

WARNING: The symptoms described on this page are typical of a malicious trojan.


You might as well get a PHD in common sense, if your PHD in computer science leads you to become a tool.

e

timed out again

Joined
25 Apr 08
Moves
3102
Clock
13 Sep 10
Vote Up
Vote Down

What will we be hearing next? Doctors telling us because they are "highly qualified" they can have un-protected sex? 😀

P
Upward Spiral

Halfway

Joined
02 Aug 04
Moves
8702
Clock
13 Sep 10
Vote Up
Vote Down

Originally posted by enrico20
What will we be hearing next? Doctors telling us because they are "highly qualified" they can have un-protected sex? 😀
More like doctors telling you that wearing a condom at all times is unnecessary. Not all people browse for porn constantly.

Z

Joined
04 Feb 05
Moves
29132
Clock
13 Sep 10
Vote Up
Vote Down

Originally posted by Crowley
May, not will.

Your statement contains serious traces of FAIL. You can use your PC connected to the web without any protection and could get away with it for years - If you know what you are doing.

While I will always have some form of anti-virus running, too many people feel SAFE just because AVG is using up too much RAM and CPU cycles.
Any program t ...[text shortened]... s or file may contain malicious code is prone to eventually fail if you throw enough crap at it.
if you don't have an active firewall, you WILL get infected. it is only a matter of when.



but i guess you are right, i am sure all who buy anti-viruses are panzies who don't know what they are doing.

Cookies help us deliver our Services. By using our Services or clicking I agree, you agree to our use of cookies. Learn More.