Text 62172, 81 rader
Skriven 2010-09-16 21:16:16 av mark lewis (1:3634/12.0)
  Kommentar till text 62142 av ED VANCE (1:123/140)
Ärende: VLC media player.
=========================
ML>  "visiting some site and some (possibly hidden) code being
ML>   downloaded and processed by your browser... that code
ML>   contacts another site that sends you more code and
ML>   eventually you end up with ugly critters infesting your
ML>   system..."

 EV> Mark,

 EV> Thanks (Again).

you are welcome...

 EV> Getting on the internet now a days sure is spooky.

actually, it has been this way for many many years... the problem from our
standpoint is that we didn't know how they were doing it and it has taken time
for methods to be developed that can be used to detect and prevent such from
happening... and then a lot of the newer features, like iframes for example,
offer this ability in an easier way for them to take advantage of... in the
passed, they used to open a window that was 1x1 in size and possibly even
located off of the visible screen area to do their dirty work...

 EV> The malcontents can get YA in so many ways that I or most people
 EV> never have heard of.

yup... even the 419 spammers (known today as phishers) are pretty sneaky...
back in the day, they used to send postal mail out but then electronic
communication made their task much easier and allowed them access to a much
wider "audience" for next to nothing in cost...

 EV> Because I've read of Advertisements being 'BUGGED' I never click on
 EV> any of them.

 EV> Now I learned just visiting a web page that has an ad on it can
 EV> GETCHA! 

 EV> SPOOKY!

yup... the MLB (Major League Baseball) site has been infested numerous times...
even things that you would think are not a possible hole are being found to
be... i just saw a report that the windows print spooler has a flaw in it that
would allow someone to execute code on the machine... how do they access the
print spooler, you ask? by tricking you to print the page and sending custom
made data for the print... while you get the print you are wanting, they are
running their code... did you hear about the problem with the icon files a few
years back? same thing... you go download a neat looking theme package and
install it and the icons are specially formatted to carry the picture and the
infestation code which got executed by the icon drawing code... 

 EV> The other day I finally found my ROUNDTUIT to run a Full Scan with
 EV> the McAfee Security Suite, it didn't say 'nothing was found', it
 EV> just tells me anything found was 'corrected' by it.

 EV> SPOOKY!

yep... but sadly, mcaffee and norton are not as good as they could be... many
others are not also but those two, like windows, get special merit and
attention at bypassing and hiding because they are so widely used...

 EV> I tried to find a Log file in McAfee, the only Log I can find just
 EV> tells me when the Suite started, and also when I allowed or
 EV> wouldn't allow a process to pass through my computer to the
 EV> internet.

 EV> Sbcglobal DSL (AT&T) supplies McAfee for their DSL subscribers at
 EV> no (additional) cost, so I use it.

yep... like so many others... i used to use mcaffee way back in the day before
GUIs came around... back when they were just starting out and everything was
command line oriented... used them, f-prot and i think norton to scan the files
uploaded to my bbs...

 EV> I also use a couple of other Anti-Spyware Programs on my computer. 

 EV> Super-Anti-Spyware and MalwareBytes.

i've heard of both of those but have never looked at them...

)\/(ark

 * Origin:  (1:3634/12)