Comments on: How do Storm, NotFound and other threats infiltrate so many PC’s? http://blog.threatfire.com/2007/08/how-do-storm-notfound-and-other-threats-infiltrate-so-many-pcs.html ThreatFire™ AntiVirus protects when others can't Fri, 06 Nov 2009 17:43:38 -0600 http://wordpress.org/?v=2.8.4 hourly 1 By: ThreatFire Blogger http://blog.threatfire.com/2007/08/how-do-storm-notfound-and-other-threats-infiltrate-so-many-pcs.html/comment-page-1#comment-3 ThreatFire Blogger Tue, 04 Sep 2007 20:21:00 +0000 http://newblog.threatfire.com/2007/08/how-do-storm-notfound-and-other-threats-infiltrate-so-many-pcs/#comment-3 Thomas486-<br/><br/>Thanks, and yes, ThreatFire protects against exploitation of this vulnerability by detecting malicious behavior -- we've got multiple copies of this exploit from web sites in the wild. They are all prevented successfully.<br/><br/>Generally, we'll post screenshots on our research focus on this blog, which mostly is malware analysis. <br/><br/>Here is a link to screenshots of ThreatFire in action preventing this exploit in the wild at our pctools forum (sorry, at this time our forum requires login, but it takes only a minute to register):<br/>http://tinyurl.com/28gqwq<br/>http://preview.tinyurl.com/28gqwq<br/><br/><br/>Kurt Thomas486-

Thanks, and yes, ThreatFire protects against exploitation of this vulnerability by detecting malicious behavior — we’ve got multiple copies of this exploit from web sites in the wild. They are all prevented successfully.

Generally, we’ll post screenshots on our research focus on this blog, which mostly is malware analysis.

Here is a link to screenshots of ThreatFire in action preventing this exploit in the wild at our pctools forum (sorry, at this time our forum requires login, but it takes only a minute to register):
http://tinyurl.com/28gqwq
http://preview.tinyurl.com/28gqwq

Kurt

]]> By: strong-minded http://blog.threatfire.com/2007/08/how-do-storm-notfound-and-other-threats-infiltrate-so-many-pcs.html/comment-page-1#comment-2 strong-minded Sat, 01 Sep 2007 16:16:00 +0000 http://newblog.threatfire.com/2007/08/how-do-storm-notfound-and-other-threats-infiltrate-so-many-pcs/#comment-2 Very nice article about the new trend of malware propagation.<br/><br/>Does ThreatFire protect against this vulnerability by detecting the buffer overflow behavior?<br/><br/>Can you post some screenshots of buffer overflow alerts of ThreatFire?<br/><br/>Thank you.<br/><br/>Thomas486 Very nice article about the new trend of malware propagation.

Does ThreatFire protect against this vulnerability by detecting the buffer overflow behavior?

Can you post some screenshots of buffer overflow alerts of ThreatFire?

Thank you.

Thomas486

]]>