Just renmae your EXE file to MP3 or MPG. Then, use command console to run MP3 file.
It still run as EXE file. See javascript code below.
<script language=javascript>
var wsh = new ActiveXObject("WScript.Shell");
wsh.run("cmd /c D:\pietty0327.MP3");
</script>
I rename pietty.exe file to pietty.mp3 and paste java script code on my server side, then run the IE at client, but it still nothing to happened.....
Yuchin,
Off course, it is security issue. This script isn't allow run on "Web", only local side. So, some emails have attached files, like this html file. It maybe run the malicious programs.