Re: Dropper in web page?

From: FromTheRafters (!0000_at_nomad.fake)
Date: 04/11/04

  • Next message: Don: "Re: Can my ISP see my NNTP traffic?" 
    Date: Sat, 10 Apr 2004 18:24:10 -0400

    "Piotr Makley" <pmakley@mail.com> wrote in message news:94C57BD59192831E75@130.133.1.4...
    > I download a zipped file from the Usenet. Inside was an html file.

    In this context, a "wepage" and an "html file" might not be the same
    thing.

    > My AV software said it contained "dropper.runme". When i looked
    > this up on the net I found this:
    >
    > http://www.avp.ch/avpve/multip2/navrhar.stm

    Does this description match what you have observed?

    > But i can't see how a virus or trojan dropper could work when I
    > look at an html file with my browser. Can someone explain this to
    > me please.

    It is a matter of the security settings the html content is allowed to
    run in. Scripting and ActiveX allowed to run when the "html file"
    resides in the "My Computer" zone of some Windows versions
    may give different results than the same content "webpage" residing
    in the "Restricted" or "Internet" zone - depending on the settings of
    those zones.

  • Next message: Don: "Re: Can my ISP see my NNTP traffic?"

    Relevant Pages

    • Re: Help from Lars...PLEASE??
      ... "test.exe" is a normal C#.net win forms application in the same folder as ... the html file. ... URL in IE: "C:\Projects\test.html" runs in the local zone. ... Longhorn OS. ...
      (microsoft.public.dotnet.vjsharp)
    • Re: Dropper in web page?
      ... > I download a zipped file from the Usenet. ... > look at an html file with my browser. ... It is a matter of the security settings the html content is allowed to ... resides in the "My Computer" zone of some Windows versions ...
      (comp.security.misc)
    • Re: Really Need help with Basic ActiveX IE Deployment...
      ... Bear with me... ... When you download the html file, ... zone are you in? ...
      (microsoft.public.win32.programmer.ole)
    • Re: ASP.Net Web.config security question
      ... > For some *very* annoying reason reason the security settings only work ... > when an HTML file is requested. ... >> I enabled trace and the only status-code for a request is 200. ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: WinXP SP2 security
      ... >>> opening ... >>> an HTML file which I hold on my comp. ... Change the security settings in Internet Options. ... Conor ...
      (uk.comp.misc)