Related to security concerns specific to the Microsoft Windows operating system itself. For security of applications that happen to be running on Windows, please use [appsec]. For the X Window System, please use [x11].

learn more… | top users | synonyms

0
votes
2answers
71 views

Running an app in docker on Windows

If I run an app in a docker container using Kitematic, does that help protect my system from that app? I mean: does it prevent any problems if the app tries to damage the Operating System?
0
votes
1answer
60 views

External Hard Drive Operating System [closed]

If I put a OS onto a External hard drive, would it allow viruses to infect my internal hard drive?
0
votes
1answer
152 views

Is that possible for Linux and windows machines to be infected with KeRanger ransomware?

According to theguardian The Transmission site offers the open source software that was infected with the ransomware called KeRanger malware, it's programmed to encrypt files on an infected personal ...
0
votes
1answer
58 views

Security implications of “local admin on host OS” vs “local admin on virtual guest OS”

At work we have a discussion on computer security. The scenario: Our work PCs are Windows desktops that are part of a windows domain Users have domain accounts they use to log in to windows The ...
0
votes
2answers
97 views

Are there any consequences of clicking on a URL to a facebook.com link?

So I stupidly clicked on a suspicious link on a Facebook post today. Guest account for shame. In my defense, it was a link to facebook.com itself, but it loaded a Facebook page, then seemed to ...
0
votes
1answer
217 views

Is there a risk that file shredders and free space wipers steal our confidential data?

I was wondering how secure are the file shredding software and free space wipers? Lets say we are using PC Windows, and software CCleaner (from piriform) or File Shredder (found here) to securely ...
0
votes
1answer
84 views

EFS encryption in Windows

I'm trying to combine EFS encryption with VeryCrypt, system encryption. With EFS I can choose specific files/folders instead doing a whole drive encryption, so that is the reason I use it. I haven't ...
0
votes
2answers
152 views

Analyze Windows executable

How can I see which files, ports, URLs, etc that are used by a suspicious Windows executable.
0
votes
1answer
1k views

Is it that easy to crack a Windows SAM file?

My friend told me that he can easily crack a Windows SAM file using Ophcrack. Assuming that I have access to the whole config folder (the one which contains the SAM file) of a Windows machine, is it ...
0
votes
1answer
156 views

How to access SQL server inside a Powershell script

I'm coming from a Linux world so I'm a bit at a disadvantage here. Assuming a windows Task scheduler script that calls a stored procedure to return some rows, and transmit a file over email or SFTP -...
0
votes
3answers
75 views

Why is shared less secure than open when it comes to WEP?

According to this post, Jeffrey Tippet (Microsoft employee) writes: WEP can run in two modes: shared and open. Despite the names, shared is actually less secure than open. Because of this, our ...
0
votes
1answer
260 views

Warning message about Git on IE 11: “a website wants to open web content using this program on your computer”

This is about something that happened while using IE 11 on Win 7 x64. Not sure if it matters but IE is running in "Protected Mode". I was posting a support request for a software that I use at that ...
0
votes
1answer
166 views

Disable a specific services in Windows 7 [closed]

I am using a Windows 7 and I want to Disable some Services, How can I do this? For my machine only? For some machines inside the Active Directory I can control? For all machines inside the Active ...
0
votes
1answer
163 views

Do I need dedicated firewall? [closed]

I have two servers in the datacenter. FreeBSD <--> Windows Server FreeBSD configured as a gateway for Windows Server. What is the best: FreeBSD has only firewall. All services are on the Win ...
0
votes
1answer
202 views

Windows Server Update Services (WSUS) - can I pivot to a client machine?

I'm considering setting up WSUS on a Server 2008 machine to push updates to my Windows 7 clients. If I do, I'll be following the hardening guidelines issued by MS (such as enabling SSL). One thing I ...
0
votes
1answer
491 views

How does driver install with an expired cert?

I'm working on making a silent installer of WinpkFilter driver. In my silent installation, I'm always getting a (not so silent) prompt that says "Windows can't verify the publisher of this driver ...
0
votes
1answer
1k views

How to turn off need for bitlocker to go on Windows 7 [closed]

I am the system administrator of my local computer (Windows 7) and I am unable to write to an external hard drive if it is not encrypted using Bitlocker to go. The local computer is not encrypted and ...
0
votes
1answer
475 views

How is Thread local storage used by malware/Virus?

I have been told that code in TLS is run before the entry point of an exe is reached ,so if one puts a breakpoint on this TLS address he/she could debug the behavior of the virus.Can Fiber local ...
0
votes
1answer
206 views

csh http shellshock on a windows 2008 server

My company's McAfee system detected many "http CSH bash ShellShock code injection attacks" attempts on a Windows 2008 server running Apache Tomcat Coyote. Does this config present a potential attack ...
0
votes
1answer
157 views

What process would add gdiplus.dll and msdia80.dll at the root of a hard disk

I added a new 4TB hard disk drive to my desktop computer, and noticed a couple of days later two .dll files at the root of the drive. The environment in question is a 64-bit Windows 7 Professional (...
0
votes
1answer
101 views

Add certificate authority to one browser only

For testing purposes, I'd like to add a "CA" to the list of trusted-CA's of one browser - and use it only for testing. I want to make sure that it won't get added to the computer's trusted CA list. ...
0
votes
1answer
111 views

PCI Compliance - Antivirus in host and virtual environment?

We have a couple servers with a host system, and virtual DB and Web instances. Is it possible to be compliant with PCI if you install the Antivirus only on the host system, or does it need to be ...
0
votes
2answers
382 views

Will Ad Block Plus block the ads that give someone Cryptowall 2.0?

Now I already know that making sure your browser plugins are either non-existent or up-to-date is one way of being on the safe side against ransomeware like Cryptowall 2.0; but since clicking ads are ...
0
votes
2answers
336 views

Can server administrator dump memory remotely thru Dell iDrac card?

I might at some point to invite another person into my software project. I don't mind sharing the code but the data I use is very sensitive. Once he gets hands on both pieces I wont see him again (if ...
0
votes
1answer
219 views

User “ASP” logged in to windows server - hacking attempt?

I run a windows server 2008 which I connect to both via VNC and via remote desktop. Yesterday I noted when I connected to it via VNC that another user was logged in. See images. Notes: I have no ...
0
votes
3answers
441 views

Are windows users passwords easier to crack than linux?

If i set the same password in both linux and Windows, is it easier for a hacker to break the windows password? If so why and how can i create a windows password in the same security level as Linux?
0
votes
2answers
813 views

Is possible to be hacked remotely? [closed]

I am a little bit afraid about remote hacking, since I'm using a Windows 7. I see what a hacker can do if he exploits the DCOM vulnerability in Windows XP, but does this sort of exploit exist on ...
0
votes
3answers
296 views

User Account Guessing [duplicate]

I'm doing some research on user account guessing, and wanted to ask a question about some "bad practices". My thought is generally this is a trade-off between great user functionality/UX and security....
0
votes
1answer
830 views

Makecab.exe at boot. is it malicious?

, I am trying to find out why this process appeared during 2 boot occasions. Autoruns does not show it anywhere. It appeared when I uninstalled google chrome and malwarebytes. The prefetch file for ...
0
votes
1answer
93 views

Can benign software modify Widnows DLL files?

On Windows (XP, 7, 8, NT ...): can .dll files be modified (in any manner) by benign programs/software already installed/running on the computer ?
0
votes
1answer
162 views

Choosing the Path in IT Security [closed]

I graduated last year from an Informatics and Security degree program. This program was taken in a Canadian college. It equipped me with the basic security knowledge in all fields; networks, systems ...
0
votes
3answers
823 views

How to secure ubuntu desktop after a hack? [closed]

I have two ubuntu laptops that were recently compromised. I understand that it's probably a fruitless endeavor to try to find the hacker. I want to know how to secure my ubuntu desktop so that the ...
0
votes
2answers
194 views

Does the Heartbleed vulnerability affect signed java applets [closed]

I have a Windows based server that serves a signed JAVA applet. The website isn't secured (HTTP), but all JAVA applets have to be signed now, so the site serves a signed JAVA applet as part of a web ...
0
votes
2answers
43 views

Is it possible to keep several files on windows partition after re-installing windows? [closed]

Is it possible to keep several files and programs on windows OS after re-installing it? because of someone can steal the device that uses windows OS, then just removes the windows and install another ...
0
votes
1answer
89 views

Is “bug banking” occurring? [closed]

Reading about the fast approaching end of support for Windows XP, I seem to come across a lot of articles which speak about bug banking. Of it being likely that towards the end of 2013 and beginning ...
0
votes
1answer
408 views

How do you secure service account password on enterprise windows enviroment?

I'm suppose to have a large environment ( 500+ servers ) all Windows based joined to Active Directory domain. Some domain accounts are used for application\middleware authentication that needs high ...
0
votes
4answers
2k views

Hacking Windows Box via Directory Traversal

I am practicing directory traversal attacks and found a vulnerability in a windows XP machine that is running a vulnerable HTTP server that is prone to directory traversal. I can guess file names and ...
0
votes
1answer
2k views

Stack Guard vs Stack Shield

I would like to know why nowadays Stack Guard is used everywhere (example: ProPolice in GCC, /GS in Visual Studio), instead of Stack Shield. Both the approaches (i.e. Stack Guard & Stack Shield) ...
0
votes
1answer
986 views

csrss.exe process

I've experienced some odd behavior lately (cookies being cleared in Firefox, forcing me to log in again). Antivirus scans (MS Security Essentials, MalwareBytes) aren't showing anything, but Process ...
0
votes
1answer
2k views

Can File Sharing being Controlled by Mac Address? [closed]

I am currently setting up secure environment between 2 pc in isolated network. Just wondering can we do file sharing based on that pc mac address instead of username? The environment is OEM Windows ...
0
votes
2answers
286 views

No where to run, no where to hide - suggestions to improve personal security needed

I think that as a windows user, I have no where to run and no where to hide. In the windows world no matter how many precautions I take, I can get infected by - 1 - Drive by on legal and popular ...
0
votes
1answer
499 views

How to enforce NTFS permission compliance?

I have to enforce NTFS permissions based on business roles. Each role (group in ADS) can be granted the permission to read or write a file server directory. I do not care about share permissions. I ...
0
votes
1answer
297 views

Windows 7 File Patching, Custom Visual Styles

In order to apply custom "visual styles" or themes in Windows 7, you must patch a few system files including Explorer. I can see from the start how this could be a potential security problem, but how ...
0
votes
3answers
264 views

Implement server serial key for server software

Me and my friend want to sell game server-side software, but we want some sort of control, over use of that software. For example, we want some sort of serial key system, so only verified/paid ...
0
votes
1answer
300 views

How to analyze server crash dump after recent patch update? [closed]

I want to know, if there a way I can identify on windows systems an event / log generated due to patches incorrectly installed / or corrupted in the process. Is there a way I can process or look ...
0
votes
1answer
230 views

Windows Firewall accepts a three-second unicast response from any source

I have read this article but still has some doubts may be after that... The Windows Firewall feature in Microsoft Windows XP Service Pack 2 (SP 2) accepts a three-second unicast response from ...
0
votes
1answer
315 views

Good reading about windows architecture/reversing [closed]

I have a feeling that I need to get more knowledge about system programming and winapi/windows architecture in particular to be able to understand how lots of exploits work (like those exploiting ...
0
votes
1answer
283 views

Windows security policy analysis tool [closed]

I have several security policy files (INF exported from different Windows machines) which I need to audit. Is there any automatic tool you know of, that can analyse those files according to best ...
0
votes
1answer
700 views

1and1 Dedicated Server got compromised (Windows Server 2003)

We had couple of dedicated servers rented on 1and1 hosting. In past we had situation where our server has got compromised and intruders were able to hack into the Windows 2003 standard edition and ...
0
votes
1answer
2k views

windows security alert windows firewall has blocked some features of this program message coming for every new build of my application

I made an application which uses ftp so windows shows windows security alert windows firewall has blocked some features of this program message for every new version of my application any idea how to ...