I have been having lots of fun for the past week reading people's private Word documents, but when I opened Excel document in a text editor, I couldn't read anything.
I did a little research, and I discovered that Sircam appends itself to the beginning of a file, and it is 137,216 bytes. Therefore, by stripping the first 137,216 bytes off the beginning, you have the original file.
I found a utility this morning that will do this. It is called "fb". You can get it here.
The command to strip a file is:
C:\> fb a 137216 "file name.xls.pif" "file name.xls"
Slashdot Mirror
I have been having lots of fun for the past week reading people's private Word documents, but when I opened Excel document in a text editor, I couldn't read anything.
I did a little research, and I discovered that Sircam appends itself to the beginning of a file, and it is 137,216 bytes. Therefore, by stripping the first 137,216 bytes off the beginning, you have the original file.
I found a utility this morning that will do this. It is called "fb". You can get it here.
The command to strip a file is:
C:\> fb a 137216 "file name.xls.pif" "file name.xls"
Happy Snooping!