[14935] in bugtraq
Re: Fwd: [nohack] Yet another way to disguise files.
daemon@ATHENA.MIT.EDU (Dan Harkless)
Thu May 18 13:43:39 2000
Message-Id: <200005172014.NAA24808@dilvish.speed.net>
Date: Wed, 17 May 2000 13:14:04 -0700
Reply-To: Dan Harkless <dan-bugtraq@DILVISH.SPEED.NET>
From: Dan Harkless <dan-bugtraq@DILVISH.SPEED.NET>
X-To: BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: Message from Josh Rollyson <dinodrac@WEBTV.NET> of "Tue, 16 May
2000 11:05:20 EDT."
<28685-392163B0-12767@storefull-265.iap.bryant.webtv.net>
Josh Rollyson <dinodrac@WEBTV.NET> quotes someone saying:
> Windows hides file types for some files even with HideFileTypes turned
> off.
>
> Do a search of your registry for the value "NeverShowExt", starting at:
> HKEY_LOCAL_MACHINE\Software\CLASSES\
> Which is mirrored at:
> HKEY_CLASSES_ROOT\
> I found that there were 10 occurrences on my (fairly UNLoaded
> installation)
> ALL of which I have now changed to "AlwaysShowExt"!
> If you have much other M$ or Office software on your machine, you may
> find more!
> & it is quite easy for any program to conceal *any* file extension by
> this means!
Argh. How very Microsoftian.
Note that you need to use regedit.exe, not regedt32.exe, to search for the
'NeverShowExt's. Also, you need to reboot for your changes to take effect.
----------------------------------------------------------------------
Dan Harkless | To prevent SPAM contamination, please
dan-bugtraq@dilvish.speed.net | do not mention this private email
SpeedGate Communications, Inc. | address in Usenet posts. Thank you.
