Slashdot Mirror


New Trojan Threatens Windows XP SP 2

lightdarkness writes "Symantec is reporting about a new virus called Phel (Anagram of 'help') which is a Trojan which spreads via a HTML file. All the user needs to do is go to the page, and it takes advantage of the vulnerability in the IE Help control component files. This allows the attacker to download malicious programs on to the machine. Worst part is, this is one of the exploits that even effects SP2. Microsoft is said to be working to stop the spread, and to release a patch." The exploit is apparently not the same as the help file problems disclosed last week.

24 of 241 comments (clear)

  1. Well.. by KinkifyTheNation · · Score: 2, Funny

    Well at least I know reading Slashdot will be sa...

  2. The attackers are downloading malicious programs? by bwcarty · · Score: 2, Funny

    Does that mean they're trying to copy IE from the victims?

    Upload to...download from.

  3. affect/effect! by o0zi · · Score: 5, Funny

    " Worst part is, this is one of the exploits that even effects SP2."

    Oh, it causes SP2? That's absolutely terrible - it must be stopped!

    1. Re:affect/effect! by Richard+Dick+Head · · Score: 2, Funny

      So, in effect, the article is saying Windows Update is a trojan that spreads through mangled HTML? Makes perfect sense to me.

    2. Re:affect/effect! by Linker3000 · · Score: 4, Funny

      I once called the customer service team of a major UK railway company and said they needed to change their new safety posters because they had put "Opening train doors before the train has come to a complete stop can effect your safety".

      I explained it carefully to the bemused agent a couple of times and eventually got a half-hearted agreement that she'd pass on my comments to the marketing team - but I knew in my heart that she thought I was completely mad and that she was going to close the call as soon as I was off the phone.

      --
      AT&ROFLMAO
  4. Adequate bash.org quote by b374 · · Score: 5, Funny
    1. Re:Adequate bash.org quote by Anonymous Coward · · Score: 1, Funny

      Is it even possible to make a vacuum cleaner than it is?

    2. Re:Adequate bash.org quote by XMyth · · Score: 4, Funny

      I think you're at the wrong website, sir.

    3. Re:Adequate bash.org quote by DJStealth · · Score: 2, Funny

      Where I did my undergrad, they decided one day to replace all the 'ball mice' with optical mice to prevent the mouse balls from going missing or being stolen. They made the bad choice of going with MS mice. 2 Days later, half the mice in the room didn't work because they were overheating!

  5. Re:Microsoft happy with IE? by too_poland · · Score: 5, Funny

    Injecting Exploit 6.0 =]

  6. [OT] Source code for phel ;-) by asliarun · · Score: 5, Funny

    Sorry, couldn't resist the anagram. Here's the source code for the phel trojan. This trojan is written in a very high level language. By a strange temporal accident involving a singularity, an anagram, and MS's open-door policy, the source code closely resembles a certain song lyric that goes by the same name.

    The lyrics are kinda fitting, don't you think? ;-)

    [snip]
    When I was younger, so much younger than today,
    I never needed anybody's help in any way.
    But now these days are gone, I'm not so self assured,
    Now I find I've changed my mind and opened up the doors.

    Help me if you can, I'm feeling down
    And I do appreciate you being round.
    Help me, get my feet back on the ground,
    Won't you please, please help me.

    And now my life has changed in oh so many ways,
    My independence seems to vanish in the haze.
    But every now and then I feel so insecure,
    I know that I just need you like I've never done before.

    Help me if you can, I'm feeling down
    And I do appreciate you being round.
    Help me, get my feet back on the ground,
    Won't you please, please help me.
    [/snip]

    - Help by The Beatles

  7. I wonder ... by basvdlei · · Score: 5, Funny

    if this is what they meant with "extensible platform": http://slashdot.org/article.pl?sid=04/12/30/185323 2&tid=113

  8. Re:Microsoft happy with IE? by Moulinneuf · · Score: 5, Funny

    Please ! dont insult the Swiss Cheese by associating it with IE , the Swiss Cheese as less hole and far more valuable content and as an excellent quality control , unless you dont read the date marked "best before" before eating it. ;-)

    --
    I am a REAL American from Canada , not a wanna-be from the country , self called "last remaining superpower" "of America
  9. Re:Jeezus people! by Moulinneuf · · Score: 2, Funny

    Man , Wizard ! How many time do I have to tell you ? Windows XP CD is an OS its not a doughnut , stop eating it with your coffee and milk in the morning , shisssh ;-)

    --
    I am a REAL American from Canada , not a wanna-be from the country , self called "last remaining superpower" "of America
  10. What? by Albinofrenchy · · Score: 5, Funny

    Trojans in IE counts as news still? Its like someone throws us a surprise party every three months and we feel obliged to keep acting surprised.

    --
    "A man is but the product of his thoughts what he thinks, he becomes." -Mahatma Gandhi
    1. Re:What? by AndroidCat · · Score: 2, Funny

      If someone gave me cake and presents every three months, I'd at least try to act surprised. Unfortunetly, trojan infections rarely involve cake.

      --
      One line blog. I hear that they're called Twitters now.
  11. New Trojan threatens Windows XP SP2? by Anonymous Coward · · Score: 0, Funny

    Apparently, not only does Duke suck, but USC does as well.

  12. Hey... by Anonymous Coward · · Score: 1, Funny
    Symantec is reporting about a new virus called Phel (Anagram of 'help') which is a Trojan which spreads via a HTML file. All the user needs to do is go to the page, and it takes advantage of the vulnerability in the IE Help control component files.
    What, no link?
  13. Here is some help for all IE trojans by Anonymous Coward · · Score: 1, Funny
    1. Stick in a the Slackware live CD

    2. Mount dev/hda

    3. Run this command as root;

    • dd if=dev/urandom of=dev/hda

    Bingo no more trojans virii or XP trouble period.

  14. Re:Microsoft happy with IE? by naelurec · · Score: 5, Funny

    unless you dont read the date marked "best before" before eating it. ;-)

    Microsoft should have the same thing for Windows...

    • Best before plugging into a network..
    • Best before being turned on..
    • Best left in the box..

    In all honesty, when Windows is isolated (or on an isolated network) and locked down (ie users don't have any way to install new software, etc..).. its not too bad.. Unfortunately, everyone wants to plug it into that dang Internet.. hheh..

  15. Re:Screwing for Virginity by angrist · · Score: 2, Funny

    Where did you think virgins came from?
    A magic stork?

    oh wait.... this is /.

  16. No IE for Mac :(( by elecngnr · · Score: 4, Funny

    /begin{Sarcasm}



    You know, when I found out that Microsoft would no longer develop IE for Macs, I was so sad.



    \end{Sarcasm}

    --
    Having done so much with so little for so long, I now can do anything with nothing at all.
  17. apology accepted by aichpvee · · Score: 4, Funny

    I would like to take this moment to accept the apologies of all the assholes who said things like, "windows is secure, just upgrade to sp2." I'm sure that all of you feel much better after saying that you are sorry and admitting that you were wrong.

    --
    The Farewell Tour II
  18. Re:Microsoft happy with IE? by What'sInAName · · Score: 2, Funny


    That reminds me of what I do when I get a new box that has a "Designed for Windows..." sticker on it. I always take that little sticker off and put it on a trash can...