FileHack
(Not detected by KAV on February 14, 2008)

by akosch

Written in Delphi

Private release (created in june 2003)

Made in Germany


Client:
port: 1986, 2004 TCP



Server: Server.html 

remark:
Used  method:
Microsoft Internet Explorer (unpatched) contains a vulnerability that can allow script code 
within an HTML document to run an embedded executable file. Since the file is an HTML file,
Internet Explorer will open and parse the file. When the script that points back 
to the embedded executable is parsed, the embedded executable will run on the client
system in the security context of Internet Explorer. 
(Securityfocus)

MegaSecurity