Forum Moderators: not2easy

Message Too Old, No Replies

. Something Strange .

CSS javascript exploit switched user browser mode?

         

DexterJ

2:27 am on Nov 8, 2005 (gmt 0)

10+ Year Member



Salutations:

I am wondering if anyone here has run into something strange recently themselves.

Over the weekend I had two separate workstations (actually in separate towns) suddenly change their browser preferences to use local .CSS file instead of site(s) defined .CSS.

It happened on XP with latest Explorer and on W2K with current Opera. Both machines are reading virus/spybot free on different anti-vir packages. Both machines are behind hardware firewalls and patched to current date. Neither machine has server or P2P capability. Both machines are being used for very mainstream surfs. Ebay, google, BBC, reciepe and occasional decorating magazine and/or alumni stuff.. etc..

On Opera, all that was required was to change preferences back to author mode and turn on background/fonts again.

On Explorer - I'm still looking for a registry entry that allows the system to recognize what StyleSheets are again... ... ...

What I'm wondering is, is there any particular reference that anyone can think off that might be made to change user preferences remotely to use local .CSS file instead of subsequent site file(s)? Perhaps a multi-vector using objects/css/cache(?).

It might be nothing and it's and irregular question I know - but I thought I'd ask here in case anyone else is seeing anything like it recently.

I thought for a while it something might have gone south with my hobby site .CSS file - but that hasn't changed in 24 months.

Ideas?

--

J Dexter

jessejump

5:44 pm on Nov 8, 2005 (gmt 0)

10+ Year Member



IE -Internet Options / General / Accesibility

DexterJ

7:30 pm on Nov 8, 2005 (gmt 0)

10+ Year Member



Salutations:

Nope, already tried that. Completely ineffective on XP/Explorer box. Then went to Microsoft support to review this:

[support.microsoft.com...]

Went to registry (despite never having installed anything earlier than 5.5 before upgrading the system to current patches) - and there is no longer any reference to string value 'StyleSheets' in HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main.

.. At all ..

Both the XP and W2K machine was working fine with a virgin install and upgrade a couple of weeks ago - seems to have changed late last week according to the user. There are no virus or Trojan logs showing for the time period so far.

At the time, I put the XP/Explorer pwob down to a straight bug, but now have a the same incident on the W2K machine which see it's Opera settings changed.

Again, the machines are isolated completely from one another on separate nodes in separate towns behind different firewalls. They haven't be in communication with one another at all. Both machines are currently up to date with all the trimmings.

The W2K/Opera settings were returnable being as the application is separated from the core system - they were easy to simply change back. However, it appears at the moment like the settings on XP/Explorer have be wallyfux at the registry level.

In both cases neither user would have changed them manually and were simply using the machines for basic surfing.

Sorry, please don't think I'm trying to knock anything here - just wondering if there is any .CSS/Object reference that anyone can think off that might be used to direct a browser to change it settings to use a local style-sheet instead of a site style-sheet.

It would help to know if anyone has any reference in this regard as the bug-hunt continues.

Anyone know where to submit a bug report to MicroSoft?

Cheers and thanks.

J Dexter