[Full-Disclosure] found suspicious desktop.ini in startup folders

From: BillyBobKnob (billybobknob_at_hotmail.com)
Date: 08/24/04

  • Next message: VeNoMouS: "[Full-Disclosure] Netfilter Conntrack" 
    To: "Full Disclosure" <full-disclosure@lists.netsys.com>
Date: Tue, 24 Aug 2004 10:55:45 -0300

    Does anyone know if this file is used in an exploit since it was found in
    startup folders ?

    The contents of the file are:

    [.ShellClassInfo]
    LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787

    BillyBob

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: VeNoMouS: "[Full-Disclosure] Netfilter Conntrack"