Five new Bagles spreading

TalkBack 20 of 25:

Next »

« Previous

• Thread View
• Flat View

DLL Injection Method

Another thing that this worm does is use the DLL injection method to insert itself into Explorer.EXE's processing space. This allows it to get around most firewall software since (wait for it Linux fans) Explorer has Internet access via IE integration. Since most people give IE open access to the Internet this means the worm can communicate in and out as it desires, using it's own email engine (not Outlook) to send out more copies, send spam, or whatever.

DLL injection giving this kind of worm/trojan easy access to the Internet, even when protected by a firewall, is a pretty serious threat. The temporary solution is not allow IE to have access to the Internet and use Mozilla, Firefox or another browser instead. You might also want to block ports used by the worm on your hardware as well as your software.

I am very concerned about this vulnerbility, not because of this worm, but because of the possibilities for abuse from more clever future malware ranging from destructive worms to corporate espionage to annoying adware. It needs to be addressed ASAP by Microsoft and 3rd party firewall developers.

(For you Linux fans, switching OS's isn't an option, at least not right now. It would take a significant worm-induced disaster to get most companies, not to mention home users, to switch. Save your gloating for uber-worm and be ready to collect hefty consulting fees should the worse case scenario develop.)

Posted by: jfrankcarr   Posted on: 03/01/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now
• Building the Virtualized Enterprise with VMware Infrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now