19 May 2009

Browser Helper Objects and TG

Browser Helper Objects are used to extend the in-browser functionality of Internet Explorer in a way that works across all pages. (Java, JavaScript, and ActiveX can work only within the context of a single page or set of pages.) The Google Toolbar Helper Object, for example, adds a search toolbar, context menus, and pop-up advertisement blocker to IE. Other BHOs have more nefarious uses; many spyware creators use BHOs to record all of the URLs a victim accesses, to manipulate search results, or to redirect error pages to advertisements.

A list of Browser Helper Objects installed on a machine can be found in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Explorer\Browser Helper Objects.

TG as called transaction generators are more sophisticated versions of one-click attack. BHO's also may be used to genetare TG attacks by using trojans..

No comments: