Browser Helper Objects

[HankHeath@xxxxxxx]

I don't know if you have heard about this, but I thought it might be worth 
passing along. Internet Explorer has another hole in it that is being exploited 
for criminal means. The hole is called a "browser helper object." A browser 
helper object is a bit of code that can be attached to Internet Explorer to 
help 
you do things like download programs or start up Adobe or so on. Neat things 
when used correctly.

Some criminal minds have taken it a step farther. They have a browser helper 
object that helps you fill out secured forms on the Internet - things like 
on-line banking. The criminal piece captures your keystrokes as you work on a 
secured connection. Since the keystrokes have not been sent out from your 
machine, they have not yet been encrypted (which is what the secured connection 
does 
for you). Then, later on, the browser helper object sends your secured 
information to someone who can strip your account. 

There is no fix out for this. There is a tool to inspect the browser helper 
objects on your system ( http://www.definitivesolutions.com/bhodemon.htm ), but 
it does not repair them. 

So far, the only solution I have come up with is to use Mozilla as a browser 
when doing on-line banking. Or not do any on-line banking at all.

Be careful out there.

- HH

More information can be found at

http://www.pcmag.com/article2/0,1759,1620505,00.asp

http://reviews-zdnet.com.com/AnchorDesk/4520-7297_16-5142452.html

http://www.zdnet.com.au/news/security/0,2000061744,39152544,00.htm