[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-Disclosure] found suspicious desktop.ini in startup folders
- To: Micheal Espinola Jr <michealespinola@xxxxxxxxx>
- Subject: Re: [Full-Disclosure] found suspicious desktop.ini in startup folders
- From: Benjamin Piorczig <xi23@xxxxxxxxxxxxxx>
- Date: Tue, 24 Aug 2004 20:14:33 +0200
On Tue, 24 Aug 2004 12:47:56 -0400
Micheal Espinola Jr <michealespinola@xxxxxxxxx> wrote:
> LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787
This one gets ressource string number -21787 from shell32.dll. Since i'm not
sitting on a Windows machine i can't tell you what the string contains but i'd
guess it contains "Autostart". This is used for localizing object names.
Benjamin Piorczig
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html