Re: THE POST ABOVE CAN CAUSE YOU REAL GIEF << PLEASE DO NOT OPEN IT>>

From: Herb Martin (news_at_LearnQuick.com)
Date: 09/28/03 

Date: Sun, 28 Sep 2003 14:03:36 -0500

"dcdon" <olekingcoleNO@SPAMhotmail.com> wrote in message
news:hdFdb.170891$834.63638@twister.austin.rr.com...
> This type SPAM can cause you real grief. It is possible to hide code in an
> image file, due to space not used by the system between pixels. Be very
> careful playing with anything like this with a *.scr file. Course it may
> even be walk-on to another file with the capability of executing code to
> your computer.

The thrust of your warning is correct (.scr files can harm you) but it isn't
because of "code...between the pixels" but because Screensaver files
are executables.

Check your command line Assoc for .scr:

    assoc .scr

It's (usually) assigned to "scrfile" so check the FType for that:

    FType scrfile

And you will find it is "run directly" by the system -- and if you look
around for a .scr (e.g., Logon.scr in System32) and "run it" you will
find the screen saver running. (You must type the full name if you
use the command prompt.)

Screen savers are FAR more than "just the pretty pictures" (usually.)

Surprisingly these can be run directly but are not included in
PATHEXT (by default.) 

-- 
Herb Martin

Relevant Pages

  • Re: THE POST ABOVE CAN CAUSE YOU REAL GIEF << PLEASE DO NOT OPEN IT>>
    ... > This type SPAM can cause you real grief. ... > careful playing with anything like this with a *.scr file. ... find the screen saver running. ... use the command prompt.) ...
    (microsoft.public.win2000.security)
  • Re: Automatically locking desktop after a certain period of time
    ... The user shouldn't have write permissions to the Windows\System32 folder, so they shouldn't be able to rename the SCR file. ... MS-MVP Windows Media Center\Windows Powered Smart Display\Security ... wouldn't that obviate the screen saver from getting used? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Screen Savers dont work
    ... What other program did you uninstall? ... Properties and click the Screen Saver tab. ... My screensaver's hotspot now launches the screensaver, however, my ... SCR File Association Fix ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Automatically locking desktop after a certain period of time
    ... they shouldn't be able to rename the SCR file. ... These settings are ... wouldn't that obviate the screen saver from getting used? ... admin rights than, say, tutors, students, or other non-staff users. ...
    (microsoft.public.windowsxp.security_admin)