Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to check if a program is working?

27 Oct 2014   #21
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Opera Launcher.exe?

I know little of the desktop version of Opera. Is it possible to launch it via opera.exe or does Launcher.exe need to be used?

I've just tried setting UAC to maximum and everything still works so that's not the issue.


My System SpecsSystem Spec
.
27 Oct 2014   #22
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Malware bypass UAC - is it possible?

Quote   Quote: Originally Posted by Tookeri View Post
That article is written for people who have Windows XP. For Vista and later there's UAC. With UAC enabled it will disable administrator permissions for all programs you start. If the program requires to be run as admin then you'll get an UAC prompt. So if you never get an UAC prompt it means the programs is running as standard user. If you get a UAC prompt and you answer Yes, only then will the program have admin rights.

Think of it like this: UAC enabled = admin rights disabled (until UAC prompts and you answer Yes)

A browser shouldn't run as admin at all. If a browser requires that, then I wouldn't use it.

To be clear, I'm talking about an account type of administrator. Not the hidden/built-in administrator account.
Point taken but as far as I can work out if I can run browsers on the "least privilege" principle when using an admin level account then it seems like a good idea. Here's a more recent example of a trojan that can apparently attempt to bypass UAC.

Avast blog Win32/64:Blackbeard & Pigeon: Stealthiness techniques in 64-bit Windows, Part 2

I don't pretend to understand the entire article but do understand that browsers and browser plugins may have undisclosed weaknesses at some point.

I'm not running any browser as admin (other than briefly for test purposes). As far as I can work out if malware gains access via a browser it's granted the same access rights as the current user. (Admin Level in my case). In theory that level of access if malware is ever encountered is reduced to Standard User level.

Okay so maybe it will never happen. But what harm is there in attempting to boost security? I accept that maybe this approach is overkill!
My System SpecsSystem Spec
27 Oct 2014   #23
lehnerus2000

W7 Ultimate SP1, LM18 MATE, W10IP VM, W10 Home, #All 64 bit
 
 

You could try adapting/converting these Firefox instructions:
Quote:
Enable Protected Mode for Firefox
=================================

You can enable Protected Mode for Firefox with these steps:

1 - In order to change the Integrity Level for Firefox, execute:
icacls firefox.exe /setintegritylevel low
2 - You also have to change this for some folders in order to make them writable for Firefox by executing
icacls [foldername] /setintegritylevel (oi) (ci) low
Do this for the following folders:
  • C:\Users\Name\AppData\Local\Mozilla\Firefox
  • C:\Users\Name\AppData\Roaming\Mozilla\Firefox
  • C:\Users\Name\AppData\Local\Temp
3 - Create a special download folder and apply step 2 for this folder.
You should definitely create a backup HDD/SSD image before messing around with "icacls".

I can't vouch for these instructions; use at your own risk.
My System SpecsSystem Spec
.

28 Oct 2014   #24
UsernameIssues

W7 Pro SP1 64bit
 
 

Quote   Quote: Originally Posted by Callender View Post
I know little of the desktop version of Opera. Is it possible to launch it via opera.exe or does Launcher.exe need to be used?

I've just tried setting UAC to maximum and everything still works so that's not the issue.
I don't use Opera. I just installed it in a VM for this thread. I did not see any thing about a launcher. That would seem to be a portable app thing.
My System SpecsSystem Spec
28 Oct 2014   #25
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Opera Launcher

Quote   Quote: Originally Posted by UsernameIssues View Post
Quote   Quote: Originally Posted by Callender View Post
I know little of the desktop version of Opera. Is it possible to launch it via opera.exe or does Launcher.exe need to be used?

I've just tried setting UAC to maximum and everything still works so that's not the issue.
I don't use Opera. I just installed it in a VM for this thread. I did not see any thing about a launcher. That would seem to be a portable app thing.
I spotted the command line in your command prompt window in your attachment here:

http://www.sevenforums.com/attachmen...ing-opera3.png

I thought it looked wrong!
My System SpecsSystem Spec
28 Oct 2014   #26
UsernameIssues

W7 Pro SP1 64bit
 
 

Wow! How unobservant of me. I copy/pasted that from the shortcut without ever reading it.

But the installed version still crashes when using this:

How to check if a program is working?-opera-wo-launcher.png

It is not a big deal. You have it working for you and this thread now clarifies that we are not talking about the installed version.

You might want to spend more time understanding the info in post #3. It looks like StripMyRights strips away some of the protections put in place by the OS...

Privilege Constants (Windows)

...or maybe I'm just reading MSDN wrong.


My System SpecsSystem Spec
28 Oct 2014   #27
Tookeri

Windows 7 Pro 32
 
 

Quote   Quote: Originally Posted by Callender View Post
Point taken but as far as I can work out if I can run browsers on the "least privilege" principle when using an admin level account then it seems like a good idea. Here's a more recent example of a trojan that can apparently attempt to bypass UAC.

Avast blog Win32/64:Blackbeard & Pigeon: Stealthiness techniques in 64-bit Windows, Part 2
I don't fully understand the article either, it could've been more clear, but I think if you have UAC set to maximum and your OS is updated so there's no known vulnerability to exploit, you should be safe. The "problem" with Windows 7 is that the default UAC level is not the maximum one.

Here's a quote from the author of DropMyRights after Vista was released that I think explains this:
Quote:
It's been a long time since I looked at DropMyRights, a little tool I wrote forever ago to lower a user's privilege level on versions of Windows prior to Windows Vista.
...
Remember, this tool is not needed on Windows Vista or Windows Server 2008, because by default users are not administrators.
from Update on DropMyRights - Michael Howard's Web Log - Site Home - MSDN Blogs
My System SpecsSystem Spec
28 Oct 2014   #28
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
UAC Maximum Level

Quote   Quote: Originally Posted by Tookeri View Post
I don't fully understand the article either, it could've been more clear, but I think if you have UAC set to maximum and your OS is updated so there's no known vulnerability to exploit, you should be safe. The "problem" with Windows 7 is that the default UAC level is not the maximum one.
Thanks! I hadn't noticed until yesterday that UAC was set to default rather than maximum.
My System SpecsSystem Spec
28 Oct 2014   #29
LMiller7

Windows 7 Pro 64 bit
 
 

Going to the screenshots in post #3:
There are no practical differences between the two. Just different ways of accomplishing essentially the same thing. In the first image a security token is used with some specific rights disabled. In the second image a security token was created that never had these rights.

DropMyRights and StripMyRights were designed for XP that didn't have UAC and an Admin account had elevated rights by default. This is not good for security. These programs create a new security token with limited rights and uses it to run the specified program.

In Vista and later with UAC enabled the default security token has the rights equivalent to that of a limited user. In this case using DropMyRights or StripMyRights does nothing useful. UAC provides better security because the limited token is used by default for all programs. DropMyRights and StripMyRights only work in the specific cases where they have been configured.

Edit: When UAC is disabled you have essentially the same situation as XP. In this case DropMyRights or StripMyRights can be used to advantage. I have done this in Windows 7.
My System SpecsSystem Spec
28 Oct 2014   #30
Tookeri

Windows 7 Pro 32
 
 

That's what I've been trying to say, thanks! This was perhaps better explained
My System SpecsSystem Spec
Reply

 How to check if a program is working?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
How do i check if my over clocking is working
tital says it all so i have run msi command center and run oc engine in it but i do not know how to check if it is working i did try checking my system but it says it is still at 3.40ghz ? do i need to change some bois settings any help is appreciated thanks
PC Custom Builds and Overclocking
Check for Program Updates
Does Win.7 have a built in function that checks the system for software program updates?
Software
How do I get Win7 to check if program is running and if not start it?
I am running Win 7 64 bit Ultimate. I am trying to figure out a way to check if a program is currently running and if not to automatically start it. I have a program that has been shutting off randomly on me that I want to run 24/7 and it always seems to happen just after I leave for work. As a...
General Discussion
Free program to check for software updates
Hi, Can you recommend a free on demand scanner to identify software on my PC that is outdated...? Even better if it also could update it. Thanks, BBDS
Software
Program check IP & computer description
Dear Everyone This is my first post at this board, Nice to meet everyone. Today I like to present my program for check IP & computer description. I learn and try to encode this program from Autoit for my convenience when remote user computer at my work site.
Network & Sharing
program enables Use Check Boxes for all users
Hello All, I have a program that when installed on a Win 7 PC enables "Use check boxes to select items" for all users. The admin logon is unaffected, however any new user that logs on, sure enough it's enabled for them. So I'm assuming this is effecting the default user profile or something. (I...
Software


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 07:17.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App