Here's a fun one--visiting page with GIF writes to the registry

  • Thread starter Thread starter gerryf
  • Start date Start date
G

gerryf

Here's the key in question

HKEY_CURRENT_USER\Software\Microsoft\RAS AutoDial\Addresses

On a forum I frequent, whenever I read a post by a particular user the
following entry is written to the above key

www.cad.cx

Subsequently, my computer tries to dial up the internet, even though I am
currently online with a broadband connection.

I know why it is trying to call--the entry cites network0, which is my dial
up adapter, which makes sense since it is writing to the RAS AutoDial key.

the only thing that is different about these forum posts is his avatar, a
little 60 by 60 pixel image of a robot he uses.

The image is a gif.

I 'd heard of the overrun associated with JPEGs, but I hadn't heard of one
associated with GIFs...

What does anyone make of this--I am fully patched, anti virus programs have
been run as have multiple spyware programs.
 
Gerryf,

The workaround I followed is to disable the "Remote Access Auto Connection Manager" service via Services.msc

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"gerryf" <gerryf at thecomputerparamedic.com> wrote in message Here's the key in question

HKEY_CURRENT_USER\Software\Microsoft\RAS AutoDial\Addresses

On a forum I frequent, whenever I read a post by a particular user the
following entry is written to the above key

www.cad.cx

Subsequently, my computer tries to dial up the internet, even though I am
currently online with a broadband connection.

I know why it is trying to call--the entry cites network0, which is my dial
up adapter, which makes sense since it is writing to the RAS AutoDial key.

the only thing that is different about these forum posts is his avatar, a
little 60 by 60 pixel image of a robot he uses.

The image is a gif.

I 'd heard of the overrun associated with JPEGs, but I hadn't heard of one
associated with GIFs...

What does anyone make of this--I am fully patched, anti virus programs have
been run as have multiple spyware programs.
 
Thanks Ramesh, I already did that...I was just wondering what caused that to
occur.



Gerryf,

The workaround I followed is to disable the "Remote Access Auto Connection
Manager" service via Services.msc

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"gerryf" <gerryf at thecomputerparamedic.com> wrote in message
Here's the key in question

HKEY_CURRENT_USER\Software\Microsoft\RAS AutoDial\Addresses

On a forum I frequent, whenever I read a post by a particular user the
following entry is written to the above key

www.cad.cx

Subsequently, my computer tries to dial up the internet, even though I am
currently online with a broadband connection.

I know why it is trying to call--the entry cites network0, which is my dial
up adapter, which makes sense since it is writing to the RAS AutoDial key.

the only thing that is different about these forum posts is his avatar, a
little 60 by 60 pixel image of a robot he uses.

The image is a gif.

I 'd heard of the overrun associated with JPEGs, but I hadn't heard of one
associated with GIFs...

What does anyone make of this--I am fully patched, anti virus programs have
been run as have multiple spyware programs.
 
Back
Top