| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 51418 | 2004-11-20 07:12:00 | "Bofra Worm Sets Trap For UnWary" | Terry Porritt (14) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 294230 | 2004-11-20 07:12:00 | I picked up the Bofra worm from theregister.co.uk site this afternoon, using Internet Explorer. Now IE with Windows XP +SP2 isnt supposed to do this, but it did. AVG told me immediately the page was opened, and it found an infected file in Temporary Internet files. It was easy enough to get rid of. I cross checked using another computer and the same thing happened. Firefox does not pick it up. You can read about Bofra here: sophos.com What is crazy is that theregister.co.nz has an article about Bofra here: www.theregister.co.uk with the title as in the post subject :) Be careful if you go there with IE :D |
Terry Porritt (14) | ||
| 294231 | 2004-11-20 07:17:00 | Have you emailed the webmaster Terry. They should be able to deal with promptly before to many get stung. The fact that IE with XP SP2 got caught should be of interest as well. Murray P |
Murray P (44) | ||
| 294232 | 2004-11-20 07:34:00 | I suppose I should Murray, I was quite amazed that it was apparently infected. It must be something embedded in the site, though I dont know much about how these things work. | Terry Porritt (14) | ||
| 294233 | 2004-11-20 07:42:00 | Done :) | Terry Porritt (14) | ||
| 294234 | 2004-11-20 07:50:00 | > Now IE with Windows XP +SP2 isnt supposed to do > this, but it did. That has also happened to me as well, I got "Trojan horse Dialer.11.BA" from a website (NOT theregister.co.uk) using IE & Windows XP +SP2 RC 2. Bug Thank God for AVG :) ** From now on he will use Firefox when clearing Spam users from a forum ** |
stu120404 (268) | ||
| 294235 | 2004-11-20 07:56:00 | Good man Terry. Are these rewrites or is the info on SP2 having less vulnerabilities just spin? Or is it a case of IE being that bad that even SP2 can't compensate for all the rubbish it attracts. Murray P |
Murray P (44) | ||
| 294236 | 2004-11-20 09:13:00 | > I picked up the Bofra worm from theregister.co.uk > site this afternoon, using Internet Explorer. > I cross checked using another computer and the same > thing happened. Are ya really sure? I'd be extremely surprised if The Reg was causing it - being one of the bigger IT sites and all. Not just the coincidence of updating virus defs on two machines and already being infected? |
ninja (1671) | ||
| 294237 | 2004-11-20 09:22:00 | >Are ya really sure? I'd be extremely surprised if The Reg was causing it - >being one of the bigger IT sites and all. >Not just the coincidence of updating virus defs on two machines and >already being infected? Yep, I was there earlier today & got the same thing, visited again about 1/2hr ago & AVG picked it up again |
Stumped Badly (348) | ||
| 294238 | 2004-11-20 09:38:00 | I wonder if it's a bug in AVG, as I've been trying to reproduce it and can not. None of the Bofra removal tools, nor any online scans have detected it after multiple visits to The Reg with IE. Am downloading AVG to see if that will scream about it when I try next. |
ninja (1671) | ||
| 294239 | 2004-11-20 10:09:00 | Can't replicate it at all. All seems a littls suspect to me :-S | ninja (1671) | ||
| 1 2 3 | |||||