How do I download an run and .EXE from a web page?

This guy on AIM told me to go to this link and I did, then it somehow downloaded and ran an .EXE file hiddenly...Now I think windows media player had something to do with this because it came up but didn't do anything so I exited out of it. I thought nothing happened but then he signed me on to AIM and told me what I had in my e-mail and stuff about my computer. Luckily he was my friend and killed off the trojan. I want to know how to do this.

Don't worry I won't harm anyone.

Probably something to do with ActiveX being enabled. You can turn it off in your browser preferences but you'll need it on for stuff like using a website to test your bandwidth or IP address and downloading Windows updates.

Yeah, ActiveX can totally fuck you over.

Yeah, that's a well known IE vulnerability. It only works in non-patched browsers, though.

http://www.securiteam.com/windowsntf...DP0D1F61A.html

(Comes with a bit of explaination on how you do it, as well. This is yet another reason to use Firefox / some other non-IE browser..)

Or, if you hit OPEN instead of Save, it'll just run itself when its done downloading.

Or, if you hit OPEN instead of Save, it'll just run itself when its done downloading.

From what I gathered, he wanted someone ELSE to download/open the EXE, without them knowing about it... which is what the above exploit does.