At 12:12 PM 1/4/2006, Rick Glazier wrote:
>
>I read somewhere that a guy running a DOS box (or something
>similar) in a VirtualMachine got "infected" as a test.
>The whole idea is that the file does not need an extension, if "something"
>accesses it and runs the content "as a" wmf file and invokes a certain
>feature of the rendering engine for that content, you get hosed...
>It can happen with NO user interaction, or user actions at all...
>Certain things happen "behind the scenes" or are part of something else
>that can trigger it... I offer this as food for thought, and for your own
>reasearch in the matter...
Factoid:
File Type Extension Header (HEX) Offset
Graphics Metafile wmf 0xD7CDC69A 0
Enhanced Metafile emf 0x0100000058000000 0
---
--
----------------------------------------
WIN-HOME Archives: http://PEACH.EASE.LSOFT.COM/archives/WIN-HOME.html
Contact the List Owner about anything: [EMAIL PROTECTED]
Official Win-Home List Members Profiles Page
http://www.besteffort.com/winhome/Profiles.html
