Full Disclosure mailing list archives
Re: found suspicious desktop.ini in startup folders
From: Über GuidoZ <uberguidoz () gmail com>
Date: Tue, 24 Aug 2004 18:19:48 -0400
I'm not on a Windows box right now either, but a quick and dirty way to see what resource this is accessing (once on a Windows box) is to use Resource Hacker. I'm sure most here are familiar with it, but if you aren't, it's one of those vital tools I like to have on hand. It's a freebie: (Homepage) - http://www.users.on.net/johnson/resourcehacker/ Or Google it: - http://www.google.com/search?q=resource+hacker -- Peace. ~G On Tue, 24 Aug 2004 20:14:33 +0200, Benjamin Piorczig <xi23 () xi23 no-ip org> wrote:
On Tue, 24 Aug 2004 12:47:56 -0400 Micheal Espinola Jr <michealespinola () gmail com> wrote:LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787This one gets ressource string number -21787 from shell32.dll. Since i'm not sitting on a Windows machine i can't tell you what the string contains but i'd guess it contains "Autostart". This is used for localizing object names. Benjamin Piorczig
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- found suspicious desktop.ini in startup folders BillyBobKnob (Aug 23)
- Re: found suspicious desktop.ini in startup folders Nick FitzGerald (Aug 24)
- Re: found suspicious desktop.ini in startup folders Andrew (Aug 24)
- Re: found suspicious desktop.ini in startup folders Micheal Espinola Jr (Aug 24)
- Re: found suspicious desktop.ini in startup folders Benjamin Piorczig (Aug 24)
- Re: found suspicious desktop.ini in startup folders Über GuidoZ (Aug 24)
- Re: found suspicious desktop.ini in startup folders Andrew (Aug 24)
- Re: found suspicious desktop.ini in startup folders Nick FitzGerald (Aug 24)