New exploit blows by fully patched Windows XP systems

[Jared Moya]

We saw a new nasty exploit yesterday around 5:00 PM. This is a totally new exploit and is not the same one posted by FrSIRT back on 11/30/05.


We have a number of sites that we have found with this exploit. Different sites download different spyware. We only had a handful of websites using this new exploit but now we are seeing many more using this to install bad stuff. These image files can be modified very easily to download any malware or virus.


I hit one site with a fully patched XP system last night and it was pretty intense—it went right through and infected my machine.

READ ARTICLE

[mountain_rage]

What really pisses me off with microsoft is that they usually know that there are these flaws they just dont bother to do anything untill they are expoited.

[napho]

This sounds like the chm file exploit. You just make notepad or something similar the default program for something like this so there's no harm done. If you get a file like this that you actually want, then you right click on it and open it with the appropriate thing.

[gomezchar]

when will thes exploits stops? i guess they never will..
microsoft might come up with a patch today, the next morning hackers disover more holes than microsoft can patch..buffer overrun!

[ROMANTICGUY50]

I know that every time Microsoft sends out an update I download it. They don't seem to take it seriously until its to late. Then they give you patches that can screw up your puter. How ridiculous are they. Windows is SUPPOSED to be a good OS. and XP, but I wonder at times. I finally broke down and put SP2 on my computer. My wide is suspicious of that and she also does not trust Microsoft with a lot of their updates.

[SanDiegoKid]

My friend's PC has that same "Infected With Spyware" wallpaper that mysteriously showed up out of nowhere.

He'll click on anything that pops up though.