View Single Post
  #26  
Old 04-09-2010, 09:58 AM
dzeris dzeris is offline
Approved Member
 
Join Date: Feb 2010
Posts: 22
Default

Quote:
Originally Posted by Erkilmarl View Post
I had IE7 at work... Perhaps 8 would be more safe, don't know. But still I am somewhat confused. Should I be warned as I try to load the page? If the Trojan is activated then, I am checking the code too late. Or is it acteivated as I activate some function on the page?
You open page, javascript is automatically executed and that russian sn[edit]sh.ru website is loaded in hidden frame. If your browser is vulnerable and site uses some exploit on it, then you have problem. I usually don't play king bounty as Mage and I don't have gift of prophet. I don't have any idea about stuff served by that russian site or what triggers it. Site is unstable or exploit is served not on every connection.

Looks like site uses some PDF exploit. Make sure that your acrobat reader is not outdated. It definitively targets IE7 on Vista. Not sure about IE8.

Forum admins. For gods sake. How many warnings do you need? The fact that your antiviruses are silent does not mean a thing. Any page source investigation should show that there is something wrong with that website.

Last edited by dzeris; 04-09-2010 at 10:05 AM.
Reply With Quote