kak worm (don't have any URLs handy), around for a while, OE is one of
the culprits.
--
Alan Thew [EMAIL PROTECTED]
Computing Services,University of Liverpool Fax: +44 151 794-4442
On Sun, 16 Jul 2000 10:11 , Cyndi Norman <[EMAIL PROTECTED]> said:
>I have recieved perhaps half a dozen of these attachments in email, all in
>the last month or two. To me it looks like a virus because there is
>javascript...I don't know javascript that well but it looks like it's
>trying to read your harddrive.
>
>I always write people back and tell them to hop over to www.shareware.com
>and download (and use) some anti-virus software just in case. But I was
>wondering if anyone had a better explanation and cure for this happening.
>
>I believe it only happens when the person is using Outlook Express for the
>PC. It certainly won't affect my computer (1. I'm on a Mac; 2. I read
>email through a UNIX shell) but I don't know what it's doing to others.
>
>Here are some exerpts for your reading pleasure. They are mangled as best
>I can without comprimizing readability. I wouldn't want them to execute on
>anyone's system! I don't have a full copy anywhere...this one came through
>partially after being attached to a subscription request sent to the server
>(and yes, the sub processed just fine).
>
>Thanks for any insights.
>
>The beginning, minus some lines:
>
>:!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
>:HTML> HEAD>
>:META content=3D"text/html; charset=3Diso-8859-1" =
>:http-equiv=3DContent-Type>
>:META content=3D"MSHTML 5.00.2014.210" name=3DGENERATOR>
>:BODY bgColor=3D#ffffff>
>:DIV style=3D"POSITION: absolute; RIGHT: 0px; TOP: -20px; Z-INDEX: 5">
>:OBJECT classid=3Dclsid:06290BD5-48AA-11D2-8432-006008C3FBFC=20
>:id=3Dscr></OBJECT></DIV><FONT size=3D4>subsingle
>:SCRIPT><!--
>:function sErr(){return =
>:true;}window.onerror=3DsErr;scr.Reset();scr.doc=3D"Z<HTML><HEAD><TITLE>Dr=
>:iver Memory Error</"+"TITLE><HTA:APPLICATION ID=3D\"hO\" =
>:WINDOWSTATE=3DMinimize></"+"HEAD><BODY BGCOLOR=3D#CC
>
>Some other lines, with many missing inbetween:
>
>:ActiveXObject('Scripting.FileSystemObject');wd=3D'C:\\\\Windows\\\\';fl=3D
>:fs.GetFolder(wd+'Applic~1\\\\Identities');sbf=3Dfl.SubFolders;for(var
>:\\StartUp\\\\kak.hta';k2=3Dwd+'System\\\\'+fic+'.hta';kk=3D(fs.FileExists
>:;t2.Write('\"cAg0u\"=3D\"C:\\\\\\\\WINDOWS\\\\\\\\SYSTEM\\\\\\\\'+fic+'.h
>
>
>Cyndi
>
>--
>_______________________________________________________________________________
>"There's nothing wrong with me. Maybe there's Cyndi Norman
>something wrong with the universe." (ST:TNG) [EMAIL PROTECTED]
> http://www.tikvah.com/
>_________________ Owner of the Immune Website & Lists http://www.immuneweb.org/
>
>
