Data Hiding and Finding

2008 Oct 18

• Rename and relocate a file
  • take a *.dll file give it an inocuous name and put it in directory: %WINDIR%\system32
  • take a *.exe file give it an likely name (with *.exe extension) and put it in a directory with many executables, e.g. %WINDIR%
  • give a malicious program the same name as a system program (but different path)
  • temporarily change a file's extension (this changes its icon in windows)
• File Times
  • ???

2005-2008