FFXIAH infected again?

Vandoura

Vandoura

The Original PLD
Adventurer
Joined
Jun 30, 2005
Messages
2,736
Age
40
Location
Windurst Water
Website
www.breakofdawn.freeforums.org
Nation Banner
Windy
Main Job
Scholar-Female
Secondary Job
Dragoon-Female
Third Job
Paladin-Female
Server
Quetzalcoatl
Linkshell
LunarSky
FFXIV
Vandoura
Sometime i keep getting attack blocked by Symantec with unarthorized file download in FFXIAH, anyone having that recently also? (IE7)


Again if that is a MMO password stealer i would stay away from FFXIAH for now


edit: This is what was trying to install on my computer but Symantec block it

http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2004-112111-3912-99&tabid=1

The HTML code exploits the Microsoft Internet Explorer Malformed IFRAME Remote Buffer Overflow Vulnerability (BID 11515) and attempts to download and execute the file C:\bla.exe, from the following domain:
[http://]83.149.86.132/mins[REMOVED]
Click to expand...
 
Last edited:
Don't use Explorer.
 
Firefox FTW
 
I agree, move far away from Internet Explorer
 
Altheya said:
I have a bank site that just won't let me use Firefox to access it. I hate sites like that which forces people to use IE.
Click to expand...

I don't understand how banks can require someone to use a browser that's known for its insecurity and exploitablility. Seriously what kind of message does that send out to their customers who have to trust them with just about everything they own.
 
Daveman said:
I don't understand how banks can require someone to use a browser that's known for its insecurity and exploitablility. Seriously what kind of message does that send out to their customers who have to trust them with just about everything they own.
Click to expand...

Most of the time, I have been able to use Firefox to access the site. Occasionally on one of the bank's updates or a firefox update it becomes impossible to access the iBanking option. I'm not sure what does it cos I'm a software idiot.

I guess they only conform to IE because it's easier to keep to one set of things to test...

I tend to use safari when this happens, luckily I have a iBook. However some sites really force your hand to use IE or it won't work..... >.>
 
Then use IE on the bank site and Firefox on everything else :p
 
In the news last week I guess it was said that yet another incredible exploit was found in IE7. That's probably less about FFXIAH.com, and more about IE7 currently being really unstable.
 
In addition to Firefox, www.noscript.net

This addon will help to prevent code not directly linked to the website itself. One word of warning though, some sites have multiple legitimate domains they use to get all of their information, so you have to kinda make educated guesses sometimes.
 
Javir said:
In addition to Firefox, www.noscript.net

This addon will help to prevent code not directly linked to the website itself. One word of warning though, some sites have multiple legitimate domains they use to get all of their information, so you have to kinda make educated guesses sometimes.
Click to expand...

It is usually pretty obvious which websites are legitimate though. Letting websites through with domain names such as "playonlline.com" or "xlhowmnfif.com" is usually pretty stupid.
 
Altheya said:
I have a bank site that just won't let me use Firefox to access it. I hate sites like that which forces people to use IE.
Click to expand...

Call the bank, request the contact information of their IT department, and request that they support all browsers, not just Internet Explorer. If they give you any line about support of non-MS browsers being illegal, or against their company's licensing agreements, you can call them liars, because MS Licensing might dictate what is supported in-house for their employees (a grey area anyway), but they cannot dictate what is supported for ease-of-use from a customer standpoint.
 
Tristam Green said:
Call the bank, request the contact information of their IT department, and request that they support all browsers, not just Internet Explorer. If they give you any line about support of non-MS browsers being illegal, or against their company's licensing agreements, you can call them liars, because MS Licensing might dictate what is supported in-house for their employees (a grey area anyway), but they cannot dictate what is supported for ease-of-use from a customer standpoint.
Click to expand...

I actually spoke to them once like this "You mean I can only use a browser that is known for being exploited for security loopholes, and not other better browsers?"

They didn't have an answer for me.
 
There really is no better or more delicate way to phrase a question like that; it needs to be a blunt-force-trauma-type question.
 
*random pop-in*

There's an addon for Firefox which fakes an IE environment, try using that. I forget its name and I don't feel like finding it >.>
 
Flag said:
*random pop-in*

There's an addon for Firefox which fakes an IE environment, try using that. I forget its name and I don't feel like finding it >.>
Click to expand...

IEtab makes use of IE's engine within Firefox's shell, and can be used site-to-site.

User Agent Switcher changes the Agent globally between Opera, Mozilla, IE, and Safari(I think).
 
Uzor said:
It is usually pretty obvious which websites are legitimate though. Letting websites through with domain names such as "playonlline.com" or "xlhowmnfif.com" is usually pretty stupid.
Click to expand...

Thus the "educated" guess. I'd say if you don't consider yourself educated in this area, don't unlock anything or don't use this tool. Otherwise its kind of a "you did it to yourself" point of view on my end.

besides... whats obvious to you and me, isn't always obvious to someone else. But you know how that works.
 
Altheya said:
I actually spoke to them once like this "You mean I can only use a browser that is known for being exploited for security loopholes, and not other better browsers?"

They didn't have an answer for me.
Click to expand...

There's not a browser that isn't being exploited for "security loopholes". Internet Exploder is perfectly safe for going to your Bank's website, there's no point beating them over the head for things (plugging holes in IE) they can't control. If you're (not you personally, Altheya, "you" generally speaking as is in you-all)) not impressed with a bank that doesn't use your favorite browser, then don't use that bank. Or, don't use online banking. Fall back to the 20th century and do it the pen and paper way, it still works!

As a security professional, I'll offer up what I do, since there seems to be lots of complaining and no solutions. I use VMWare player (free) and then run an operating system in a virtual environment. My virtual environment runs XP (I have two licenses) for compatibility, and I go to whatever sites I desire and may not trust. If the virtual environment gets OMGBBQH4X0RD, I just delete that environment, and boot up a fresh copy and Bob's your Uncle. Since the virtual environment is unaware of the hosting computer, the host is safe (generally speaking).

Is this solution right for you? Maybe, maybe not. But it works flawlessly. If you're interested in a more complete write-up on how I use VMWare, I can post something at a later date.
 
You must log in or register to reply here.
Back
Top