[Full-Disclosure] .hta virus analysys
listas
listas at marimba.homelinux.org
Fri Nov 21 07:51:39 GMT 2003
Here you get the responses at your answers:
"We all know what a .HTM file. But what about a .HTA file? The two are
closely related, yet very different. Let me explain.
The letters HTA are meant to stand for HTML Application. The technology
was developed by Microsoft, so is a proprietary concept, and only works
in conjunction with Internet Explorer (specifically version 5 and
above). "
Check this:
http://www.hyperwrite.com.au/aspscripts/framer.asp?target=../features/
html_applications.htm
Regards
El 20/11/2003, a las 5:46, Valdis.Kletnieks escribió:
> On Wed, 19 Nov 2003 18:50:12 PST, bryce <lord_ph at comcast.net> said:
>> I'm new to this list, and sorta new to security on a computer. But can
>> someone tell me what program runs a .hta file??
>
> Well.. there's two questions here:
>
> 1) What program is *supposed* to interpret .hta files?
>
> 2) What program(s) can be induced to try to do so?
>
> and the implied third question:
>
> 3) What leverage can you get from the difference between 1 and 2?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: text/enriched
Size: 1124 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20031121/0794bf88/attachment.bin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: Mensaje firmado digitalmente
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20031121/0794bf88/attachment-0001.bin
Full-Disclosure is hosted and sponsored by Secunia.