This JavaScript (JScript) may be hosted on a Web site and run when a user accesses the said Web site.
Upon access of this site, it takes advantage of a vulnerability in
Microsoft Data Access Components (MDAC) Function. More information on the said vulnerability is available in the following Web site:
- Microsoft Security Bulletin MS06-014
This JavaScript accesses a Web site to download a file. It saves the downloaded file. However, the mentioned URL is inaccessible as of this writing.
This malicious JavaScript uses the CLSID {BD96C556-65A3-11D0-983A-00C04FC29E36}, which is already present on a normal system, for its code in exploiting the aforementioned vulnerability.
More...