Clipboard Hijacker

[Grimhound]

I am currently being hounded by a malware script that attacks the clipboard and forcefully overwrites it to contain this link, broken due to the content being malicious.

http:// xp-vista-update.net /?id=91873534231

I am not sure whether or not the script is running from on my computer or from the internet, and I have been entirely unable to find a real defense against the script. I have reported it as a new threat, and was wondering if anyone had any insight to help remove the threat the script poses to the broader community via it's method of propagation through the overwrite being pasted where would normally go legitimate pastes.

[blues]

i have the site in my hostsfile, but i dont think it is placed there by spybot. it is probably placed there by mvps hosts. it should have been blocked by spybot too, sometimes spybot blocks to few malicious sites.

[tashi]

Hello Grimhound,

http://www.theregister.co.uk/2008/08/15/webbased_clipboard_hijacking/

Please follow the procedure in this link: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)


Then start your own thread in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) where a helper will advise you as soon as available.

Cheers.