Just Curious...

[Blizzard596]

Got this weird email today appearing as an order confirmation from Amazon.com and it contained a .pdf attachment. I opened the .pdf in notepad and it seems to contain some javascript. Of course this is obviously a virus or some kind of exploit, but it's the first time I've seen one quite like this, so does anybody know what the purpose of this code is? I'm not very familiar with javascript.

 

[KSoD]

I have removed the file. Sorry but i am not going to allow anyone to be at risk analyzing a file that is believed to be an infection. You should NEVER execute such files. You dont know what the file did, you even say so yourself. For all you know you just sent someone your banking info.

 

[Blizzard596]

Well...ok...
I didn't actually execute the file. I just viewed it's contents in notepad and then attached a sample of what was there, in plain text format, so that people could look without risk. I assume it was just a .pdf with some code to exploit a buffer overrun or whatever (I remember Adobe and Foxit having trouble with that awhile back). It just caught my attention this morning because I've never received one like this before and thought someone might give me some insight.
No big deal. We just won't worry about it, I guess

 

[KSoD]

Well you didnt explain what you did. You just said you think it was an infected item and you attached it for people to view. How are we supposed to know that it was just a sample of the code if you dont tell us???? Instead of attaching a sample why not just post the sample in

 tags?  That way you dont run the risk of infecting others and you have the possibility of getting an answer.  Along with that why wouldnt you post it in the coding area instead of the virus area?  We are specialists in removal, not in how they are created.

 

[Blizzard596]

Yeah sorry I wasn't very clear on that.
I actually figured someone would give me flak for posting unknown code directly in my message, so I went with a txt file instead, lol... but yeah, I wasn't clear, so don't worry about it.