full-disclosure - Oddness with the MS antispyware beta

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue Apr 12 14:46:36 2005
From: michealespinola at gmail.com (Micheal Espinola Jr)
Subject: Oddness with the MS antispyware beta

As far as my testing is concerned, this is all well and normal (if you want 
to call it that). However, I'd be interested if Sunbelt's enterprise product 
does the same thing.
 To add to this, since this is a user-accessible/controllable window (even 
if off screen) - it seems easy enough for another app to be able to control 
it, and disable MSAS.

 On Apr 12, 2005 8:45 AM, Jay Libove <libove@...ines.org> wrote: 
> 
> I see that extra MS antispyware window (systrayhide, systrayshow, ...)
> also on a two-monitor workstation using nVidia's desktop manager. A
> similar thing happens with an ancient pop-up stopper I use (AKiller). If
> you're seeing it on a laptop, it's probably because the laptop has a
> second monitor capability and is running the advanced window management
> functionality to know about the second monitor.
> 
> Both are just artifacts of either poorly written software (Giant
> Anti-spyware, my little old AKiller program) or poorly written window
> managers (or both) which result in the "don't show this window" bit being
> ignored when under advanced window management.
> 
> They're annoying, but not an indication of anything nefarious.
> 
> -Jay Libove, CISSP
> Atlanta, GA, US
> 
> > Message: 9
> > Date: Mon, 11 Apr 2005 23:04:38 -0600
> > From: Scott Edwards <supadupa@...il.com>
> > Subject: [Full-disclosure] Re: Oddness with the MS antispyware beta
> > To: Gregh <chows@...mail.com.au>
> > Cc: full-disclosure@...ts.grok.org.uk
> > Message-ID: <a53adc460504112204722746f9@...l.gmail.com>
> > Content-Type: text/plain; charset=ISO-8859-1
> >
> > Are you able to isolate it when running a selective startup via
> > msconfig? Also, does something like winspy give you any clues?
> >
> >
> > On 4/11/05, Gregh <chows@...mail.com.au> wrote:
> >>
> >> ----- Original Message -----
> >> From: "MN Vasquez" <mnv@...mni.princeton.edu>
> >> To: <full-disclosure@...ts.grok.org.uk>
> >> Sent: Tuesday, April 12, 2005 4:02 AM
> >> Subject: [Full-disclosure] Oddness with the MS antispyware beta
> >>
> >>
> >>> On the 2nd monitor I found a program window "hiding". Basically, in a
> >> very odd position -- on a typically non-displayed
> >>> portion of the desktop, which I only found by configuring multiple
> >> monitors. It seems the programmers are "hiding" a
> >>> window, which I have attached as a jpg. For those that don't want to 
> open
> >> an attachment:
> >>
> >>> there are 5 buttons: systrayhide, systrayshow, systraynormal,
> >> systrascanning, systrayupdating.
> >>
> >>
> >> Sorry old son but it isn't hidden in any nasty or bug kind of way. I 
> have 2
> >> XPSP2 machines, one is a laptop and the other a desktop. For some 
> reason
> >> that window doesn't show when Antispyware is started on the desktop 
> with a
> >> normal CRT monitor but it does on the laptop every singles time. 
> Normally it
> >> "hides" as in turns invisible after the prog has completed starting.
> >>
> >> Greg.
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 



-- 
ME2

my home: <http://www.santeriasys.net/>
my photos: <http://mespinola.blogspot.com/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050412/36356da8/attachment.html