Dears
Someone sent me an email with an attachment (open.html) that has a script. Unfortunately, I clicked this file on my Firefox running on Win7. I also opened the on my Firefox running on Ubuntu 10.4. The attachment has the following code. Can someone help me? Is my computer in danger now?
Even so it’s worth running a virus/malware scan just in case…
I’d better not make wild guesses in the future then…
Yes, it’s bad. The .fs method is the .replace method.
When you replace the first string you get a website address, which has a known exploit, which norton safeweb reports as being Bloodhound.Exploit.292
It’s impossible to tell what that code does as it’s obfuscated. It’s probably for delivering ads, so I wouldn’t worry too much. It can’t do anything especially malicious.