What do I do about this?

I recieved an email with a VBS attachment, which looked innocent...

Code:

---

Execute DeCode(Long string with a bunch of crap)

---

but when I copied the decode function into VB and decoded the string, I found a nasty little worm :eek:

What do I do about this? Who do I report this to?

http://www.norton.com
http://www.mcafee.com

PS, can u email it to me ([email protected])? We like lookin thru these @ work.

I wouldn't mind a butchers at this script kiddie's work...if you don't mind

Same here, let's have a look :)

You know what's scary? Any of us could pop out a real nasty virus (that would land us 10+ years in jail) in about 10- minutes.
Thats a year a minute.

Spetnik, Mike: Sending attachment as text file(homepage.html.vbs.txt), should be sent in a few minutes

Chris: What's your email address?

damn, I knew I forgot something...

[email protected] will do thanks! ;) :D

Okay just arrived...now to find some way of decoding it without VB installed... ;) Access should do :)

I can send you the decoded version?

I've disabled ZoneAlarm so it should be okay, yeah.

haha, hotmail blocked it (hey, fancy MS being capable of s/t like that :eek:). but at least it let me fwd it to earthlink.

hmm, its not that bad. at lest it dont @#$% up ur comp

guess who forgot to turn the AV off...:rolleyes: Damn it can be annoying when you actually want to open an infected file!

So what is all that crap being passed to the function? All the function does is change the peices of crap into something else...looks harmless enough. What does Decode produce? A bastard script?

Ahh, I got it!

VB Code:

On Error Resume Next
Set WS = CreateObject("WScript.Shell")
Set FSO= Createobject("scripting.filesystemobject")
Folder=FSO.GetSpecialFolder(2)
 
Set InF=FSO.OpenTextFile(WScript.ScriptFullname,1)
Do While InF.AtEndOfStream<>True
ScriptBuffer=ScriptBuffer&InF.ReadLine&vbcrlf
Loop

Don't run that!!! I've taken a lot of it out anyway to protect the innocent :D

I had that a while ago :) i got 900 copies in 5 seconds :eek: !!