Menu Close

Windows GODmode folder

The functionality that was discovered and named ‘Master Control Panel’ or ‘God Mode’ was designed as the base folder for searching control panel options using the new start menu’s search function. This allows users to type what they want to do (e.g. ‘Change screen resolution’) and they will get the right control panel options as search result. The folders were not intended for use by general users. The shortcut is implemented by creating a folder with the extension, “.{ED7BA470-8E54-465E-825C-99712043E01C}” (without quotes). GodMode was the original folder name used when the feature was publicised, but any name can be used. The same functionality can be achieved by creating a standard Windows shortcut with the path “explorer.exe shell:::{ED7BA470-8E54-465E-825C-99712043E01C}” or by creating a Desktop.ini file in a folder that includes the extension’s CLSID.
GUID-based folder names can be exploited by computer worms—malicious software that can “reproduce”—hidden in a folder posing as a system folder such as the Recycle Bin, by employing its system application GUID shortcut. For example, a malicious file located at E:Recyclerbin.{645ff040-5081-101b-9f08-00aa002f954e}VIRUS.exe cannot be viewed in Explorer (opening the folder in order to view/delete would redirect to the Recycle Bin) and the folder cannot be deleted while the worm is running. Such a shortcut can be bypassed with the use of an active antivirus, or by booting from another operating system. Alternatively, it is possible to use a file manager to open the folder (e.g. Total Commander).