NEW MS03-032 IE EXPLOIT -- Downloader-ED Trojan

[old Harry Waldron]

This is not MS03-026 but an entirely new ballgame. This is all the more reason to get fully updated out there as a brand new MS exploit is being manipulated with Trojans and most likely future worms.

This is low-risk, but if you Windows Update, you'll be more bulletproof on those instances where you need to run IE ... As for me I'm always processing my Yahoo EMAIL account with FIREBIRD only



NEW MS03-032 IE EXPLOIT -- Downloader-ED Trojan
http://www.trendmicro.com/vinfo/virusen ... JUNKSURF.A
http://vil.nai.com/vil/content/v_100597.htm

It is believed that a recent Internet Explorer exploit has been taken advantage of in a spammed HTML formatted email message. The message contains specific ActiveX tags to take advantage of this exploit in order to execute a remote script.

The ActiveX content within the HTML message is detected as Exploit-ODREV with the specified DATs. It runs on Windows 95, 98, NT, 2000, and XP systems.

This file is detected as Downloader-ED . When it is run, it connects to a remote server and downloads the Adware application. For details concerning the exploit, and links to the necessary patch, follow the link below:

http://www.microsoft.com/technet/treevi ... 03-032.asp


NEW MS03-032 IE EXPLOIT -- Downloader-ED Trojan
http://forums.mcafeehelp.com/viewtopic.php?t=15433