OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-Disclosure] .hta virus analysys

From: Gadi Evron (geegotistical.reprehensible.net)
Date: Thu Nov 20 2003 - 20:02:01 CST


Jelmer wrote:
> .hta files is a proprietary concept, and only works in conjunction with Internet Explorer (specifically version 5 and above). basicly its much like a .html except it has no security restrictions
>

If that's the case, there's only one thing not to do:
Do not enter websites that lead to you .hta files.

Some would even say use a better browser, but I wouldn't go that far.

--
       Gadi Evron,
       gelinuxbox.org.

The Trojan Horses Research mailing list - http://ecompute.org/th-list

My resume (Hebrew) - http://www.math.org.il/resume.rtf

PGP key for gelinuxbox.org -
http://vapid.reprehensible.net/~ge/Gadi_Evron.asc
Note: this key is used mainly for files and attachments, I sign email
messages using:
http://vapid.reprehensible.net/~ge/Gadi_Evron_sign.asc

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html