[resolved]HTML.MHTML.Redir.exploit trojan

gozmo,

You are the second Aussie to say that. This is making me wonder. I have not seen a thing.

Whatever it is, I need to get to the bottom of it.

Are you using the Kasperky A-V program? The other report was for that one too and I need to start nailing down the factors involved.

I've shut off the only advertising network that has been added within the last month (ads are the only off site code, and the Oz factor might mean it's because of defaults).

I can't find any meaningful information on the reported text either.

I am using E-Z Trust. It happened again.

What ads are you seeing when it does this? Please do that a few times (as long as it's being flagged nothing can happen, and if you have used windows patches since april the exploit is addressed on your system).

I'm beginning to think it's not necessarily coming from any of the ads though. Only two reports when we get millions of hits might indicate a problem specific to your computer (though if it is only here maybe not).

I will PM you an email address and I'd like to get the contents of your cache in case the culprit is there.

I've contacted every major ad network, when they wake up I expect them to start hunting for it in earnest.

A few more things that can help me:

Please visit this page: http://www.able2know.com/disclaimer.php

Let me know what happens, that is a page that I do not think contains any remote html (except for one, and that would nail it immediately).

Another question: is it every time or just some times?

I'd like to thank gozmo for providing me with information by email that I would not have otherwise been able to get.

Any more leads are very very very welcome. I wanna nail these guys' balls to a wall. The exploit is a low-level one that doesn't manage to cause any harm even on some tests with unprotected puters but the nerve of the asses really pisses me off.

I gotta go to bed, gotta be up in a wee bit and i didn't sleep last night.

Gozmo, please send me anything else you have to report (including whether it is now resolved or not).

Thanks Craven. The problem is not recurring.

i have the same problem as this user...mhtml.redir


I have read the chain here and done this visit to the above site with no problem. However EZ antivirus keeps popping up with this mhtml thing relentlessly. i mean 10-12 windows at a time and over and over.
Do you have a solution>?
I am using ad aware and hi jack this and they are looking at my logs.
Thanks for any help

Canary51,

Go get help on the computer forum. This thread is about THIS SITE and not others.