On 3 May 2004 00:23:08 -0700, mailbox spoketh
>Let's all go to our C:Windows Directory after we have made all of our
>files in this directory visible. Tell the group the names of the
>Folders and Files which show as a light color and let's discuss this.
> Dangerous code is always discovered in this directory and but you
>need to enable the Windows Features to (view or show) all Hidden
>Files.
>
>Let's see how secure your computer actually really is!
>
>Tracker
I'll bite. I don't have a c:\windows folder since I'm running W2K, but
I'll substitute with c:\winnt. So, here's the list:
$NTServicePackUninstall$
$NtUninstallKB823182$
$NtUninstallKB823559$
$NtUninstallKB823980$
$NtUninstallKB824105$
....
$NtUninstallQ815021$
$NtUninstallQ828026$
$NtUninstallSP2SRP1$
CSC
inf
Installer (interesting folder, lets go in)
{00010409-78E1-11D2-B60F-006097C998E7}
{00030409-78E1-11D2-B60F-006097C998E7}
{00040409-78E1-11D2-B60F-006097C998E7}
{00100409-78E1-11D2-B60F-006097C998E7}
{00120409-78E1-11D2-B60F-006097C998E7}
{10253A5A-081B-4146-9D76-00547EED4001}
{47D5D869-FE57-4F2F-A358-83CFAA7B4968}
...
19977885.msi
1D48A315.msi
27228fc.msi
2b9db3f8.msi
2de4bd8a.msi
...
Offline Web Pages
PIF
Now, for some "hidden" files:
desktop.ini
folder.htt
mpcwin01.tvl
ShellIconCache
Winnt.bmp
Winnt256.bmp
Well, who knew that the W2K logo's where hidden files and a security
risk.
Now, what's your analysis, Debbie? How badly hacked is my computer?
Lars M. Hansen
http://www.hansenonline.net
(replace 'badnews' with 'news' in e-mail address)