Quantcast ESOUI - View Single Post - Trojan worm Script Cryptolocker?
View Single Post
06/08/18, 07:57 PM   #2
Dolby
Every day I'm shuffling
 
Dolby's Avatar
Premium Member
WoWInterface Admin
Join Date: Feb 2004
Posts: 1,193
swf files are just windows script files. almost kinda like bat files. you can open then in a text editor and see the code even. Nothing changed in the new release with this file too.

The contents of the file is just this...
Code:
<?xml version="1.0" ?>  
<package>  
   <job id="updateMinion">  
    <runtime>
        <named name="exeFile" helpstring="Text to display" type="string" required="true"/>
    </runtime>
    <script language="JScript">  
     <![CDATA[  
        WScript.Sleep(5000);
        var objShell = new ActiveXObject("WScript.Shell")
        var exeFile = WScript.Arguments.Named.Item("exefile")
        objShell.Run('"' + exeFile + '"')
     ]]>  
    </script>  
   </job>  
</package>
What security or virus software are you using so I can report it as a false positive? It's not coming up on any of the popular ones here: https://www.virustotal.com/#/file/e4...73e7/detection

Last edited by Dolby : 06/08/18 at 08:01 PM.
  Reply With Quote