Windows 7 still allows unsafe files to be disguised as safe files
Read MoreThe good folks at F-Secure uncover the first Windows 7 security fail … and it’s a classic.
The issue in question is nothing new. In fact, it’s been around for so long that I didn’t even bother checking to see if it had been fixed.
You see, in Windows NT, 2000, XP and Vista, Explorer used to Hide extensions for known file types. And virus writers used this “feature” to make people mistake executables for stuff such as document files.
The trick was to rename VIRUS.EXE to VIRUS.TXT.EXE or VIRUS.JPG.EXE, and Windows would hide the .EXE part of the filename.
Additionally, virus writers would change the icon inside the executable to look like the icon of a text file or an image, and everybody would be fooled.
Surely this won’t work in Windows 7.
Lets try.
Hmm. It sure looks like a text file in Explorer:
hehe.... yea... had forgotten about all this myself... back on 98 as well if i recall correctly... is why enabling the file extensions is one of the first batch of steps i do after a fresh install, while updates are downloading. Freaky stupid to see it still acting and how it acts with 7 as described/shown in the pic
Can MS really overlook such stupid mistakes? I mean, they make millions of dollars a year, they can afford it.....
which i why i always have show filetypes on always...
there is no reason not to have it on by default
so in my POV there is no reason why MS would not show that as the default..:)
+1 - I turn that on, as well as show hidden files *and* system files. SOP on my end for any machine I am on that I am not restricted out of ....
and if someone wants to see the extensions i have put together this little tutoiral, lol
-in the start menu search box type in 'show hidden files and folders' (minus the quote marks of course)
-click on the folder
-uncheck the 'hide extensions for known file types'
-done (that was easy)
Actually, you can get away with typingand that should be sufficient for bringing up that setting....Code:show hid
Also, you can use the arrow keys to navigate instead of clicking on the shortcut, *and* you can simply hit [ENTER] after typing that in and the shortcut folder shows in the list.....
i know... but that is too easy. i had to make such a simple task a bit more complicated and thus worthy of a tutActually, you can get away with typing Code:
show hid
and that should be sufficient for bringing up that setting....
Also, you can use the arrow keys to navigate instead of clicking on the shortcut, *and* you can simply hit [ENTER] after typing that in and the shortcut folder shows in the list.....
Quote