From: "Geo." 

From one of the security lists regarding the microsoft security update CD:

well... i got mine, but funny thing..

This CD requires that JavaScript be enabled for your Web
browser. 
If you need help re-enabling JavaScript for your browser, http://go.microsoft.com/fwlink/?linkid=9580"
target="_blank">click
  here.

then offers this screen...
"You are downloading the file:
 WXPstart.hta from d:\Content
open save cancel moreinfo"

being inquisitive and security minded i chose "save" then i was
left with a blank browser. and a hta file on my desktop..
DOH!

------------------------------

Javascript and an HTA file activated via the browser, and you need to run
it from the browser which means if you have your browser secured it will
fail. Can't they come up with a more effective way to promote unsafe
practices?

Geo.

--- BBBS/NT v4.01 Flag-5