From: "Geo." 

Ok I understand what you are complaining about now. I'm saying the script
is in the asf in the same way a webbug is in an email. I don't know any
better way to describe it (read what I said and perhaps it will make better
sense to you now, this is why I said "run" and not
"execute"). I don't understand why you would consider a webbug to
be run by OE but you don't consider the script to be run by media player.
It's the same technique except with media player it's a separate window and
lacks the stealth aspect.

Please don't jump on me for bringing in yet another issue (webbugs) but I'm
trying to understand your logic for viewing this as an IE issue but webbugs
as an OE issue. That just doesn't appear consistent to my way of thinking
so if you could explain I would appreciate it.

Geo.

"Rich"  wrote in message news:3e31ef21{at}w3.nls.net...
   Because it's not.  You either can't read or don't understand the report.
The script is in an HTML page located at http://www.malware.com/cluster.html.

Rich

  "Geo."  wrote in message
news:3e31d4a5$1{at}w3.nls.net...
  The first seven words are "the script is in the asf file,".

  The asf file description is #2 at
  http://lists.insecure.org/lists/bugtraq/2002/Aug/0316.html, you keep
saying
  the script is not in the asf file but as everyone can see it most
certainly
  is in the asf file.

  I don't understand why you keep saying its not there?

  Geo.


  "Rich"  wrote in message news:3e30a366$1{at}w3.nls.net...
     The first seven words of your message to which I replied.  You
repeatedly
  demonstrate that you don't read the messages you post or you don't care
that
  you lie.

  Rich

    "Geo."  wrote in message
news:3e30922f$1{at}w3.nls.net...
    No what's not?

    Geo.

    "Rich"  wrote in message news:3e302e62{at}w3.nls.net...
       No it's not.  Your initial premise is a lie and it goes down hill
from
    there.

    Rich

      "Geo."  wrote in message
news:3e2fcf60{at}w3.nls.net...
      the script is in the asf file, media player is associated with asf
files
    and
      that's what I view as running the script. I never used the phrase
    "executing
      script" as I don't care what piece of code does the actual execution
of
    the
      script (be it media player or a system script interpreter module or IE
  or
      whatever dll happens to do the actual work) because it's media player
  that
      is setting off the script.

      Geo.

--- BBBS/NT v4.01 Flag-4