April 2010 - Posts

Understanding Executable Files:

   “unsafe file type” is concept to protect user from executable content embedded in file. These type of file usually get into user computer via download or mail attachment. Microsoft have declared some file extension as “unsafe file type”. I will try to show some basic on how to handle these type of files.

Usual intention of these type of file is to run Malicious command in user computer. Some of file extension are script files(.vbs, .js) , batch file(.cmd, .bat) or executable command(.exe) .

Potential executable file can some time be threat to one version of Windows whereas no effect to other version. Like gadget introduced from Windows Vista with extension .gadget can be no threat to OS like windows XP since it does not support one.

While Downloading::

image  

When downloading a file you typically get the option to either save or cancel. if you have the application that can open the file then you will get an option to open the download file directly. you will get the Always ask before opening this type of file checkbox option. If you uncheck it you next you download the file, the file is automatically opened for you.

AES:

image

   Attachment Execution Services is the feature included from XP SPK2. It basically keep track of the information in the NTFS file system about the security zone from which the file was downloaded. You can see if a particular file has this zone identifier by right-clicking the file in Windows Explorer and then clicking Properties.

visit: http://support.microsoft.com/kb/174360 for using Security zone.

Windows Live Messenger:

You can Customize you Windows live Messenger to Block automatic transfer of potential threat file extension. To block potentially unsafe file types, click Tools, click Options, click File Transfer, and then select the Automatically reject file transfers for known unsafe file types check box.

image

When you attempt to download a file in Internet Explorer, the File Download dialog box indicates whether the file type is executable or potentially executable and may be considered potentially unsafe. The appearance of the dialog box varies depending on the versions of Windows and Internet Explorer installed and the behavior modeled below is a Windows installation without Microsoft Office installed.

Normal Dialog Box

Potentially Unsafe Dialog Box

Windows XP SP2 and SP3

clip_image010

clip_image012

Windows Server 2003 SP1 and SP2

clip_image014

clip_image016

Windows Vista RTM and SP1

clip_image018

clip_image020

   The following are the executable file considered potential threat to one version to another version of windows

Extension

Description

Potentially Unsafe in…

.ade

Access Project Extension

All

.adp

Access Project

All

.app

Executable Application

All except Microsoft Windows 2000 SP4

.bas

BASIC Source Code

All

.bat

Batch Processing

All

.cer

Internet Security Certificate File

All

.chm

Compiled HTML Help

All

.cmd

DOS CP/M Command File, Command File for Windows NT

All

.com

Command

All

.cpl

Windows Control Panel Extension

All

.crt

Certificate File

All

.csh

UNIX Shell Script

All except Microsoft Windows 2000 SP4

.der

DER Encoded X509 Certificate File

All

.exe

Executable File

All

.fxp

FoxPro Compiled Source

All except Microsoft Windows 2000 SP4

.gadget

Sidebar Gadget

Windows Vista, Windows Server 2008

.grp

Microsoft Program Group

All except Microsoft Windows 2000 SP4

.hlp

Windows Help File

All

.hta

Hypertext Application

All

.inf

Information or Setup File

All

.ins

IIS Internet Communications Settings

All

.isp

IIS Internet Service Provider Settings

All

.its

Internet Document Set

All

.js

JavaScript Source Code

All

.jse

JScript Encoded Script File

All

.ksh

UNIX Shell Script

All except Microsoft Windows 2000 SP4

.lnk

Windows Shortcut File

All

.mad

Access Module Shortcut

All except Microsoft Windows 2000 SP4

.maf

Access Form

All except Microsoft Windows 2000 SP4

.mag

Access Diagram Shortcut

All except Microsoft Windows 2000 SP4

.mam

Access Macro Shortcut

All except Microsoft Windows 2000 SP4

.maq

Access Query Shortcut

All except Microsoft Windows 2000 SP4

.mar

Access Report Shortcut

All except Microsoft Windows 2000 SP4

.mas

Access Stored Procedures

All except Microsoft Windows 2000 SP4

.mat

Access Table Shortcut

All except Microsoft Windows 2000 SP4

.mau

Media Attachment Unit

All except Microsoft Windows 2000 SP4

.mav

Access View Shortcut

All except Microsoft Windows 2000 SP4

.maw

Access Data Access Page

All except Microsoft Windows 2000 SP4

.mda

Access Add-in

All except Microsoft Windows 2000 SP4

.mdb

Access Database

All

.mde

Access MDE Database File

All

.mdt

Access Add-in Data

All

.mdw

Access Workgroup Information

All

.mdz

Access Wizard Template

All except Microsoft Windows 2000 SP4

.msc

Microsoft Management Console Snap-in Control File

All

.msh

Microsoft Shell

All except Microsoft Windows 2000 SP4

.mshxml

Microsoft Shell

All except Microsoft Windows 2000 SP4

.msi

Windows Installer File

All

.msp

Windows Installer Update

All

.mst

Windows SDK Setup Transform Script

All

.ocx

ActiveX Control

Windows XP, Windows Vista, Window Server 2008

.ops

Office Profile Settings File

All except Microsoft Windows 2000 SP4

.pcd

Visual Test

All

.pif

MSDOS shortcut

All

.prf

PICS Rules File

All except Microsoft Windows 2000 SP4

.prg

Program File

All except Microsoft Windows 2000 SP4

.pst

Outlook Personal Folder File

All except Microsoft Windows 2000 SP4

.reg

Registry Data File

All

.scf

Windows Explorer Command

All except Microsoft Windows 2000 SP4

.scr

Windows Screen Saver

All

.sct

Windows Script Component

All

.shb

Windows Shortcut into a Document

All

.shs

Shell Scrap Object File

All

.tmp

Temporary File/Folder

All

.url

Internet Location

All

.vbe

VBScript Encoded Script File

All

.vbs

VBScript Script File, Visual Basic for Applications Script

All

.vsd

Visio Drawing

Microsoft Windows 2000 SP4

.vsmacros

Visual Studio .NET Binary-based Macro Project

All

.vss

Visio Stencil

All

.vst

Visio Template

All

.vsw

Visio Workspace File

All

.ws

Windows Script File

All

.wsc

Windows Script Component

All

.wsf

Windows Script File

All

.wsh

Windows Script Host Settings File

All

.zip

Compressed (zipped) Folder

Microsoft Windows 2000 SP4 with Internet Explorer 5

 

Posted: 04-27-2010 5:58 PM by gandip with no comments

Filed under:

Manual on Downloading serials from ELMS server

Here is the manuals on how to download the software using your ELMS account. you will an email from ELMS support Team where your Username, password with link  will be sent to you.

Visit site should be something like  : http://msdn70.e-academy.com/xxxxxxxxxx

Authenticate yourself with your username and password. Your username and password is sent into your mail. Do not forget to check your junk email if you did not find in inbox. If you did not find the there then please do not hesitate to mail at msp@unlimit.com . 1.

 clip_image002

1. Use your username and password to login

2. Select the product you want to download

clip_image004

3. Now “Add To Cart”

clip_image006

 clip_image008

4.Agree the terms of License

5. Now “check out”

clip_image010

 clip_image012

6. Fill the Last Name and First name field

7. Click on “download”

clip_image014

 clip_image016

8.Now you can see your serials

A Copy can be found on http://gandip.com.np/galaries/elms.html

Posted: 04-22-2010 1:16 PM by gandip with 1 comment(s)