full-disclosure - found suspicious desktop.ini in startup folders

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <BAY24-DAV2e0PaLI9mK00014462@hotmail.com>
From: billybobknob at hotmail.com (BillyBobKnob)
Subject: found suspicious desktop.ini in startup folders

Does anyone know if this file is used in an exploit since it was found in
startup folders ?

The contents of the file are:

[.ShellClassInfo]
LocalizedResourceName=@...stemRoot%\system32\shell32.dll,-21787



BillyBob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: desktop.ini
Type: application/octet-stream
Size: 82 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040824/19c4e25e/desktop.obj