How do I download an run and .EXE from a web page?

[kaos]

This guy on AIM told me to go to this link and I did, then it somehow downloaded and ran an .EXE file hiddenly...Now I think windows media player had something to do with this because it came up but didn't do anything so I exited out of it. I thought nothing happened but then he signed me on to AIM and told me what I had in my e-mail and stuff about my computer. Luckily he was my friend and killed off the trojan. I want to know how to do this.

Don't worry I won't harm anyone. :rolleyes:

[RoboticSilence]

Probably something to do with ActiveX being enabled. You can turn it off in your browser preferences but you'll need it on for stuff like using a website to test your bandwidth or IP address and downloading Windows updates.

[!King_Amazon!]

Yeah, ActiveX can totally fuck you over.

[BlueCube]

Yeah, that's a well known IE vulnerability. It only works in non-patched browsers, though.

http://www.securiteam.com/windowsntfocus/5DP0D1F61A.html

(Comes with a bit of explaination on how you do it, as well. This is yet another reason to use Firefox (http://www.mozilla.org) / some other non-IE browser..)

[D3V]

Or, if you hit OPEN instead of Save, it'll just run itself when its done downloading.

[BlueCube]

Or, if you hit OPEN instead of Save, it'll just run itself when its done downloading.

From what I gathered, he wanted someone ELSE to download/open the EXE, without them knowing about it... which is what the above exploit does.