Re: [H] SysInt RootKit Revealer

2008-01-21 Thread DHSinclair

Thanks Al.
I read each of your shares. Hmm. Appears to be something I am not suppose 
to read.

Each link went a little deeper into "Why do you want to know?"
By the 4th link, I have decided that all 3 machines have ZERO rootkits 
installed.

I know, probably really stupid, but I get snowed easilyin MS stuff..
Yup, little patience on this one.  I like SysInternals, but,...
Thank you very much.
Best,
Duncan

At 17:14 01/21/2008 -0500, you wrote:


DHSinclair <[EMAIL PROTECTED]> wrote:

>
> I can only guess that all the '\Policy\Secrets\*' is really kept someplace
> else...probably for good reason!

http://forum.sysinternals.com/forum_posts.asp?TID=8748

http://www.wilderssecurity.com/showthread.php?t=46312

http://www.heysoft.de/nt/reg/RegFAQe.htm

http://www.pctools.com/forum/showthread.php?t=6874

Best,
al




Re: [H] SysInt RootKit Revealer

2008-01-21 Thread Al

DHSinclair <[EMAIL PROTECTED]> wrote:

>
> I can only guess that all the '\Policy\Secrets\*' is really kept someplace 
> else...probably for good reason!

http://forum.sysinternals.com/forum_posts.asp?TID=8748

http://www.wilderssecurity.com/showthread.php?t=46312

http://www.heysoft.de/nt/reg/RegFAQe.htm

http://www.pctools.com/forum/showthread.php?t=6874

Best,
al


[H] SysInt RootKit Revealer

2008-01-21 Thread DHSinclair
Just a question, I hope.  I've run the System Internals RootKit Revealer on 
3 of my systems.
The only response I get is 3-5 registry keys that can not be found/read 
directly, yet.

They are all in HKLM\SECURITY\Policy\Secrets\*.

The odd part is none of the hits found are to be seen in the 
registry(!)  When I use regedit and go look at the HKLM\SECURITY\ sub-tree, 
it is blank.

so, .
I can only guess that all the '\Policy\Secrets\*' is really kept someplace 
else...probably for good reason!


Am I close with this observation?
Thanks. Best,
Duncan



Re: [H] Word keeps crashing

2008-01-21 Thread DHSinclair

OK, Understand. OldBro uses lots of adobe too.  I'd focus on the stupid
toolbar then.  Reads like the only "new" addition... :)
Best,
Duncan

At 15:05 01/21/2008 -0500, you wrote:

I've got the whole entire CS3 suite.  Don't really use all of it but I
use Acrobat, Dreamweaver, Photoshop and occasionally have need for
Illustrator and Premiere.

I don't even know if Adobe is the culprit.  I've had them installed
and chugging along happily for a few months now.  The Word problem
just started recently and the only thing I could think of to link it
to was that all my Adobe apps recently did an update and keep adding
that damn toolbar to Word.

But other than this I haven't had a single Office crash in many years.

On Jan 21, 2008 3:00 PM, DHSinclair <[EMAIL PROTECTED]> wrote:
> Brian,
> I use Word03 also and have never seen this; even with a dorked normal.dot.
> As you mention some toolbar from adobe, I'd kill adobe. I have been seeing
> increased popups for adobe external of Word lately.  What version of adobe
> are you
> using?  Heck, even my older Brother is getting ready to fire adobe after 8
> years!
> Best,
> Duncan
>
>
> At 14:39 01/21/2008 -0500, you wrote:
> >Just started a couple days ago.  When I launch Word 2003 either from
> >command line, shortcut, or by double-clicking a doc file it
> >immediately presents a crash screen.  If I tell it to load in safe
> >mode it works fine.  Otherwise it just keeps on crashing.
> >
> >I did some googling and it turns out this could have several problems.
> >  One is a corrupt Normal.dot, the default template file.  So I deleted
> >it and presto Word loaded fine.  But when I closed Word it created a
> >new Normal.dot and then went back to it's crashing behavior again.  So
> >the problem has to be deeper.
> >
> >Another article mentioned it might be caused by bad temp files so I
> >nuked all of those.  A third article mentioned disabling any global
> >templates and com add-ins that are present in the C:\Documents and
> >Settings\ username\Application Data\Microsoft\Word\Startup folder.  I
> >checked and nothing there.
> >
> >I can run Word with the wordwin.exe /a command just fine now  but I'm
> >still bugged by what might have been the root cause.  Any suggestions?
> >  The only thing I can think is that the Adobe toolbars that keep
> >popping up (even though I tell them not to) are the cause.  These are
> >the Contribute and ScanSoft PDF toolbars.  I found out how to disable
> >the Contribute toolbar but it didn't help.  As soon as Word wrote the
> >new Normal.dot it started crashing again.
> >
> >--
> >Brian Weeden
> >Technical Consultant
> >Secure World Foundation
>
>



--
Brian Weeden
Technical Consultant
Secure World Foundation




Re: [H] Word keeps crashing

2008-01-21 Thread Brian Weeden
I've got the whole entire CS3 suite.  Don't really use all of it but I
use Acrobat, Dreamweaver, Photoshop and occasionally have need for
Illustrator and Premiere.

I don't even know if Adobe is the culprit.  I've had them installed
and chugging along happily for a few months now.  The Word problem
just started recently and the only thing I could think of to link it
to was that all my Adobe apps recently did an update and keep adding
that damn toolbar to Word.

But other than this I haven't had a single Office crash in many years.

On Jan 21, 2008 3:00 PM, DHSinclair <[EMAIL PROTECTED]> wrote:
> Brian,
> I use Word03 also and have never seen this; even with a dorked normal.dot.
> As you mention some toolbar from adobe, I'd kill adobe. I have been seeing
> increased popups for adobe external of Word lately.  What version of adobe
> are you
> using?  Heck, even my older Brother is getting ready to fire adobe after 8
> years!
> Best,
> Duncan
>
>
> At 14:39 01/21/2008 -0500, you wrote:
> >Just started a couple days ago.  When I launch Word 2003 either from
> >command line, shortcut, or by double-clicking a doc file it
> >immediately presents a crash screen.  If I tell it to load in safe
> >mode it works fine.  Otherwise it just keeps on crashing.
> >
> >I did some googling and it turns out this could have several problems.
> >  One is a corrupt Normal.dot, the default template file.  So I deleted
> >it and presto Word loaded fine.  But when I closed Word it created a
> >new Normal.dot and then went back to it's crashing behavior again.  So
> >the problem has to be deeper.
> >
> >Another article mentioned it might be caused by bad temp files so I
> >nuked all of those.  A third article mentioned disabling any global
> >templates and com add-ins that are present in the C:\Documents and
> >Settings\ username\Application Data\Microsoft\Word\Startup folder.  I
> >checked and nothing there.
> >
> >I can run Word with the wordwin.exe /a command just fine now  but I'm
> >still bugged by what might have been the root cause.  Any suggestions?
> >  The only thing I can think is that the Adobe toolbars that keep
> >popping up (even though I tell them not to) are the cause.  These are
> >the Contribute and ScanSoft PDF toolbars.  I found out how to disable
> >the Contribute toolbar but it didn't help.  As soon as Word wrote the
> >new Normal.dot it started crashing again.
> >
> >--
> >Brian Weeden
> >Technical Consultant
> >Secure World Foundation
>
>



-- 
Brian Weeden
Technical Consultant
Secure World Foundation


Re: [H] Word keeps crashing

2008-01-21 Thread DHSinclair

Brian,
I use Word03 also and have never seen this; even with a dorked normal.dot.
As you mention some toolbar from adobe, I'd kill adobe. I have been seeing
increased popups for adobe external of Word lately.  What version of adobe 
are you
using?  Heck, even my older Brother is getting ready to fire adobe after 8 
years!

Best,
Duncan

At 14:39 01/21/2008 -0500, you wrote:

Just started a couple days ago.  When I launch Word 2003 either from
command line, shortcut, or by double-clicking a doc file it
immediately presents a crash screen.  If I tell it to load in safe
mode it works fine.  Otherwise it just keeps on crashing.

I did some googling and it turns out this could have several problems.
 One is a corrupt Normal.dot, the default template file.  So I deleted
it and presto Word loaded fine.  But when I closed Word it created a
new Normal.dot and then went back to it's crashing behavior again.  So
the problem has to be deeper.

Another article mentioned it might be caused by bad temp files so I
nuked all of those.  A third article mentioned disabling any global
templates and com add-ins that are present in the C:\Documents and
Settings\ username\Application Data\Microsoft\Word\Startup folder.  I
checked and nothing there.

I can run Word with the wordwin.exe /a command just fine now  but I'm
still bugged by what might have been the root cause.  Any suggestions?
 The only thing I can think is that the Adobe toolbars that keep
popping up (even though I tell them not to) are the cause.  These are
the Contribute and ScanSoft PDF toolbars.  I found out how to disable
the Contribute toolbar but it didn't help.  As soon as Word wrote the
new Normal.dot it started crashing again.

--
Brian Weeden
Technical Consultant
Secure World Foundation




[H] Word keeps crashing

2008-01-21 Thread Brian Weeden
Just started a couple days ago.  When I launch Word 2003 either from
command line, shortcut, or by double-clicking a doc file it
immediately presents a crash screen.  If I tell it to load in safe
mode it works fine.  Otherwise it just keeps on crashing.

I did some googling and it turns out this could have several problems.
 One is a corrupt Normal.dot, the default template file.  So I deleted
it and presto Word loaded fine.  But when I closed Word it created a
new Normal.dot and then went back to it's crashing behavior again.  So
the problem has to be deeper.

Another article mentioned it might be caused by bad temp files so I
nuked all of those.  A third article mentioned disabling any global
templates and com add-ins that are present in the C:\Documents and
Settings\ username\Application Data\Microsoft\Word\Startup folder.  I
checked and nothing there.

I can run Word with the wordwin.exe /a command just fine now  but I'm
still bugged by what might have been the root cause.  Any suggestions?
 The only thing I can think is that the Adobe toolbars that keep
popping up (even though I tell them not to) are the cause.  These are
the Contribute and ScanSoft PDF toolbars.  I found out how to disable
the Contribute toolbar but it didn't help.  As soon as Word wrote the
new Normal.dot it started crashing again.

-- 
Brian Weeden
Technical Consultant
Secure World Foundation