funsec mailing list archives

Spyware Central


From: "Dude VanWinkle" <dudevanwinkle () gmail com>
Date: Mon, 22 May 2006 08:58:41 -0400

http://www.theinquirer.net/?article=31853

A TROJAN spotted in the wild is so impressed with the security
features in Microsoft's IE that it installs a copy of its own before
infecting you with its payload.

The yhoo32.explr is accidently uploaded when you visit a site of which
a screen shot can be seen here. The address is being sent around Yahoo
Instant Messaging, but has been seen on the likes of Myspace.

If users download it, they hear some really bad music and after a
while you see that you have downloaded a new browser which calls
itself the "safety browser". It comes with the allow pop-ups activated
and 'make me your home page' enabled. It also has an Explorer logo.

-----------------------------------------


The friend of the fiend= IE

-JP

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: