Jason wrote:
OK, so how does the attacker get the ADS to run? If you open something.txt in notepad, it doesn't launch the ADS 'trouble.exe' as an executable file. It's ignored.
The easy answer is start a command prompt and type
start something.txt:trouble.exe
You totally missed my point. If the hacker can run "start" anything on your system, it's game over anyway.
-- Brian Eckman Security Analyst OIT Security and Assurance University of Minnesota
"There are 10 types of people in this world. Those who understand binary and those who don't."
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
