Html Trojans

[Bosniacon]

Once on internet i found something about html backdoor trojans ......

week later my friend which is very illiterate with pc's .....get a html file frome some "girl" which was a trojan horse "remote.c"

can u guys tell me more about it?

i was trying to find some infoz but no luck :p

[blackwave]

Once on internet i found something about html backdoor trojans ......

week later my friend which is very illiterate with pc's .....get a html file frome some "girl" which was a trojan horse "remote.c"

can u guys tell me more about it?

i was trying to find some infoz but no luck :p

here are a few tips to get you to the next level

html is text as in hyper TEXT markup language.

first link on google:
http://www.google.com/search?hl=en&i...=Google+Search

http://wp.netscape.com/newsref/std/remote.c

[Bosniacon]

very very helpful ...........tx blacky

[Shatter]

very very helpful ...........tx blacky

There's also been trojans and viri passed on by being attaced to web graphics. For safte, I also add .BMP, .JPG, .JPEG, .GIF, .PNG, and any other you think of to you anti-virus programs for both manual scans, ot scans and internet & email scans. It will save you some grief.

[Chris]

There's also been trojans and viri passed on by being attaced to web graphics. For safte, I also add .BMP, .JPG, .JPEG, .GIF, .PNG, and any other you think of to you anti-virus programs for both manual scans, ot scans and internet & email scans. It will save you some grief.

Shatter,
I thought that was only done if you already had the zombie on your machine when you viewed the graphic. Am I wrong on that?

[kraa26]

Shatter,
I thought that was only done if you already had the zombie on your machine when you viewed the graphic. Am I wrong on that?

I thought it was that way also..

[Shatter]

I thought it was that way also..

It's still possible to get them, though I think they're windows specific. Like 99% of all viruses...

I err on the side of caution. Better to scan a few files as they come in you don't need to scan, rather than miss something.

[blackwave]

one of my neato practices is that I create a windows system that has all my commonly used software and configurations, load up the service packs and fixes... then i use diskimage which is also installed on the system... and every time I am done with a session I remiage it, it takes a few minutes so when I want to use it again in a short period of time, it is all ready to go and just in the safest case where I may have gotten some infected with some uber1337 windows root kit... it would be wiped during the reimage... and man, that is safe :)

[astcell]

XP has that built in now, and CompUSA re-images all their PCs every night from Texas. Really screws you up if you saved your Trascender hints on the HDD!

[Shatter]

one of my neato practices is that I create a windows system that has all my commonly used software and configurations, load up the service packs and fixes... then i use diskimage which is also installed on the system... and every time I am done with a session I remiage it, it takes a few minutes so when I want to use it again in a short period of time, it is all ready to go and just in the safest case where I may have gotten some infected with some uber1337 windows root kit... it would be wiped during the reimage... and man, that is safe :)

This is what I do here at the office. Nothing worse than trying to installed 100 pcs's from scratch. I have a master image I use. Unfortunatly, XP requires a complete install for each machine, but i save teh custom image to a D: when I can retrieve after it's be all fucked up by n00bs.

:)

[TwinVega]

This is what I do here at the office. Nothing worse than trying to installed 100 pcs's from scratch. I have a master image I use. Unfortunatly, XP requires a complete install for each machine, but i save teh custom image to a D: when I can retrieve after it's be all fucked up by n00bs.

:)

You can clone drives with XP can't you, if it's the serial issue you're worrying about you can change your serial in XP even after you install, so just image and change the #s....I'm sure it's not that simple, but just in case it is...there ya go.

[blackwave]

I'm sure it's not that simple, but just in case it is...there ya go.

well the idea is that if XP becomes infected, you can't really trust it can you? Booting off a disk and loading ghost or drive image works out better this way.

also with windows xp let us not forget the WPA (windows product activation) - it is a real bitch as I have encountered with even just swapping drives from one identical laptop to another... wpa barfs upon load and of course it is a legit copy, which you must have if your machines go through software auditing.

[astcell]

It's not the duplicate serial number that hacks you up, it's the SAM. Norton Ghost will generate a random number for this and you are home free. Just be sure to use a serial number that does not register with MS.

[TwinVega]

well the idea is that if XP becomes infected, you can't really trust it can you? Booting off a disk and loading ghost or drive image works out better this way.

Yeah, I meant that you could clone to another drive/disk and set it aside until you needed it.

also with windows xp let us not forget the WPA (windows product activation) - it is a real bitch as I have encountered with even just swapping drives from one identical laptop to another... wpa barfs upon load and of course it is a legit copy, which you must have if your machines go through software auditing.

Good to know for the future, if it's looks too good to be true (my suggestion) then it usually is I guess..

AST's plan sounds like it would work...

[Shatter]

You can clone drives with XP can't you, if it's the serial issue you're worrying about you can change your serial in XP even after you install, so just image and change the #s....I'm sure it's not that simple, but just in case it is...there ya go.

No no. You're missing the operation.

I have a master image ina newwork share. I move the updated one to D:, then unload to C:. With ME it will just go through, refigure out the hardware (I've reimaged from multiple Mobo's, video, sound, etc, so just about every piece of hardwre will auto detect). Can't do it with XO r 2k. 2k blows p if a different mobo/chipset is found, and xp need sto go through teh whole process again.

What I would need to do is set up a different image for each mobo we use. Unfortunatly the nature of my work means we have a LOT of different mobo's (testing, compatability, making dev cry) as well as other hardwre. So, the managing of multiple images, determining what's in each comp (all have the same cases) become more of a micromanagement fiasco than cataloging 20 gigs of mp3's, not to mention keeping each image fully updated with all the MS security patches.

So, with xp, I try to make machine specific image, that's saved on D: for each machine. After it's been abused, I re-ghost C:. run teh updates, put teh new versions of apps on, then mke a new image for that machine.

The ones that are fun are the triple ghosts, with ME/2K/XP on one machine. Don't bother mentioning triple booting, case that will invalidate the tests. Believe me, I'd love to.

My only real problem is wen the stupid n00b user decides to delete the contents of D: cause there's not enough room for his personal shit (games, mp3's, etc.