[Esd-l] Anybody seen Ahlem?

[John D. Hardin]

On Tue, 20 May 2003, Kenneth Porter wrote:

> > Has anybody seen a copy of Ahlem? I'd like to know how a .jpg file can
> > be envenomed...
> 
> No, I'd like to know as well. I looked it up at Symantec:
> 
> <http://securityresponse.symantec.com/avcenter/venc/data/w32.ahlem.a@mm.html>

I've read that, and it's light on details. How do you "script" a .jpg?

Or is it Windows ignoring the file extension and executing it based on
magic?

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The fetters imposed on liberty at home have ever been forged out
  of the weapons provided for defense against real, pretended, or
  imaginary dangers from abroad.
                                            -- James Madison, 1799
-----------------------------------------------------------------------
   531 days until the Presidential Election