EvilZone
Hacking and Security => Hacking and Security => Topic started by: Axon on March 05, 2013, 03:51:11 AM
-
Just found this in my usb stick, look at the modification date :o
-
Future self giving you a powerful detection tool that will be needed in your upcoming mission that you are unaware of currently?
-
Future self giving you a powerful detection tool that will be needed in your upcoming mission that you are unaware of currently?
Aha, most likely :P
-
Just found this in my usb stick, look at the modification date :o
Yeah either the above :P
Or maybe youve used a machine somewhere that had the time settings changed.
Some punk.
Or the other obvious awnser.
-
Or it's a piece of virus... if you say you found it on a USB stick, then it makes sense. Why would Windows put NTDETECT.COM on a usb stick for no reason.
-
File times can be changed easily.
// Change a file's last accessed time to the 1/1/2037 at 00:00:00.
DateTime newDate = new DateTime(2037, 1, 1);
File.SetLastAccessTime("path/to/file", newDate);
9/02/2038 at 03:14:08 is the maximum 32-bit unix time, after which is will reset to 1901.
Looks like the typical result of a usb spreader to me.
0/10 would not run.
Sorry if I sound like Captain Obvious.
-
I haven't used it in a couple of weeks or more,but recently a friend of mine used it to transfer movies between his computer to another friend's computer at the office. I just asked my friend and he said he only used it to transfer movies.
-
Several viruses use the modification date to a certain number of years in the future to mark files that they have infected. So they can prevent infecting files more than once.
Have you uploaded it to virustotal or similar?
You should notify your friends if that is a virus.
-
Hold on... I think I know where this file came from, a while ago my older brother had some malfunctions in his Windows XP PC, the problem as I remember it was that C://WINDOWS/system32 doesn't exist, so he downloaded some fix file or something like that, and used my usb to burn this iso file on it, anyway next to this file there is a folder called I386 and it's filled with windows shit.
So I think this is a false alarm. However, I also have two files named WIN51 and WIN51IC, and both of them were modified on Monday,Nov 7 1988.