Not all packages that operate arbitrary commands are afflicted. E.g. whole Commander is just not: it phone calls ShellExecute even for command lines. Admin warning on the destructive ZIP file. one particular https://dirstop.com/story20399071/5-simple-statements-about-jpg-exploit-new-explained