On Sat, 20 Jan 2001 01:43:51 +0200, Or Botton wrote:
> Intresting tidbit regarding the .SCR puzzle:
> For Windows, .SCR is almost as .EXE , which is why it is possible
> to hide trojans as Screen Saver files.
> Apperently, Windows run the .SCR file as if they were .EXE .
IIRC, they *are* EXEs
Hold on, I'll check......
Yep, confirmed.
I copied one of the W95 .SCR files to a:\ with .EXE as the extension.
[OPENDOS 7.01] C:\>sf.exe -lhstwa a:\*.exe
Listing directory: A:\
Name mask: *.EXE
3DFLOW~1.EXE 96784 1-08-1997 14:18:20 --------
Sub-Directories: 0
96784 bytes used in 1 files.
This is what happens when we try to run it at the DOS prompt.
[OPENDOS 7.01] C:\>a:\3dflow~1
This program cannot be run in DOS mode.
--
Glenn
(your friendly neighborhood compu-nerd)
http://arachne.cz/
http://www.delorie.com/listserv/mime/
http://freedos-32.sourceforge.net/