Self-Executing FOLDERS: Windows XP Explorer Part V
http-equiv_at_excite.com
Date: 01/25/04
- Previous message: Russ: "Administrivia #30652 - Announcing the 6th Annual NTBugtraq Retreat"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 25 Jan 2004 16:51:00 -0000 To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
Sunday, January 25, 2004
The following file is a 'folder' comprising both scripting and
an executable [*.exe].
We inject scripting and an executable into the 'folder' which is
designed to point back to the executable in the 'folder' and
execute it. Provided the 'folder' is an html file, Windows XP
Explorer will execute it.
Because it is an 'folder' proper, Windows Explorer opens it. The
scripting inside is then parsed and fired. That scripting is
pointing back to the same executable file and because it is a
self-executing 'folder', it executes !
Fully self-contained harmless *.exe.
Windows XP only:
http://www.malware.com/my.pics.zip
Be aware of 'folders' out there.
-- http://www.malware.com ----- Editor's Note: The 43rd Most Powerful Person in Networking says... Out of Office replies to list messages cause you to be unsubscribed automatically. Either subscribe a Public Folder, or ensure your rules are set to ensure list messages are filtered prior to your Out of Office reply. Such automatic replies are a bane to posters, and cause us to have fewer researchers post to NTBugtraq. -----
- Previous message: Russ: "Administrivia #30652 - Announcing the 6th Annual NTBugtraq Retreat"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
