[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <0ae401c3af96$53788b70$c864a8c0@Maxime>
From: maxime at pandore-design.com (Maxime Ducharme)
Subject: .hta virus analysys
More info on Microsoft's website :
http://msdn.microsoft.com/library/default.asp?url=/workshop/author/hta/overview/htaoverview.asp
(URL may be wrapped)
Ciao
---------------------------------------------------------------
Maxime Ducharme
Administrateur reseau, Programmeur
Pandore-Design [http://www.pandore-design.com]
----- Original Message -----
From: "bryce" <lord_ph@...cast.net>
To: <full-disclosure@...ts.netsys.com>
Sent: Wednesday, November 19, 2003 9:50 PM
Subject: Re: [Full-Disclosure] .hta virus analysys
> I'm new to this list, and sorta new to security on a computer. But can
> someone tell me what program runs a .hta file??
>
> thanks,
> bryce
>
>
> Jim Duggan wrote:
>
> >
> > A friend contracted this .hta that seems to edit your profile with a
> > link to itself, http://www.talkstocks.net/
> > attached is the hta file it attempts to run. Its looks to be encoded,
> > which is something i dont know much about but im sure most people on
> > this list will have no problem reading it, just wondering what it does.
> >
> > Any help appreciated
> > Thx
> >
> > Jason
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>
>
Powered by blists - more mailing lists