Re: .hta virus analysys

[Gadi Evron <ge () egotistical reprehensible net>]

Jelmer wrote:
> .hta files is a proprietary concept, and only works in conjunction with Internet Explorer (specifically version 5 and 
> above). basicly its much like a .html except it has no security restrictions

If that's the case, there's only one thing not to do:
Do not enter websites that lead to you .hta files.

Some would even say use a better browser, but I wouldn't go that far.

--
      Gadi Evron,
      ge () linuxbox org.

The Trojan Horses Research mailing list - http://ecompute.org/th-list

My resume (Hebrew) - http://www.math.org.il/resume.rtf

PGP key for ge () linuxbox org -
http://vapid.reprehensible.net/~ge/Gadi_Evron.asc
Note: this key is used mainly for files and attachments, I sign email 
messages using:
http://vapid.reprehensible.net/~ge/Gadi_Evron_sign.asc


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html