Lastest Patches + Zone Alarm & you think you're safe against Trojans?

Discussion in 'NZ Computing' started by Howard, Aug 27, 2003.

  1. Howard

    Howard Guest

    Well so did I, until I tried out PCAudit.

    http://www.pcinternetpatrol.com/downloads/audit.php

    It commandeers your MSIE to route out the contents of your MyDocs, Desktop
    Images, keystrokes and so on. A most illuminating experience.

    So if you've ever told ZoneAlarm that its ok for MSIE to access the internet
    (and who hasn't?) you're toast.

    -H
     
    Howard, Aug 27, 2003
    #1
    1. Advertising

  2. Howard

    T.N.O. Guest

    "Howard" wrote
    > Well so did I, until I tried out PCAudit.
    > http://www.pcinternetpatrol.com/downloads/audit.php


    > So if you've ever told ZoneAlarm that its ok for MSIE to access the

    internet
    > (and who hasn't?) you're toast.



    eek... worrying... can others try it with Ie set to go straight through
    (software)firewalls, and see what happens?
     
    T.N.O., Aug 27, 2003
    #2
    1. Advertising

  3. On Wed, 27 Aug 2003 12:20:25 +1200, "T.N.O." <> wrote:

    >"Howard" wrote
    >> Well so did I, until I tried out PCAudit.
    >> http://www.pcinternetpatrol.com/downloads/audit.php

    >
    >> So if you've ever told ZoneAlarm that its ok for MSIE to access the

    >internet
    >> (and who hasn't?) you're toast.

    >
    >
    >eek... worrying... can others try it with Ie set to go straight through
    >(software)firewalls, and see what happens?
    >




    Crap software does not even run on XP comes up with a Memory error..
     
    Robert Kramer, Aug 27, 2003
    #3
  4. On Wed, 27 Aug 2003 12:08:23 +1200, "Howard" <> wrote:

    >Well so did I, until I tried out PCAudit.
    >
    >http://www.pcinternetpatrol.com/downloads/audit.php
    >
    >It commandeers your MSIE to route out the contents of your MyDocs, Desktop
    >Images, keystrokes and so on. A most illuminating experience.
    >
    >So if you've ever told ZoneAlarm that its ok for MSIE to access the internet
    >(and who hasn't?) you're toast.
    >
    >-H
    >



    May be you do not have all the MS patches as it will not run on XP, gives a
    memory error..
     
    Robert Kramer, Aug 27, 2003
    #4
  5. On Wed, 27 Aug 2003 12:08:23 +1200, "Howard" <> wrote:

    >Well so did I, until I tried out PCAudit.
    >
    >http://www.pcinternetpatrol.com/downloads/audit.php
    >
    >It commandeers your MSIE to route out the contents of your MyDocs, Desktop
    >Images, keystrokes and so on. A most illuminating experience.
    >
    >So if you've ever told ZoneAlarm that its ok for MSIE to access the internet
    >(and who hasn't?) you're toast.
    >
    >-H
    >



    Also its a bit pointless as you have to have in on your PC in the fist place..
     
    Robert Kramer, Aug 27, 2003
    #5
  6. Howard

    Bret Guest

    On Wed, 27 Aug 2003 13:00:30 +1200, Robert Kramer
    <> wrote:

    >On Wed, 27 Aug 2003 12:20:25 +1200, "T.N.O." <> wrote:
    >
    >>"Howard" wrote
    >>> Well so did I, until I tried out PCAudit.
    >>> http://www.pcinternetpatrol.com/downloads/audit.php

    >>
    >>> So if you've ever told ZoneAlarm that its ok for MSIE to access the

    >>internet
    >>> (and who hasn't?) you're toast.

    >>
    >>
    >>eek... worrying... can others try it with Ie set to go straight through
    >>(software)firewalls, and see what happens?
    >>

    >
    >
    >
    >Crap software does not even run on XP comes up with a Memory error..
    >

    LOL runs fine on my XP system, perhaps you have bad memory?
     
    Bret, Aug 27, 2003
    #6
  7. "Howard" <> wrote in message

    > http://www.pcinternetpatrol.com/downloads/audit.php
    >
    > It commandeers your MSIE to route out the contents of your MyDocs, Desktop
    > Images, keystrokes and so on. A most illuminating experience.
    >
    > So if you've ever told ZoneAlarm that its ok for MSIE to access the

    internet
    > (and who hasn't?) you're toast.
    >
    > -H


    Is "howard" a Kiwi or just some HOTMAIL spam/maketing guru?

    PjN
     
    Peter James Neal, Aug 27, 2003
    #7
  8. Howard wrote:
    > Well so did I, until I tried out PCAudit.
    >
    > http://www.pcinternetpatrol.com/downloads/audit.php
    >
    > It commandeers your MSIE to route out the contents of your MyDocs,
    > Desktop Images, keystrokes and so on. A most illuminating experience.
    >
    > So if you've ever told ZoneAlarm that its ok for MSIE to access the
    > internet (and who hasn't?) you're toast.


    Boring. Injecting a DLL into another processes address space is child's
    play. Notice that it assumes that a file has somehow gotten onto your
    computer (ie. (L)users running attachments) and anti-virus is not installed.

    Cheers,
    Nicholas Sherlock
     
    Nicholas Sherlock, Aug 27, 2003
    #8
  9. Howard

    Howard Guest

    Nicholas Sherlock wrote:

    > Boring. Injecting a DLL into another processes address space is
    > child's play. Notice that it assumes that a file has somehow gotten
    > onto your computer (ie. (L)users running attachments) and anti-virus
    > is not installed.


    Yep, all true, except for the boring part, as it was news to me.

    Defeats the purpose of outbound application traffic monitoring services in
    firewalls like ZA, doesn't it?
     
    Howard, Aug 27, 2003
    #9
  10. On Wed, 27 Aug 2003 13:13:29 +1200, Bret <> wrote:

    >On Wed, 27 Aug 2003 13:00:30 +1200, Robert Kramer
    ><> wrote:
    >
    >>On Wed, 27 Aug 2003 12:20:25 +1200, "T.N.O." <> wrote:
    >>
    >>>"Howard" wrote
    >>>> Well so did I, until I tried out PCAudit.
    >>>> http://www.pcinternetpatrol.com/downloads/audit.php
    >>>
    >>>> So if you've ever told ZoneAlarm that its ok for MSIE to access the
    >>>internet
    >>>> (and who hasn't?) you're toast.
    >>>
    >>>
    >>>eek... worrying... can others try it with Ie set to go straight through
    >>>(software)firewalls, and see what happens?
    >>>

    >>
    >>
    >>
    >>Crap software does not even run on XP comes up with a Memory error..
    >>

    >LOL runs fine on my XP system, perhaps you have bad memory?




    Nothing else gives me problems so I do't think so.
     
    Robert Kramer, Aug 27, 2003
    #10
  11. On Wed, 27 Aug 2003 05:53:18 GMT, (Gavin Tunney) wrote:

    >On Wed, 27 Aug 2003 12:08:23 +1200, "Howard" <>
    >wrote:
    >
    >>Well so did I, until I tried out PCAudit.
    >>
    >>http://www.pcinternetpatrol.com/downloads/audit.php
    >>
    >>It commandeers your MSIE to route out the contents of your MyDocs, Desktop
    >>Images, keystrokes and so on. A most illuminating experience.
    >>
    >>So if you've ever told ZoneAlarm that its ok for MSIE to access the internet
    >>(and who hasn't?) you're toast.
    >>
    >>-H
    >>

    >
    >I tried it and Tiny firewall blocked it ok. It uses Explorer on Win98
    >& I only allow explorer local network access, for network printing.
    >Looks to me like it just exploits some of the less user-friendly
    >aspects of firewalls.
    >
    >Gavin
    >



    Well my PC must be well protected as it can't even run as the App reports a
    memory error, and the Debug feature does not even work.
     
    Robert Kramer, Aug 27, 2003
    #11
  12. Howard

    Callum Guest

    On Wed, 27 Aug 2003 12:08:23 +1200, "Howard" <>
    wrote:

    >Well so did I, until I tried out PCAudit.
    >
    >http://www.pcinternetpatrol.com/downloads/audit.php
    >
    >It commandeers your MSIE to route out the contents of your MyDocs, Desktop
    >Images, keystrokes and so on. A most illuminating experience.
    >
    >So if you've ever told ZoneAlarm that its ok for MSIE to access the internet
    >(and who hasn't?) you're toast.
    >
    >-H
    >

    said im well protected :)
     
    Callum, Aug 27, 2003
    #12
  13. Howard

    Howard Guest

    Callum wrote:

    > said im well protected :)


    What's your setup Callum?
     
    Howard, Aug 27, 2003
    #13
  14. Howard

    Enkidu Guest

    On Wed, 27 Aug 2003 15:51:44 +1200, "Howard" <>
    wrote:
    >
    >Nicholas Sherlock wrote:
    >
    >> Boring. Injecting a DLL into another processes address space is
    >> child's play. Notice that it assumes that a file has somehow gotten
    >> onto your computer (ie. (L)users running attachments) and anti-virus
    >> is not installed.

    >
    >Yep, all true, except for the boring part, as it was news to me.
    >
    >Defeats the purpose of outbound application traffic monitoring services in
    >firewalls like ZA, doesn't it?
    >

    If you want to look at it like that. So does any program that you
    install that you let access the Intenet.

    Cheers,

    Cliff
    --

    Signed and sealed with Great Seal of the Executive
    Council of the Internet, by The Master of The Net.
     
    Enkidu, Aug 27, 2003
    #14
  15. Howard

    Howard Guest

    Enkidu wrote:

    > If you want to look at it like that. So does any program that you
    > install that you let access the Intenet.


    Rather more serious than that Cliff.

    So I install a new program x. First time I use it Zone alarm checks with me
    thats it's OK. All is well.

    Now a trojan gets on my system. First time it tries to dial home, Zone Alrm
    checks with me - I say no cause I don't know about it.

    At least that's how it's supposed to work. Being able to comandeer IE breaks
    that functionality.

    -H
     
    Howard, Aug 27, 2003
    #15
  16. Howard

    Enkidu Guest

    On Wed, 27 Aug 2003 23:14:05 +1200, "Howard" <>
    wrote:

    >Enkidu wrote:
    >
    >> If you want to look at it like that. So does any program that you
    >> install that you let access the Intenet.

    >
    >Rather more serious than that Cliff.
    >
    > So I install a new program x. First time I use it Zone alarm checks
    > with me thats it's OK. All is well.
    >
    > Now a trojan gets on my system. First time it tries to dial home, Zone
    > Alarm checks with me - I say no cause I don't know about it.
    >
    > At least that's how it's supposed to work. Being able to comandeer IE
    > breaks that functionality.
    >

    That's not the point. Any program you install, including program x,
    has the potential to be taken over.

    Any program you install is suspect.

    Cheers,

    Cliff
    --

    Signed and sealed with Great Seal of the Executive
    Council of the Internet, by The Master of The Net.
     
    Enkidu, Aug 28, 2003
    #16
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Patch

    Audible alarm in Zone Alarm?

    Patch, Aug 18, 2003, in forum: Computer Support
    Replies:
    4
    Views:
    1,150
    Patch
    Aug 18, 2003
  2. Mike
    Replies:
    3
    Views:
    514
    S.Heenan
    Aug 23, 2003
  3. Leigh-Anne Mills

    Scanner for Lastest MS Patches installed

    Leigh-Anne Mills, Apr 20, 2004, in forum: Computer Support
    Replies:
    1
    Views:
    708
  4. Jones

    Zone Alarm or Zone Alarm Pro?

    Jones, Feb 19, 2004, in forum: Computer Information
    Replies:
    5
    Views:
    607
    Phil Marshall
    Feb 20, 2004
  5. Replies:
    6
    Views:
    412
Loading...

Share This Page