If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
Thread Tools | Rate Thread | Display Modes |
#16
|
|||
|
|||
Can't install software
In message , Fokke Nauta
writes: On 01/10/2017 13:30, Paul wrote: Fokke Nauta wrote: [] What is a "third-party offline scanner"? Can you explain and recommend any? Fokke Kaspersky has one. It does a signature-based scan. The disc contains a stripped down Gentoo Linux, and the scanner runs while Windows is not running. OK, you mean a virus scanner? I have the Kaspersky cd. But I don't think it's a virus. [] Yes, he did mean a virus scanner. "Third party" means (in this context) created by someone other than you and Microsoft; offline _could_ mean just will run when not connected to the internet, but is more likely to mean runs independently of Windows - i. e. either bootable in itself, or running under something else (such as Linux - which if it's bootable in itself it's quite likely to be anyway). Is "the Kaspersky cd" you have independently bootable? -- J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf DOS means never having to live hand-to-mouse. |
Ads |
#17
|
|||
|
|||
Can't install software
On 02/10/2017 17:23, J. P. Gilliver (John) wrote:
In message , Fokke Nauta writes: On 01/10/2017 13:30, Paul wrote: Fokke Nauta wrote: [] What is a "third-party offline scanner"? Can you explain and recommend any? Fokke Kaspersky has one. It does a signature-based scan. The disc contains a stripped down Gentoo Linux, and the scanner runs while Windows is not running. OK, you mean a virus scanner? I have the Kaspersky cd. But I don't think it's a virus. [] Yes, he did mean a virus scanner. "Third party" means (in this context) created by someone other than you and Microsoft; offline _could_ mean just will run when not connected to the internet, but is more likely to mean runs independently of Windows - i. e. either bootable in itself, or running under something else (such as Linux - which if it's bootable in itself it's quite likely to be anyway). Is "the Kaspersky cd" you have independently bootable? Thanks, The words "third-party offline scanner" didn't mean anything to me. Here (Netherlands) when we talk about a scanner, we mean a flatbed scanner. I knew Paul mentioned something else, but didn't know what. Thanks for your explanation. From Kaspersky I have the cd "Kaspersky Rescue Disk 10.0.32.17 data 2017.02.19". I assume there will be a virus scanner on it and it will be bootable. Never used it, though. But I have several Linux rescue cd's, bootable, with virus scanners. I can vaguely remember I used Knoppix once to scan my pc, but found nothing. Fokke |
#18
|
|||
|
|||
Can't install software
On 09/30/2017 02:20 PM, Fokke Nauta wrote:
Hi all, Running W7 Pro 64b. Today I tried to install a newer version of Backup4all. The installer started, then there's the window with the status bar of the installer. And there it stops. Nothing further happens And I need to use the task manager to kill the installlation process. I blamed the installer. Later on I tried to install the newest version of LibreOffice. Once again, the installer started, until the window with the installation status bar came up. And here it stopped again. Nothing further happens and I needed to use the task manager again. Now I blamed my pc. What the hell is wrong with it? Thanks beforehand. Fokke The dialog box for you to OK the installation unfortunately will sometimes start minimized and you may very well have missed it |
#19
|
|||
|
|||
Can't install software
On 03/10/2017 04:29, philo wrote:
On 09/30/2017 02:20 PM, Fokke Nauta wrote: Hi all, Running W7 Pro 64b. Today I tried to install a newer version of Backup4all. The installer started, then there's the window with the status bar of the installer. And there it stops. Nothing further happens And I need to use the task manager to kill the installlation process. I blamed the installer. Later on I tried to install the newest version of LibreOffice. Once again, the installer started, until the window with the installation status bar came up. And here it stopped again. Nothing further happens and I needed to use the task manager again. Now I blamed my pc. What the hell is wrong with it? Thanks beforehand. Fokke The dialog box for you to OK the installation unfortunately will sometimes start minimized and you may very well have missed it No, that's definitely not the case. When the progress bar of the installation process pops up, it is stuck and stays at 0 %. And this happens with 2 applications. Fokke |
#20
|
|||
|
|||
Can't install software
On 30/09/2017 21:20, Fokke Nauta wrote:
Hi all, Running W7 Pro 64b. Today I tried to install a newer version of Backup4all. The installer started, then there's the window with the status bar of the installer. And there it stops. Nothing further happens And I need to use the task manager to kill the installlation process. I blamed the installer. Later on I tried to install the newest version of LibreOffice. Once again, the installer started, until the window with the installation status bar came up. And here it stopped again. Nothing further happens and I needed to use the task manager again. Now I blamed my pc. What the hell is wrong with it? Thanks beforehand. Fokke Hi guys, This is really weird. After I copied the installers (exe) from Backup4all and LibreOffice to the desktop, everything installed fine. They were on a different (internal) hard drive. How can this be? Fokke |
#21
|
|||
|
|||
Can't install software
Fokke Nauta wrote:
On 30/09/2017 21:20, Fokke Nauta wrote: Hi all, Running W7 Pro 64b. Today I tried to install a newer version of Backup4all. The installer started, then there's the window with the status bar of the installer. And there it stops. Nothing further happens And I need to use the task manager to kill the installlation process. I blamed the installer. Later on I tried to install the newest version of LibreOffice. Once again, the installer started, until the window with the installation status bar came up. And here it stopped again. Nothing further happens and I needed to use the task manager again. Now I blamed my pc. What the hell is wrong with it? Thanks beforehand. Fokke Hi guys, This is really weird. After I copied the installers (exe) from Backup4all and LibreOffice to the desktop, everything installed fine. They were on a different (internal) hard drive. How can this be? Fokke So it's a "trust" problem of some sort. Your downloaded files haven't had the block removed ? https://www.sevenforums.com/general-...ing-files.html streams -d filename.zip # streams.exe comes from sysinternals.com If you download filename.zip from the Internet, with your browser, an alternate stream is added to the data stream, to indicate "it came from an untrusted source". There are various recipes for removing that alternate stream, so it no long bears such a stamp. And the alternate stream, I would have expected it to be copied from volume to volume. You can compare the files that worked, versus the files that didn't work, for an alternate stream, and see if there is a correlation. Paul |
#22
|
|||
|
|||
Can't install software
In message , Paul
writes: [] If you download filename.zip from the Internet, with your browser, an alternate stream is added to the data stream, to indicate "it came from an untrusted source". There are various recipes for removing that alternate stream, so it no long bears such a stamp. And the alternate stream, I would have expected it to be copied from volume to volume. You can compare the files that worked, versus the files that didn't work, for an alternate stream, and see if there is a correlation. Paul If you copy said downloaded files from an NTFS volume to a FAT one (such as a USB stick, or maybe a small partition you keep for this purpose), and then back, will such stamping disappear? -- J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf If something works, thank an engineer. (Reported seen on a bumper sticker.) |
#23
|
|||
|
|||
Can't install software
On 03/10/2017 17:00, Paul wrote:
Fokke Nauta wrote: On 30/09/2017 21:20, Fokke Nauta wrote: Hi all, Running W7 Pro 64b. Today I tried to install a newer version of Backup4all. The installer started, then there's the window with the status bar of the installer. And there it stops. Nothing further happens And I need to use the task manager to kill the installlation process. I blamed the installer. Later on I tried to install the newest version of LibreOffice. Once again, the installer started, until the window with the installation status bar came up. And here it stopped again. Nothing further happens and I needed to use the task manager again. Now I blamed my pc. What the hell is wrong with it? Thanks beforehand. Fokke Hi guys, This is really weird. After I copied the installers (exe) from Backup4all and LibreOffice to the desktop, everything installed fine. They were on a different (internal) hard drive. How can this be? Fokke So it's a "trust" problem of some sort. Your downloaded files haven't had the block removed ? https://www.sevenforums.com/general-...ing-files.html streams -d filename.zip # streams.exe comes from sysinternals.com If you download filename.zip from the Internet, with your browser, an alternate stream is added to the data stream, to indicate "it came from an untrusted source". There are various recipes for removing that alternate stream, so it no long bears such a stamp. And the alternate stream, I would have expected it to be copied from volume to volume. You can compare the files that worked, versus the files that didn't work, for an alternate stream, and see if there is a correlation. Paul It were exe files. I also had an msi file, didn't make a difference. But I will use streams on the exe files and try again. Fokke |
#24
|
|||
|
|||
Can't install software
On 03/10/2017 17:00, Paul wrote:
Fokke Nauta wrote: On 30/09/2017 21:20, Fokke Nauta wrote: Hi all, Running W7 Pro 64b. Today I tried to install a newer version of Backup4all. The installer started, then there's the window with the status bar of the installer. And there it stops. Nothing further happens And I need to use the task manager to kill the installlation process. I blamed the installer. Later on I tried to install the newest version of LibreOffice. Once again, the installer started, until the window with the installation status bar came up. And here it stopped again. Nothing further happens and I needed to use the task manager again. Now I blamed my pc. What the hell is wrong with it? Thanks beforehand. Fokke Hi guys, This is really weird. After I copied the installers (exe) from Backup4all and LibreOffice to the desktop, everything installed fine. They were on a different (internal) hard drive. How can this be? Fokke So it's a "trust" problem of some sort. Your downloaded files haven't had the block removed ? https://www.sevenforums.com/general-...ing-files.html streams -d filename.zip # streams.exe comes from sysinternals.com If you download filename.zip from the Internet, with your browser, an alternate stream is added to the data stream, to indicate "it came from an untrusted source". There are various recipes for removing that alternate stream, so it no long bears such a stamp. And the alternate stream, I would have expected it to be copied from volume to volume. You can compare the files that worked, versus the files that didn't work, for an alternate stream, and see if there is a correlation. Paul Ran streams64 on the Backup4all installation file (exe). But I can't run it as it was already installed (after I copied it onto the desktop). So - we'll never know. Don't feel like uninstalling and re-installing as I will loose all my settings. Fokke |
#25
|
|||
|
|||
Can't install software
On 03/10/2017 19:50, Wolf K wrote:
On 2017-10-03 09:22, Fokke Nauta wrote: On 30/09/2017 21:20, Fokke Nauta wrote: Hi all, Running W7 Pro 64b. Today I tried to install a newer version of Backup4all. The installer started, then there's the window with the status bar of the installer. And there it stops. Nothing further happens And I need to use the task manager to kill the installlation process. I blamed the installer. Later on I tried to install the newest version of LibreOffice. Once again, the installer started, until the window with the installation status bar came up. And here it stopped again. Nothing further happens and I needed to use the task manager again. Now I blamed my pc. What the hell is wrong with it? Thanks beforehand. Fokke Hi guys, This is really weird. After I copied the installers (exe) from Backup4all and LibreOffice to the desktop, everything installed fine. They were on a different (internal) hard drive. How can this be? Fokke AFAIK, the installers look for /Windows and /Users subfolder(s) to place the *.dll and resource files, etc. The external drive doesn't have those folders, thus, you have to install from the system partition. Is it really that simple? I'm surprised. Fokke |
#26
|
|||
|
|||
Can't install software
Fokke Nauta wrote:
On 30/09/2017 21:20, Fokke Nauta wrote: Hi all, Running W7 Pro 64b. Today I tried to install a newer version of Backup4all. The installer started, then there's the window with the status bar of the installer. And there it stops. Nothing further happens And I need to use the task manager to kill the installlation process. I blamed the installer. Later on I tried to install the newest version of LibreOffice. Once again, the installer started, until the window with the installation status bar came up. And here it stopped again. Nothing further happens and I needed to use the task manager again. Now I blamed my pc. What the hell is wrong with it? Thanks beforehand. Fokke Hi guys, This is really weird. After I copied the installers (exe) from Backup4all and LibreOffice to the desktop, everything installed fine. They were on a different (internal) hard drive. How can this be? Files on your desktop get the same permissions as for your Windows account. Files elsewhere get the permissions of the folder under which they are stored. |
#27
|
|||
|
|||
Can't install software
Paul wrote:
This is really weird. After I copied the installers (exe) from Backup4all and LibreOffice to the desktop, everything installed fine. They were on a different (internal) hard drive. How can this be? So it's a "trust" problem of some sort. Your downloaded files haven't had the block removed ? https://www.sevenforums.com/general-...ing-files.html streams -d filename.zip # streams.exe comes from sysinternals.com If you download filename.zip from the Internet, with your browser, an alternate stream is added to the data stream, to indicate "it came from an untrusted source". There are various recipes for removing that alternate stream, so it no long bears such a stamp. And the alternate stream, I would have expected it to be copied from volume to volume. You can compare the files that worked, versus the files that didn't work, for an alternate stream, and see if there is a correlation. Paul An Alternate Data Stream (ADS), only available under NTFS, has the same permissions as the file onto which the stream is associated. That is how, for example, malware could be delivered with something inocuous, like getting a copy of notpad.exe that happens to be 10 times the normal size of that executable file because there is a stream attached to it which will run under the same permissions as for notepad.exe. It took some time and cajoling over a decade ago to get anti-virus vendors to recognize, understand, and include scanning the ADSes of files. https://blogs.technet.microsoft.com/...reams-in-ntfs/ An ADS can be used as a flag. Some anti-virus software will use an ADS to flag a file as already scanned and then record the location and hash value of that file so they can see in a later scan that the file has not changed and does not need to get rescanned. The file doesn't need to get rescanned until it changes. So I can see an ADS could be used to flag files downloaded from the Internet as untrusted. That means something interrogates the ADSes of a file (there can be more than one) to look for the flag. For downloaded files, an ADS can be added which is: :Zone.Identifier:$DATA For some of my downloaded files, they have another ADS added to them: :BDU:$DATA Don't know what that is form. It is zero bytes long so it is a flag by stream name only. The Zone stream is 26 bytes long. Both are data streams. http://securityxploded.com/alternate-data-streams.php Zone.Identifier heralds back to the security zones originally used by Internet Explorer: Internet, Local intranet, Trusted Sites, and Restricted Sites. The streams utility doesn't show you want is in a stream, only the name of the stream and how long it is in bytes. I tried using the Powershell cmdlet from the above article but it bitches that "stream" is not a valid parameter. Guess it isn't available in Windows 7 that I'm using and became available in Windows 8. Other reading says I need Powershell v3.0 but Windows 7 only has v2.0. I tried using Nirsoft's Alternate Data Streams View utility (with admin privs) but it also won't let me either open the data stream (in Notepad) or export it (to a .dat file). The second article reminded me that text ($DATA) ADSes might be viewable using Notepad by using the syntax: notepad.exe "filepath\file:streamname" The double-quotes are needed only if any of the parameters have spaces. So I used that and the Zone.Identifier data stream had: [ZoneTransfer] ZoneId=3 Yep, that's the Internet security zone. However, as I recall, all that should do is have Windows display a prompt that the file is from an unknown source (i.e., untrusted) and the user can OK through that prompt. http://www.sandersonforensics.com/Fi...Identifier.pdf If the user clicks OK to continue loading the executable file (it hasn't started running yet, just loaded into memory), it runs under the permissions it got under NTFS or via ACLs (Access Control Lists). The Zone.Identifier does not block the file (as the forum article first claimed in the forum article) but Windows merely *warns* about the untrusted source for the file. |
#28
|
|||
|
|||
Can't install software
J. P. Gilliver (John) wrote:
If you copy said downloaded files from an NTFS volume to a FAT one (such as a USB stick, or maybe a small partition you keep for this purpose), and then back, will such stamping disappear? Alternate Data Streams are a feature on NTFS. Not available in FAT. So, yes, moving to or from a file system without the ADS feature will strip it from the file. ADSes are attributes of the file system; i.e., something attached to the file record (but only in NTFS where such attributes can be defined). You can use a FAT partition to "wash" files of any ADSes. Another way to strip ADSes is to pipe them into another file. Piping will only read the $DATA attribute of the file (its contents) without including any streams. type file altfile altfile won't have the ADSes. If you do a binary file compa fc /b file altfile it will report the files are equal (because fc only reads the $DATA part of the file). streams.exe will show file has the ADSes while altfile will not. As an example, I had a downloaded executable file that had 2 ADSes: BDU and Zone.Identifier. Don't know what BDU is for. Zone.Identifier has the security zone of the file (what you see under Internet Options - Security tab). ZoneID=3 is the Internet security zone. I copied the file to a temp folder as test.exe. In that temp folder, I ran: streams * It reported test.exe had the 2 ADSes. I then ran: type test.exe newtest.exe fc /b test.exe newtest.exe newtest.exe got stripped of the ADSes and a binary file compare showed the files were identical (without the ADSes, though). streams * showed only test.exe had ADSes. It didn't list newtest.exe because it only lists files with ADSes. In Powershell 3.0 (available in Windows 8+), you can use it to create, edit, and delete ADSes. Alas, Windows 7 only has Powershell 2.0. StreamArmor http://securityxploded.com/streamarmor.php That lets you find files with ADSes and also remove them. I have 3.0 installed but it's up to 4.1 now. The site says there is a portable version so you don't have to install to use. When I ran it against a file that streams.exe said had BDU and Zone.Identifier named ADSes, it only reported the Zone.Identifier. That's probably because the BDU stream is zero-bytes in length: nothing in there, just a stream used as a flag because of its name. I used StreamArmor to remove the Zone.Identifier stream and verified streams.exe showed it was gone. |
#29
|
|||
|
|||
Can't install software
Fokke Nauta wrote:
On 03/10/2017 17:00, Paul wrote: Fokke Nauta wrote: On 30/09/2017 21:20, Fokke Nauta wrote: Hi all, Running W7 Pro 64b. Today I tried to install a newer version of Backup4all. The installer started, then there's the window with the status bar of the installer. And there it stops. Nothing further happens And I need to use the task manager to kill the installlation process. I blamed the installer. Later on I tried to install the newest version of LibreOffice. Once again, the installer started, until the window with the installation status bar came up. And here it stopped again. Nothing further happens and I needed to use the task manager again. Now I blamed my pc. What the hell is wrong with it? Thanks beforehand. Fokke Hi guys, This is really weird. After I copied the installers (exe) from Backup4all and LibreOffice to the desktop, everything installed fine. They were on a different (internal) hard drive. How can this be? Fokke So it's a "trust" problem of some sort. Your downloaded files haven't had the block removed ? https://www.sevenforums.com/general-...ing-files.html streams -d filename.zip # streams.exe comes from sysinternals.com If you download filename.zip from the Internet, with your browser, an alternate stream is added to the data stream, to indicate "it came from an untrusted source". There are various recipes for removing that alternate stream, so it no long bears such a stamp. And the alternate stream, I would have expected it to be copied from volume to volume. You can compare the files that worked, versus the files that didn't work, for an alternate stream, and see if there is a correlation. Paul Ran streams64 on the Backup4all installation file (exe). But I can't run it as it was already installed (after I copied it onto the desktop). So - we'll never know. Don't feel like uninstalling and re-installing as I will loose all my settings. Fokke "Streams" should have an option to check for the presence of an alternate stream. The stream that blocks is "Zone.Identifier", shown here. There is some Powershell crap, to actually dump it to the screen. https://blogs.technet.microsoft.com/...reams-in-ntfs/ Paul |
#30
|
|||
|
|||
Can't install software
On 03/10/2017 22:41, Paul wrote:
Fokke Nauta wrote: On 03/10/2017 17:00, Paul wrote: Fokke Nauta wrote: On 30/09/2017 21:20, Fokke Nauta wrote: Hi all, Running W7 Pro 64b. Today I tried to install a newer version of Backup4all. The installer started, then there's the window with the status bar of the installer. And there it stops. Nothing further happens And I need to use the task manager to kill the installlation process. I blamed the installer. Later on I tried to install the newest version of LibreOffice. Once again, the installer started, until the window with the installation status bar came up. And here it stopped again. Nothing further happens and I needed to use the task manager again. Now I blamed my pc. What the hell is wrong with it? Thanks beforehand. Fokke Hi guys, This is really weird. After I copied the installers (exe) from Backup4all and LibreOffice to the desktop, everything installed fine. They were on a different (internal) hard drive. How can this be? Fokke So it's a "trust" problem of some sort. Your downloaded files haven't had the block removed ? https://www.sevenforums.com/general-...ing-files.html streams -d filename.zip # streams.exe comes from sysinternals.com If you download filename.zip from the Internet, with your browser, an alternate stream is added to the data stream, to indicate "it came from an untrusted source". There are various recipes for removing that alternate stream, so it no long bears such a stamp. And the alternate stream, I would have expected it to be copied from volume to volume. You can compare the files that worked, versus the files that didn't work, for an alternate stream, and see if there is a correlation. Paul Ran streams64 on the Backup4all installation file (exe). But I can't run it as it was already installed (after I copied it onto the desktop). So - we'll never know. Don't feel like uninstalling and re-installing as I will loose all my settings. Fokke "Streams" should have an option to check for the presence of an alternate stream. The stream that blocks is "Zone.Identifier", shown here. There is some Powershell crap, to actually dump it to the screen. https://blogs.technet.microsoft.com/...reams-in-ntfs/ Paul Interesting stuff. Streams64 didn't find anything, propably becouse I've been using Streems64 -d file before. It must have deleted the stream. Never realized this stuff. Fokke |
Thread Tools | |
Display Modes | Rate This Thread |
|
|