- "q.vbs" found in Winnt\system32
- Posted by ZugZug on January 24th, 2004
I found a vbs script that was inserted into my winnt\system32
directory called q.vbs. Apparently this file attempts to download and
launch a trojan. Even though I had NAV it never detected this file
and I only noticed it because my software firewall warned me it was
attempting to go to the attached website.
Apparently this vbs can be created through an html file. My questions
is...is there any way to stop these types of things from downloading
without disabling all of the scripting features in IE? I can't
beleive that this is even allowed to be created in my Winnt\system32
directory!!!
Does anyone have any suggestions on how this could be avoided? Please
no smart @ss answers about not using Windows and switching to Linux.
Thanks,
ZugZug
- Posted by kulm_nd on January 24th, 2004
Do not use IE, Mozilla and Opera are fine browsers and have fewer security
problems.
If you must use IE, set the security and other settings to stop scripts and
set Outlook Express to stop previewing e-mails.
--
************************************************
g-w
"ZugZug" <zugzug21us@yahoo.com> wrote in message
news:18149ff0.0401232027.645fad25@posting.google.c om...
- Posted by Quaoar on January 24th, 2004
kulm_nd wrote:
At the least in OE, set it up to read text only to deny the HTML access.
Q
- Posted by Hairy One Kenobi on January 24th, 2004
"ZugZug" <zugzug21us@yahoo.com> wrote in message
news:18149ff0.0401232027.645fad25@posting.google.c om...
There are a few things you can do if you're prepared to play with the
configuration. Most likely vector IMHO - if you use it - is Outlook Express.
http://www.codecutters.org/outlook
For how to lock it down; if you regularly browse (ahem) potentially vicious
sites, then use the Zone concept for browsing as well. It's always been
there, but, as usual with things Mickeysoft, most people seem to ignore it.
--
Hairy One Kenobi
Disclaimer: the opinions expressed in this opinion do not necessarily
reflect the opinions of the highly-opinionated person expressing the opinion
in the first place. So there!