Solved

Flash abominations and file permissions

Posted on 2003-10-27
8
378 Views
Last Modified: 2010-04-14
I wrote a batch program called 'togflash' to toggle the renaming of the files that cause Flash animation to block my screen at times (GetFlash.exe,
Flash.ocx). So far, so good. I then discovered that the browser, finding them renamed, simply downloaded new copies and the awful visuals started up again. Wishing to extend my knowledge of Windows file permissions (that seem to be less intuitive than Unix ones) I decided to try the following:

1. Create a new account under Users. They are not meant to have file writing permissions in the directory these trojan files appear (C:\WINNT\system32\Macromed\Flash)

2. Run the browser as that user with 'Run as...'

Blow me if they're not *still* appearing. Why?
0
Comment
Question by:CEHJ
  • 4
  • 3
8 Comments
 
LVL 1

Assisted Solution

by:NahumK
NahumK earned 25 total points
Comment Utility
Might be the browsing is down under "wimpy user" priveleges but the downloading is done through explorer.exe which uses the priveleges of the user that's logged on to the machine.
try to log on with the wimpy user and see if the problem occurs or just disable writing access on that directory for all users.
0
 
LVL 86

Author Comment

by:CEHJ
Comment Utility
That's what I was thinking could be the problem.

>>just disable writing access on that directory for all users.

Been there, done that - file permissions got changed back to writable by some upstart process!
0
 
LVL 4

Accepted Solution

by:
darth_wannabe earned 100 total points
Comment Utility
In your internet explorer security, set it to prompt you for active x controls and plugins rather than leaving it at 'enable'......or if you're sure you don't want to see them, set it to 'disabled'
0
 
LVL 4

Expert Comment

by:darth_wannabe
Comment Utility
BTW, that would be at TOOLS->INTERNET OPTIONS->SECURITY->CUSTOM LEVEL
0
Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

 
LVL 86

Author Comment

by:CEHJ
Comment Utility
Quite a good idea, i might try it. Get back to you.
0
 
LVL 4

Expert Comment

by:darth_wannabe
Comment Utility
I believe that Internet Explorer uses the system account for stuff like you described.
0
 
LVL 4

Expert Comment

by:darth_wannabe
Comment Utility
If you want to test it out, go to a site that you know has a bunch of flash stuff on it, like http://www.shockwave.com
0
 
LVL 86

Author Comment

by:CEHJ
Comment Utility
Thanks guys.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
windows 2000 3 420
Migrate Windows NT to Windows 2003 2 490
Images sometimes not printed 6 467
no logon server available 8 154
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
HOW TO: Connect to the VMware vSphere Hypervisor 6.5 (ESXi 6.5) using the vSphere (HTML5 Web) Host Client 6.5, and perform a simple configuration task of adding a new VMFS 6 datastore.
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now