A family of graphical operating systems produced by Microsoft. Windows includes both server and destop operating systems. Early versions relied on MS-DOS while current versions have evolved from Windows NT. Please do not use this tag for X, but use [x-windows] instead.

learn more… | top users | synonyms

1
vote
1answer
61 views

IT support and security concerns regarding local VM's

I started working at a large financial institution several weeks ago as a software engineer and despite every other aspect of this job being great, I am haunted by the constant restrictions that ...
-1
votes
0answers
26 views

system Idle process in windows [on hold]

System Idle process in windows 7 which runs in service session ( session 0) don't know why has one thread 0 handles on single core cpu but on inspection i came to know that it has no image on the ...
3
votes
4answers
566 views

does switching to linux remove existing computer virus

if you change from a malware/spyware infected windows setup to a linux setup will infections migrate to linux if they were on the computer? (when you are hacked/infected is it the op system that is ...
1
vote
1answer
482 views

Windows Firewall netsh equivalent of iptables u32 module

I have looked everywhere and I can't seem to find a netsh equivalent of the u32 module for iptables. I want to create a rule to Drop a packet that starts with a specific set of bytes. Similar to: # ...
0
votes
0answers
41 views

How to stop auto-created files to happen?

I'm new to "Information Security" so I hope I'm in the right place. I'm experimenting a very disapointing problem on my hosting server: some files are automaticaly created and I don't know how. The ...
2
votes
3answers
91 views

How does Network Discovery OFF protect my computer?

Yes, it seems that the computer will not respond to pinging. But any computer with a packet sniffer will be able to see my ip once I send any packet to the router. So basically, if I'm surfing the ...
-6
votes
0answers
50 views

All about executing Dlls and malicious dll

I was trying to execute kernel32.dll with rundll32.exe. I set the dll path to system32 but I couldn't do it. How can I do it. What is a malicious DLL. How do I create one How do I get linked with ...
0
votes
1answer
29 views

PCI compliant transparent data encryption at disk/folder level on windows?

Is there a way to achieve pci compliant data encryption at disk/folder level in windows in a way that is transparent to applications(they must be able to write/read to encrypted folders/disks as if ...
27
votes
6answers
3k views

How can normal files hide a virus?

How can normal files supported in Windows operating system hide a virus ? Sometimes opening a .txt , .jpg or .docx files leads to running a virus. How come is this possible ?
0
votes
1answer
63 views

Makecab.exe at boot. is it malicious?

, I am trying to find out why this process appeared during 2 boot occasions. Autoruns does not show it anywhere. It appeared when I uninstalled google chrome and malwarebytes. The prefetch file for ...
5
votes
4answers
104 views

Does Windows have a built-in password store?

What passwords are stored in Microsoft Windows? How can I know what password are saved in computer?
15
votes
3answers
1k views

Can Windows malware harm a Linux computer when it's executed with Wine?

I am an (Ubuntu) Linux user. Sometimes, I have to use Wine for running Windows executables. I would like to know if Windows malware (virus, trojan, worm,...), i.e. malware that was not intended to ...
-6
votes
0answers
40 views

How to install dual system on PC? [closed]

I would to install linux OS alongside to my Windows 8.1 OS, i tried once but failed. Please help me how to do that. thanks in advanced.
1
vote
2answers
142 views

Intrusion Detected - OS Attack

I have recently gotten a prompt from my anti virus stating that there was an intrusion with an OS attack as describe in the link below: ...
3
votes
1answer
219 views

unexpected thumbprint when connecting via remote desktop - what now?

I have an Amazon EC2 instance in a VPC. I have not logged into it for some time, so I used the Amazon EC2 CLI with ec2-get-console-output to check what the thumbprint should be when I connect. To my ...
3
votes
1answer
147 views

Bitlocker lock drive on standby or switch users

Is possible to auto lock drive with bitlocker when the laptop go on standby or sleep mode? Or when the user is changed? I want the drive to be accesible only by one user.
0
votes
1answer
68 views

Windows - Revoked Binaries

I find it hard to believe that the majority of Windows system files aren't signed. I don't know whether my disbelief comes from naivety, or because Windows is used within secure environments worldwide ...
1
vote
0answers
30 views

SSRS custom assembly security issues

I want to invoke a custom assembly that uses protected services (like DirectoryServices, etc...) with reporting Services. On the web, I see a recurring example of configuration (inspired by this ...
0
votes
0answers
17 views

How to compare two Truecrypt volumes [migrated]

I have used up too much space on my C drive. When I set the system up, I created a 100 GB Truecrpt volume on an external 1 TB drive and was going to use it for all my data. Somehow I copied the same ...
0
votes
0answers
46 views

UAC bypass approaches

I am looking for a technique for bypassing UAC. Here are two solutions that I found on Google, but I need a different solution: Bypassing UAC with User Privilege under Windows Vista/7 Advantages ...
17
votes
7answers
739 views

How to deal with a person who gets easily fooled by internet and mail scams?

alternative title: How to deal with a person who has gotten paranoid and doesn't want to go online anymore? A person, who has over the years been scammed many times, by bad spam/fraud emails, and ...
0
votes
4answers
143 views

Isolate two hard drives with two operating systems

I did an extensive search and still couldn't find the answer I'm looking for, so I decided to post my question here to see if I could get some help. I would like to install a second hard drive on my ...
1
vote
3answers
214 views

How isolated are 2 operating systems on 1 harddisk?

Lets say I have 2 windows dual booting on the same harddrive (windws 7), How isolated are they? I am thinking that there should be up to date antiviruses software on both Windows, and they should be ...
3
votes
4answers
1k views

what is the best keylogger for security uses?

Today we were robbed. A thief come to our home at night and stole some stuff including my brother's laptop. I think that the right thing to do is to download a keylogger on my PC, just in case... I ...
1
vote
1answer
121 views

automatic connection from LSASS to different IPs. Is this the usual behavior?

I'm using windows 7. firefox 22. connecting through a regular residential wifi router. In the last month I've noticed that when I connect to the internet and once in a while my firewall indicates me ...
9
votes
3answers
17k views

Monitoring file access on Windows

I need a way to monitor user file access on windows. What I need is: monitoring of user opening, modifying (don't need to know what the changes were, just that a file was modified), copying, pasting ...
2
votes
2answers
99 views

Is it possible to keep your harddrive data safe from being copied and recovered

One of my friend challenged me that if my laptop is turned on then he can attach a device to it, just like in movies which will copy all data of my computer to his hard drive without touching a single ...
1
vote
1answer
37 views

Can benign software modify Widnows DLL files?

On Windows (XP, 7, 8, NT ...): can .dll files be modified (in any manner) by benign programs/software already installed/running on the computer ?
1
vote
1answer
53 views

What registry windows keys malware target often?

I wonder what are the main registry windows keys malware target often ? I would love to code a program that will check the state of those windows registry keys for eventual modifications by malware.
3
votes
1answer
114 views

Windows Scheduled Task passwords

When you create a Scheduled Task in Windows, it gives you the option of running the task as a different user, including saving the password. How secure is the password that is stored?
5
votes
4answers
1k views

What are the most common files to check with File integrity monitoring software?

I have a file integrity monitoring suite and in it I have to select specific files and folders for it to monitor. There are some obvious services that I want monitored like our web-server. Is there a ...
-1
votes
1answer
47 views

How should privileged accounts be secured in both Linux and Windows?

I have recently started work in application security at a mid-sized firm, having transitioned away from 5+ years in security consulting (pentesting, etc). One of the biggest challenges I see here from ...
2
votes
1answer
87 views

What is “Multi-Protocol Unified Hello” and what are the impacts of disabling/enabling it?

This article describes how to disable old versions of TLS, but in addition to doing so, "Multi-Protocol Unified Hello" is also disabled. # Disable Multi-Protocol Unified Hello md ...
1
vote
2answers
128 views

How to securely use Process.Start?

I am using Process.Start in a Windows Service I created to execute an exe that I have on my server that is used for audio conversion. I am passing some user input as a parameter to this exe. The ...
1
vote
3answers
177 views

Simple Windows 7 honeypot: is this safe?

I want to share a "honeypot" folder on a Windows 7 machine connected to a router. The only shared folder in the local workgroup connected to this router is the honeypot folder, which allows ...
0
votes
1answer
75 views

Cannot get access into a vulnerable Windows 2000 (MS03_026)

I'm trying to get access into a Windows 2000 server through the vulnerability MS03_026. An exploit is provided by Metasploit but I don't know why it isn't working. After filling the options (basically ...
0
votes
2answers
105 views

Securing a Windows PC

Currently I have an "Antivirus" and Anti Malware software installed. In addition I closed all remote assistance and unused port rules on my firewall. I'd really like to get a complete as possible ...
1
vote
2answers
100 views

Any network related security benefits using RODC (Read Only DC) in DMZ?

Windows servers in the DMZ need to communicate with the Active Directory. I do not like that the servers will have direct communication with my Active Directory, so I consider installing a Read-Only ...
2
votes
2answers
484 views

NTLM/LM Hashes on Domain Controller

I've noticed that when extracting password hashes from a domain controller (using Elcomsoft proactive password auditor) sometimes I'll get LM and NTLM hashes and other times I'll only get NTLM hashes. ...
1
vote
1answer
49 views

Save application autostart login token on computer

I need to login desktop application while autostart on server (like skype does). What is the best practice to save authentication token (password)? Should I use something like RSA encryption (which ...
0
votes
1answer
55 views

Securely wipe external drive with Windows only [duplicate]

Consider following 2 disk wipe procedures, using only vanilla Windows installation: First do a quick-format to make the disk appear empty, then do one of these: Just do full format of the disk. ...
4
votes
2answers
148 views

How widely deployed is TLS with cipher ECDHE?

Microsoft deployed a patch for Windows 2012 R2 and Windows 8.1 that adds the following ciphers. Cipher suite Exchange Encryption Hash TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 DH ...
0
votes
0answers
7 views

TypedURLsTime convert value of key to time [migrated]

How can I convert the binary value in the TypedURLsTime to a time value? As I was researching this it appears the value of the key is Windows FileTime structure and I haven't found much information on ...
2
votes
1answer
58 views

Credential In Windows [closed]

How can I view the Credentials stored in Windows? Is there any possible way to view the stored password? I can just export them..
2
votes
8answers
379 views

Is it possible to protect my Windows XP users now that Microsoft is no longer releasing security updates?

My office has about 20 PCs running Windows XP. I got a message saying that Microsoft is no longer releasing any security patches for Windows XP. However, we find that XP is very convenient for our ...
0
votes
1answer
60 views

Can't log into Windows, mac-spoofing issue or malware?

My computer won't let me log into my account. On the Windows sign in screen it has my account name, but when I put in my password, it always says my password is wrong. No Caps Lock. This happened ...
-2
votes
1answer
59 views

Proccess to exploit an OS vulnerability [closed]

What are the steps to use an exploit on an OS vulnerability? I tried the popular ms08-067 on an XP machine, following a guide found on the internet, discovering Metasploit etc., but I can't figure ...
0
votes
1answer
50 views

Is API hooking done by a process in a shared page, visible to all other processes?

Assume, I have an executable which hooks the API CreateFileW located in Kernel32.dll which is shared globally across the system for all other processes. From hooking I mean, that I have overwritten ...
-1
votes
1answer
85 views

Implement KHOBE attack in practice [closed]

How I could implement this attack (KHOBE) in practice against kernel hook described in this article : ...
6
votes
2answers
32k views

How to figure out if someone has been using TeamViewer 8 to access my computer when I was not here?

I came to my computer today and have not been here since monday afternoon. I am using windows 7. There were some error messages showing even on the log in screen about memory violations done by ...