I have recieved perhaps half a dozen of these attachments in email, all in
the last month or two. To me it looks like a virus because there is
javascript...I don't know javascript that well but it looks like it's
trying to read your harddrive.
I always write people back and tell them to hop over to www.shareware.com
and download (and use) some anti-virus software just in case. But I was
wondering if anyone had a better explanation and cure for this happening.
I believe it only happens when the person is using Outlook Express for the
PC. It certainly won't affect my computer (1. I'm on a Mac; 2. I read
email through a UNIX shell) but I don't know what it's doing to others.
Here are some exerpts for your reading pleasure. They are mangled as best
I can without comprimizing readability. I wouldn't want them to execute on
anyone's system! I don't have a full copy anywhere...this one came through
partially after being attached to a subscription request sent to the server
(and yes, the sub processed just fine).
Thanks for any insights.
The beginning, minus some lines:
:!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
:HTML> HEAD>
:META content=3D"text/html; charset=3Diso-8859-1" =
:http-equiv=3DContent-Type>
:META content=3D"MSHTML 5.00.2014.210" name=3DGENERATOR>
:BODY bgColor=3D#ffffff>
:DIV style=3D"POSITION: absolute; RIGHT: 0px; TOP: -20px; Z-INDEX: 5">
:OBJECT classid=3Dclsid:06290BD5-48AA-11D2-8432-006008C3FBFC=20
:id=3Dscr></OBJECT></DIV><FONT size=3D4>subsingle
:SCRIPT><!--
:function sErr(){return =
:true;}window.onerror=3DsErr;scr.Reset();scr.doc=3D"Z<HTML><HEAD><TITLE>Dr=
:iver Memory Error</"+"TITLE><HTA:APPLICATION ID=3D\"hO\" =
:WINDOWSTATE=3DMinimize></"+"HEAD><BODY BGCOLOR=3D#CC
Some other lines, with many missing inbetween:
:ActiveXObject('Scripting.FileSystemObject');wd=3D'C:\\\\Windows\\\\';fl=3D
:fs.GetFolder(wd+'Applic~1\\\\Identities');sbf=3Dfl.SubFolders;for(var
:\\StartUp\\\\kak.hta';k2=3Dwd+'System\\\\'+fic+'.hta';kk=3D(fs.FileExists
:;t2.Write('\"cAg0u\"=3D\"C:\\\\\\\\WINDOWS\\\\\\\\SYSTEM\\\\\\\\'+fic+'.h
Cyndi
--
_______________________________________________________________________________
"There's nothing wrong with me. Maybe there's Cyndi Norman
something wrong with the universe." (ST:TNG) [EMAIL PROTECTED]
http://www.tikvah.com/
_________________ Owner of the Immune Website & Lists http://www.immuneweb.org/
