Finding info off pc

[smtss]

I have been asked by the powers that be, to search each PC for illegal downloads such P**n pictures etc.

I have looked for the ovious stuff *.jpg and *.bmp and found odd ones, but were there are odd once there will be many more.

Were should I look and is there any searches i can prform to find any hidden ones.

 

[lpblauen]

if you click start search then select pictures, music or videos then select pictures and photos you will get all pictures on the local system as well as any network accessed drives. Hidden files will be grayed out.

 

[captaincrunch00]

Turn off hidden files and folders.

Double click My Computer
Tools->Folder Options
View tab-> Uncheck the "hide hidden files and folders" button.

Then do an advanced search and make sure you check all hidden files and folders.

Or you could just check all the folders in everyones My Documents folders. If they are dumb enough to do this at work they are probably dumb enough to put them in "My Documents/My Pictures" or some other folder that isnt usually used in the documents.

If its in the "My Pictures" then when they go to change their desktop image everything in that folder should show up as a choice.

 

[eyec]

the above should work unless they have changed the file extension or used other methods of hiding them; such as steganography or bit shifting.

usually people that have a "desire" to save these types of files are more secretive and resort to such tactics.

good luck

 

[linney]

Index.dat Viewer

http://www.totalshareware.com/Asp/detail_view.asp?application=31300

 

[smtss]

Linney that's the one I'm after Thanks.

All other suggestions also now being used thanks everyone

 

[ncotton]

Steganographic techniques are normally used to hide data in images, rather than the other way around, same with bit shifting.

and my thought would be that "these kind of people", wouldn't bother with anything like this, even having a folder called "P012N" wouldn't be unsual. Especially people who don't have a expertise on such subjects.

Changing the file extentions is a common file hiding technique for people wanting to store annonymous files that are overlooked by standard searches and inventories, and even if they are found, if the admin didn't either guess the file extention, or wasn't aware/knowledgeable about binary file reading, they might not be able to transform it back into its original image format to see if it was even a censory picture!

M O T O !
Everything can be done. It's whats worth doing that counts!

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant