full-disclosure - Drive-by download from a spam email message

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <018401c2c100$19b79e60$c500a8c0@bbcsw2kpro>
From: smenard at nbnet.nb.ca (Stephen Menard)
Subject: Drive-by download from a spam email message

Don't let the net byte you !
why are you opting out of spam?
is there some secret formula or just asking for trouble.
is this just a newbie troll :-)

You've gotta -TRUST-  microsoft 
and all their software. Special install routines...
Don't you update by windowsupdate website ?

Did you realize registry usually says 
Signature Fail causes silent install to work [something like it] 

there's moore holes richard, you're good at finding them 
PSSS anybody have an e-learning accoutn with Microsoft dev passport? 
I got to see someone else data this morning.
screen shots available, 
I don't live in Texas, nor have a zip code
but click2learn thinks so

smenard

----- Original Message ----- 
From: "Richard M. Smith" <rms@...puterbytesman.com>
To: <>; "'Richard M. Smith'" <rms@...puterbytesman.com>
Sent: Monday, January 20, 2003 11:05 PM
Subject: [Full-Disclosure] Drive-by download from a spam email message


> Hi,
> 
> I just tried to opt-out from a spam email message from some sort
> Internet keyword system.  When I went to the opt-out page for the
> mailing list, I got hit with a drive-by download that asked me to
> install an ActiveX control called the "Internet Marketing Agency".
> There isn't a clue on the opt-out page what this control does.  I said
> "No" on the install.
> 
> Here's the opt-out page:
> 
>    http://upgradingyourbrowser.com/removerequest.html
> 
> Is Microsoft ever going to do something about the drive-by download
> problem in Internet Explorer?  ActiveX downloads should only happen if a
> user asks for a control in the first place.  These silent downloads are
> bad news.
> 
> Richard M. Smith
> http://www.ComputerBytesMan.com
> 
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>