I found a way to create a special file that looks exactly like a JPEG file, but when double-clicked, opens a Windows Explorer window.
These are the steps; as far as I know, it only works in Windows XP.
- Open a new Notepad document.
- Copy and paste the following into Notepad:
[Shell]
Command=2
IconFile=%SystemRoot%\system32\shimgvw.dll,3
[Taskbar]
Command=Explorer
- Click File > Save, choose a location, then type “<file name>.jpg.scf” (where <file name> is the name of the file)
- Close Notepad and open the folder where you saved the file. Notice that the “.scf” extension is completely hidden (whether extensions are enabled or not) and it looks exactly like a JPEG file. Double-click on the file and tada! Windows Explorer opens.
As far as I know, you can only use the SCF extension to:
- Open Windows Explorer.
- Show the desktop.
- Show the Windows 98 “Channel Bar.”
I doubt Microsoft would be dumb enough to allow an SCF file to open any ol’ program (like fdisk.exe) due to the fact that the SCF extension is hidden.
Of course, there is really no practical application for this (for malicious purposes or otherwise). It’s just kind of fun to see how you can take advantage of the SCF extension. ![]()
Subscribe
Jenny F. responded on 31 Jul 2005 at 12:43 pm #
Hmm… Just speaking theoretically of course, but would it be possible to make Explorer open to a specific website? Also, can you send the disguised command in an e-mail? If you can do both of those things, you could easily trick people into visiting your site just by sending them an e-mail.
John Lamansky responded on 31 Jul 2005 at 6:01 pm #
Interesting posssibility, but as far as I know, you can only use the SCF extension to open Explorer to the default location (C:) using the “Command=Explorer” line.
Paul responded on 19 Aug 2005 at 12:11 pm #
Yes; renaming and re-iconing folders is fun. I’ve done it several times to confuse my family.
In OS X, you take out an internet link, change the file’s icon to a different picture (meaning to that of a JPEG file), append the “webloc” file extention on the link, and type in “.jpg”. It looks exactly like a JPEG and no one knows the difference until they open the file. 