Anyone heard of this BS? HTA exploit...

Post by **FlyingPenguin** » Fri Jan 30, 2004 11:57 pm

Never heard of this before, which is suspicious. Was diagnosing a VERY compromised system (was being used as a Warez server - had 25Gb of porn on it). Found a file running in the background and when I googled it came up with this website:

http://www.nsclean.com/htastop.html

So I started to download that utility and NAV tells me it's intercepted a download Trojan. Hmmmm..... something smells rotten in Denmark....

Judg3 · Post by **Judg3** » Sat Jan 31, 2004 12:59 pm

I downloaded it and I don't get any Trojan alerts - probably just NAV being over ambitious again.