|
AnnieMacD,
It sounds to me as if the Systems Administrator may have enabled MIME Sniffing Safety which essentially causes Internet Explorer to inspect the first N-Bytes of the file and attempt to automatically determine the MIME type and disregard the file extension. This is generally desirable on a high-security network... where EvilHackerX wants you to download EvilPayload.txt but it is actually an executable... the MIME Sniffing Safety feature would read the first few bytes and see that it is actually an executable and correctly rename it to EvilPayload.txt.exe
Check those workstations by going into the group policy editor (gpedit.exe) and navigate to:
\\Administrative Templates\Windows Components\Internet Explorer\Security Features\MIME Sniffing Safety Feature
Check to see if disabling this feature fixes the issue you are describing.
Best Wishes,
-David Delaune
|
|
|
|
|
Thanks, I think this is what I was looking for. I'll try it out at the beginning of the week - hopefully that will do it.
It is an absolute certainty that there are no certainties. ~ Christopher Hitchens 1949-2011
|
|
|
|
|
AnnieMacD wrote: Thanks, I think this is what I was looking for.
Well let me know how it turns out. Keep in mind that even if the domain/workgroup policy is 'Not Configured' that the user may have enabled this feature in the browser itself. You can view this by opening Internet Explorer 'Internet Options' and navigating to the 'Security' tab and pressing the 'Custom Level' button... scroll through the settings until you find 'Enable MIME Sniffing'. It it possible that the users have enabled it here.
You could force the policy of 'Disabled' upon your subordinates through the group policy editor.
Btw... I am serious about letting me know if this was the cause of the problem. I am somewhat making an educated guess at what causes the issue you describe.
Best Wishes,
-David Delaune
|
|
|
|
|
David, I really appreciate your help/advice. I can't check my clients' machine until Monday but I still have one computer here with XP SP3 and IE7. It would appear that the option in IE7 is "Open files based on content, not file extension". I have mine set to 'enabled' and I don't have the problem. But I will set theirs to 'disable'.
BTW I assume you are working on Windows 7. Under XP (at least on my local machine), the Group Policy Editor does not have an Internet Explorer option under \\Administrative Templates\Windows Components.
Even if this doesn't work you have helped me a lot in that I wasn't aware of the MIME Sniffing Safety feature. Funny thing is my app does a similar thing with these crazy-named files that the users download - it opens them up and then acts on them depending on the first few characters. Trouble is, I have no interest in .TXT files!
I will most definitely let you know how it gets resolved.
It is an absolute certainty that there are no certainties. ~ Christopher Hitchens 1949-2011
|
|
|
|
|
AnnieMacD wrote: It would appear that the option in IE7 is "Open files based on content, not file extension".
I just checked and you are correct... on Windows XP this IE8 security feature is called 'Open Files based on content, not file extension'.
AnnieMacD wrote: BTW I assume you are working on Windows 7.
Yep, your psychic abilities are working very well. 
AnnieMacD wrote: Under XP (at least on my local machine), the Group Policy Editor does not have an Internet Explorer option under \\Administrative Templates\Windows Components.
Interesting... all 13 XP-Sp3 workstations here in my lab have \\Administrative Templates\Windows Components\Internet Explorer in the group policy editor. I guess the IE8 and IE9 installers adds this. I would suggest that you install:
Administrative Templates for Internet Explorer 7 for Windows[^]
I highly recommend that you upgrade all workstations under your control to IE8 or IE9.
Best Wishes,
-David Delaune
|
|
|
|
|
Thanks again, David, for your help. The Administrative Templates are for XP SP2 but I downloaded them anyway but made no difference - still not there.
I'm afraid I'm in the unfortunate situation of not having much influence on what my clients have on their machines. It took me a long time to convince the non-Win7 ones to upgrade to SP3 of XP - I'm developing in .NET 4 and the Client will not install on SP2. I only keep XP and IE7 for support purposes but can't have every combination!
Monday I'll change the "Open files based on content, not file extension" option and that may fix it, and I'll let you know if it works.
It is an absolute certainty that there are no certainties. ~ Christopher Hitchens 1949-2011
|
|
|
|
|
Dave, just a quick update.
Randor wrote: 'Open Files based on content, not file extension'.
This didn't appear to do anything, so, as a workaround, I added the extensions I knew about to the Registered File Types list. When they were downloading files, the default file type still came up as 'Text File' but it did not add the .TXT extension. This is not a totally satisfactory solution for a number of reasons not least of which I don't yet know all the extensions, so I'm getting calls to a) add the extension to the list and, b) remove the .TXT. However, I can do it programatically in my next update but that too is essentially burying my head in the sand!
What I don't understand is what determines whether there will be a problem or not. Only a handful of XP clients have the issue and I can't yet see anything that makes them different from the majority.
BTW I have no influence whatsoever as to what browser they are using 
It is an absolute certainty that there are no certainties. ~ Christopher Hitchens 1949-2011
|
|
|
|
|
|
When I built this beast in May, it was a screaming machine - Intel i7 CPU, 12 GB RAM, 1.5 TB SATA HDD. Within the past month, though, it's become sluggish and unresponsive. Both AdAware and MSE report a clean system - no nasty beasties lurking and stealing CPU cycles. Task Manager displays no active apps, less than 2% CPU activity for any process, 0% network capacity used. Performance monitoring reports that one CPU core is about 60% occupied, while the other 3 are idle, and no more than 20% of RAM is in use. Defrag reports 0% fragmentation on the HDD, not surprising since I have it set to defrag once a week. Ordinarily, with information like this, I'd declare the machine healthy, but the fact remains that it's doggy poo. Simply loading Solitaire, which used to start up in under one second, now takes 12 to 15 seconds to load. Navigating the web used to be an instantaneous process, but it now takes half a minute or so just to see a new URL. Once there, navigating the site is still extremely fast, but switching to a new domain again takes a long time. I purchased Registry Booster from Uniblue and ran that; it claimed to find 309 registry errors and fixed them. After rebooting the system it actually did run like the wind again for about two days, then it was back to crawling.
I've used up all the tools in my toolbox, and I'm out of ideas. Any suggestions?
Will Rogers never met me.
|
|
|
|
|
|
Thank you, Richard - I'll try these suggestions out, and if they help, I'll publish them, I can't be the only one experiencing this... 
Will Rogers never met me.
|
|
|
|
|
Roger Wright wrote: I've used up all the tools in my toolbox, and I'm out of ideas. Any suggestions?
Roger, are you running an anti-virus or other security tools? Many of them hook hundreds of kernelmode/usermode functions to 'double check' absolutely everything... opening files... memory access... and can cause a fast computer to become slow or mediocre.
You said that you have a 1.5TB SATA drive. Congratulations, however... it is always better to put the swap file on a drive other than the drive containing the operating system. With 12 GB RAM your swap file is going to be enormous... and despite what you might think... even with 12GB RAM the swap file will still be utilized.
I cannot think of much else... other than using a tool such as Trend Micro HijackThis[^] to check if you have too many browser helper objects. Another useful tool is Microsoft Autoruns[^] by the infamous Mark Russinovich and Bryce Cogswell. Autoruns will tell you absolutely everything running on your computer.
Best Wishes,
-David Delaune
|
|
|
|
|
Thanks, David!
Actually, the swap file was one of the first things I thought of, along with the possibility of having too large data clocks. I've been out of the computer repair business for several years,but two things used to be true - the default block size grows with the hard drive capacity, and once data has been stored, it's too late to split the drive into logical drives. If I'd partitioned the thing at first, I would have had smaller blocks, resulting in faster reads, and I'd be able to select a different drive for the swap file. I don't know if it's still true that I can't create a new logical drive without risking data loss or not, but if that's been improved and can be done safely, I'd certainly consider it!
The only tools I use are AdAware and MSE, and neither of them seems to be active; at least they don't show up as using any CPU cycles in the performance monitor. Brpowser Helper Objects are a possibility, though. I'll check that out.!
Will Rogers never met me.
|
|
|
|
|
Hi Roger,
I apologize for not responding to your post yesterday. Your comments left me scratching my head for several minutes so I decided to leave it be.
Some comments:
Roger Wright wrote: I've been out of the computer repair business for several years,but two things used to be true - the default block size grows with the hard drive capacity
I have never heard of a filesystem with 'block sizes' that automatically grow. Typically the cluster size is determined when you create the filesystem. The only thing I can think of that could potentially grow... would be the MFT on an NTFS partition.
Roger Wright wrote: I would have had smaller blocks, resulting in faster reads
Smaller cluster sizes essentially mean the drive head will potentially need to thrash around more... and gather more data. For example... if you save a 1MB file... on a filesystem with 1KB clusters... the drive head will need to gather 1024 blocks. If the filesystem was created with 4KB the drive head would only need to gather 256 blocks.
Larger cluster sizes usually result in faster data access... but will waste drive space. For example... If you save a 1KB file on a filesystem with 4KB cluster size.... there is 3KB wasted in the cluster.
With your 1.5TB drive I believe the default cluster size would be 4KB on NTFS.
Best Wishes,
-David Delaune
|
|
|
|
|
Randor wrote: default cluster size would be 4KB on NTFS.
There's a good piece of info... What I meant by "growing" was that, as HDD sizes got larger, so did the clusters assigned by Windows. I didn't know that it topped out at 4k, but assumed the trend would continue.
Will Rogers never met me.
|
|
|
|
|
Curious as to how large pagefile.sys has become? One thing I check with my customers right away are: Amount of cookies, temp file, IE temp files, recent documents, word temp, etc etc...
Cleaning these out and restarting it should free it up. Be carefull of word temp files, as they have saved my life a time or two with a wrongly deleted doc.
Are you running other browsers besides IE? I'm not aware of the correct terminology, but Windows 7 keeps a small file reference when "thumbnail view" is enabled. This can cause an amount of shite to accumulate.
Other things to check are a stalled Java or Adobe update. Some times they disappear from the taskbar notifications.
My favorite is quite brutish, but you could run a powershell command as administrator: Get-Process | Stop-Process
Be forewarned that it'll gather all processes and stop them, which will result in either a bluescreen memdump, or it'll restart windows prompting a repair sometimes. These will close out of ghosted services, or multiple svchost processes. I find it refreshing
Something worth reading, albeit it's invincible!
|
|
|
|
|
Roger, Did you ever solve this problem? I had a similar issue. Turns out IE was thrashing the disk. Its temp file location became confused. Reset back to defaults and it fixed it.
Common sense is admitting there is cause and effect and that you can exert some control over what you understand.
|
|
|
|
|
hello guys... If I am in wrong forum, please guide me to the right forum. I have this web site URL. If I open this web site in IE then it shows no security threats but if I open this web site in Firefox then it says This site can harm my computer. How can I know that whether it is secure or not? thnx
|
|
|
|
|
The only way of finding out may harm your computer.
But personally, if I arrive to a bridge that has a sign saying that the bridge is unsafe, I would look for an alternative route before trying to cross that bridge.
And just because the sign is gone from the other side, I wouldn't use it in just one direction.
|
|
|
|
|
overloaded,
I'm not exactly sure if this is what's happening - but it sounds as though you are visiting a website that uses SSL security. If that's the case, the likely cause of the security message in Firefox is because it doesn't have the SSL certificate listed in it's Trusted certificate store. Since Firefox does not use the certificate store that exists in Windows, the SSL certificate will need to be manually added in Firefox. Internet Explorer, on the other hand, uses Windows' certificate store to authenticate websites.
The reason for any SSL warning is one or more of the following:
1.) The certificate for the site has expired.
2.) The certification path cannot be completed or is not trusted all the way through.
3.) The certificate has been revoked by the issuer (same as 1, but for different reasons).
However, in this case it is the second reason. This leads me to believe that the site is safe, you just need to import the site's certificate into Firefox before Firefox can trust it.
SSL is SSL - to my knowledge there aren't different vendor implimentations. For that reason, if Internet Explorer trusts the site then it's a good bet that it is a trustworthy site. It's probably safe to import the certificate into Firefox and continue browsing.
-David
PS - If someone knows I'm wrong, I'm open for correction. I'd rather not be spreading false information around
|
|
|
|
|
Hi,
I am looking for the following device driver ENVY24HF.SYS
Would any know what Website I can get download this from as I hacve had all sorts of problems
Thanks
|
|
|
|
|
Try this driver Envy 24 Audio driver[^]
When I was a coder, we worked on algorithms. Today, we memorize APIs for countless libraries — those libraries have the algorithms - Eric Allman
|
|
|
|
|
Hi,
I've just set up Windows Server 2003 Standard as part of my networked computers. I created a shared folder for other PCs running XP. I granted full control of the shared folder to everyone. All networed computers are parts of the Workgroup; no domain.
Now I can remote connect to 2003; I also can see the shared folder as part of the networked places on each XP machine. However, I cannot open the shared folder - my access to the shared folder is denied. What am I missing?
Best,
Jun
|
|
|
|
|
You need to set both the rights for accessing the share via the network and the rights on the file system.
|
|
|
|
|
What do you mean by setting the rights via the network?
Best,
Jun
modified 22-Nov-11 10:52am.
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
