Forum Home
Press F1
Thread ID: 52837	2004-12-31 08:51:00	Symantec warns SP2 not safe	drb1 (4492)	Press F1

Post ID	Timestamp	Content	User
309261	2004-12-31 08:51:00	www.theregister.co.uk D.	drb1 (4492)
309262	2004-12-31 09:04:00	Cripes, here we go again. :( Thanks for that warning, drb. From Symantec: Trojan.Phel.A is a Trojan horse program, which is distributed as an .html file, and attempts to exploit the Microsoft Internet Explorer HTML Help Control Local Zone Security Restriction Bypass Vulnerability (BID 11467). Looks like we might be nice and safe using Opera and Firefox until MS produce a security patch though.	FoxyMX (5)
309263	2004-12-31 09:07:00	Symantec says nothing of the kind, it says this (cut and paste) Trojan.Phel.A attempts to infect computers running Microsoft Windows XP Service Pack 2 or later. Look squire people were writing viruses for MS W3.11 and winsock a few years ago. So someone has written a virus for XP SP2, its no Microsofts fault. The writer of the trojan horse is a just a scum, filthy, criminal person. So stop being an alarmist and misleading people in this forum. tedheath	tedheath (537)
309264	2004-12-31 09:22:00	Symantec says nothing of the kind, it says this (cut and paste) Trojan . Phel . A attempts to infect computers running Microsoft Windows XP Service Pack 2 or later . Look squire people were writing viruses for MS W3 . 11 and winsock a few years ago . So someone has written a virus for XP SP2, its no Microsofts fault . The writer of the trojan horse is a just a scum, filthy, criminal person . So stop being an alarmist and misleading people in this forum . tedheath Trojan . Phel . A Discovered on: December 27, 2004 Last Updated on: December 29, 2004 12:16:33 PM Trojan . Phel . A is a Trojan horse program, which is distributed as an . html file, and attempts to exploit the Microsoft Internet Explorer HTML Help Control Local Zone Security Restriction Bypass Vulnerability (BID 11467) . Just to clear on that Ted this is on the symantic site,	Cicero (40)
309265	2004-12-31 09:37:00	It certainly is on the Symantec site and it is tedheath who is giving misleading information. www.zdnet.com.au "Microsoft is taking this vulnerability very seriously, and an update to correct the vulnerability is currently in development," the spokesperson said. "We will release the security update when the development and testing process is complete, and the update is found to effectively correct the vulnerability." Microsoft has had significant problems securing its Web browser in 2004. As a result, the freely available open-source browser Firefox has gained market share. Security experts have recommended that computer users consider other browsers and some schools have told their students to use a non-Microsoft browser.	Safari (3993)
309266	2004-12-31 11:48:00	I don't think tedheath was trying to mislead us, he just made a mistake. I use firefox = safe. Phew	george12 (7)
309267	2004-12-31 22:09:00	It certainly is on the Symantec site and it is tedheath who is giving misleading information. I'm sorry, tedheath was not giving misleading information - I agree with him; SP2 is not "unsafe" as this thread's title suggests. It has a vulnerability that has been found and targetted, but on a whole that does not make SP2 unsafe. All it means is that it is susceptible to attack. I haven't found where on the Symantec site that it actually says that SP2 is unsafe, nor have I found anywhere that they suggest you remove SP2. Every version of Windows has had vulnerabilities targetted by virus writers. That hasn't made Windows unsafe to use, and generally those vulnerabilities have been able to be patched up very quickly. There is a big difference between being "unsafe" and being "vulnerable". Lets not get caught up with semantics here (lol :D) but lets also get our facts straight and accurate. Mike.	Mike (15)
309268	2005-01-01 06:41:00	There is a big difference between being "unsafe" and being "vulnerable" . Lets not get caught up with semantics here (lol :D) but lets also get our facts straight and accurate . Mike . [/QUOTE] The US DOD, dont agree with you, pre or post sp2 . Their advice "use another brouser" . Offically they have not said user another O/S . Unofically . They recomend any other O/S . Remember the dod GAVE us COBOL . In a project run by a Female Admarial . Some people seem to be chucking English derogatory terms about . They should try "ponce" to describe them selves . The title of the thread is a direct "Quote" from the linked article . D . All the money spent on this new forum is a "ludricrous waster" without a decent spell check facility . Take out smileys or some of the other junk if nessecary, and put in a decent spell checker .	drb1 (4492)
309269	2005-01-01 08:59:00	The US DOD, dont agree with you, pre or post sp2 . Their advice "use another brouser" . Offically they have not said user another O/S . Unofically . They recomend any other O/S . . . . The title of the thread is a direct "Quote" from the linked article . Do you have a link to the DOD advice to use another browser? And what do the DOD have to do with it anyway - What do they have to do with internet browsing or the like . Surely this advice would normally come from computer experts rather than the military? :confused: And I didn't find the word "safe", or a reference to Symantec warning that SP2 is not safe, in the linked article . Maybe they removed that comment before I got to read it? A new Trojan horse - named Phel - that punishes users of Microsoft Windows XP operating system is in the wild . Security software firm Symantec has issued a bulletin warning Windows XP users to be on the look out for the program, which is distributed as an . html file . The malicious code can attack systems running XP Service Pack 2 . The vuln was first found in October, and Microsoft is busy trying to catch up to it . "Microsoft is taking this vulnerability very seriously, and an update to correct the vulnerability is currently in development," the company told ComputerWorld . "We will release the security update when the development and testing process is complete, and the update is found to effectively correct the vulnerability . " Symantec warns that users will see two Internet Explorer windows pop up when an . html file with Trojan . Phel . A is opened . If the code does its worst, the Trojan will automatically be executed every time a Windows user turns on his machine . More information from Symantec is available here . Mike .	Mike (15)
309270	2005-01-01 10:24:00	The facts are DRB you have a bee in your bonnet for some reason about XP and particulary SP2. Well none of your misleading comments are fooling many people. XP SP2 isnt going to go away just yet. Virus writers are going to target the most commonly used OS so its a cat chasing its tail scenario. As far as the US DOD recommending the military not to use sp2 thats a load of guano. You remind me of those [removed] mass emailing all their friends a few years ago about spurious warnings of viruses targeting 98 ME etc. tedheath	tedheath (537)
1 2 3