Don't Press F1 Key: New Malware Targets Internet Explorer
According to a report by Microsoft, a new security hole has emerged in older versions of Windows systems running Internet Explorer. Hackers could use the vulnerability to take control of a user's system.
The flaw has been found in systems running Windows 2000, Windows XP, and Windows Server 2003. Microsoft says the issue is tied to the way that Visual Basic Scripting, or VBScript -- which is used for executing functions found in web pages -- is linked with Windows Help files.
Fake Dialog Box Requests Users Hit F1
In the case of an attack, a victim using Windows 2000, XP, or Server 2003 would only need to visit a malicious web site where a dialog box would be presented, enticing users to press their F1 key. Once the key is pressed, the system is hijacked and malware is installed on the computer. (Source: pcworld.com)
Typically, the F1 key is used to initiate the help function, so a play on this scenario may be employed by the hacker(s) involved in such a scheme.
Users who've upgraded to more recent versions of Windows, including Windows Server 2008, Windows Vista, and the new Windows 7, will not be affected by the vulnerability.
Microsoft Provides Workarounds
Microsoft has provided a security advisory that outlines a number of workarounds for users of Windows XP or Windows 2000.
The first and most obvious is to not hit the F1 key when prompted by any web site, since this is rarely a normal procedure when visiting a website. Secondly, users can restrict access to the Windows Help System, and they can also set their security settings to "high" in order to block ActiveX Controls and Active Scripting associated with the ploy. (Source: cnet.com)
If users come across a site that asks them to click F1, it is recommended to use the Windows Task Manager by pressing CTRL + ALT + DEL on the keyboard, then select the Internet Explorer task using the mouse, and end it by pressing the DEL key.
Infopackets Top Windows 10 FAQs
How to Upgrade from Windows 10 32-bit to 64-bit
How to Fix: Windows 10 Antivirus Missing, Not Compatible
How to Fix: Windows 10 Display Shifted; Screen Fuzzy
How to Upgrade Windows 7, 8 32-bit to Windows 10 64-bit
to Downgrade from Windows 10
- How to Fix: Windows 10 Upgrade Failed Error C1900208
- How to Fix: Windows 10 Upgrade Failed Error 80240020
- Can I Cancel my Windows 10 Reservation and Reserve Later?
- How to Clean Install Windows 10 using Windows 7, 8 License
- Will Windows 10 Install Automatically?
- Windows 10 Upgrade: Do I have to Reinstall Programs?
- Windows 10 Upgrade: Can I choose 32-bit or 64-bit?
- Which Version of Windows 10 Will I Get (Home or Pro)?
- How to Reserve Windows 10 Upgrade (Free)
- How to Fix: CPU Not Compatible with Windows 10 Error
- Windows 10 Upgrade: Can I keep my Old Windows Install?
- How to Cancel Windows 10 Reservation (Properly)
- Download Windows 10 .ISO (DVD) for Clean Install?
- Microsoft: Windows 10 Will Be The Last Version
- Does Windows 10 require the CPU to support PAE?
- Windows 10: Can I Upgrade or do I need a Clean Install?
Click here for more Windows 10 articles.