Re: Windows XP Home's File Permiissions (slightly off topic but..)

[Chris]

Dan Grunberg @ 2004-Nov-21 2:23:33 PM
"Windows XP Home's File Permiissions   (slightly off topic but..)" 

> Recently I upgraded(?) to a Windows xP Home System. The lack of a
> W2000-like concept of group permissions is most inconvenient.

It's still very much so there; the GUI just won't let you edit ACLs.

> I found these at TweakXP's Home page.

> I thought I should solicit second opinions.

> 1. Are the tweaks reversable?

The first on is; the second one is not (without a format).

> 2. Will the tweaks ever HAVE to be reversed?

You will need to tweak permissions; you should not need to convert
back to FAT32.

> 3. Will tweaking XP Home hamper my ability to get XP Home updates
> from Microsoft's and/or Compaq's website?

Unless you go around messing with permissions on the Windows
directory, no. You may now need to log in as an administrator to apply
updates.



> 5. Any other methods/tweaks I should consider?

Spend the $50 and upgrade to XP Pro. Search for some other GUI program
that will let you set permissions.


> Setting File permissions on XP Home
> ===

> There's a tweak listed on the site for getting XP Pro security
> settings on XP Home.



> Quick Tip: In order to set file permission in windows XP Home, the
> file system must already be converted to NTFS. For more information
> on how to convert your file system, click here.

> For more information on how to convert your file system to NTFS Click

Instead of doing this, just boot into Safe Mode when you want to
modify the permissions.

> Convert FAT32 To NTFS
> ==

> To change from FAT 32 to NTFS file system for more stability,
> security and less fragmentation, open the command prompt and type:

> Convert C: /FS:NTFS

> "C" being the drive you wish to convert. Make sure there is a space
> between the C: and the foward slash (/). Once you press enter it
> will ask you for confirmation and press Y. Then press Y and enter
> once more to reboot.. This also works for windows XP Home.

You will need to be using NTFS to set permissions. You should already
be have your disks formatted in NTFS. If not, you can use this, but it
does not set ANY permissions. Formatting and re-installing Windows
will set the default permissions correctly. If you disk is not already
formatted as NTFS and you have little data on the disks, I would
re-install Windows.

-- 
Chris
Quoting when replying to this message is good for your karma.

Using The Bat! v3.0.1.33 on Windows XP 5.1 Build 2600 Service Pack 2
Accessing a POP3 mailbox.

I just found the last bug.


http://www.silverstones.com/thebat/TBUDLInfo.html

Windows XP Home's File Permiissions (slightly off topic but..)

[Dan Grunberg]

Recently I upgraded(?) to a Windows xP Home System. The lack of a
W2000-like concept of group permissions is most inconvenient.


I found these at TweakXP's Home page.

I thought I should solicit second opinions.

1. Are the tweaks reversable?

2. Will the tweaks ever HAVE to be reversed?

3. Will tweaking XP Home hamper my ability to get XP Home updates
from Microsoft's and/or Compaq's website?

4. Any other things I should consider about the tweaks?

5. Any other methods/tweaks I should consider?


from [ http://www.tweakxp.com/tweak911.aspx ]http://www.tweakxp.com/
tweak911.aspx

Setting File permissions on XP Home
===

There's a tweak listed on the site for getting XP Pro security
settings on XP Home. It's good, but I've found an easier way to set
sharing permissions on folders. You can use the GUI instaed of the
more complicated command line without having to go into safe mode.

1. Click on the start button
2. Then run
3. Type shrpubw
4. Chose the folder whose permissions you want to change and give the
share a name
5. Click next, now you can chose custom if you want to have full
options.

Quick Tip: In order to set file permission in windows XP Home, the
file system must already be converted to NTFS. For more information
on how to convert your file system, click here.

For more information on how to convert your file system to NTFS Click

[see below]



[ http://www.tweakxp.com/tweakxp/display.asp?id=264 ]http://www.
tweakxp.com/tweakxp/display.asp?id=264

Convert FAT32 To NTFS
==

To change from FAT 32 to NTFS file system for more stability,
security and less fragmentation, open the command prompt and type:

Convert C: /FS:NTFS

"C" being the drive you wish to convert. Make sure there is a space
between the C: and the foward slash (/). Once you press enter it will
ask you for confirmation and press Y. Then press Y and enter once
more to reboot.. This also works for windows XP Home.



Using: The Bat! v2.12.00, BayesIt! 0.5.9,
   MyMacros 1.11, gMacrosPlugin 0.80
   Windows XP v5.1 - Build 2600 - Service Pack 2

-- 

Daniel A. Grunberg   Kensington, Maryland, USA
homepage: www.nyx.net/~dgrunber/





http://www.silverstones.com/thebat/TBUDLInfo.html

Re: To all virus code resenders (-:

[Peter Meyns]

Hi Mica,

on Sun, 21 Nov 2004 18:55:03 +0100GMT, you wrote:

MM> Please "do not feel singled out", (-; but all re-senders of the virus
MM> code will be for the next 24 hours in my temporary Selective Download
MM> filter.

I'm sorry if I caused any inconvenience at your side. It was meant to
test the mailing list server. I chose TBTECH, because it is the least
frequented list... hmm

-- 
Cheers
Peter

The Bat! v3.0.2.7 on Win2K, SP4, 5, 0, build 2195,
AMD Athlon 2200+ at 1800MHz, 512 MB RAM



http://www.silverstones.com/thebat/TBUDLInfo.html

To all virus code resenders (-:

[Mica Mijatovic]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Please "do not feel singled out", (-; but all re-senders of the virus
code will be for the next 24 hours in my temporary Selective Download
filter.

The first test message, sent by Peter (Meyns), I had accepted as a such
and I responded to, but all the successive replies *quoting* the very
same virus code, I accept only as a negligence.

Please, if any sender of such messages find that something in these or
any other messages I should read, resend them after 24 hours and
*without* any virus code cited in.

It's not that I am "angry". (-: I just have no time to deal with a such
mail again and again.

Thanks. (:

Mica
- --
-BEGIN PGP SIGNATURE-

iD8DBQFBoNZ29q62QPd3XuIRAtEaAJ0bsMwoepfdzqEIrGw/eQjUT//PQQCbB3Fe
BcT4X6H3nJnoTo91fQPt55E=
=75cJ
-END PGP SIGNATURE-




http://www.silverstones.com/thebat/TBUDLInfo.html

Re: OT: Eicar Test

[hggdh]

Hello Peter,

Sunday, November 21, 2004, 09:43:37, you wrote:

PM> Hi there,

PM> I just found that the mailing list server doesn't accept a virus text
PM> string in the body (tried Eicar), which I consider a very good thing.
PM> Thank you, Johannes! :-)

PM> But how about a virus code coming with a different character set? I'm
PM> just curious... ;-)

PM> (taken out so that this messages flows everywhere)


huh... EICAR should be caugth if it is the ONLY string in the message.
Otherwise, it should NOT be caugth.

The reason is that EICAR is a TEST string to verify an AV. If the AV
programme gets this string, and NOTHING ELSE, then it should trip.
Otherwise, this is not the EICAR anymore, and the AV should NOT trip.

In other words... tripping on the above message only shows that the AV
in use is not correctly tripping on EICAR :-)

-- 

 ..hggdh..

Using The Bat! v3.0.2.6 and Bayes Filter Plugin v1.5.6 on Windows 2000 5.0 
Build  2195
Service Pack 4

http://www.silverstones.com/thebat/TBUDLInfo.html

Re[2]: OT: Eicar Test

[Sean Rima]

Hello Peter,

Sunday, November 21, 2004, 5:13:07 PM, you wrote:

> Hi Sean,

> on Sun, 21 Nov 2004 16:59:52 +GMT, you wrote:

>>> Caught by AntiVir here (Worm/DocIRC.B.1) in two messages, yours and
>>> Sean's. While TB was downloading messages, AVir asked what to do with
>>> the message, I told it to rename and to stack it in the calaboose, since
>>> I was curious to know WHO is sending it. (-;

SR>> I did a scan and nothing showing here

> No need to worry. See Chris' message in this thread:
> mid:[EMAIL PROTECTED]


Yeah but that should have shown the eicar one not something else, unless it 
happened that they are that way anyway

Sean

-- 
Sean Rima <[EMAIL PROTECTED]>
ICQ: 679813 YAHOO: thecivvie
Jabber: [EMAIL PROTECTED] AIM: tcobone
O2 +353863868343 Vodafone +353872628431
...is it time to go yet...

http://www.silverstones.com/thebat/TBUDLInfo.html

Re: OT: Eicar Test

[Peter Meyns]

Hi Sean,

on Sun, 21 Nov 2004 16:59:52 +GMT, you wrote:

>> Caught by AntiVir here (Worm/DocIRC.B.1) in two messages, yours and
>> Sean's. While TB was downloading messages, AVir asked what to do with
>> the message, I told it to rename and to stack it in the calaboose, since
>> I was curious to know WHO is sending it. (-;

SR> I did a scan and nothing showing here

No need to worry. See Chris' message in this thread:
mid:[EMAIL PROTECTED]

-- 
Cheers
Peter

"I'm sick! I ought to be home in bed with a nurse."

Winamp currently playing: Hot Tuna - Hesitation Blues






http://www.silverstones.com/thebat/TBUDLInfo.html

Re[2]: OT: Eicar Test

[Sean Rima]

Hello Mica,

Sunday, November 21, 2004, 4:42:17 PM, you wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1

>***^\ ."_)~~
>  ~( __ _"o   Was another beautiful day, Sun, 21 Nov 2004,
>@  @  at 16:43:37 +0100, when Peter Meyns wrote:

>> Hi there,

>> I just found that the mailing list server doesn't accept a virus text
>> string in the body (tried Eicar), which I consider a very good thing.
>> Thank you, Johannes! :-)

>> But how about a virus code coming with a different character set? I'm
>> just curious... ;-)

>> .

> Caught by AntiVir here (Worm/DocIRC.B.1) in two messages, yours and
> Sean's. While TB was downloading messages, AVir asked what to do with
> the message, I told it to rename and to stack it in the calaboose, since
> I was curious to know WHO is sending it. (-;


I did a scan and nothing showing here

Sean

-- 
Sean Rima <[EMAIL PROTECTED]>
ICQ: 679813 YAHOO: thecivvie
Jabber: [EMAIL PROTECTED] AIM: tcobone
O2 +353863868343 Vodafone +353872628431
A kid's idea of a balanced diet is a hamburger in each hand.

http://www.silverstones.com/thebat/TBUDLInfo.html

Re: OT: Eicar Test

[Chris]

Peter Meyns @ 2004-Nov-21 11:36:25 AM
"OT: Eicar Test" 

>>> [EMAIL PROTECTED](C^)7PP)7}$RVPNE-FGNAQNEQ-NAGVIVEHF-GRFG-SVYR!$U+U*

>> This is NOT the correct TEXT eicar string. You can find it at
>> 

> No, of course it isn't. The correct one would have been rejected by
> the list server. This is the string encoded in ROT13 charset.

Well, you can't ROT13 the binary form of a virus and still have it
work, so I wouldn't worry. Also, the VB Script engine can't handle
ROT13 (or anything other than normal encoding), so ROT13ed VB Script
viruses shouldn't matter.

-- 
Chris
Quoting when replying to this message is good for your karma.

Using The Bat! v3.0.1.33 on Windows XP 5.1 Build 2600 Service Pack 2
Accessing a POP3 mailbox.

Notice in a dry cleaner's window: ANYONE LEAVING THEIR GARMENTS HERE
FOR MORE THAN 30 DAYS WILL BE DISPOSED OF


http://www.silverstones.com/thebat/TBUDLInfo.html

Re: OT: Eicar Test

[Mica Mijatovic]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

   ***^\ ."_)~~
 ~( __ _"o   Was another beautiful day, Sun, 21 Nov 2004,
   @  @  at 16:43:37 +0100, when Peter Meyns wrote:

> Hi there,

> I just found that the mailing list server doesn't accept a virus text
> string in the body (tried Eicar), which I consider a very good thing.
> Thank you, Johannes! :-)

> But how about a virus code coming with a different character set? I'm
> just curious... ;-)

> .

Caught by AntiVir here (Worm/DocIRC.B.1) in two messages, yours and
Sean's. While TB was downloading messages, AVir asked what to do with
the message, I told it to rename and to stack it in the calaboose, since
I was curious to know WHO is sending it. (-;

- --
Mica
PGP key uploaded at:  once just before breakfast
<>o<>
[Earth LOG: 81 day(s) since v3.0 unleashing]
OS: Windows 98 SE Micro Lite Professional IVa Enterprise Millennium
with nestled ZipSlack(tm) 9.1 UMSDOS Linux;
and, for TB sometimes Libranet (Linux) 2.8.1, via Cross Over Office
-BEGIN PGP SIGNATURE-

iD8DBQFBoMVn9q62QPd3XuIRAjORAJ0cfY6VKJ0pyPWYsdSwIufvyqhjywCdHY5S
Wz2FhzJ73pRfvVaxw+2hTRI=
=Wcbv
-END PGP SIGNATURE-




http://www.silverstones.com/thebat/TBUDLInfo.html

Re: OT: Eicar Test

[Peter Meyns]

Hi Johannes,

on Sun, 21 Nov 2004 17:07:03 +0100GMT, you wrote:

JMP> On Sun, 21 Nov 2004 16:43:37 +0100, Peter Meyns <[EMAIL PROTECTED]> wrote:

>> I just found that the mailing list server doesn't accept a virus text
>> string in the body (tried Eicar), which I consider a very good thing.
>> Thank you, Johannes! :-)

JMP> 2004-11-21 16:05:29 1CVtHN-0003c1-0v H=moutng.kundenserver.de
JMP> [212.227.126.171] F=<[EMAIL PROTECTED]> rejected after DATA: This message
JMP> contains malware (Eicar-Test-Signature)

Yes, exactly, that's the one I meant.

>> But how about a virus code coming with a different character set? I'm
>> just curious... ;-)

JMP> It seems neither our ClamAV nor your providers 

JMP> X-Antivirus: avast! (VPS 0447-1, 19.11.2004), Outbound message
JMP> X-Antivirus-Status: Clean

JMP> caught it. ;-) Strictly speaking, this is not a problem because the
JMP> antivirus usually only scans (MIMEd) attachments. When copying the
JMP> EICAR virus test code, your local antivirus will warn you.

Yes, that's what I thought. I don't really believe, someone will try
to distribute virus codes via ROT13, nor that someone on these lists
might be interested in receiving them. It was a rather academically
thought of mine... ;-)

-- 
Cheers
Peter

The Bat! v3.0.2.7 on Win2K, SP4, 5, 0, build 2195,
AMD Athlon 2200+ at 1800MHz, 512 MB RAM






http://www.silverstones.com/thebat/TBUDLInfo.html

Re: OT: Eicar Test

[Peter Meyns]

Hi Luigi,

on Sun, 21 Nov 2004 17:19:44 +0100GMT, you wrote:

LR> Sunday, November 21, 2004, 4:43:37 PM, you wrote:

PM>> [EMAIL PROTECTED](C^)7PP)7}$RVPNE-FGNAQNEQ-NAGVIVEHF-GRFG-SVYR!$U+U*

LR> This is NOT the correct TEXT eicar string. You can find it at
LR>  

No, of course it isn't. The correct one would have been rejected by
the list server. This is the string encoded in ROT13 charset.

-- 
Cheers
Peter

The Bat! v3.0.2.7 on Win2K, SP4, 5, 0, build 2195,
AMD Athlon 2200+ at 1800MHz, 512 MB RAM






http://www.silverstones.com/thebat/TBUDLInfo.html

Re[2]: OT: Eicar Test

[Sean Rima]

Hello Luigi,

Sunday, November 21, 2004, 4:19:44 PM, you wrote:

> Hello Peter,
> Sunday, November 21, 2004, 4:43:37 PM, you wrote:

PM>> [EMAIL PROTECTED](C^)7PP)7}$RVPNE-FGNAQNEQ-NAGVIVEHF-GRFG-SVYR!$U+U*

> This is NOT the correct TEXT eicar string. You can find it at
>  

> Of course I don't post it, otherwise my ClamAV would block the message.


Yeah as soon as I copied the text file from the net, one of my virus scanners 
picked it up

Sean

-- 
Sean Rima <[EMAIL PROTECTED]>
ICQ: 679813 YAHOO: thecivvie
Jabber: [EMAIL PROTECTED] AIM: tcobone
O2 +353863868343 Vodafone +353872628431
Raising teenagers is like nailing Jell-O to a tree.

http://www.silverstones.com/thebat/TBUDLInfo.html

Re: OT: Eicar Test

[Luigi Rosa]

Hello Peter,
Sunday, November 21, 2004, 4:43:37 PM, you wrote:

PM> [EMAIL PROTECTED](C^)7PP)7}$RVPNE-FGNAQNEQ-NAGVIVEHF-GRFG-SVYR!$U+U*

This is NOT the correct TEXT eicar string. You can find it at
 

Of course I don't post it, otherwise my ClamAV would block the message.


Ciao,
Luigi

Using The Bat! v3.0.2.5 on Windows XP
5.1 Build 2600
Service Pack 2

-- 
  mailto:[EMAIL PROTECTED]




http://www.silverstones.com/thebat/TBUDLInfo.html

Re: OT: Eicar Test

[Johannes M. Posel]

Dear Peter,

On Sun, 21 Nov 2004 16:43:37 +0100, Peter Meyns <[EMAIL PROTECTED]> wrote:

> I just found that the mailing list server doesn't accept a virus text
> string in the body (tried Eicar), which I consider a very good thing.
> Thank you, Johannes! :-)

2004-11-21 16:05:29 1CVtHN-0003c1-0v H=moutng.kundenserver.de
[212.227.126.171] F=<[EMAIL PROTECTED]> rejected after DATA: This message
contains malware (Eicar-Test-Signature)

> But how about a virus code coming with a different character set? I'm
> just curious... ;-)

It seems neither our ClamAV nor your providers 

X-Antivirus: avast! (VPS 0447-1, 19.11.2004), Outbound message
X-Antivirus-Status: Clean

caught it. ;-) Strictly speaking, this is not a problem because the
antivirus usually only scans (MIMEd) attachments. When copying the
EICAR virus test code, your local antivirus will warn you.

HTH,
Johannes



http://www.silverstones.com/thebat/TBUDLInfo.html

Re: OT: Eicar Test

[Sean Rima]

Hello Peter,

Sunday, November 21, 2004, 3:43:37 PM, you wrote:

> Hi there,

> I just found that the mailing list server doesn't accept a virus text
> string in the body (tried Eicar), which I consider a very good thing.
> Thank you, Johannes! :-)

> But how about a virus code coming with a different character set? I'm
> just curious... ;-)

> [EMAIL PROTECTED](C^)7PP)7}$RVPNE-FGNAQNEQ-NAGVIVEHF-GRFG-SVYR!$U+U*


Got through two virus scanner here but I boubt many would pick it up as it is 
not a mime enclosed app

Sean

-- 
Sean Rima <[EMAIL PROTECTED]>
ICQ: 679813 YAHOO: thecivvie
Jabber: [EMAIL PROTECTED] AIM: tcobone
O2 +353863868343 Vodafone +353872628431
HEY!!!  Were you born in a barn?  Close the door!!

http://www.silverstones.com/thebat/TBUDLInfo.html

OT: Eicar Test

[Peter Meyns]

Hi there,

I just found that the mailing list server doesn't accept a virus text
string in the body (tried Eicar), which I consider a very good thing.
Thank you, Johannes! :-)

But how about a virus code coming with a different character set? I'm
just curious... ;-)

[EMAIL PROTECTED](C^)7PP)7}$RVPNE-FGNAQNEQ-NAGVIVEHF-GRFG-SVYR!$U+U*

-- 
Cheers
Peter

Those TLAs drive me crazy!

Winamp currently playing: Sonata Arctica - I Want Out

http://www.silverstones.com/thebat/TBUDLInfo.html