• Browser Trojans in Internet Explorer…

    by  • 12/15/2004 • geek • 0 Comments

    The CEO has somehow managed to contract a trojan in IE (on his home computer)… Something along the lines of downloader.agent 5b. One of the developers here recommended using Hijack This which is only slightly better than releasing the CEO into regedit proper. I don’t want him to be presented with a list of cryptic registry keys, only to have to guess at which items to remove, so I try to duplicate the problem here.

    With a lot of effort, I’ve managed to contract a couple downloader trojans here, but I had to disable a virus scanner, reduce security, and otherwise convince IE to shut the hell up and install those ActiveX controls. You’d think that it would be easier to get these things by just googling for “WAREZ” and heading for the first couple results, and accept whatever ActiveX is thrown at me. I should be able to have DOZENS of trojans in no time, right?

    Well, with XP SP2 installed it’s a BIT tougher, but it’s still possible if you just automatically click “OK” when a box pops up.

    There’s something unsettling about browsing pr0n sites at the office… just clicking on random links on warez and porn sites, and I’m pretty sure that I won’t find any actual content by mistake. One of the sites even has animated banners describing how to bypass the IE popup and install blocker…

    I’m installing all the IE search bars I can… free smileys, etc… There’s something very entertaining about doing things the wrong way intentionally…

    It would be so much easier to do this if I was able to find a web page with an archive of trojan horse installers…

    Update: It’s twenty minutes later, and I have managed to install at LEAST 6 ActiveX trojans… 20 browser windows open from popups and more. Nifty. We’ll see what Hijack This finds…

    About

    Leave a Reply

    Your email address will not be published. Required fields are marked *