Full Disclosure mailing list archives

.hta virus analysys


From: "Jim Duggan" <on_a_thousand () hotmail com>
Date: Wed, 19 Nov 2003 18:31:21 -0700


A friend contracted this .hta that seems to edit your profile with a link to itself, http://www.talkstocks.net/
attached is the hta file it attempts to run.  Its looks to be encoded, which is something i dont know much about but im 
sure most people on this list will have no problem reading it, just wondering what it does.

Any help appreciated
Thx

Jason

Attachment: iav.hta
Description:


Current thread: