This board is for anything to do with the Pink Poogle Toy Forum. If you have a question or want to suggest any ideas, then this is the place to do it.
Topic locked

Whenever I come to PPT...

Mon Apr 16, 2007 4:35 am

Everytime I come on to PPT or the forums I get a trojan. And it's only when I come to this site.

Mon Apr 16, 2007 4:50 am

Hmm this is definitely something we'll be looking into, do you have any other information to help us fix the problem?

Mon Apr 16, 2007 5:08 am

Image

it has something to do with a that it tries to download, thankfully it infects a temporary internet file and it's easy to remove. It's a Win32/MS07-07!expliot the file that is infected is called cursor[1].ani in \Local Settings\Temporary Internet Files\Content.IE5\ENBVINLW\

Also known as Trojan.Anicmoo (Symantec) , Exploit-ANIfile.c (McAfee), Win32/MSA-935423!exploit, TrojanDownloader:Win32/Anicmoo.gen!D (MS OneCare)

Description

Win32/MSA-935423!exploit is a generic detection of animated cursor files that attempt to exploit a vulnerability in the handling of these file formats.

For more information please visit our Vulnerability Encyclopedia: "Microsoft Windows Animated Cursor remote code execution vulnerability":

http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=35196

or Microsoft "Vulnerability in Windows Animated Cursor Handling":

http://www.microsoft.com/technet/security/advisory/935423.mspx

Mon Apr 16, 2007 6:13 am

Since it seems to be for sure connected, I'm locking this thread and directing everyone to Hunter's announcement.

http://www.pinkpt.com/forum/viewtopic.php?t=32963
Topic locked