tipstir
April 17th, 2009, 01:20 PM
I was trying to update these files listed below but also found out something too.. How well was my protection I have in the system.
Test Example:
WinRAR
C:\Windows\System32\
Search for:
Shell.dll
Shellstyle.dll
Shfolder.dll
Shgina.dll
Select those above and make a SFX called System32.exe
What should happen next is when it creates and saves it.
Your Protection software should warned you or say detected threat bolt of something like that. Ask you to Block it or Allow. Most will allow it to create then block it's access, some will remove the threat for you completely like it did with me.
As along as (WFP) Windows File Protection is Active no harm will come to these files above in this test.
Tested with: PC Tools Internet Security 2009 v6.0.1.440
Additional testing was done with Aivir, Spyware Doctor with AntiVirus, Comodo IS + Defense most of them stopped it also. I had a buddy use Norton Bot it allowed the System32.exe to be created but denied access to it.
Test Example:
WinRAR
C:\Windows\System32\
Search for:
Shell.dll
Shellstyle.dll
Shfolder.dll
Shgina.dll
Select those above and make a SFX called System32.exe
What should happen next is when it creates and saves it.
Your Protection software should warned you or say detected threat bolt of something like that. Ask you to Block it or Allow. Most will allow it to create then block it's access, some will remove the threat for you completely like it did with me.
As along as (WFP) Windows File Protection is Active no harm will come to these files above in this test.
Tested with: PC Tools Internet Security 2009 v6.0.1.440
Additional testing was done with Aivir, Spyware Doctor with AntiVirus, Comodo IS + Defense most of them stopped it also. I had a buddy use Norton Bot it allowed the System32.exe to be created but denied access to it.