Malicious WebSite - isorecorder.alexfeinman.com/isorecorder.htm

[Slappy]

isorecorder.alexfeinman.com/isorecorder.htm is referenced in a Microsoft.com
article. Note it is a malicious website that upon visiting immediately loads
the Trojan Horse virus PE_TRATS.A-O

PE_TRATS is identified by Trend Micro and Symantec/Norton as an especially
harmful virus desigend to self-replicate, steal identity information, corrupt
data and hijack pc's.

 

[Alun Jones]

"Slappy" <Slappy@discussions.microsoft.com> wrote in message
news:169291CA-50D0-4ED6-93FB-DB740763FC4B@microsoft.com...
> isorecorder.alexfeinman.com/isorecorder.htm is referenced in a
> Microsoft.com
> article. Note it is a malicious website that upon visiting immediately
> loads
> the Trojan Horse virus PE_TRATS.A-O

On what basis do you make that assertion?

Note that PE_TRATS.A-O, as indicated by its "PE" prefix, is a "portable
executable" (aka a standard Win32 executable).

This means that it is run through downloading and running an infected
executable.

Fetching this web page through a command-line tool, I couldn't see anywhere
in the code that tried to execute a file. There is Javascript downloaded,
from google-analytics.com, but again, no reference to downloading and
executing a file.

I suggest that you got this somewhere else.

> PE_TRATS is identified by Trend Micro and Symantec/Norton as an especially
> harmful virus desigend to self-replicate, steal identity information,
> corrupt
> data and hijack pc's.

That may be, but it doesn't appear that your assertion of malice on the part
of Alex Feinman has anything like a basis in fact.

Alun.
~~~~