Re: Online Script Decoder

[Feher Tamas <etomcat () freemail hu>]

Hello,

> Is anyone able to decode this malware/exploit script-encoded :
> http://www.antiblock.biz/user256/2DimensionOfExploitsEnc.php

It's a trojan-dropper called VBS.Zerolin and it tries to
download an executable file also belonging to the
trojan-downloader family. It is called malware Win32.Zdesnado.Y

What that exe file tries to download, I don't know.

The place in the above URL should be CERTed down for sure.

Sincerely: Tamas Feher.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html