[Full-Disclosure] Re: Spyware installs with no interaction in IE on fully patched XP SP2 box

["Willem Koenings" <isec@xxxxxxxxxx>]

hi,

> I was unable to verify it, since I don't use IE, and would prefer not 
> infecting myself on accident, however I did run across this:
> 
> http://themexp.org/about_wrap.php
> 
> Perhaps one of the themes you downloaded was bundled with the spyware?

two tiny links from there:

http://WWW.addictivetechnologies.net/dm0/js/Confirm80wu03rd.js
http://www.addictivetechnologies.net/DM0/cab/ATPartners.cab

W.



-- 
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html