Vulnerability Development mailing list archives

Re: Outlook/HTML "proggie"


From: mrousseau () LABCAL COM (Maxime Rousseau)
Date: Mon, 29 May 2000 13:13:11 -0400


Hello,

I have some questions in reply to methodman's message

About a week ago I have created a .html trojan/worm thingie that
infects you if you read the email
from Outlook, you don't have to run any attachments and no popups
pop-up:)
How nice, does it run if you read the mail in a "restricted sites"
security zone with no scripts?

What it does: using the SCR object, it creates a trojan.hta in your
c:\windows\start menu\startup
What is the SCR object? A quick check into my MSDN SDK docs returned
nothing.

Anyway... I don't intend to release it and NO,
Interesting, if you dont plan to release some source why are you telling
us about it?

I won't give you the source code unless you pay me :)
Are you selling viruses?

Later,
M.


Current thread: