Surfing pr0n on XP running in Admin mode

[VirtualLarry]

I don't recall whether or not I installed IE7 on this box, but boy did it get hosed quickly.
Stuff started popping up faster than in a cheesy hollywood hacker movie.

First, some dialog box about java popped up. Then "Help and Support". And finally, some command-prompt windows. Ouch!

First time I've seen an exploit using "Help and Support" on XP. Going to have to research that one.

Edit: This is probably the exploit: http://www.scmagazineus.com/microsoft-warns-of-soaring-windows-help-center-exploits/article/173739/
I built the box and did updates before june, and I don't think I've updated since. I was away on vaca from the end of july until now, so I didn't patch xp. Oops. Should have figured as much.

http://www.microsoft.com/technet/security/advisory/2219475.mspx

 

[leexgx]

If i used porn sites (dangerous as they are) i would only use opera as its good at handling runaway scripts to try and screw the pc over maybe Chrome not sure how secure it is compared to opera (both do run as user mode and do not support UAC level up as far as i know and that's an good thing means you have to download the virus and stupidly run it)

i install Opera on all my systems now as its very hard to run an exploit on it, it even runs on windows 95 with the correct dll file it needs to open

still does not stop them from downloading an DRM infected WMV or WMA file as i went back to an customer the next day to remove the same thing i removed the day before, not saying porn is what does it most of the time one time an google search result put the AV8 virus on an system (norton had expired so the script blocking was disabled) when i went onto it on opera i must of had 4-6 scripts that did not run on the site but if you copy and pasted the link the page would not load the referrer had to be google search or the site was smart enough not to load up

 

[RavenSEAL]

...sigh.

 

[Tsavo]

I remember years ago, I accidentally left an XP box outside the firewall while I was installing the OS. It was hit and full of garbage before I even got to touch it.

 

[Modelworks]

sandbox the browser or run a virtual machine if you need to visit high risk sites.