Full Disclosure mailing list archives
.hta virus analysys
From: "Jim Duggan" <on_a_thousand () hotmail com>
Date: Wed, 19 Nov 2003 18:31:21 -0700
A friend contracted this .hta that seems to edit your profile with a link to itself, http://www.talkstocks.net/ attached is the hta file it attempts to run. Its looks to be encoded, which is something i dont know much about but im sure most people on this list will have no problem reading it, just wondering what it does. Any help appreciated Thx Jason
Attachment:
iav.hta
Description:
Current thread:
- .hta virus analysys Jim Duggan (Nov 19)
- Re: .hta virus analysys bryce (Nov 19)
- Re: .hta virus analysys Nick FitzGerald (Nov 19)
- Re: .hta virus analysys madsaxon (Nov 19)
- Re: .hta virus analysys Valdis . Kletnieks (Nov 19)
- Re: .hta virus analysys listas (Nov 21)
- Re: .hta virus analysys Maxime Ducharme (Nov 20)
- Re: .hta virus analysys Scott Taylor (Nov 20)
- Re: .hta virus analysys Gary Flynn (Nov 20)
- Re: .hta virus analysys Jelmer (Nov 20)
- Re: .hta virus analysys Nick FitzGerald (Nov 20)
- Re: .hta virus analysys Nick FitzGerald (Nov 19)
- Re: .hta virus analysys bryce (Nov 19)