From: "R.Wieser"

David,

Just Copy and Paste. That's it.

I already go the feeling that that might be the only way to do it. Oh
well,
if it doesn't go like I want, it has to go as it allows I guess. :-)

I have to say that I find it a bit remarkable, from a security
perspective,
that the target, server computer must have access to the local, client
computer to be able to transfer files. If that target computer has any
kind of infection it could (I think) easily (and silently?) infect the
client too.


Huh ?

No. First you can change the XDaemon port from TCP port 3389 to another,
unepected, port. Secondly you should the TCP connection as a tunnel where
the screen, keystrokes, mouse movements, sound, etc., and files travel
through. This tunnel uses encryption and authentication. Malware is not
sophiticated enough to "worm" through RDP. However onnce the tunnel has
been created based upon authentication, it is possible that malware can be
passed through the tunnel. This is a case of what is called the "Insider
Threat" and would exist if you had physical access or RDP access. But, that
is why there are layers and protocols to limit the use of RDP to help
eliminate the threat.

In the client-server model this is always present. RDP is just an extension
of the client-server model.

--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp