And it's not really an Exploit, either.

1: It's javascript that tries to guess what your modems IP address is. If it's possible for javascript to find out what your IP Address is, it becomes trivial, and it it's possible for javascript to find out what your default route is, then it's solved.

2: It then tries to get into your router. I would assume there would be another js library that it would load, that could be easily kept up to date, containing fingerprints of modems so it can figure out what it is, and try the default (root/password, admin/admin, etc)

3: It then updates the DNS servers in the modem to NOT use the ISP assigned ones, but nasty ones. As your PC queries the modem (99% of the time, unless you've manually changed your DNS servers) for DNS results, if the DNS relay in the modem is pointing to the wrong root, then you'll get crap answers.

I realise they say that using OpenDNS wouldn't avoid this, but I think that's known, technically, as bullshit.

Actually, all you need to do is look at the default route of the PC. There's your modem.

DivX is a CODEC, AVI is a CONTAINER. Just because you don't support AVI doesn't mean you don't support DivX.

I've been using AVG at customers sites since version 6.. It has, over the years, deleted entire outlook pst's, repeatedly uninstalled VNC servers and radmin, and generally been grumpy for the slightest reason.

I am a sucker for punishment, because I still keep using it. It's just as good as the rest, it's half the price, and noticably faster than all the others I've tried.

I think that, however, the entire concept of antivirus is going to have to fail, and we'll need a whitelist, rather than a blacklist.

There has been quite a bit of discussion about this over the years, and it's going to come true.

Oh. And as an added bonus, Slashdot is screwing up my display. When I load the page, I get the comments page, and then it clears and I get a spammy IBM flash ad of some sort. Serves me right for not installing ABP after a reinstall.

--Rob