Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 785572" data-attributes="member: 32260">The problem with scripts is that they can be run after opening/playing many other files.So, even if you do not open HTA, CHM, JS, or VBS files at all, then there are many other file types (documents, templates, several types of shortcuts, media files, etc.) which can run scripts or the script code by using VBA macros, exploits or directly (like shortcuts with command lines).Some scripting engines can also run scripts with any file extension (MSHTA, WScript).For example the commandline &quot;mshta c:\somefolder\malware.fake&quot;, can run the JavaScript code from the malware.fake file (renamed malware.hta file).<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" /></blockquote>

[QUOTE="Andy Ful, post: 785572, member: 32260"] The problem with scripts is that they can be run after opening/playing many [COLOR=rgb(184, 49, 47)][B]other files[/B][/COLOR]. So, even if you do not open HTA, CHM, JS, or VBS files at all, then there are many other file types (documents, templates, several types of shortcuts, media files, etc.) which can run scripts or the script code by using VBA macros, exploits or directly (like shortcuts with command lines). Some scripting engines can also [B]run scripts with any file extension[/B] (MSHTA, WScript). For example the commandline "[COLOR=rgb(184, 49, 47)][B]mshta c:\somefolder\malware.fake"[/B][/COLOR][B], [/B]can run the JavaScript code from the malware.fake file (renamed [COLOR=rgb(184, 49, 47)][B]malware.hta[/B][/COLOR] file).(y) [/QUOTE]

Verification