Re: win32: structured storage

2005-05-06 Thread tlviewer
"Robert Kern" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > tlviewer wrote: > > > Is there another way to parse the central directory out of > > a CHM file? > > google("chmlib python") Anyone know the calling syntax for the functions? PythonWin 2.3.2 (#49, Nov 13 2003, 10:34:54

Re: win32: structured storage

2005-05-06 Thread Dave Benjamin
Dave Benjamin wrote: > Steve Holden wrote: > >> tlviewer wrote: >> >> > CHM is supposed to be structured storage (ITSF). If a given CHM >> > file is infected it most likely has an embedded EXE file -- mine >> > had one called [Open.exe]. >> > >> Ironic, really, since Microsoft insist that the

Re: win32: structured storage

2005-05-06 Thread Dave Benjamin
Steve Holden wrote: > tlviewer wrote: > > > CHM is supposed to be structured storage (ITSF). If a given CHM > > file is infected it most likely has an embedded EXE file -- mine > > had one called [Open.exe]. > > > Ironic, really, since Microsoft insist that the browser must be > fully-integra

Re: win32: structured storage

2005-05-06 Thread Robert Kern
tlviewer wrote: > Is there another way to parse the central directory out of > a CHM file? google("chmlib python") -- Robert Kern [EMAIL PROTECTED] "In the fields of hell where the grass grows high Are the graves of dreams allowed to die." -- Richard Harter -- http://mail.python.org/mai

Re: win32: structured storage

2005-05-06 Thread Steve Holden
tlviewer wrote: > hello, > > In honor of the chm exploit that I got hit by last week, I trying > to code some ActivePython to list the directory inside a CHM. > Welcome to the world of the "drive-by download". Now you know why people are recommending migrating away from IE. > CHM is supposed t

win32: structured storage

2005-05-05 Thread tlviewer
hello, In honor of the chm exploit that I got hit by last week, I trying to code some ActivePython to list the directory inside a CHM. CHM is supposed to be structured storage (ITSF). If a given CHM file is infected it most likely has an embedded EXE file -- mine had one called [Open.exe]. The f