Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Lock Home Page
- Thread starter PaulSc
- Start date
PaulSc,
Look at my FAQ:
faq608-0 Win98, to backup the registry, go to Start>Run, and type scanregw. Choose Yes to backup the registry again.
In Win95, open regedit, select the key(s) you are making the change to, choose Registry>Export Registry File from the menu. Save the file to your desktop. If you have problems, double-click on that saved .reg file to undo the change you made. If everything works OK, delete the .reg file from the dsktop.
reghakr
Look at my FAQ:
faq608-0 Win98, to backup the registry, go to Start>Run, and type scanregw. Choose Yes to backup the registry again.
In Win95, open regedit, select the key(s) you are making the change to, choose Registry>Export Registry File from the menu. Save the file to your desktop. If you have problems, double-click on that saved .reg file to undo the change you made. If everything works OK, delete the .reg file from the dsktop.
reghakr
- Thread starter
- #3
- Thread starter
- #4
- Thread starter
- #6
Paulsc
You may wish to try these two quickies..
From your browser.
[1]
Tools/Internet Options/Advanced/Browsing/....Enable install on demand...[uncheck]
[2]
Tools/Internet Options/Security/Internet/Custom Level/*ActiveX controls and plug-ins [edit these as you wish]
..from excerpt at Winguides..by RW Schlatter
"ActiveX programs (contrary to Java applets) can contain code for full access to the Windows operating system. Both the download and the execution of this program will have been scripted in the html of a web page."
GL
smitee
You may wish to try these two quickies..
From your browser.
[1]
Tools/Internet Options/Advanced/Browsing/....Enable install on demand...[uncheck]
[2]
Tools/Internet Options/Security/Internet/Custom Level/*ActiveX controls and plug-ins [edit these as you wish]
..from excerpt at Winguides..by RW Schlatter
"ActiveX programs (contrary to Java applets) can contain code for full access to the Windows operating system. Both the download and the execution of this program will have been scripted in the html of a web page."
GL
smitee
The problem you're describing is the JS.Exception.Exploit "virus". I use the term virus loosly - it's regarded as that by Norton, but isn't as malicious as some others, but still not very nice. If you go to the site you stated with Norton Antivirus running it should pick it up before it can do anything. It involves the incorrect use of the <applet> tag to take advantage of a JVM (Java Virtual Machine) and Active X weakness.
Here's what symantec says about it:
JS.Exception.Exploit is an exploit which allows unpatched systems to run arbitrary code if a Java applet that was programmed to take advantage of the exploit is allowed to run. In many cases, the applet may perform simple actions, such as changing your Internet Explorer home page. It can also be programmed to run code to perform a mass mailing, as in the case of VBS.Loding.A@mm.
Type: Trojan Horse
Virus Definitions: August 16, 2001
There's a path to fix this available from Microsoft here:
which solves the Active X vulnerability.
And one for the JVM (it installs a new version of JVM):
Hope that's of some use!
Here's what symantec says about it:
JS.Exception.Exploit is an exploit which allows unpatched systems to run arbitrary code if a Java applet that was programmed to take advantage of the exploit is allowed to run. In many cases, the applet may perform simple actions, such as changing your Internet Explorer home page. It can also be programmed to run code to perform a mass mailing, as in the case of VBS.Loding.A@mm.
Type: Trojan Horse
Virus Definitions: August 16, 2001
There's a path to fix this available from Microsoft here:
which solves the Active X vulnerability.
And one for the JVM (it installs a new version of JVM):
Hope that's of some use!
- Status
Similar threads
- Locked
- Question