where to upload unknown files for analysis

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - msn messanger not working i can t get into my msn dcasingena@hotmail.com and my brother and my friends have tried there s on my cpu and they managed to get in and mine has been giving me a trouble shooter for 4 days now Tag: where to upload unknown files for analysis Tag: 85769
  - 2
    - how to secure VPN to a SQL server? I have a deployment package that automatically sets up a VPN on a remote client PC (public). What I'm concerned about is the client PC obtaining a virus and that virus finding its way to our server via the VPN. The client PC's do need Internet access & Email access while the VPN is enabled. The VPN is used only for communication with the SQL server -- basically a split tunnel VPN solution. (TCP/IP settings, Use default gateway on remote network is NOT checked) What are my options? Thanks, Rob. Tag: where to upload unknown files for analysis Tag: 85767
  - 3
    - Renaming a Certificate Root authority I need to rename the certificate root, the "issued by" field on the certificate. Is this possible with Windows 2000, or Win2k3? If so, would the certificates previously issued by that CA be invalidated? Thank you, Bill Tag: where to upload unknown files for analysis Tag: 85765
  - 4
    - Patch rerelease question I loaded all the patches on 6/13/2006 with no problems. Should I do something regarding the patch that was rereleased today 6/27? I think it's only for dial-up scripting but I've never even heard of that. Tag: where to upload unknown files for analysis Tag: 85758
  - 5
    - question about previous response forward looking environment ? I'm not sure what that means. I have the impression that at some point I'll need a version 6, but when ? And should it be Microsoft's ? Isn't the internet supposed to be non-proprietary ? Tag: where to upload unknown files for analysis Tag: 85753
  - 6
    - Microsoft Security Bulletin Microsoft Security Bulletin 'Microsoft Security Bulletin MS06-025 re-released (http://www.arcon5.com/modules.php?name=News&file=article&sid=315) Microsoft fanatics and antifanatics here lol, maybe interested i this. Yet another f**k up by the Microsoft Corp -- GenerationTal ----------------------------------------------------------------------- GenerationTalk's Profile: http://forums.techarena.in/member.php?userid=1595 View this thread: http://forums.techarena.in/showthread.php?t=54142 www.techarena.i Tag: where to upload unknown files for analysis Tag: 85745
  - 7
    - Computer Hijack Somehow I have managed to get hijacked. When I open up IE it now goes to the following: http://www.syssecuritysite.com/ Even if I change it to my normal default page it keeps coming back. Also, I have a virus alert in my system box flashing and when I click on it it says there is virus activity and it directs me to another virus software detection site. I run XP SP2 and I have run defender and spybot with no luck. Can anyone hlep me please. Thanks in advance Buster Tag: where to upload unknown files for analysis Tag: 85743
  - 8
    - source workstation question hi all! just a quicky query about the xp event log! i am curious about the "source workstation" entry you will often see in event log entries. i see some login attempts that failed in my security event log....under the "source workstation" entry in the event log is the name of my local pc.....thus i assume some service is trying to logon..... my question then - does the "source workstation" entry in an event log entry show where the event *originated from* and can this be faked? cheers! Tag: where to upload unknown files for analysis Tag: 85741
  - 9
    - Security Alert I'am using P4 windows XP. When i was using internet last 3 days I recieve a Security alert message.That looks like below. Security Alert. You are about to leave a secure Internet Connection.It will be possible for others to view information you send. Please advice me how to get rid of this problem. Thank You. Tag: where to upload unknown files for analysis Tag: 85740
  - 10
    - U.S. Dept. of Agriculture hacked "Online thieves compromised systems at the U.S. Department of Agriculture, stealing personal information on 26,000 employees in the Washington D.C. area, including names, social security numbers and photos, the agency said in a statement published Wednesday. U.S. Agriculture Secretary Mike Johanns told reporters during a press conference that the incident took place during the first weekend in June 2006. Johanns indicated that the information stolen was used for employee, contractor and media badges. The department will be giving one year of free credit monitoring to help affected people detect possible identity theft." http://www.securityfocus.com/brief/235?ref=rss -- Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: where to upload unknown files for analysis Tag: 85730
  - 11
    - Microsoft HLINK.DLL Link Memory Corruption Vulnerability "Microsoft HLINK.DLL is prone to a memory-corruption vulnerability. This issue is due to the library's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Successfully exploiting this issue allows attackers to execute arbitrary machine code in the context of applications that use the affected library. This facilitates the remote compromise of affected computers. Failed exploit attempts will likely crash targeted applications. This issue has been shown to be exploitable through Microsoft Excel files. Other applications using the affected library may also be affected." http://www.securityfocus.com/bid/18500/discuss -- Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: where to upload unknown files for analysis Tag: 85729
  - 12
    - Microsoft Internet Explorer Vulnerability "Microsoft Internet Explorer is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain policies. This issue may allow attackers to access arbitrary websites in the context of a targeted user's browser session. This may allow attackers to perform actions in web applications with the privileges of exploited users or to gain access to potentially sensitive information. This may aid attackers in further attacks. Microsoft Internet Explorer version 6.0 on Windows XP SP2 is vulnerable to this issue; other versions may also be affected." http://www.securityfocus.com/bid/18682/discuss -- Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: where to upload unknown files for analysis Tag: 85728
  - 13
    - Brussels poised to fine Microsoft A little of topic but a good read... "The European Commission is ready to impose a fine of 2m euros ($2.5m; £1.4m) a day on Microsoft. The Commission is expected to rule that Microsoft has failed to fully implement its 2004 antitrust decision." http://news.bbc.co.uk/2/hi/business/5120536.stm -- Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: where to upload unknown files for analysis Tag: 85727
  - 14
    - Alleged MPAA hacker named in court filing "TorrentSpy.com and its parent company Valence Media filed additional court documents this week, naming the person the companies claim breached their business systems to gather evidence for the Motion Picture Association of America. The latest court filings include a statement by Robert Anderson, a resident of Vancouver, Canada, who claims that the MPAA contacted him in June 2005 to provide information on TorrentSpy.com. The Web site allows BitTorrent users to search through files that are being offered by others online, including illegal copies of music and movies. The MPAA sued the Web site in February for contributing to copyright infringement." http://www.securityfocus.com/brief/236?ref=rss -- imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: where to upload unknown files for analysis Tag: 85726
  - 15
    - ip/tcp version 6 from microsoft, to install or not ? I recently reinstalled a wireless adapter on my computer, and somehow I got Microsoft's tcp/ip version 6 added to my network. I didn't have it before, and decided to remove it. So far, no problems. Do I need this new version ? Will I need to install it ? If so, when ? Googling this issue didn't help me. What are the advantages and disadvantages ? Regarding to safety ? Thank you. Tag: where to upload unknown files for analysis Tag: 85721
  - 16
    - New MSSECURE.XML Version 2006.06.27.00 Available MSSECURE.XML Data Version 2006.06.27.0 (for use by MBSA 1.2 and SMS SUS Feature Pack) was last modified today, June 27, 2006, and is now available for all supported languages (English, French, German and Japanese). Today's release contains 1 re-release bulletin as a result of a change made to MS06-025 which addresses an issues caused to a small number of customers using the terminal window function in Dial-up networking. This re-release of the detection logic is a refresh only and if the v1 version of the security update has been installed, you are considered to be not vulnerable and will not require the new version of the security update unless you are experiencing issues with dial-up networking as a result of the original v1 security update. The new version of the MSSECURE.XML file also addresses an issue with the detection logic that was found in Microsoft Exchange bulletin MS06-029. Charles Weidner [MSFT] cweidner@online.microsoft.com If newsgroup discussion with experts and MVPs is unable to solve a problem to your satisfaction, feel free to contact PSS for support on the Microsoft Baseline Security Analyzer (MBSA). Information is available at the following link: http://support.microsoft.com/default.aspx This e-mail address does not receive e-mail, but is used for newsgroup postings only. Tag: where to upload unknown files for analysis Tag: 85720
  - 17
    - CRL LDAP question... Is there a tool that will validate/fetch a CRL via a LDAP distribution point? A windows tool would be ideal. But I'll take anything. Thanks in advance Tag: where to upload unknown files for analysis Tag: 85714
  - 18
    - Security Breaches Pandemic - Deloitte Touche 2006 Global Security Survey http://digg.com/security/Security_Breaches_Pandemic_-_Deloitte_Touche_2006_Global_Security_Survey A nice summary of the Deloitte Touche 2006 Global Security Survey, and links to the Survey, and other articles that cover the survey. Deloitte survey of 150 companies in technology, media, telecommunications ... more than half reported Security Breaches in the past 12 month; 48% via spyware / malware; 50% of respondents reported internal breaches.. Read More: http://digg.com/security/Security_Breaches_Pandemic_-_Deloitte_Touche_2006_Global_Security_Survey Tag: where to upload unknown files for analysis Tag: 85704
  - 19
    - Microsoft Windows Live Messenger Contact List Processing Remote Denial of Service Vulnerability "Microsoft Windows Live Messenger is reported prone to a remote denial-of-service vulnerability when handling malformed contact list (.ctt) files. A successful attack can result in a denial of service condition by crashing the application. Windows Live Messenger 8.0 is reported to be vulnerable. Other versions may be affected as well." http://www.securityfocus.com/bid/18639/discuss Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: where to upload unknown files for analysis Tag: 85698
  - 20
    - warning Has anyone had this sent to them in an e-mail it is supposed to be from Microsoft ( Microsoft [WARNING: VIRUS REMOVED] Use this patch immediately !) if so is it genuine?? if so contact me at rdb61554@insightbb.com Tag: where to upload unknown files for analysis Tag: 85694
  - 21
    - My documents permissions Hello- Just inherited a network and there is strange issue going on The MY document are redirected to the u:\users\%username% folder The domain users group is part of the domain admins group and administrators group. I'm trying to remove this and tighten up the security on the folde rbecaue right now it is wide open But when I do this users cannot save documents in their my documents folder, they get access denied or file is read only I have compared the permissions to other servers I have that but I cannot pinpoint it Any insight wpuld be appreciated Thanks Tag: where to upload unknown files for analysis Tag: 85693
  - 22
    - How to give multiple users access to encrypted files. I am fairly new to file encryption and I am attempting to implement EFS in a winxp/sbs 2003 environment. I would like to encrypt file and have multiple users access those files. The process seems quite clear. Encrypt a file then import the certificate of any user that will be given access to that file. however i have been unable to get it to work. i have been able to allow the administrator account and an end user to both decrypt the same file but i cannot between to end users. What am i doing wrong. thanks. Tag: where to upload unknown files for analysis Tag: 85690
  - 23
    - Win XP Client to 2003 Server Requires Username/Password I am not familiar with security, so I apologize in advance for what are likely very naive questions. Our site has 2 domains. Users log into domain A which is an old NT 4 server. Domain B has windows 2k DCs, win 2k exchange 2003 server, and a win 2003 standard member server. A trust relationship exists between domain A and domain B. A new client/server application has been installed on the win 2003 server (no service packs) with a client app on Win XP Pro/SP2 desktops. Whenever users attempt to use the client, it will not run until they use explorer to browse to the proper 2003 folder. They then get a username/password request. They must log in to Domain B after which they can map to the application folders and access what is needed. After they log off, the whole thing must be repeated the next time they log on and want to use the app. I have scanned the security and account policies on the 2003 server but am wary of changing anything and causing bigger problems. Can someone help me understand what needs to be done to avoid the logon issue every time a user wants to use this application? More applications of this type are coming, so I just see the issue increasing. Thanks very much for your help. Tag: where to upload unknown files for analysis Tag: 85679
  - 24
    - Is it advisable to allow pop3 through internet My network environment does not have pop3 server nor Exchange pop3 email service. Basically, no network or Microsoft require POP3 service. Recently, some of the user requested to for pop3 service as they claimed that they cannot access thier internet using email client via pop3. They do not want to used web-based as it is not so user as email client. What are the risk if i allow pop3 access to internet? Tag: where to upload unknown files for analysis Tag: 85666
  - 25
    - Is it advisable to allow pop3 through internet My network environment does not have pop3 server nor Exchange pop3 email service. Basically, no network or Microsoft require POP3 service. Recently, some of the user requested to for pop3 service as they claimed that they cannot access thier internet using email client via pop3. They do not want to used web-based as it is not so user as email client. What are the risk if i allow pop3 access to internet? Tag: where to upload unknown files for analysis Tag: 85665
- Next
  - 1
    - Is it advisable to allow pop3 through internet My network environment does not have pop3 server nor Exchange pop3 email service. Basically, no network or Microsoft require POP3 service. Recently, some of the user requested to for pop3 service as they claimed that they cannot access thier internet using email client via pop3. They do not want to used web-based as it is not so user as email client. What are the risk if i allow pop3 access to internet? Tag: where to upload unknown files for analysis Tag: 85664
  - 2
    - Destructive, dangerous Autochk.exe An observation that someone from MS might care to comment on: Relates to all NT- based OS's including XP: When an unscheduled reboot happens, the system runs AUTOCHK.EXE to check the system partition before reloading the OS. In principle this sounds like a sensible precaution, however if any files were found to be damaged, then the files are SILENTLY DELETED. The user is not told of this, nor is any option to cancel given. This in fact creates a far worse problem than if no automatic check had taken place. The user now has a disk from which an unspecified number of files are missing, and no easy way to tell which files, or even which folders they were in. From this point on, no program on the disk can be relied upon to function correctly, and no documents, media or sourcecode can be treated as complete or reliable. In fact, if the disk contents are in any way valuable, then the only proper resolution is a full restore from tape. Technically, the deletion is logged in the event logs, but this would only be apparent to a very tech-savvy user, and even then, only if the user knew something had gone amiss. Which he likely doesn't, especially if he didn't observe the reboot. The fragments of the files are moved to a FOUND.xxx folder in the root of C:, however there is no simple way of identifying what the original filenames were, hence again no way of telling what has been destroyed, or where it came from. To cap it all, autochk.exe itself (in the system folder) is protected by SFT and cannot be removed from the system. I reackon the guys at MS need to have a long, hard think about this. Any system which zaps files at random - the user unaware it's happening - is a crazy piece of design. Windows 9x used to run Scandisk in similar situations, however its action was to inform the user of any damaged files found. Autochk does not. Tag: where to upload unknown files for analysis Tag: 85663
  - 3
    - POP3 What are the risks if i allow POP3 ? Tag: where to upload unknown files for analysis Tag: 85653
  - 4
    - Security Question I work at a healthcare facility and we have an outside IT consultant that wants to create a tunnel to our internal lan to supposedly help with monitoring and remoting users. However, I believe this could be a vialoation of HIPAA and that we would also be risking the networks security, meaning that anything that may come on to their LAN could cross over to ours. Does anyone have insite into this or where I could fine any type of documentation that would show that this is a possibility? Thanks. Tag: where to upload unknown files for analysis Tag: 85647
  - 5
    - Cannot run download from the internet Anytime I try to run cmd or download any program from the internet, the laptop restart and prevents me from carrying out the task. Can somebody help? Thanks in advance Tag: where to upload unknown files for analysis Tag: 85634
  - 6
    - Defender Beta 2 ----- NEEDS SOME ATTENTION At this point, great program and I love it EXCEPT FOR ------ Why does it not catch and stop adware, and the other types of low lovel junk that likes to watch what you do on the Internet??????? Once a week I crank up my Spy Sweeper and run it and I always come up with 12-15 cookies that are the same each week and in my opinion that type of junk should be stopped by Defender. Before I shut off Spy Sweeper and stopped it from runnning in the background that program always stopped that type of stuff !!!!!! Yes I know it is Beta, but come on MS this is now part of OneCare Live to which I have a paid one year subscription to and Defender is still not catching and stoping these cookies from these very basic annoying types of adware and what ever the other stuff is called. If Defender is not going to stop this stuff/junk then will MS change the program so I can run Spy Sweeper all of the time to catch and stop this stuff and not cause a conflict with Defender and OneCare. Maybe MVP Bill Sanderson would be kind enough to way in on this, if so thank you very much Bill for any comments/background that you may be able to provide. -- Larry D Tag: where to upload unknown files for analysis Tag: 85624
  - 7
    - FTC Loses Laptops - Compromises Information of Suspected Fraudsters Now the FTC has lost two laptops containing personal information. In this instance, some of the information is on people suspected of fraud. Free "credit monitoring services" will now have to be provided to them. Is this politically correct, or what? http://fraudwar.blogspot.com/2006/06/ftc-loses-laptops-compromises.html Tag: where to upload unknown files for analysis Tag: 85622
  - 8
    - The spyware Browsezilla, and the vulnerability discovered in HLINK Browsezilla is an Internet browser that can be downloaded from numerous web pages. When installed, it installs the adware PicsPlace on computers, which in turn connects users, without their knowledge, to certain adult content web pages. This generates an artificial number of hits on these websites, with the consequent financial benefits to the owners of the websites and the creators of Browsezilla. The consequences for users that install this browser are primarily unnecessary bandwidth usage caused by the hidden connection to these web pages. In addition, users could find themselves unjustly accused of visiting these pornographic websites. PandaLabs has also warned this week of a vulnerability discovered in HLINK.DL, a library used by several Microsoft Office programs, such as Microsoft Excel. Exploits of this vulnerability have been detected that can infect computers using a specially-crafted Excel file. This document could be distributed by email or downloaded from a website. There is currently no patch available for this vulnerability, and users are therefore advised to treat all Excel files received with caution, regardless of their origin. Tag: where to upload unknown files for analysis Tag: 85612
  - 9
    - USB pen drives and safe cryptosystems (looking for references) We are working on forensic cryptology and computer security expert witnessing in Spain. Right now we need a list of freeware cryptosystems for USB pen drives, as well as comments or cryptoanalysis of standard ones. For instance, we would like to know about Microsoft XP encryption options in "properties" (we are very interested about any case or news concering Microsoft help to Courts of Law or Police in order to crack their own standard cryptosystem for USB pen drives), or manufacturers utilities to allow partitioning, make the drive bootable and have a password protected security area.like VFUEL_Security.exe you can download for free at http://vfuel.net/driverstool.aspx Our idea is to publish a Website in Spain with links to free downloads, advice and news about risks on USB pen drives specially for lawyers. I shall appreciate any help technical help, news and "off-the-records". There is a lot of work to be done in Spanish speaking countries on USB pen drives security. Miguel A. Gallardo, cryptologyst (engineer and criminologist) at www.cita.es Tag: where to upload unknown files for analysis Tag: 85611
  - 10
    - Opening a Document gives me the Windows password dialog box .When i try to open a document it comes up with the Windows password dialog box. The document can be in a zip file format or a single document. I hit cancle and the document opens as normal. The document nor is the zip file password protected. Not sure what's going on with this. This only accurs on one PC out of 35. Does nay one have any ideals as is to what's going on. WinXP sp2 all updates installed. Tag: where to upload unknown files for analysis Tag: 85607
  - 11
    - article from codeproject: Hacking Windows XP SP2 Security article from codeproject descripe hay Hacking Windows XP SP2 Security! have sombody try it? and what about win2003 DC? Tag: where to upload unknown files for analysis Tag: 85601
  - 12
    - Windows XP Pro with sp2 firewall problem Hi All, I need clarafication and or assistance. I am running Windows xp with sp2. I have always used the windows firewall. But for some reason one day when I was looking for it it was not on. So I tried to turn it on and it gave me a comment about (ICS) was not on and asked if I wanted it on so I picked yes. It is still not activating my windows fire wall. I have searched everywhere and can find nothing to address this issue and about tore my machine apart trying to get it working. Finally I just started using the AVG firewall because having Norton suite installed all but gutted my system and to this day all of it did not uninstall to the point where when I try to install anything or uninstall anything the Norton ghost (which I uninstalled months ago) keeps popping up like it is installing again. Anyway I do use the 2wire SBC dsl Router motem and I am aware that it acts as a hardware firewall but after all the junk I found on my machine it just is not good enough. Is it the windows firewall was discontinued? Is it possible the modem is causing the problem? Is it possibly the configuation? My machine is the only machine, no network, and I connect direct to the modem. Any Ideas -- LordHavoc Tag: where to upload unknown files for analysis Tag: 85597
  - 13
    - Microsoft Office Embedded Shockwave Flash Object Security Bypass Weakness "Microsoft Office is prone to a weakness that may allow remote attackers to execute arbitrary script code contained in Shockwave Flash Objects without first requiring confirmation from users. A successful attack may allow attackers to access sensitive information and potentially execute malicious commands on a vulnerable computer." http://www.securityfocus.com/bid/18583/discuss Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: where to upload unknown files for analysis Tag: 85594
  - 14
    - Microsoft Windows Routing and Remote Access Remote Code Execution Vulnerability "Microsoft Windows Routing and Remote Access is prone to a memory-corruption vulnerability. This issue is due to the software's failure to properly bounds-check user-supplied network data before copying it to an insufficiently sized memory buffer. This issue allows remote attackers to execute arbitrary machine code on affected computers with SYSTEM-level privileges. This facilitates the complete compromise of affected computers." http://www.securityfocus.com/bid/18325/discuss Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: where to upload unknown files for analysis Tag: 85593
  - 15
    - Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability "Microsoft Outlook Express is prone to a buffer overflow when parsing NNTP responses. Successful exploitation could allow arbitrary code execution in the context of the user running the application." http://www.securityfocus.com/bid/13951/discuss Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: where to upload unknown files for analysis Tag: 85592
  - 16
    - Microsoft HLINK.DLL Link Memory Corruption Vulnerability "Microsoft HLINK.DLL is prone to a memory-corruption vulnerability. This issue is due to the library's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Successfully exploiting this issue allows attackers to execute arbitrary machine code in the context of applications that use the affected library. This facilitates the remote compromise of affected computers. Failed exploit attempts will likely crash targeted applications. This issue has been shown to be exploitable through Microsoft Excel files. Other applications using the affected library may also be affected." http://www.securityfocus.com/bid/18500/discuss Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: where to upload unknown files for analysis Tag: 85591
  - 17
    - Security Tab Missing From Specific File Extensions - 2003 Okay so I am on a windows 2003 server. I first found that these certain types of files (.wpd) Corel files could not be downloaded from the web. I first thought it was a security issue so I right clicked the files and was going to look at the permissions. The security tab is missing. In fact only the General tab and the Summary tab are available. I tried copying the file and the same thing with the copied file. I moved it to another drive on the server, same issue. In fact it is affecting all the .WPD files in that folder....... there are other files like exe's, pdf's, etc. Those can be downloaded just fine from IIS and the security tab is viewable. Any ideas? The files are not encrypted. Thanks, Chase D homeshark@aol.com Tag: where to upload unknown files for analysis Tag: 85590
  - 18
    - Security tab missing on specific file extensions - 2003 Okay so I am on a windows 2003 server. I first found that these certain types of files (.wpd) Corel files could not be downloaded from the web. I first thought it was a security issue so I right clicked the files and was going to look at the permissions. The security tab is missing. In fact only the General tab and the Summary tab are available. I tried copying the file and the same thing with the copied file. I moved it to another drive on the server, same issue. In fact it is affecting all the .WPD files in that folder....... there are other files like exe's, pdf's, etc. Those can be downloaded just fine from IIS and the security tab is viewable. Any ideas? The files are not encrypted. Thanks, Chase D homeshark@aol.com Tag: where to upload unknown files for analysis Tag: 85589
  - 19
    - Vista: BitLocker Blob Location/Backup In BitLocker for Vista, is it known, exactly, where the encrypted blobs used to secure the encryption keys are stored on the protected volume? The concerns: 1. According to the Technical Overview at http://www.microsoft.com/technet/windowsvista/security/bittech.mspx, secure decommissioning can be accomplished by using commands to delete the encrypted blobs, including the recovery blob. If there is ever any doubt that these blobs could be read or copied off of the drive, the thoroughness of the decommissioning may be questioned. 2. On the other hand, some customers may be concerned about a denial of service should someone/something delete these blobs (especially if a virus affects a domain admin's system, and accesses the WMI commands to "decommission" the volume!). The customer may want some way to backup these blobs, and restore them if deleted. I know this begs the question - "why would one ever embark on volume encryption without a good file backup solution in place?", but it would be faster to restore the blobs than restore all data from tape for an enterprise of laptops. They're probably not regular files, or maybe I missed something using WinHex... Thanks! Tag: where to upload unknown files for analysis Tag: 85581
  - 20
    - Help! Kids on Internet! Hi, I've just signed up for ASL2 and my kids go on the internet without me there. They each have their own computer page, and have limited access to the actual computer but with the broadband, they can go on at any time. How can I stop them from accessing the internet? Help Please!!! -- cm.lady Tag: where to upload unknown files for analysis Tag: 85579
  - 21
    - Verify AD User CAC Logons Does anyone know of an easy way of verifying/Checking on a users workstation that they have been authenticated by using thier CAC? -- Thanks! Crisoft Tag: where to upload unknown files for analysis Tag: 85576
  - 22
    - MS06-023 If MS Java has been removed, does this patch need to be applied? Baseline Security Analyzer flags it as a critical update, even though unmsjvm.exe has been run and VM does not exist on the machine. TIA Tag: where to upload unknown files for analysis Tag: 85566
  - 23
    - surfing safely on the internet Hi. I know there are several ways to make yourself anonymous on the internet. Using a proxy is one of those. I find safety and anonymity very important. The probem is: I would suspect that governments, criminals and hackers would be particulary interested in what you try to hide. If that were the case, what's the point of trying to be anonymous ? It might be counterproductive. I have a broadband connection with essentially a static IP. With reverse DNS lookup my identity can be exposed. It always shows a unique identifier of my specific computer. (It would be a lot easier if my ISP had a proxy, but that is not the case). So, does anyone have an idea about how to stay anonymous on the internet (especially with regard to my IP) ? Perhaps any program, proxy or other facility that won't attract the wrong kind of people ? Any recommendations ? Btw, I live in The Netherlands (Western Europe). I thank you for any help you can give me. Tag: where to upload unknown files for analysis Tag: 85547
  - 24
    - virus found but not detected when running windows live safety centre the scan finds 2 viruses but doesn't detect them. At the end of the scan the search says that there were no viruses found! Do I have viruses or not? Please can someone explain this to me? -- andi Tag: where to upload unknown files for analysis Tag: 85539
  - 25
    - AT&T rewrites rules: Your data isn't yours AT&T rewrites rules: Your data isn't yours http://www.sfgate.com/cgi-bin/article.cgi?file=/c/a/2006/06/21/BUG9VJHB9C1.DTL <QP> AT&T has issued an updated privacy policy that takes effect Friday. The changes are significant because they appear to give the telecom giant more latitude when it comes to sharing customers' personal data with government officials. The new policy says that AT&T -- not customers -- owns customers' confidential info and can use it "to protect its legitimate business interests, safeguard others, or respond to legal process." The policy also indicates that AT&T will track the viewing habits of customers of its new video service -- something that cable and satellite providers are prohibited from doing. Moreover, AT&T (formerly known as SBC) is requiring customers to agree to its updated privacy policy as a condition for service -- a new move that legal experts say will reduce customers' recourse for any future data sharing with government authorities or others. The company's policy overhaul follows recent reports that AT&T was one of several leading telecom providers that allowed the National Security Agency warrantless access to its voice and data networks as part of the Bush administration's war on terror. </QP> Tag: where to upload unknown files for analysis Tag: 85538

I ran a virus(nod32) and spyware(webroot) check which could not find
anything wrong with the following files:

daneng.dll
ddayy.exe

Both of them have the same date and time stamp. daneng.dll caused
explorer.exe to crash which, when I renamed the file, explorer did not
crash anymore. It crashed when using fast user switching in xp. The
files do not have any version or company information, and do not seem
to be associated with any application. I could not find daneng.dll in
a google search. I found one reference to ddayy.exe but no
information about it. Does anyone know where I can upload them for
analysis?

Thanks,
Chris

Top

Re: where to upload unknown files for analysis by Malke

Malke
Thu Jun 29 07:01:59 CDT 2006

Chris wrote:

> I ran a virus(nod32) and spyware(webroot) check which could not find
> anything wrong with the following files:
>
> daneng.dll
> ddayy.exe
>
> Both of them have the same date and time stamp. daneng.dll caused
> explorer.exe to crash which, when I renamed the file, explorer did not
> crash anymore. It crashed when using fast user switching in xp. The
> files do not have any version or company information, and do not seem
> to be associated with any application. I could not find daneng.dll in
> a google search. I found one reference to ddayy.exe but no
> information about it. Does anyone know where I can upload them for
> analysis?

You would need to check on Eset's website (NOD32) to see if they have a
submittal procedure. You can submit the files to Virus Total who will
submit them to many different antivirus companies. Here's the info:

http://www.virustotal.com/flash/index_en.html

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Top