Security Incidents mailing list archives

Re: Please tell me I'm wrong: microsoft.com infected


From: Benjamin Franz <snowhare () nihongo org>
Date: Wed, 19 Sep 2001 15:01:32 -0700 (PDT)

On Wed, 19 Sep 2001, Steve Cody wrote:

I just went to http://www.microsoft.com/frontpage, and my Symantec
Norton Antivirus popped up and denied access to readme.eml.

I could not view the source of the loaded page, so I can't verify that
it is definitely infected.

From the bottom of the page served from that URL:

window.open("readme.eml", null, "resizable=no,top=6000,left=6000")

I would call that a definite "Yes".

-- 
Benjamin Franz

  Programs must be written for people to read, and only
  incidentally for machines to execute.
                             ---Abelson and Sussman



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: