>>People might forget that dragging and dropping to a command prompt
actually executes the file.
>>I have 2 words, Batch files.. I did not get prompted when I double
clicked a batch file containing one line "Malicious program.exe"

Actually, dragging a program icon to a command window doesn't execute
it, it just pastes the full name into the command window. It's not the
same as double-clicking.

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blog.ziffdavis.com/seltzer
larryseltzer (at) ziffdavis (dot) com [email concealed]

[ reply ]