121371 - Virus immediately asks to save

Status: VERIFIED DUPLICATE of bug 109249

(MailNews Core :: Security, defect)

Description

[Michael Collette]

User on Win98 has gotten a couple of these, in different flavors.  A bit of 
HTML with executables attached.  Upon simply reading the mail, the user is 
prompted to save the file.  The file names, and the text of the letter were in 
some kind of oriental font.  The following is the HTML that was embedded...

<html>
<head>
<title>Document</title>
</head>
<body>
<pre>
Ôç°²£¬ÎÒÓÀ�aµÄ�ÛÈË£¬ëmÈ»ÎÒÉÐδÆð´²£¬µ«Ë¼ÏëÒѽ›ïwµ½ÄãµÄÉíß…�íÁË£¬ºö¶ø¸ßÅd£¬ºö¶ø‘n‚û£¬µÈ´ýÖøÃüß\µÄÐÅÏ¢¡£²»ÖªËüÊÇ·ñ•þí˜�ÄÎÒ‚ƒµÄÐÄ£ÎÒÖ»ÄÜÍêÈ«ºÍÄãÉú»îÔÚÒ»Æð£¬ÒªüN¸ù±¾¾Í»î²»ÏÂÈ¥¡£
</pre>
<iframe src="cid:[e-mail]" height=0 width=0></iframe>
</body>
</html>

I know there's an english version of something similar floating around.  If I 
happen upon it I'll update this bug with the information.  I haven't a clue 
what the executable was meant to do, but having Mozilla try to deal with this 
file so quickly after only clicking on the summary is worrisome.  Thankfully 
the user in question didn't try mucking with this thing.

Comment 1

[R.K.Aa.]

dup of bug 109249 (by way of bug 112111). 

*** This bug has been marked as a duplicate of 109249 ***

Comment 2

[John Unruh]

Verified dupe.