why can malware writte in system32 folder?

  • Thread starter Thread starter PL
  • Start date Start date
P

PL

Hi guys
I have a question, why can malware writte in system32 folder if these is
read only?, someone know?
 
From: "PL" <[email protected]>

| Hi guys
| I have a question, why can malware writte in system32 folder if these is
| read only?, someone know?


| --
| Saludos
| PL


This isn't a anti malware group.

Please rewrite your query and fully express what you want to know in;
microsoft.public.security.virus
 
It's not a matter of Folder attributes so much as it is the privileges of
the user or service making the change. Called ACL ( Access Control
List(s) ), it's the privilege table of what users can perform what actions.
 
Thanks Mr McCarty, I'll read about that.


R. McCarty said:
It's not a matter of Folder attributes so much as it is the privileges of
the user or service making the change. Called ACL ( Access Control
List(s) ), it's the privilege table of what users can perform what
actions.
Click to expand...
 
really??? I saw read only access in folder properties, I'll check, my goal
is try to never without administrative privileges can write in it.

Thanks bob, Sorry I'm starter user
 
That "check box" means nothing as to the "attributes" of the folder
itself. It's only purpose in life is to allow a user to Set or UNset,
enmass, the read-only attributes of the files contained within the folder.
 
Ok, I'll read more about that, thanks Bob.


Bob I said:
That "check box" means nothing as to the "attributes" of the folder
itself. It's only purpose in life is to allow a user to Set or UNset,
enmass, the read-only attributes of the files contained within the folder.
Click to expand...
 
Sure, you can see it for yourself, make a temp folder to play with, and
then copy some files to it, then look in the folder and set the view to
Details and show attributes. Now close the folder, r-click it and
properties, click the readonly box until the black check shows and then
apply, Now go look at the attributes of the files in that folder.
 
Sounds good, I'll do in my machine test...then will tray to write some
malware in that folder.
I work with 250 users running win xp and I want to reduce the risk to virus
attack.
thanks again bob
 
PL said:
I have a question, why can malware writte in system32 folder if these is
read only?, someone know?
Click to expand...

Perhaps that's why they call it malware. Best bet is NOT to download it
or install it for best results.
 
Trust me the malware WILL write to that folder. As i said, that feature
has NO effect on the attributes of the folder itself.
 
Back
Top