PDA

View Full Version : for user e999: Hidden files / registry



RWSchlatter
02-20-2001, 01:10 PM
re-posted here in the name of user e999

Hello!

I hope that this is the correct category. I have Windows ME. How can I detect hidden software on an individual PC (i.e.: typically used to secretly document what software, documents, and emails a user is using/creating on their PC) How would I locate the files in the registry which are responsible for "hiding" the software? Also, how can I reveal the "hidden" software by altering the registry? I have already considered the explorer option of revealing the hidden files, ie; like the system files. Thank you.

Ellen ellenjbr@msn.com

















______________
Regards - Richard

RWSchlatter
02-20-2001, 01:46 PM
First: software can never be "hidden", you can always start File Search for *.EXE and *.COM files.

The information about installed software is kept in the Registry. Microsoft suggests the following keys to be used:
Company information at HKLM\Software\<company name>
Application information at HKLM\Software\<company name>\<application>
You will also find the same hierarchy under HKCU to store user specific information / configuration and option data.

As for email: to my knowledge only Outlook Express tries to hide its files to prevent the user from damaging them. All user traffic information (received and sent messages) are kept in regular data files belonging to the mail application. See post at:
<a target="_blank" href=http://forums.winguides.com/showthreaded.php?Cat=&Board=genwin&Number=12457&page=&view=&sb=>http://forums.winguides.com/showthreaded.php?Cat=&Board=genwin&Number=12457&page=&view=&sb=</a>

______________
Regards - Richard

e999
02-22-2001, 01:28 AM
Thank you for the information. I appreciate your taking the time to respond.

Ellen