Jump to content

Sampei.Nihira

Member
  • Posts

    1,277
  • Joined

  • Last visited

  • Days Won

    30
  • Donations

    0.00 USD 
  • Country

    Italy

Everything posted by Sampei.Nihira

  1. I use very light software: Bandizip, Softmaker FreeOffice, Potplayer, ImgBurn, HonilStylepix Portable, SumatraPDF Portable, IobitUnistaller Portable, Sumo Portable.
  2. There is a free version of MBAE. Crystal Anti-Exploit is very poor. Even HPA3 is good against CVE-2015-2545.
  3. Other explanation: http://www.wilderssecurity.com/threads/i-e-8-and-the-web-pages-htpps.383772/#post-2564099
  4. https://support.globalsign.com/customer/portal/articles/1499561-sha-256-compatibility I have: XP Home SP3 x86 (Trick POSReady2009)
  5. Not all anti-exploit are equal. Best with XP are MBAE and HPA3.
  6. With Chrome and I.E.11..........ecc...... on Windows 7 it is OK: OS old is the first suspect. For me. ______________________ @ Dibya Authorizes the certificate on Firefox.
  7. Some Web pages open correctly: Others do not: Why? TH.
  8. Even with HPA3 you can uninstall all of the .NET Framework. With EMET 4.1U1 you need at least the .NET 4
  9. It's possible. But it is necessary competence to disable the mitigations of 2 anti exploits and get a good symbiotic job. EMET 4.1U1 is very poor on Exploit Test Tool (HPA3): http://www.surfright.nl/en/downloads/
  10. Good choice: http://casual-scrutiny.blogspot.in/2016/02/cve-2015-2545-itw-emet-evasion.html
  11. Protection for I.E. scripting on MBAE: An example of testing with Exploit Test Tool (HPA3): With MBAE you can uninstall all of the .NET Framework.
  12. My security setup: XP Home SP3 Trick POSReady 2009 Windows Firewall PsExec Black Viper's List Norton DNS MBAE Premium Firefox - uBlock Origin + Noscript + Toggle Referer + HTTPS Everywhere. No Java Installed No Flash I.E.8 No Silverlight Installed No NET Installed Nothing malwares !!
  13. The link below: hxxps://www.malwaredomainlist.com/ still it has problems certificates
  14. @ Dave-H Anti Exploits below are the best performing of EMET4.1U1: https://it.malwarebytes.org/antiexploit/ http://www.surfright.nl/en/alert Do a test with the Exploit Test Tool: http://www.surfright.nl/en/downloads/ p.s. Advantage that works without need of NET
  15. I uninstalled all NET. Before I had only installed NET 4. Also because I had installed EMET 4.1U1. I replaced EMET with MBAE. NET is no longer needed.
  16. Hi to all. You have installed the KB3020338? TH.
  17. AFAIK there shouldn't be any sequence problems. OS itself and Windows installer should take care of this automatically. About KB2938780 (NET 4 ): This update is questionable. On the one hand the update description says "Description of the security update for the .NET Framework 4 on Windows 7 and Windows Server 2008 R2: May 13, 2014" on the other hand we can read the following "This update is for the Microsoft .NET Framework to disable RC4 in Transport Layer Security (TLS) through the modification of the system registry. Use of RC4 in TLS could allow an attacker to perform man-in-the-middle attacks and recover plaintext from encrypted sessions.". TLS 1.0 is definitely supported on Windows XP. Currently, due to vulnerabilities in SSL 2.0/3.0, TLS remains the last secure protocol in XP. Moreover Supported Operating System list says "Windows 7, Windows XP, Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Vista" (if I remember correctly Windows XP was listed at the release time of this update). So - Why "security update for the .NET Framework 4 on Windows 7 and Windows Server 2008 R2" can be successfully installed on XP, Server 2003, Vista and Server 2008? Strange, isn't it? This update has been successfully installed on my system, zero problems so far. Decide for yourself, is it worth to install it or not. Which ones? Sorry. I made a mistake with update KB2894843. This morning I was very tired.
  18. The list also there are 2 KBXXXXXX installed in 2013. Better to leave only the .NET 4 installed.
  19. KB2938780 (NET 4 ) should not be installed: https://support.microsoft.com/en-us/kb/2938780 It is not for Windows Server 2003.
  20. I installed KB3037577 (.NET 2.0 SP2) and KB3037578 (.NET 4.0). Up to this point I have not noticed any problems.KB3037578 replaces KB2901110V2 installed in February 2014:https://support.microsoft.com/en-us/kb/3037578 This is the situation on my pc.
  21. @Egrabrych You have installed the update KB3037578 (NDP40-KB3037578-x86.exe): https://www.microsoft.com/en-us/download/details.aspx?id=46532 No problem?
  22. Hi to all. You have also installed the optional update KB3020338? TH.
×
×
  • Create New...