Wednesday, February 18, 2009

With Avira, Internet Explorer exploitation doesn't stand a chance

Through a vulnerability in Internet Explorer, cyber criminals are attempting to smuggle viruses onto the computers of innocent victims

Tettnang, 18 February 2009 – Just last week Microsoft closed another vulnerability in Internet Explorer. Now Internet criminals are attempting to sneak viruses onto computers through this vulnerability.

The link to the website with this malware is located within a Word document that is sent as an attachment to a spam email. When opening the document the malware attempts to access the infected website which uses the vulnerability in Internet Explorer to install the virus. Avira protects against this attack on the computer: The anti-virus solution issues a warning to the user that the webpage is infected with HTML/Rce.Gen.

The infected website attempts to send and install the jc.exe file to the computer. This relates to a Trojan TR/Rincux.AW which Avira's protection solutions specifically recognize using the VDF detection file 7.01.02.40. The virus creates the wininet.dll file in the Windows system directory. In addition, it modifies the system registry in order to be executed with a reboot. It contacts a server on the Internet and at the same time transfers data via the computer.

As often seen recently, criminal manipulators used vulnerabilities for sneaking in malware code shortly after Microsoft published an update for them. As a rule, for starters, companies should check updates after publication for compatibility with the software they use and then install updates onto computers without delay. Cyber criminals are then stopped from spreading their viruses.

About Avira

Avira protects people in the connected world – enabling everyone to manage, secure, and improve their digital lives. The Avira umbrella covers a portfolio of security and performance applications for Windows, Android, Mac, and iOS. In addition, the reach of our protective technologies extends through OEM partnerships. Our security solutions consistently achieve best-in-class results in independent tests for detection, performance, and usability. Avira is a privately-owned company that employs 500 people. Its headquarters are near Lake Constance, in Tettnang, Germany, and the company has additional offices in Romania, India, Singapore, China, Japan & the United States. A portion of Avira's sales support the Auerbach Foundation, which assists education, children, and families in need. For more information about Avira visit www.avira.com.