Re: .hta virus analysys

["Maxime Ducharme" <maxime () pandore-design com>]

More info on Microsoft's website :
http://msdn.microsoft.com/library/default.asp?url=/workshop/author/hta/overview/htaoverview.asp

(URL may be wrapped)

Ciao

---------------------------------------------------------------
  Maxime Ducharme
  Administrateur reseau, Programmeur
  Pandore-Design [http://www.pandore-design.com]


----- Original Message ----- 
From: "bryce" <lord_ph () comcast net>
To: <full-disclosure () lists netsys com>
Sent: Wednesday, November 19, 2003 9:50 PM
Subject: Re: [Full-disclosure] .hta virus analysys


> I'm new to this list, and sorta new to security on a computer. But can
> someone tell me what program runs a .hta file??
>
> thanks,
> bryce
>
>
> Jim Duggan wrote:
>
> > A friend contracted this .hta that seems to edit your profile with a
> > link to itself, http://www.talkstocks.net/
> > attached is the hta file it attempts to run.  Its looks to be encoded,
> > which is something i dont know much about but im sure most people on
> > this list will have no problem reading it, just wondering what it does.
> >
> > Any help appreciated
> > Thx
> >
> > Jason
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html