You can kinda see them in this pic.

http://members.shaw.ca/daytonaturbo87/satellite/bay1.jpg

But yeah, it's any stud on that side of the firewall with a nut on it. I think there are 4 of them but don't remember 100% off hand. Look for 3 clustered around the blower motor and one a little more inboard. Real easy to remove, I pulled mine out and plugged the holes in the firewall in favor of an aftermarket heat/ac system.