The DH

There is a particularly buggy virus spreading around for all you windows users out there. There's discussion on it at Linux.com, WebHostingTalk, TrendMicro, and the Internet Storm Center.

I have verified our server has not been infected. It does seem to be focusing on eCommerce sites. Basically, what happens is that an infected web site sends javascript to random visitors, and that javascript makes various attempts at attacking security holes in Yahoo Messenger, QuickTime for Windows, and Windows itself.

The following is a list of sites that are known to have been infected (I swapped out the 'tt' in http with 'xx' so nobody follows the links). If you've been to one of them, update your virus definitions and run a complete scan of your system.

hxxp://dubai.travel-culture.com/
hxxp://operationultimategoal.com/
hxxp://www.abdet.com/maps/maps-france.html
hxxp://www.ace-cranes.com/
hxxp://www.aprazivel.com.br/
hxxp://www.bellingerfurniture.co.uk/
hxxp://www.bmw-carparts.co.uk/
hxxp://www.careinternational.com/
hxxp://www.directline-citybreaks.co.uk/
hxxp://www.directline-holidays.co.uk/
hxxp://www.directline-skiing.co.uk/
hxxp://www.emtbravo.com/
hxxp://www.flintoak.com/
hxxp://www.gujarat.com/recipes/
hxxp://www.henrykaye.co.uk/Cheap-bridesmaid-dresses-and-flowergirl-dresses
hxxp://www.hungatecottages.co.uk/the_cottages.html
hxxp://www.inthe80s.com/moviequotes/f.shtml
hxxp://www.islandescapeholidays.co.uk/Dubai
hxxp://www.london-discount-hotel.com/hotelinfo_id__106
hxxp://www.london-discount-theatre.com/productions
hxxp://www.moorgateacoustics.co.uk/
hxxp://www.njaiche.org/main.html
hxxp://www.noorcapitaluae.com/
hxxp://www.paddingtoncourt.com/
hxxp://www.panacheshoes.co.uk/
hxxp://www.peshawarjobs.com/
hxxp://www.propertyauctions.co.uk/
hxxp://www.propertyworld.com/_Bermuda
hxxp://www.quaife.co.uk/Gallery
hxxp://www.reallybored.net/
hxxp://www.sharpindialimited.com/dealer-locator.php
hxxp://www.thirlmeremeats.com.au/family.htm
hxxp://www.thirlmeremeats.com.au/special.htm
hxxp://www.travel-culture.com/airblue/
hxxp://www.vauxallparts.co.uk/
hxxp://www.yournewhome.co.uk/Swan-Hill-Homes-Ltd

Mcheer

Good Job Super Sleuth you are on the job!

symesa

Geez, the UK is full of them!

baseballmama

Thanks for staying on top of everything so well. You ROCK DH

mclisa