A family of graphical operating systems produced by Microsoft. Windows includes both server and destop operating systems. Early versions relied on MS-DOS while current versions have evolved from Windows NT. Please do not use this tag for X, but use [x-windows] instead.

learn more… | top users | synonyms

15
votes
1answer
82k views

How do I clear cached credentials from my Windows Profile?

Windows seems to be saving my credentials for a variety of applications (terminal servers, etc) and I'd like to purge this data. How can I backup and purge this data?
0
votes
1answer
35 views

How does Bitlocker only-PIN method work?

Microsoft explained USB-key and TPM based BitLocker decryption process on this article. USB-Key process: The steps in the illustrated sequence are as follows: 1- The operating system starts ...
1
vote
1answer
179 views

automatic connection from LSASS to different IPs. Is this the usual behavior?

I'm using windows 7. firefox 22. connecting through a regular residential wifi router. In the last month I've noticed that when I connect to the internet and once in a while my firewall indicates me ...
-1
votes
0answers
18 views

How to merge Windows registry hives directly without converting them to an intermediate text based file? [on hold]

what will happen if registry of windows would be merged to another windows?? For example if two windows7 registry is merged!!! What will happen ? And how it can be done using Command Prompt?? reg ...
0
votes
3answers
1k views

Is there a combination of Windows permissions that allow execution of a .NET executable but not reading nor copying its content?

I suppose that if a file is executable by anyone, in other words, if a user has enough permissions to execute an executable in Windows, it will be possible to read the contents of the executable and ...
0
votes
0answers
33 views

How do the internals of a Windows update security patch work? [on hold]

Wasn't sure where to ask this on stack exchange, so vote to close if you think it is in the wrong place. I am analyzing a Windows security patch. Having never examined a windows security patch, and ...
0
votes
2answers
147 views

Computer hasn't been connected to internet for 2 weeks

A computer hasn't been connected to the internet for 2 weeks but has still been used. It's running Windows 8 and various notices are complaining about virus definitions and updates not being current. ...
-3
votes
0answers
15 views

Log outgoing requests from software [closed]

I have a issue i would like help with. i have 2 jukeboxes that have 2 different software serials. 1 box cpu died and i had to replace the motherboard and ram, it had the same chipset so it booted ok ...
0
votes
1answer
145 views

Windows security policy analysis tool

I have several security policy files (INF exported from different Windows machines) which I need to audit. Is there any automatic tool you know of, that can analyse those files according to best ...
19
votes
3answers
3k views

How can I tell if I have the citadel virus without downloading an antivirus?

I recently received an e-mail from Virgin Media indicating that I might have the Citadel virus. It obviously sounds like a fake e-mail, but I am almost certain it is genuine, as they had my name and ...
-4
votes
0answers
129 views

How critical is this 'hack' for windows security? [closed]

I found a way to open a port in session 0 with netcat and psexec. What it does can be used to reverse connect to any host on internet. The shell remains invisible to the user since it pops in session ...
3
votes
1answer
157 views

What is “Multi-Protocol Unified Hello” and what are the impacts of disabling/enabling it?

This article describes how to disable old versions of TLS, but in addition to doing so, "Multi-Protocol Unified Hello" is also disabled. # Disable Multi-Protocol Unified Hello md ...
1
vote
2answers
168 views

How to securely use Process.Start?

I am using Process.Start in a Windows Service I created to execute an exe that I have on my server that is used for audio conversion. I am passing some user input as a parameter to this exe. The ...
0
votes
0answers
13 views

How to setup a VPN server to connect windows server 2008 R2 using RDP [migrated]

recently my server has been attacked by brute force login, fortunately nothing happened... Im not a security expert, but I want secure my windows server 2008 R2. This is the scenario. Server: ...
1
vote
1answer
141 views

Cannot get access into a vulnerable Windows 2000 (MS03_026)

I'm trying to get access into a Windows 2000 server through the vulnerability MS03_026. An exploit is provided by Metasploit but I don't know why it isn't working. After filling the options (basically ...
2
votes
6answers
4k views

Hardware USB Key to Reset Any Windows Password

This tool requires physical access of course, and there are many things you can do once you have physical access, but this peaked my curiosity. The tool in question: ...
1
vote
1answer
79 views

What security risks do you face when connecting to a server via RDP? [duplicate]

What security risks do you face when connecting to an (possibly foreign) RDP server? Opening an unsigned RDP file triggers the following warning: RDP is a one way street, right?
2
votes
0answers
7 views

Viewing and listing keys in MSCAPI CSP containers [migrated]

I have a MSCAPI container created and hosted within a Windows Server 2003 environment. How do I use the command line to list keys and their details within the container onto the command line ?
1
vote
1answer
60 views

Save application autostart login token on computer

I need to login desktop application while autostart on server (like skype does). What is the best practice to save authentication token (password)? Should I use something like RSA encryption (which ...
0
votes
2answers
63 views

Minimum access required to access LSA Secrets

I would like to know what the minimum access is to be able to dump from the lsass process on a Windows machine (any version) to try and grab LSA Secrets. The reason I am asking is because I had ...
3
votes
3answers
143 views

Could “system volume information” and $RmMetadata pose information leakage on a nuked HDD?

I recently nuked my HDD(s) via a Windows program (Disk Wipe to be precise: http://www.diskwipe.org/), now everything is fine when I try to retrieve the information on that disk by any program I can ...
1
vote
1answer
731 views

Windows Firewall netsh equivalent of iptables u32 module

I have looked everywhere and I can't seem to find a netsh equivalent of the u32 module for iptables. I want to create a rule to Drop a packet that starts with a specific set of bytes. Similar to: # ...
-1
votes
1answer
85 views

PCI compliant transparent data encryption at disk/folder level on Windows?

Is there a way to achieve PCI compliant data encryption at disk/folder level in Windows in a way that is transparent to applications(they must be able to write/read to encrypted folders/disks as if ...
0
votes
1answer
82 views

Makecab.exe at boot. is it malicious?

, I am trying to find out why this process appeared during 2 boot occasions. Autoruns does not show it anywhere. It appeared when I uninstalled google chrome and malwarebytes. The prefetch file for ...
-1
votes
0answers
49 views

Is it safe to play around with this on a virtual machine? [duplicate]

I found a hard drive destroyer and I am trying to see exactly what it does and what it looks like while happening. I also do not want to lose my computer in the process. I downloaded VirtualBox and ...
153
votes
7answers
26k views

What's the rationale behind Ctrl-Alt-Del for login

Why is Ctrl+Alt+Del required at login on certain Windows systems (I have not seen it elsewhere, but contradict me if I'm wrong) before the password can be typed in? From a usability point of view, ...
1
vote
3answers
103 views

How trustable is third party root certificates?

i recently tried to use fiddler2 from third party vendor telerik,while decrypting the https traffic of my network it asked me to install its own root certifcate in my windows operating system : have ...
3
votes
1answer
63 views

How to check for presence of LM hashes in local SAM

To get rid of LM hashes in local SAM databases, one can rely on the famous NoLMHash domain GPO, which instructs clients not to store password hashes with the LM algorithm locally ("Do not store LAN ...
1
vote
1answer
55 views

Multiple “rundll32.exe mhunk.dme” instances. Is my PC Infected with Something?

So, I have this strange list of rundll32.exe There are quite a lot of rows of it (see attached image) when I open the process tab in my task manager I've already read the link here: Multiple running ...
0
votes
0answers
8 views

Delay time clicking of contextual menu on the mouse [migrated]

I have such trouble: when i choose a folder/softwares and clicking second right clicker of mouse on the my desktop or elsewhere context window needs time to appear. Why needs it time to appear? what ...
2
votes
2answers
157 views

Does a VM keylogger listen to the keyboard activities of the host?

I am running a Windows XP virtual machine on a Windows XP host machine. I use the VM for suspicious websites and software/applications. In the case a kaylogger will be installed on my VM: will this ...
11
votes
7answers
2k views

Can hackers detect my operating system?

I've seen people demonstrating the use of backtrack to attack VMs. In one of the components of backtrack, it shows the operating system of the targets. Since support for Windows XP is ending soon, i ...
1
vote
2answers
82 views

File SHA256 checksum failed, but OK on reboot

I downloaded the Windows installer (.exe) for ImageMagick via http (both http and ftp downloads are provided at http://www.imagemagick.org/script/binary-releases.php#windows). Upon executing the ...
0
votes
1answer
69 views

Getting a log of computers that have remotely accessed a Windows server

I have suspicions that someone other than people on my team have obtained the credentials to remotely access a Windows 2008 Server. I need to get some evidence before I start pointing fingers or get ...
0
votes
2answers
341 views

Recover password or password hash from locked account

I have a locked administrator account. Other accounts are unlocked, but they have no rights. I want to get a password from the locked account, or maybe password hash, if possible.
1
vote
2answers
252 views

Are KIS 2014, Malewarebytes Pro and SpyBot sufficient to prevent internet attacks?

As mentionned in the title, I have KIS 2014, Malewarebyte Pro and Spybot installaed on my windows 7 (regularly updated). I regularly scan my pc for viruses and spywares and clean it with Glary ...
0
votes
2answers
121 views

Is possible to be hacked remotely?

I little bit afraid about remote hacking, since i'm using a windows 7.i see what a hacker can do if he exploit the Dcom vulnerability in windows XP. But is this sort of exploits exist on windows 7 or ...
1
vote
0answers
46 views

How do I continue pentesting with access to local station?

I started learning hobbyist penetration testing a while ago, and as far as penetrating a computer I have physical access to, all is good. Mainly using Hiren bootCD, it is easy to gain access to an ...
2
votes
1answer
36 views

Windows Print Drivers / Security Principal

Forgive me if this question seems a little "under the hood", but I think it's important to know from a security point of view. I see SPOOLSV.EXE runs with print driver DLLs (Type 3 - User Mode, I ...
3
votes
1answer
119 views

What is the risk that Windows 8's loopback protection feature protects me from?

Windows 8 requires Fiddler to set up an exemption when sending traffic to localhost. Since this is a default setting (and affects many computers): What security benefit does this provide How can I ...
0
votes
2answers
90 views

Does Reinstalling windows ensures removal of all malwares/spywares/virus/rootkits etc? [duplicate]

If I reinstall windows, will it ensure that all types of malwares/spywares/rootkits etc are removed from my laptop ?
1
vote
2answers
124 views

Is monitoring registry hives enough to detect new malware installation?

Is checking the state of the supporting files of the Windows registry hives enough to detect if a new software/malware has been installed on the computer or a given Windows regsitry key has been ...
3
votes
4answers
471 views

How do I ensure that my computer is 100% worm-free?

Ok say I have a brand new laptop that was is brand new. Is it true to say that as long as I keep the bluetooth turned off, and I am not connected to the internet, and only copy files that are 100% ...
37
votes
7answers
6k views

Does a virus need to be clicked on to function?

Can a virus infect my Windows XP operating system by its mere presence? I mean, if I copy/paste a virus on my computer and I never click on it, will it infect my computer or will it remain dormant, ...
1
vote
1answer
44 views

Is it safe/correct to grant full access to Everyone on a Windows symlink?

Does it really matter what the permissions are on a symlink as long as the smymlink target is configured correctly?
0
votes
0answers
24 views

Syncing service passwords during offline installations

Due to very paranoid customer requirements, we have to install several Windows services on two different systems that should run under a shared service account. Each system should each have a copy of ...
4
votes
4answers
606 views

How to hack a Win95 machine?

While playing with old operating systems, I came across that there are no remote code execution exploits available for Win95 machines, running just file share (no IIS or anything else). Win95 neither ...
0
votes
3answers
101 views

User Account Guessing [duplicate]

I'm doing some research on user account guessing, and wanted to ask a question about some "bad practices". My thought is generally this is a trade-off between great user functionality/UX and ...
25
votes
6answers
3k views

How can normal files hide a virus?

How can normal files supported in the Windows operating system hide a virus? Sometimes opening a .txt , .jpg or .docx files leads to running a virus. How is this possible?
-1
votes
1answer
124 views

Cracking a 6-character alphanumeric password Windows dialog box

To put this problem in context, I have a touch monitor screen whose firmware program is protected by a password. The firmware program is downloaded over RS232 via a Windows utility program provided ...