[notepad0x90]

I see, I didn't know it was possible to load active x without user consent that way. that's wild.