Help - Search - Members - Calendar
Full Version: DefenseWall and Outlook Attachments
Gladiator Security Forum > SoftSphere Technologies Support Forums > DefenseWall HIPS
Silver0066
I am running DefenseWall 2.40b and Outlook 2007 with VistaSP1

I received an email a couple of days ago, before installing DW. It has a .wmv attachment that is stopped cold by DefenseWall. I do not want to save it to the Desktop and run it as Trusted.

I have Outlook and Windows Media Player in the Untrusted list.

I did a NOD32 scan on it and it was okay and it ran just fine as Trusted from the Desktop.

I would like it to run as Untrusted right from Outlook and since Outlook and Windows Media Player are both on the Untrusted list, I do not understand why it will not run. I do get a pop up message stating that it can't open the My Pictures folder, which is on my local E: drive. This happens if I keep that folder in the Secured Files list or not.

Doe anyone know how I can get this accomplished?

Many thanks for any help,

Silver
Ilya Rabinovich
I need you to do following:
1. Clean up "Events log" sheet with "Delete all"-"Apply".
2. Run this attachment with Outlook untrusted.
3. without running more untriusted, find defensewall_log.log file, zip it and send to the support e-mail.
Silver0066
QUOTE (Ilya Rabinovich @ Apr 26 2008, 03:28 AM) *
I need you to do following:
1. Clean up "Events log" sheet with "Delete all"-"Apply".
2. Run this attachment with Outlook untrusted.
3. without running more untriusted, find defensewall_log.log file, zip it and send to the support e-mail.
Where is the DefenseWall log file that you mentioned? It is not in the DefenseWall Programs Files folder.

In addition, I cannot play a .wmv file from within IE that downloads to my Download Area on the Desktop.

I have am still looking for the log file until I get an answer as to its whereabouts.

Many thanks,

Silver
Ilya Rabinovich
DW's log file is within "Application Data" folder. I suggest you to use Windwos Explorer file search. Just run WE, push F3 button, enter "defensewall_log.log" without quotas and select "files and folders".
Silver0066
Ilya,

Here is the logfile. I will also send you one on playing .wmv files from IE.

Thanks for you help,

Silver
Silver0066
Ilya,

Here is the log file that I got when I tried to play a .wmv file from IE.

Thanks again,

Silver
Ilya Rabinovich
The problems I see here:
1. "Attempt to open protected file C:\Users\Bill\AppData\Local\Microsoft\Windows Mail\". Check your "secured files" settings.
2. But the true source of the problem could be this one "Attempt to overwrite file C:\Users\Bill\AppData\LocalLow\Microsoft\MF\mfrr1.html".
3. Not sure about this event too "Attempt to set new security descriptor for C:\Users\Bill\AppData\Local\Microsoft\Media Player\"

So, there are few things could be responsible for this. Silver0066, mail me to support- I need investigate it directly.
Silver0066
Ilya,

Okay, I will email you.

Thanks,

Silver
Ilya Rabinovich
See my back e-mail.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.