Or Botton wrote:
>
> Intresting tidbit regarding the .SCR puzzle:
>
> For Windows, .SCR is almost as .EXE , which is why it is possible
> to hide trojans as Screen Saver files.
>
> Apperently, Windows run the .SCR file as if they were .EXE .
That's disgusting !
Here I've been carefully deleting any email with unsolicited .EXEs
and now I learn the backdoor is built into DOS !
I just checked a couple of W3.1 screensavers and they start with the 4D 5A
.EXE signature. I assume this means you can name a Trojan with damn near
any extension and as long as it begins with those bytes you've had it. :(
I'm too revolted to test it. |:\(
- Clarence Verge
--
- Help stamp out FATWARE. As a start visit: http://home.arachne.cz/
--
