fu2_10c00r

Iti recomand o fata cu care sa te cunosti mai bine.

Stai sa imi verific agenda... pai... hmm... oricand.

@Black Pitbull$: Nu sunt eu de vina, bautura si ora tarzie sunt de vina.

Tovarasi probabil nu o sa gasesti dar "tovarasi de pahar" sigur o sa gasesti.

Short Intro: The idea that a user could not get malicious code run on your computer from a .jpg file became false recently. And now for the first time it could be possible to get infected with a text file if it has not allready happened before. (well close to it anyway.) Recently a article was published on astalavista by Geoff Vass from Australia about how cmd.exe can launch files with a .txt extrension as executables. In the article it basically said that if you rename a .exe file to .txt and open cmd.exe and run it from cmd.exe it will run as a executable. It went on to say that he emailed microsoft about it and coincidentally shortly after microsoft released a warning about it. To qoute the article directly it said. Quote: "So I had an email conversation with the fellas at secure@microsoft.com and they felt it was not a problem and would not be changing the behaviour. Coincidentally, shortly after MS issued KB811528 which says that CMD.EXE looks at the header of the file and because it is an executable, executes it and that you should only run code from trusted sources (blah blah blah)." Unquote: Note: If you want to read the full article by Geoff Vass first it is included with this article in the folder called "Article By Geoff Vass" and the file name of "txtrant.txt". He went on to say that you could hide malicious code in .txt extensions and virus scanners might not scan it and hackers can use it to hide malicious code. He also said that for a .txt virus to actually execute the user will need to open up the command prompt and execute it. So I thought about it for a while and realized you could just send a virus as a .zip attachment and inside the zip file would be 2 Files. The first file would be a virus but with the actual extension renamed to .txt and perhaps hidden(seeing that the default setting is not to show hidden files). For the purpose of clarity lets just say this file is called "virus.txt"(of course a virus writer could name it whatever they wanted [duh]). The second file would be a shortcut with the following command. "cmd.exe /c virus.txt" In case you dont know what that command does it would execute "virus.txt" as an executable and close after the virus has finished installing. You could also use a command like the following that would erase something of your choice and you would not need two files in the .zip attachment. "cmd.exe /c del /q c:\windows\*.*" Also the shortcut file icon is replaced with a text icon.(There is a text icon included with this article). So now the shortcut looks like a text file. It could be named readme.txt and of courseyou cant see the .lnk extension on shortcuts so it would look like a normal text file even if file extensions are shown. You can change the icon of the shortcut if you go into the properties of the shortcut and click shortcut and click change icon and use the icon included with this article. You could also go to layout(in the properties section still) and have the windows size reduced so that the height is 1 and the width is 1 to make the command prompt windows smaller. Plus you could change the Window position to 999 on both width and height so the user can't even see it. You can also rename the .txt extension on the actual virus to anything you want such as .jpg and i think anything else too.(I dont think it will execute if the file has no extension though). But give it a try. The only bad part about it is that the shortcut will have a little arrow in its corner but its more tempting to click that than a .exe file. Hopefully this will give Microsoft more reason to change cmd.exe so that it does not launch all file types as executable. Files Included with this Article: Files included with this article are a text icon in the icon folder, the Article by Geoff Vass from which i thought of this simple idea.(Thanks Geoff). And in the virus folder are a sample virus but the program that the shortcut launches is not a virus. It is just a program to test your cpuspeed.(If you wanted a real virus there you can make your own and use this technique to launch it).

Tovarasi de pahar gasesti oriunde. Du-te in ce bodega vrei tu si ofera-i unuia un pahar... sa vezi ce repede iti gasesti tovarasi.

Bine v-am gasit. Sunt din Bucuresti si am 22 de ani ( zici ca suntem la alcoolici anonimi). Sper sa mai invat cate ceva de pe aici. Si nu... nu... nu sunt alcoolic. PS: Sunt betiv ! :mrgreen: