A family of graphical operating systems produced by Microsoft. Windows includes both server and destop operating systems. Early versions relied on MS-DOS while current versions have evolved from Windows NT. Please do not use this tag for X, but use [x-windows] instead.

learn more… | top users | synonyms

-5
votes
0answers
21 views

iPhone & windows pc malware removal and reverse tracking of perpetrators location, ip, et al [on hold]

There are various examples of malware available for sale nowadays, spybubbble being one of the best. cheaper alternatives eventually leave traces (clicks, hissing noises, crossed lines etc.) a key ...
-1
votes
0answers
13 views

How to use windows 2008 as router [migrated]

i have a windows 2008 server with 3 network cards and 2 internet lines. i want to separate apps traffic and usual traffic as below. i tried RRAS as bridge but can i use windows 2008 as router using ...
9
votes
2answers
707 views

Running Windows Update when abroad

Is it safer or more dangerous to run Windows Update when abroad and using a WPA2 connection to a random cafe's wi-fi? Obviously good news: you get the latest security tweaks. Possible bad news: just ...
0
votes
0answers
21 views

What is Windows Activator or Loader [on hold]

I know Many of you may feel that this is a very basic question.However I searched on-line for a answer to this question and failed to find answer so I searched a few books about windows also and hard ...
1
vote
0answers
16 views

Using OSSEC to monitor windows services [migrated]

I'm using OSSEC to trying and monitor services on servers such as Windows Event Log. I would like to know if a service has stopped or started and get emailed accordingly. I have tried a rule that ...
1
vote
3answers
116 views

Are windows users passwords easier to crack than linux?

If i set the same password in both linux and Windows, is it easier for a hacker to break the windows password? If so why and how can i create a windows password in the same security level as Linux?
4
votes
4answers
196 views

Does Windows have a built-in password store?

What passwords are stored in Microsoft Windows? How can I know what password are saved in computer?
0
votes
1answer
51 views

User “ASP” logged in to windows server - hacking attempt?

I run a windows server 2008 which I connect to both via VNC and via remote desktop. Yesterday I noted when I connected to it via VNC that another user was logged in. See images. Notes: I have no ...
0
votes
2answers
154 views

Is possible to be hacked remotely?

I little bit afraid about remote hacking, since i'm using a windows 7.i see what a hacker can do if he exploit the Dcom vulnerability in windows XP. But is this sort of exploits exist on windows 7 or ...
0
votes
0answers
16 views

Read WMI stuff on offline system?

For forensic purposes, I want to work with WMI on an offline system (dd image disk). In particular I would like to read the WMI Event Subscriptions. How can I achieve this ? Are WMI stuff located ...
0
votes
1answer
110 views

High-Risk Intrusion Detected

I have an endpoint protection from Symantec. Recently, I have been receiving many Symantec Cloud Alert emails. wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php They ...
-1
votes
3answers
128 views

What are the differences in Linux and Windows security that cause Windows to get so many more viruses? [on hold]

I am trying to gain a more detailed understanding of specific features of the Windows and Linux security models that makes Windows so much more prone to infection by viruses than Linux. As an example ...
15
votes
1answer
83k views

How do I clear cached credentials from my Windows Profile?

Windows seems to be saving my credentials for a variety of applications (terminal servers, etc) and I'd like to purge this data. How can I backup and purge this data?
0
votes
1answer
71 views

How does Bitlocker only-PIN method work?

Microsoft explained USB-key and TPM based BitLocker decryption process on this article. USB-Key process: The steps in the illustrated sequence are as follows: 1- The operating system starts ...
1
vote
1answer
184 views

automatic connection from LSASS to different IPs. Is this the usual behavior?

I'm using windows 7. firefox 22. connecting through a regular residential wifi router. In the last month I've noticed that when I connect to the internet and once in a while my firewall indicates me ...
-1
votes
0answers
19 views

How to merge Windows registry hives directly without converting them to an intermediate text based file? [closed]

what will happen if registry of windows would be merged to another windows?? For example if two windows7 registry is merged!!! What will happen ? And how it can be done using Command Prompt?? reg ...
0
votes
3answers
1k views

Is there a combination of Windows permissions that allow execution of a .NET executable but not reading nor copying its content?

I suppose that if a file is executable by anyone, in other words, if a user has enough permissions to execute an executable in Windows, it will be possible to read the contents of the executable and ...
0
votes
0answers
35 views

How do the internals of a Windows update security patch work? [closed]

Wasn't sure where to ask this on stack exchange, so vote to close if you think it is in the wrong place. I am analyzing a Windows security patch. Having never examined a windows security patch, and ...
0
votes
2answers
153 views

Computer hasn't been connected to internet for 2 weeks

A computer hasn't been connected to the internet for 2 weeks but has still been used. It's running Windows 8 and various notices are complaining about virus definitions and updates not being current. ...
0
votes
1answer
145 views

Windows security policy analysis tool

I have several security policy files (INF exported from different Windows machines) which I need to audit. Is there any automatic tool you know of, that can analyse those files according to best ...
19
votes
3answers
3k views

How can I tell if I have the citadel virus without downloading an antivirus?

I recently received an e-mail from Virgin Media indicating that I might have the Citadel virus. It obviously sounds like a fake e-mail, but I am almost certain it is genuine, as they had my name and ...
3
votes
1answer
165 views

What is “Multi-Protocol Unified Hello” and what are the impacts of disabling/enabling it?

This article describes how to disable old versions of TLS, but in addition to doing so, "Multi-Protocol Unified Hello" is also disabled. # Disable Multi-Protocol Unified Hello md ...
1
vote
2answers
170 views

How to securely use Process.Start?

I am using Process.Start in a Windows Service I created to execute an exe that I have on my server that is used for audio conversion. I am passing some user input as a parameter to this exe. The ...
0
votes
0answers
13 views

How to setup a VPN server to connect windows server 2008 R2 using RDP [migrated]

recently my server has been attacked by brute force login, fortunately nothing happened... Im not a security expert, but I want secure my windows server 2008 R2. This is the scenario. Server: ...
1
vote
1answer
150 views

Cannot get access into a vulnerable Windows 2000 (MS03_026)

I'm trying to get access into a Windows 2000 server through the vulnerability MS03_026. An exploit is provided by Metasploit but I don't know why it isn't working. After filling the options (basically ...
2
votes
6answers
5k views

Hardware USB Key to Reset Any Windows Password

This tool requires physical access of course, and there are many things you can do once you have physical access, but this peaked my curiosity. The tool in question: ...
1
vote
1answer
80 views

What security risks do you face when connecting to a server via RDP? [duplicate]

What security risks do you face when connecting to an (possibly foreign) RDP server? Opening an unsigned RDP file triggers the following warning: RDP is a one way street, right?
2
votes
0answers
7 views

Viewing and listing keys in MSCAPI CSP containers [migrated]

I have a MSCAPI container created and hosted within a Windows Server 2003 environment. How do I use the command line to list keys and their details within the container onto the command line ?
1
vote
1answer
60 views

Save application autostart login token on computer

I need to login desktop application while autostart on server (like skype does). What is the best practice to save authentication token (password)? Should I use something like RSA encryption (which ...
0
votes
2answers
66 views

Minimum access required to access LSA Secrets

I would like to know what the minimum access is to be able to dump from the lsass process on a Windows machine (any version) to try and grab LSA Secrets. The reason I am asking is because I had ...
3
votes
3answers
146 views

Could “system volume information” and $RmMetadata pose information leakage on a nuked HDD?

I recently nuked my HDD(s) via a Windows program (Disk Wipe to be precise: http://www.diskwipe.org/), now everything is fine when I try to retrieve the information on that disk by any program I can ...
1
vote
1answer
775 views

Windows Firewall netsh equivalent of iptables u32 module

I have looked everywhere and I can't seem to find a netsh equivalent of the u32 module for iptables. I want to create a rule to Drop a packet that starts with a specific set of bytes. Similar to: # ...
-1
votes
1answer
93 views

PCI compliant transparent data encryption at disk/folder level on Windows?

Is there a way to achieve PCI compliant data encryption at disk/folder level in Windows in a way that is transparent to applications(they must be able to write/read to encrypted folders/disks as if ...
0
votes
1answer
83 views

Makecab.exe at boot. is it malicious?

, I am trying to find out why this process appeared during 2 boot occasions. Autoruns does not show it anywhere. It appeared when I uninstalled google chrome and malwarebytes. The prefetch file for ...
-1
votes
0answers
49 views

Is it safe to play around with this on a virtual machine? [duplicate]

I found a hard drive destroyer and I am trying to see exactly what it does and what it looks like while happening. I also do not want to lose my computer in the process. I downloaded VirtualBox and ...
154
votes
7answers
26k views

What's the rationale behind Ctrl-Alt-Del for login

Why is Ctrl+Alt+Del required at login on certain Windows systems (I have not seen it elsewhere, but contradict me if I'm wrong) before the password can be typed in? From a usability point of view, ...
1
vote
3answers
110 views

How trustable is third party root certificates?

i recently tried to use fiddler2 from third party vendor telerik,while decrypting the https traffic of my network it asked me to install its own root certifcate in my windows operating system : have ...
3
votes
1answer
68 views

How to check for presence of LM hashes in local SAM

To get rid of LM hashes in local SAM databases, one can rely on the famous NoLMHash domain GPO, which instructs clients not to store password hashes with the LM algorithm locally ("Do not store LAN ...
1
vote
1answer
55 views

Multiple “rundll32.exe mhunk.dme” instances. Is my PC Infected with Something?

So, I have this strange list of rundll32.exe There are quite a lot of rows of it (see attached image) when I open the process tab in my task manager I've already read the link here: Multiple running ...
0
votes
0answers
8 views

Delay time clicking of contextual menu on the mouse [migrated]

I have such trouble: when i choose a folder/softwares and clicking second right clicker of mouse on the my desktop or elsewhere context window needs time to appear. Why needs it time to appear? what ...
2
votes
2answers
157 views

Does a VM keylogger listen to the keyboard activities of the host?

I am running a Windows XP virtual machine on a Windows XP host machine. I use the VM for suspicious websites and software/applications. In the case a kaylogger will be installed on my VM: will this ...
11
votes
7answers
2k views

Can hackers detect my operating system?

I've seen people demonstrating the use of backtrack to attack VMs. In one of the components of backtrack, it shows the operating system of the targets. Since support for Windows XP is ending soon, i ...
1
vote
2answers
82 views

File SHA256 checksum failed, but OK on reboot

I downloaded the Windows installer (.exe) for ImageMagick via http (both http and ftp downloads are provided at http://www.imagemagick.org/script/binary-releases.php#windows). Upon executing the ...
0
votes
1answer
69 views

Getting a log of computers that have remotely accessed a Windows server

I have suspicions that someone other than people on my team have obtained the credentials to remotely access a Windows 2008 Server. I need to get some evidence before I start pointing fingers or get ...
0
votes
2answers
343 views

Recover password or password hash from locked account

I have a locked administrator account. Other accounts are unlocked, but they have no rights. I want to get a password from the locked account, or maybe password hash, if possible.
1
vote
2answers
252 views

Are KIS 2014, Malewarebytes Pro and SpyBot sufficient to prevent internet attacks?

As mentionned in the title, I have KIS 2014, Malewarebyte Pro and Spybot installaed on my windows 7 (regularly updated). I regularly scan my pc for viruses and spywares and clean it with Glary ...
1
vote
0answers
47 views

How do I continue pentesting with access to local station?

I started learning hobbyist penetration testing a while ago, and as far as penetrating a computer I have physical access to, all is good. Mainly using Hiren bootCD, it is easy to gain access to an ...
2
votes
1answer
37 views

Windows Print Drivers / Security Principal

Forgive me if this question seems a little "under the hood", but I think it's important to know from a security point of view. I see SPOOLSV.EXE runs with print driver DLLs (Type 3 - User Mode, I ...
3
votes
1answer
120 views

What is the risk that Windows 8's loopback protection feature protects me from?

Windows 8 requires Fiddler to set up an exemption when sending traffic to localhost. Since this is a default setting (and affects many computers): What security benefit does this provide How can I ...
0
votes
2answers
90 views

Does Reinstalling windows ensures removal of all malwares/spywares/virus/rootkits etc? [duplicate]

If I reinstall windows, will it ensure that all types of malwares/spywares/rootkits etc are removed from my laptop ?