[SpamCop.net - protecting the internet through technology]

[SpamCop-List] Re: microsoft *patch*

masfjorden at spamcop.net masfjorden at spamcop.net
Sun Jan 25 18:07:47 EST 2004


David Bolt skrev:
snip
> When you visit the page it opens up a framed page. The visible page is
> the real Microsoft page detailing all about SWEN. It also loads a hidden
> frame that has a Visual Basic script that tries to create and execute
> what is most likely a small dropper application, probably designed to
> download and install some other malware.

Thank you for further clarification. I suspect it is a spammer wanting 
to create another load of open proxies. I am not sufficiently 
computer-literate to have a look myself.

snip

Regards

helge

> Regards,
>   David Bolt
> 



More information about the SpamCop-List mailing list