I access the Internet through a dialup connection from my Win98 box, where I cheerfully admit that Win98 is an insecure OS. Nevertheless, between my AVG and my anti-adware software, I thought I had my risks pretty well managed. Well, my IE browser was hijacked last month by a known domain hijacker through those two IE vulnerabilities. And the hijacking software outsmarted both my anti-adware and my anti-virus. I eventually got rid of the Trojan by checking every system directory, looking for recently installed dlls or exes. I found an executable cleverly named to appear to be a system file, and wiped it out - That worked. And so my daily battle for three weeks to clean up the registry tree before using the IE browser finally ended. What a pain!

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/251/27195#27195