Good morning, Stan,
On Tue, 7 Jul 2009, Stanley Brinkerhoff wrote:
Does anyone know what this JavaScript file does? (Warning for IE6/7 users .. I
assume it
targets you).
http:!!222.231.60.19!seraph!door!iisHelp!help.js
If you follow the rabbit hole a bit, you end up with
http:!!kan31ni.cn!c!nb!bin.exe
which is either a bagle or mydoom variant. That definitely
targets Windows/IE.
Replace !!'s with /'s.
Cheers,
- Bill
---------------------------------------------------------------------------
"The sign on the window next to the entrance of OptInRealBig's
offices in Westminster leaves no room for misunderstanding. Or irony.
NO SOLICITING."
http://www.westword.com/issues/2004-01-29/feature.html/3/index.html
--------------------------------------------------------------------------
William Stearns ([email protected], tools and papers: www.stearns.org)
Top-notch computer security training at www.sans.org , www.giac.net
--------------------------------------------------------------------------
