Thierry Zoller
16/11/05, 05:45
Dear Alert7 ,
That means that if the user clicks on it using explorer.exe or
iexplorer.exe the file won't be executed because even Microsoft
Windows explorer is unable to parse the file?
axo> Demonstration here:
axo> Choose a malicious file which would be detected, such as nc.exe,
axo> rename the file as nc??.exe (?? =Hex C0 D7 BA DC)
axo> Because these special names are unable directly to input, so if you
axo> want to run these file, you should use the following way:
axo> Uses the MS-DOS name specification, we can operate file with Open¡¢
axo> Read¡¢Write¡¢ and duplicate¡£
--
http://secdev.zoller.lu
Thierry Zoller
That means that if the user clicks on it using explorer.exe or
iexplorer.exe the file won't be executed because even Microsoft
Windows explorer is unable to parse the file?
axo> Demonstration here:
axo> Choose a malicious file which would be detected, such as nc.exe,
axo> rename the file as nc??.exe (?? =Hex C0 D7 BA DC)
axo> Because these special names are unable directly to input, so if you
axo> want to run these file, you should use the following way:
axo> Uses the MS-DOS name specification, we can operate file with Open¡¢
axo> Read¡¢Write¡¢ and duplicate¡£
--
http://secdev.zoller.lu
Thierry Zoller