Gandip's Blog

Understanding Executable Files:

   “unsafe file type” is concept to protect user from executable content embedded in file. These type of file usually get into user computer via download or mail attachment. Microsoft have declared some file extension as “unsafe file type”. I will try to show some basic on how to handle these type of files.

Usual intention of these type of file is to run Malicious command in user computer. Some of file extension are script files(.vbs, .js) , batch file(.cmd, .bat) or executable command(.exe) .

Potential executable file can some time be threat to one version of Windows whereas no effect to other version. Like gadget introduced from Windows Vista with extension .gadget can be no threat to OS like windows XP since it does not support one.

While Downloading::

  

When downloading a file you typically get the option to either save or cancel. if you have the application that can open the file then you will get an option to open the download file directly. you will get the Always ask before opening this type of file checkbox option. If you uncheck it you next you download the file, the file is automatically opened for you.

AES:

   Attachment Execution Services is the feature included from XP SPK2. It basically keep track of the information in the NTFS file system about the security zone from which the file was downloaded. You can see if a particular file has this zone identifier by right-clicking the file in Windows Explorer and then clicking Properties.

visit: http://support.microsoft.com/kb/174360 for using Security zone.

Windows Live Messenger:

You can Customize you Windows live Messenger to Block automatic transfer of potential threat file extension. To block potentially unsafe file types, click Tools, click Options, click File Transfer, and then select the Automatically reject file transfers for known unsafe file types check box.

When you attempt to download a file in Internet Explorer, the File Download dialog box indicates whether the file type is executable or potentially executable and may be considered potentially unsafe. The appearance of the dialog box varies depending on the versions of Windows and Internet Explorer installed and the behavior modeled below is a Windows installation without Microsoft Office installed.

	Normal Dialog Box	Potentially Unsafe Dialog Box
Windows XP SP2 and SP3
Windows Server 2003 SP1 and SP2
Windows Vista RTM and SP1

   The following are the executable file considered potential threat to one version to another version of windows

Extension	Description	Potentially Unsafe in…
.ade	Access Project Extension	All
.adp	Access Project	All
.app	Executable Application	All except Microsoft Windows 2000 SP4
.bas	BASIC Source Code	All
.bat	Batch Processing	All
.cer	Internet Security Certificate File	All
.chm	Compiled HTML Help	All
.cmd	DOS CP/M Command File, Command File for Windows NT	All
.com	Command	All
.cpl	Windows Control Panel Extension	All
.crt	Certificate File	All
.csh	UNIX Shell Script	All except Microsoft Windows 2000 SP4
.der	DER Encoded X509 Certificate File	All
.exe	Executable File	All
.fxp	FoxPro Compiled Source	All except Microsoft Windows 2000 SP4
.gadget	Sidebar Gadget	Windows Vista, Windows Server 2008
.grp	Microsoft Program Group	All except Microsoft Windows 2000 SP4
.hlp	Windows Help File	All
.hta	Hypertext Application	All
.inf	Information or Setup File	All
.ins	IIS Internet Communications Settings	All
.isp	IIS Internet Service Provider Settings	All
.its	Internet Document Set	All
.js	JavaScript Source Code	All
.jse	JScript Encoded Script File	All
.ksh	UNIX Shell Script	All except Microsoft Windows 2000 SP4
.lnk	Windows Shortcut File	All
.mad	Access Module Shortcut	All except Microsoft Windows 2000 SP4
.maf	Access Form	All except Microsoft Windows 2000 SP4
.mag	Access Diagram Shortcut	All except Microsoft Windows 2000 SP4
.mam	Access Macro Shortcut	All except Microsoft Windows 2000 SP4
.maq	Access Query Shortcut	All except Microsoft Windows 2000 SP4
.mar	Access Report Shortcut	All except Microsoft Windows 2000 SP4
.mas	Access Stored Procedures	All except Microsoft Windows 2000 SP4
.mat	Access Table Shortcut	All except Microsoft Windows 2000 SP4
.mau	Media Attachment Unit	All except Microsoft Windows 2000 SP4
.mav	Access View Shortcut	All except Microsoft Windows 2000 SP4
.maw	Access Data Access Page	All except Microsoft Windows 2000 SP4
.mda	Access Add-in	All except Microsoft Windows 2000 SP4
.mdb	Access Database	All
.mde	Access MDE Database File	All
.mdt	Access Add-in Data	All
.mdw	Access Workgroup Information	All
.mdz	Access Wizard Template	All except Microsoft Windows 2000 SP4
.msc	Microsoft Management Console Snap-in Control File	All
.msh	Microsoft Shell	All except Microsoft Windows 2000 SP4
.mshxml	Microsoft Shell	All except Microsoft Windows 2000 SP4
.msi	Windows Installer File	All
.msp	Windows Installer Update	All
.mst	Windows SDK Setup Transform Script	All
.ocx	ActiveX Control	Windows XP, Windows Vista, Window Server 2008
.ops	Office Profile Settings File	All except Microsoft Windows 2000 SP4
.pcd	Visual Test	All
.pif	MSDOS shortcut	All
.prf	PICS Rules File	All except Microsoft Windows 2000 SP4
.prg	Program File	All except Microsoft Windows 2000 SP4
.pst	Outlook Personal Folder File	All except Microsoft Windows 2000 SP4
.reg	Registry Data File	All
.scf	Windows Explorer Command	All except Microsoft Windows 2000 SP4
.scr	Windows Screen Saver	All
.sct	Windows Script Component	All
.shb	Windows Shortcut into a Document	All
.shs	Shell Scrap Object File	All
.tmp	Temporary File/Folder	All
.url	Internet Location	All
.vbe	VBScript Encoded Script File	All
.vbs	VBScript Script File, Visual Basic for Applications Script	All
.vsd	Visio Drawing	Microsoft Windows 2000 SP4
.vsmacros	Visual Studio .NET Binary-based Macro Project	All
.vss	Visio Stencil	All
.vst	Visio Template	All
.vsw	Visio Workspace File	All
.ws	Windows Script File	All
.wsc	Windows Script Component	All
.wsf	Windows Script File	All
.wsh	Windows Script Host Settings File	All
.zip	Compressed (zipped) Folder	Microsoft Windows 2000 SP4 with Internet Explorer 5

 

Manual on Downloading serials from ELMS server

Here is the manuals on how to download the software using your ELMS account. you will an email from ELMS support Team where your Username, password with link  will be sent to you.

Visit site should be something like  : http://msdn70.e-academy.com/xxxxxxxxxx

Authenticate yourself with your username and password. Your username and password is sent into your mail. Do not forget to check your junk email if you did not find in inbox. If you did not find the there then please do not hesitate to mail at msp@unlimit.com . 1.

1. Use your username and password to login

2. Select the product you want to download

3. Now “Add To Cart”

4.Agree the terms of License

5. Now “check out”

6. Fill the Last Name and First name field

7. Click on “download”

8.Now you can see your serials

A Copy can be found on http://gandip.com.np/galaries/elms.html