ARE YOU NEW HERE? NOT LOGGED IN? PLEASE TAKE A MOMENT TO REGISTER FOR AN ACCOUNT AND LOGIN TO REMOVE THIS WINDOW
Welcome to PatsFans.com. Do you have an account? If not - please take a moment to register for our forum and experience a much smoother experience with fewer ads, along with no longer having to see this notification window. Also learn about how you can receive a free Patriots T-Shirt from the Patriots Official ProShop by CLICKING HERE. Please enjoy your stay here, and Go Pats!
Do not go to websites you do not trust or open images from sources you
do not know, even if someone you trust forwards you an image do not
open it if you do not know where it came from.
Ian Maybe you should sticky this for awhile.
FEATURED ADVERTISEMENT
DONATE TO PATSFANS.COM
RECEIVE A FREE PATS T-SHIRT AND SAVE 15% OFF WHEN YOU BUY FROM THE OFFICIAL PROSHOP!
Free T-Shirt & Save 15% Off!
Like Our Site? Please help support our site and server costs by DONATING TO PATSFANS.COM and receive a FREE PATRIOTS T-SHIRT and SAVE 15% off EVERY purchase you make from PatriotsProShop.com. You'll also receive added benefits to your account including Removing All Ads During Your Experience Here At Our Forum.
NEEDED YEARLY SITE DONATIONS: 345 | CURRENT # OF SUBSCRIBED SUPPORTERS: 98
Boy - this is really going to ruin your day if that troubles you... no need to open links with this threat:
Quote:
Windows Security Flaw Is 'Severe'
PCs Vulnerable to Spyware, Viruses
By Brian Krebs
Special to The Washington Post
Friday, December 30, 2005; D01
A previously unknown flaw in Microsoft Corp.'s Windows operating system is leaving computer users vulnerable to spyware, viruses and other programs that could overtake their machines and has sent the company scrambling to come up with a fix.
Microsoft said in a statement yesterday that it is investigating the vulnerability and plans to issue a software patch to fix the problem. The company could not say how soon that patch would be available.
Mike Reavey, operations manager for Microsoft's Security Response Center, called the flaw "a very serious issue."
Security researchers revealed the flaw on Tuesday and posted instructions online that showed how would-be attackers could exploit the flaw. Within hours, computer virus and spyware authors were using the flaw to distribute malicious programs that could allow them to take over and remotely control afflicted computers.
Unlike with previously revealed vulnerabilities, computers can be infected simply by visiting one of the Web sites or viewing an infected image in an e-mail through the preview pane in older versions of Microsoft Outlook, even if users did not click on anything or open any files. Operating system versions ranging from the current Windows XP to Windows 98 are affected.
An estimated 90 percent of personal computers run on Microsoft Windows operating systems. Microsoft has found itself under attack on several instances and has been forced to issue a number of patches to keep computers running Windows safe. Mac and Linux computer users are not at risk with this attack, even if their computers run Microsoft programs such as Office or the Internet Explorer Web browser.
Reavey encouraged users to update their anti-virus software, ensure all Windows security patches are installed, avoid visiting unfamiliar Web sites, and refrain from clicking on links that arrive via e-mail or instant message.
"The problem with this attack is that it is so hard to defend against for the average user," said Johannes Ullrich, chief research officer for the SANS Internet Storm Center in Bethesda.
At first, the vulnerability was exploited by just a few dozen Web sites. Programming code embedded in these pages would install a program that warned victims their machines were infested with spyware, then prompted them to pay $40 to remove the supposed pests.
Since then, however, hundreds of sites have begun using the flaw to install a broad range of malicious software. SANS has received several reports of attackers blasting out spam e-mails containing links that lead to malicious sites exploiting the new flaw, Ullrich said.
Dean Turner, a senior manager at anti-virus firm Symantec Corp. of Cupertino, Calif., said the company has seen the vulnerability exploited to install software that intercepts personal and financial information when users of infected computers enter the data at certain banking or e-commerce sites.
Eric Sites, vice president of research and development for anti-spyware firm Sunbelt Software, said he has spotted spyware being downloaded to a user's machine by online banner advertisements.
"Pretty much all of the spyware guys who normally use other techniques for pushing this stuff down to your machine are now picking this exploit up," Sites said.
Because the vulnerability exists within a faulty Windows component, security experts warn that Windows users who eschew Internet Explorer in favor of alternative Web browsers, such as older versions of Firefox and Opera, can still get their PCs infected if they agree to download a file from a site taking advantage of the flaw.
Richard M. Smith, a Boston security and privacy consultant, said he was particularly worried that the vulnerability could soon be used to power a fast-spreading e-mail worm.
"We could see the mother of all worms here," Smith said. "My big fear is we're going to wake up in the next week or two and have people warning users not to read their e-mail because something is going around that's extremely virulent."
Brian Krebs is a washingtonpost.com reporter.
__________________
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
Do not go to websites you do not trust or open images from sources you
do not know, even if someone you trust forwards you an image do not
open it if you do not know where it came from.
relax. these behaviors *should* be standard operating procedure by now. some say the threat is not very serious...
Your "RELAX" advice is nice but many casual users who use search engines
may end up at sites with corrupt images and they won't be so relaxed.
Relax if you are confident you are protected otherwise be extra careful
until you have the patch. No I won't put a patch on my computer from
a source other than Microsoft.
If you're afraid to open anything send it to me. Using OS X I've always wanted to see what a virus looks like.
Hey wiseacre, OS X is just as, or more vulnerable; its just so insignificant that few bother to write virtuses, worms and adware to infect it. Sorry to bust your bubble, but Macintosh is increasingly seeing virus attacks; its just that the virus dorks usually spend their efforts on Windows first.
As for OS X, it just hasn't had very many development dollars invested in it. It is full of un-exploited security holes, that little attention has been directed at, TO DATE. It is no criticism of Apple, they just didn't and don't have the resources. But it is a fine effort for what it is, Release 1.0 of a Mach kernel based, fully pre-emptive, multi tasked, multi-user OS.
Its basis is just like modern Windows, post Windows 98 which is also a Mach kernal based, fully preemptive, multi-tasked, multi-user OS with symetric multiprocessing. Windows XP is now in its fifth full release, with multiple sub-releases developed over the last ten years. Hundreds of millions if not billion of dollars have been invested in its development. And the dorks still find weaknesses. As they are found the holes are closed.
Being temporarily overlooked is no security, when there are multitudes of holes if anyone directed their attention to it.
relax. these behaviors *should* be standard operating procedure by now. some say the threat is not very serious...
This seems like a mixed message to me. We should get a grip and relax because the threat isn't serious, AND we should already have been so scared by less serious threats that we weren't loading any images or visiting any new websites?
Avoiding new websites can't be "standard operating procedure" for me -- I'm a writer, and the book I'm researching requires looking at websites around the world. I've always maintained a pretty high security level, but this new exploit has forced me to change my browsing behavior significantly. IMHO, it is different.
OT: Urgent - Massive Virus Threat
OS X is not safe...
Linear Mode
