• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

MyAntiSpyware

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

Wimamp exploit used to push spyware

Myantispyware team February 6, 2006    

The Winamp vulnerability in version 5.12 was announced at Secunia just a few days ago, details here. Note the Secunia advisory says “an exploit is publicly available”. Nullsoft released Wimamp 5.13 the same day the exploit was announced, but the spyware pushers saw an opportunity to infect more machines and make more money. SunbeltBLOG posted a Winamp exploit found in the wild today. A malicious Winamp playlist file (.pls) was discovered that causes Winamp to open and subsequently download an ugly CoolWebSearch infection called HomeSearch Assistant, also dubbed Trojan/Startpage.HSA, along with ransomware anti-spyware SpySheriff. The Sunbelt post states the exploit takes place from 008k.com, IP 195.225.177.27 at Netcathosting and recommends network admins and home users to block the site. Netcathosting is one of those ISP’s known to host spyware. Sunbelt also posted a screenshot of the hijacked browser showing domain lookfor.cc (link to dnsstuff.com).

Exploits & Vulnerabilities

 Previous Post

How to recovery lost files (due to W32.Blackmal.E@mm – BlackWorm virus or other reasons)

Next Post 

Top Ten viruses and spyware most frequently detected by Panda ActiveScan in January

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

Leave a Reply Cancel reply

New Guides

Orivelle Nail Fungus Pen Review, Scam or Legit? What You Need to Know
Buffalo Trace 250th Anniversary Advent Calendar Scam, What You Need to Know
Tradeverse.site Scam Alert: Fake Bitcoin Promo Codes
scam alert
Beware of Zetwex.com: A Bitcoin Promo Code Scam Analysis
scam alert
Avoid the SMONTEX.com Scam: How to Spot Fake Bitcoin Giveaways

Follow Us

Search

Useful Guides

How to remove pop-up ads [Chrome, Firefox, IE, Opera, Edge]
Files encrypted by ransomware become useless
How To Recover Encrypted Files (Ransomware file recovery)
remove android virus
How to remove virus from Android phone
This setting is enforced by your administrator (Removal guide)
ads by adware
How to remove Adware from Windows 10 (Virus removal guide)

Recent Guides

How to recovery lost files (due to W32.Blackmal.E@mm – BlackWorm virus or other reasons)
Mozilla released Firefox 1.5.0.1 to fix several vulnerabilities
Remove Win32/Mywife.E@mm BlackWorm, W32.Blackmal.E@mm, WORM_GREW.A, W32/Nyxem-D, Email-Worm.Win32.VB.bi now
New rogue anti spyware – AlfaCleaner
How to remove VideoCodec3_05b – ICQCHK.exe – MSX.DLL

Myantispyware.com

Myantispyware has been a trusted source for computer security and technology advice since 2004. Our mission is to provide reliable tech guidance and expert, practical solutions to help you stay safe online and protect your digital life.

Social Links

Pages

About Us
Contact Us
Privacy Policy

Copyright © 2004 - 2024 MASW - Myantispyware.com.