[NEWS] Internet Explorer Trojan Problem

[Buck]

the inquirer
Internet Explorer Trojan Problem Still Not Patched
Friday 03 October 2003, 18:23
"A TROJAN called QHosts-1 continues to lurk on the Interweb, with the only fix right now being disabling active scripting or de-registering .HTA files."

More information can be found at:
Network Associates
NT Bug Traq

 

[e_dawg]

Thanks for the heads up. I removed the MIME association to mshta.exe in Windows Explorer > Folder Options > File Types > HTA file > Advanced and exported (then deleted) the HKEY_CLASSES_ROOT\htafile key in the registry.

I also thought about using gpedit.msc to disable the ability to run AOLFIX.EXE and MSHTA.EXE, but I realized that this policy only prevents it from being run from the Explorer shell, and not from elsewhere in Windows.

 

[Jan Kivar]

There's something (in a form of a patch) at MS TechNet.

Here's the patch page.

This vulnerability affects computers that have Microsoft® Internet Explorer installed. (You do not have to be using Internet Explorer as your Web browser to be affected by this issue.)

Hmm, where's the button to uninstall IE6? :wink:

Cheers,

Jan

 

[Mercutio]

There's always Linux, Jan.

 

[Buck]

Thanks for the links Jan.