Re: [Full-Disclosure] .hta virus analysys

From: Nick FitzGerald (nick_at_virus-l.demon.co.uk)
Date: 11/20/03

  • Next message: Valdis.Kletnieks_at_vt.edu: "Re: [Full-Disclosure] Another noxious M$ trojan" 
    To: full-disclosure@lists.netsys.com
Date: Thu, 20 Nov 2003 17:28:46 +1300

    bryce <lord_ph@comcast.net> wrote:

    > I'm new to this list, and sorta new to security on a computer. But can
    > someone tell me what program runs a .hta file??

    If you have to ask that then you really shouldn't even be thinking of
    "playing with it" should you?

    I suggest that this is an example of a very good reason to _not_ allow
    messages with such attachments (though having the mail server
    distinguish them from other "possibly acceptable" atatchments such as C
    or PERL PoCs and the like would be non-trivial...).

    Regards,

    Nick FitzGerald

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Valdis.Kletnieks_at_vt.edu: "Re: [Full-Disclosure] Another noxious M$ trojan"

    Relevant Pages

    • [Full-Disclosure] .hta virus analysys
      ... attached is the hta file it attempts to run. ... Its looks to be encoded, which is something i dont know much about but im sure most people on this list will have no problem reading it, just wondering what it does. ... Full-Disclosure - We believe in it. ... Charter: http://lists.netsys.com/full-disclosure-charter.html ...
      (Full-Disclosure)
    • Re: [OT] Re: [Full-Disclosure] Knocking Microsoft
      ... bzip2 ball. ... So a small piece of security added there. ... Full-Disclosure - We believe in it. ...
      (Full-Disclosure)
    • Re: [Full-Disclosure] .hta virus analysys
      ... and sorta new to security on a computer. ... Jim Duggan wrote: ... > attached is the hta file it attempts to run. ...
      (Full-Disclosure)
    • Quantcast