OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Trojan Keys
From: Finehout,David (dfinehoutTIDALWAVE.NRLSSC.NAVY.MIL)
Date: Mon May 01 2000 - 14:57:45 CDT

Be sure to log in as "Administrator" when installing SRVANY. For some
reason, it doesn't like to use the renamed administrator account or an
administrator equivalent. The account that you use to install it, has to be
named "Administrator". At least it worked that way on my NT box, your
mileage may vary... Does anyone have any idea why this may be so??

Dave Finehout

> -----Original Message-----
> From: Tanner, Robby [SMTP:TANNERWARDROP.COM]
> Sent: Friday, April 28, 2000 11:57
> To: FOCUS-MSSECURITYFOCUS.COM
> Subject: Re: Trojan Keys
>
> Yes it is. If you want to use SRVANY to run applications as a service,
> you
> must ensure that the application ignores those messages.
>
> -----Original Message-----
> From: Derek Noonan [mailto:Derek_NoonanDELL.COM]
> Sent: Friday, April 28, 2000 3:00 AM
> To: FOCUS-MSSECURITYFOCUS.COM
> Subject: Re: Trojan Keys
>
>
> That's up to the guy who programmed it, no?
>
> ATB,
>
> Derek
>
> "It's all fun and games till someone losses [sic] an eye" (JH,1992)
> Derek Noonan, Dell+ Engineer
> Telephone: +353 61 223395
> Email: derek_noonandell.com
>
> -----Original Message-----
> From: Tanner, Robby [mailto:TANNERWARDROP.COM]
> Sent: 26 April 2000 21:20
> To: FOCUS-MSSECURITYFOCUS.COM
> Subject: Re: [FOCUS-MS] Trojan Keys
>
> The app has to ignore a couple of WM_SYSCOMMAND messages to
> function
> properly.
>
> -----Original Message-----
> From: Derek Noonan [mailto:Derek_NoonanDELL.COM]
> Sent: Wednesday, April 26, 2000 2:45 AM
> To: FOCUS-MSSECURITYFOCUS.COM
> Subject: Re: Trojan Keys
>
>
> AFAIR in the NT Reskit isn't there an executable called
> SRVANY that allows
> "normal executables" (i.e. ones that were not programmed to
> do so) to run as
> services?
>
> ATB,
>
> Derek
>
> "It's all fun and games till someone losses [sic] an eye"
> (JH,1992)
> Derek Noonan, Dell+ Engineer
> Email: derek_noonandell.com
>
> -----Original Message-----
> From: John Flux
> [mailto:johnTMSP.SCREAMING.NET]
> Sent: 25 April 2000 23:25
> To: FOCUS-MSSECURITYFOCUS.COM
> Subject: Re: [FOCUS-MS] Trojan Keys
>
> -----BEGIN PGP SIGNED MESSAGE-----
>
> On Tue, 25 Apr 2000, you wrote:
> > I wish to install an executable to run,
> with an
> appropriate
> > command line, each time a Windows NT
> machine reboots.The
> > command must execute before a user logs
> in. Can someone
> > please give me a list of appropriate
> registry keys i can
> > use to achieve this?
> since so far no one has responded with a
> better idea I
> thought i'd point out
> that you get schedular to auto run stuff on
> boot / login etc
>
> although i think system.ini is still
> honoured - try putting
> run=C:\myfile.exe
> in there
>
> >
> > Cheers
> - --
> It has been observed that one's nose is
> never so happy as
> when it is
> thrust into the affairs of another, from
> which some
> physiologists have
> drawn the inference that the nose is devoid
> of the sense of
> smell.
> -- Ambrose Bierce, "The
> Devil's Dictionary"
>
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6.3i
> Charset: noconv
>
>
>
> iQCVAwUBOQYbeRz17E0LRU/dAQFrqgQAtYJU4ZggXeUTxcykFVO+wyyyKeEzOIsh
>
>
> 6Zs6vLGafmqYip6a5LD6ZJTAYvEzcjAqiqiFuKWLsJOpspraW1UTx2LRFnzoZn53
>
>
> kzD4pg8oQ10zWFT7E3mAQPWzoavr692g8TLOZc76moIYnpujW2SJ+fPoo6De+vLd
> FpGTSZ7hZ3Q=
> =BxlJ
> -----END PGP SIGNATURE-----