Update on the Italian Porn Site
Last night my brother and I spent an hour or so on the phone trying to make the Italian porn site stop installing itself as the default IE homepage and place various desktop shortcuts and favorites each time the computer rebooted. The first thing I had him do was to download and install the Sygate personal firewall. We found that IE was trying to contact the ivolti.com web page. The next thing we did was to block traffice from the subnet that ivolti.com was on.
The next step was to look for files that had been created at the time of the infection. There were a couple of applications, configuration files, shortcuts and web links. All were conventiently marked with an icon of a girl’s eye. Deleting the applications from the windows directory wasn't allowed. The applications were running, so we needed to stop the processes first. After deleting all of the files and rebooting the computer the offending web site had been banished from the computer.
I looked at the web site. Since I speak a little Italian, I got an idea of what they were trying to offer. Celebreties, calendars, backgrounds, etc. No matter where I clicked, all that happened was an offer to download or run a variety of applications. Perhaps some commerce is happening on the site, but it had the feel of a prank.
10:21:07 AM 
|
