Ethical Hacking Training at InfoSec Institute Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: IE temporary files of wbk###.tmp |
|---|---|
| Date: | Tue, 7 Mar 2006 10:13:24 -0500 |
Outlook Express created files. When OE creates a zero byte file for every message read, it also creates a wbkxx.tmp along with it each time. 1 for each message just read along with a time stamp of when it was read. Them I believe they are also created each time "save" is used when working on a new email. If you open the wbkxx.tmp file in notepad you may be able to read them. -----Original Message----- From: Glenn Dardick [mailto:gdardick@dardick.net] Sent: Friday, March 03, 2006 1:44 PM To: forensics@securityfocus.com Subject: IE temporary files of wbk###.tmp Does anybody know what IE temporary files of the format wbk###.tmp may be associated with? The ### is a number, but might also be hexadecimal - not just 0-9. Glenn S. Dardick, Ph.D. 804-402-9239 804-680-3038 (FAX) gdardick@dardick.net Assistant Professor of Information Systems Longwood University dardickgs@longwood.edu Director, Association for Digital Forensics, Security and Law http://www.adfsl.org Editor, Journal of Digital Forensics, Security and Law http://www.jdfsl.org This electronic message is intended only for the use of the individual or company named above. If the intended recipient is a client of the firm, the information contained in this message is considered confidential, proprietary, privileged, and may contain attorney/client confidential information and work product. It may also contain trade secrets protected by State and Federal law. If you are not the addressee please do not copy or deliver this message to anyone. You should immediately delete the message without reading the contents and notify us by return email that the message was misdirected. I apologize for the inconvenience. Any other use of this information is strictly prohibited. If this response is to an inquiry, no attorney/client relationship is established by the response. ##################################################################################### This email may contain information that is privileged, confidential, or otherwise exempt from disclosure under applicable law. If you are not the addressee or it appears from the context or otherwise that you have received this email in error, immediately delete the message and any attachments from your system, and keep all information contained therein confidential. Use, disclosure or reproduction of this email by anyone other than the intended recipient(s) is strictly prohibited. No representation is made that this email or any attachments are free of viruses. Virus scanning is recommended and is the responsibility of the recipient. This E-mail transmission cannot be guaranteed to be secure. #####################################################################################
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | IE temporary files of wbk###.tmp, Glenn Dardick |
|---|---|
| Next by Date: | CanSecWest/core06 Vancouver April 3-7, Dragos Ruiu |
| Previous by Thread: | IE temporary files of wbk###.tmp, Glenn Dardick |
| Next by Thread: | CanSecWest/core06 Vancouver April 3-7, Dragos Ruiu |
| Indexes: | [Date] [Thread] [Top] [All Lists] |