Hi all,
I wanted to find out with CyberForceField (www.cyberforcefield.com) what
happens when I put an executable file I create with rev inside a cage.
I found out the following alerts in the PS below:
Basically, the stand alone program tries to read the file "home.mc" and
"home" and "home.rev" from various places.
Can anyone explain why to me?
It doesn't look very clean/secure to me - my executable file (stand
alone created by Rev) is very simple and I don't find any justification
for this.
Also, I couldn't find anything about "home.mc" anywhere in the
litterature - Is there a way I can change the settings of the standalone
to stop these weird attempts of access. The main reason I worry about
this: If Home/home.mc/home.rev are supposed to have coding, these codes
would be vulnerable and lead possibly to unwanted backdoors.
Thanks for your help on this.
Alcy
PS:
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\WINDOWS\system32\home;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\WINDOWS\home;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\WINDOWS\System32\Wbem\home;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\Program
Files\Common Files\Ulead Systems\MPEG\home;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\Program
Files\Common Files\Ulead Systems\DVD\home;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\WINDOWS\system32\home.mc;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\WINDOWS\home.mc;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\WINDOWS\System32\Wbem\home.mc;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\Program
Files\Common Files\Ulead Systems\MPEG\home.mc;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\Program
Files\Common Files\Ulead Systems\DVD\home.mc;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\WINDOWS\system32\home.rev;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\WINDOWS\home.rev;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\WINDOWS\System32\Wbem\home.rev;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\Program
Files\Common Files\Ulead Systems\MPEG\home.rev;Administrator;MyComputer
26-Oct-2007;19:06:22;c:\myprogram\myprogram.exe;Read;C:\Program
Files\Common Files\Ulead Systems\DVD\home.rev;Administrator;MyComputer
_______________________________________________
use-revolution mailing list
use-revolution@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-revolution
