[Full-Disclosure] .hta virus analysys

listas listas at marimba.homelinux.org
Fri Nov 21 07:51:39 GMT 2003


Here you get the responses at your answers:
"We all know what a .HTM file. But what about a .HTA file? The two are  
closely related, yet very different. Let me explain.
The letters HTA are meant to stand for HTML Application. The technology  
was developed by Microsoft, so is a proprietary concept, and only works  
in conjunction with Internet Explorer (specifically version 5 and  
above). "

Check this:

http://www.hyperwrite.com.au/aspscripts/framer.asp?target=../features/ 
html_applications.htm


Regards

El 20/11/2003, a las 5:46, Valdis.Kletnieks escribió:

> On Wed, 19 Nov 2003 18:50:12 PST, bryce <lord_ph at comcast.net>  said:
>> I'm new to this list, and sorta new to security on a computer. But can
>> someone tell me what program runs a .hta file??
>
> Well.. there's two questions here:
>
> 1) What program is *supposed* to interpret .hta files?
>
> 2) What program(s) can be induced to try to do so?
>
> and the implied third question:
>
> 3) What leverage can you get from the difference between 1 and 2?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: text/enriched
Size: 1124 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20031121/0794bf88/attachment.bin 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: Mensaje firmado digitalmente
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20031121/0794bf88/attachment-0001.bin 


Full-Disclosure is hosted and sponsored by Secunia.