A banner advert appearing on MySpace pages could be affecting more than one million users, according to PCWorld News. The ad, for a site called deckoutyourdeck.com, carries a Trojan Horse infection that exploits vulnerability in Internet Explorer.
Once triggered the ad contacts multiple websites and starts downloading programs and advertising software that creates pop-ups and tracks the user’s online activity. The loophole in IE concerns the way it handles Windows Metafile image files;
Microsoft issued a patch for the exploit back in January but not everyone has bothered to install it, or has automatic updates switched off. Security experts iDefense reports that upwards of 1.07 million computers may have been infected.