[adam_az]

You're either lying -- or you're tuning the sample to your config. There's no way that it can run an executable from C:\WINDOWS\TEMP under XP when the exe will be downloaded to C:\DOCUMENTS AND SETTINGS\[USER]\Local Settings\Temp

BUSH LIED!!!

No, not the President, just the uneducated pretender who uses his name. ;)

It could always just point to c:\Documents and Settings\%username%\

Type that into your browser if you don't believe me, or from a dos promt, type
c: (if you aren't already on the c: disk)
cd \Documents and Settings\%username%\

Ever hear of an ENVIRONMENT VARIABLE, Bushie? You are farm league, yet you feign skillz.

[adam_az]

Just another example of Bush 2000's technical skills being purely bush league, aka all bushed out.

[justlurking]

BUSH LIED!!!

No, he didn't lie. He just made an error. Given the vague description of the exploit, it's not reasonable to expect everyone to interpret it correctly.

However, when given an opportunity to correct his mistake, he instead escalated to an accusation of fabrication.

[Bush2000]

Type that into your browser if you don't believe me, or from a dos promt, type c: (if you aren't already on the c: disk) cd \Documents and Settings\%username%\

That doesn't work in this case. '%username%' does get replaced when you type it on the commandline in the Shell -- but not when accessed as a filename within an app. Nice try, though.