KB885250 inviisble files bug and Folder Rename

  • Thread starter Thread starter Manuel Lopez
  • Start date Start date
M

Manuel Lopez

I discovered something very interesting about the Feb 8th kb885250 security
patch bug (where it arbitrarily makes files on certain shared folders
invisible). If the problem folder is renamed, the files appear and
disappear depending on the length of the rename; however, it is hard to
discern a pattern:

Example: These are all folders under the share \\main\c\archive\
Files become INVISIBLE:
asante.firmware\firmware.v_2.5
asante.firmware\firmware.v_2.9
asante.firmware\firmware.v_3.5
asante.firmware\firmware.v_a.b
asante.firmware\firmware.vca.b
asante.firmware\firmware._
asante.firmware\12345678901234
asksam
asksam___ [3 underscore]
asksam____ [4 underscores]
utils
utils2
utilsa
utils____ [4 underscores]


Files become VISIBLE:
asante.firmware\firmware.v_
asante.firmware\firmware.2.5
asante.firmware\firmware.v_2.50
asante.firmware\firmware.v_2.5.t
asante.firmware\firmware.v_2.5.test
asante.firmware\123456789012345
asksam_ [1 underscore]
asksam__ [2 underscores]
asksam_____ [5 underscores]
utilsoth
utilsab
utils25
utils250
utils__ [2 underscores]
utils___ [3 underscores]
 
In my case, I first noticed this because I bought a new computer, and was
transferring my logs from my old computer to the new one (fresh install of
XP-2 slipstream + recent updates that include the dreaded 885250)

Here is an example of an "invisible" filename:

\\olympia\c$\Documents and Settings\shenan.INTROVERTED\My Documents\Logs\ICQ
\Chats\Chats.rar

Other files in that folder do appear, but not that particular one. I CAN
however manually type in the complete filename to get to the file, it just
does not show up in explorer (nor does it copy over when copying from the
root folder which contains it)... :-(
 
Back
Top