controler
join:2003-11-02
| ProcessGuard
Hello
I am seeing something wierd with PG. I and one other user has verified this. I saw it on my XP Pro desktop, then today installed PG on my laptop and see it there also.
I can't get a reply from DCS and not many are even trying it out over at Wilders.
I was wondering sif some of the users here could give it a try?
All you do is follow these steps.
1. go to »www.kkln.com/
2. click on the tab On The Loon
3. Click on Melanie
4. When the page loads, right click on her picture.
5. Click save as to desktop.
6. Open the file with Windows picture and fax viewer.
7. If Pg doesn't peep at first, close the picture and try it again. Sometimes takes twice.
8. Open the picture and click the magnify button.
On mine and one other posters system, PG alerts saying explorer.exe is trying to install service/Driver
controler |
|
Clone 171162
join:2005-08-03 | Chalk up one more verification. I've been getting this PG alert with literally dozens of jpgs, ever since upgrading to V3.4 final. Its probably a bug? |
|
controler
join:2003-11-02
| reply to controler
We need to get more users verify this or nothing will be done.
What I wonder about it how does PG tag these files? How does it know one from another? It isn't the size, I tried that. I even resized the dang things and still alerts.
I have a ton of JPG's myself and PG only alerts on a few.
Can get no answer what so ever from DCS. Wrote them pri and in their so called forum.
Love the program, Hate their support now.
con |
|
Nogard is me
Premium
join:2004-01-08
Columbus, OH | reply to controler
I tried for about 5 minutes and I didn't get a pop up saying anything about explorer tring to install a driver. |
|
controler
join:2003-11-02 | reply to controler
Did you have exe protection enabled,Plus all 4 globals checked?
con |
|
controler
join:2003-11-02 | reply to controler
And you have BoClean installed? |
|
controler
join:2003-11-02 | reply to controler
Chickens |
|
norwegian
Premium
join:2005-02-15
Outback | I have had it uninstalled, but willing to try installing the free version, if needed. Chicken indeed  |
|
norwegian
Premium
join:2005-02-15
Outback
 ·WestNet Broadband
| reply to controler
Got nothing, other than a picture, opening with various image tools. PG though when running paint(windows) asked permission for paint program, and svchost as well after, but otherwise no other warnings. All the time I ran PG, never saw the service/driver request.
Maybe I missed something ? |
|
controler
join:2003-11-02 | reply to controler
thanks norweigen
You have to be running the latest version, everything ticked and has to be either Melanie or Nate form the website. Running XP |
|
norwegian
Premium
join:2005-02-15
Outback | I didn't click Nate, but clicked on Melanies file a dozen or so times, and opened it with various imaging software, but nothing unusual. Reboot and Watcher didn't record any changes in file structure either. |
|
controler
join:2003-11-02 | reply to controler
nick r over at Wilders was able to figure out you need the print spooler running before PG will alert.
I dissable the spooler with task manager and I do not get an alert either. |
|
norwegian
Premium
join:2005-02-15
Outback
·WestNet Broadband
| Ah it was just setting up the printer for a hard copy, and PG was alerting to it. Love the software, but if I stay with KIS, it will not be on my machines. It was my first layer of defense for ages. 
Kaspersky are advancing too much  |
|
controler
join:2003-11-02 | reply to controler
yes all you need is the spooler running in task manager.
It still does not answer why Pg alerts only on those files and not others on my drive. Has to be a way PG tags them.
controler |
|
Nogard is me
Premium
join:2004-01-08
Columbus, OH | reply to controler
I don't have BoClean running, I do however have PG running on all cylinders. I didn't get the message at all. I have Print Spoiler running also. |
|
Irondell
@pipex.com | reply to controler
I have noticed that if you 'clean' JPGs with this »www.snapfiles.com/get/jpgcleaner.html ProcessGuard doesn't give out the usual alert. Why is that I wonder?? |
|
SpannerITWks
Premium
join:2005-04-22
| reply to controler
Irondell
In a word, MetaData ! Normally hidden extra data within the file, sometimes can be used for dodgy purposes.
Spanner
--
I Only Know What I Know, But I'm Learning all The Time - Stay Safe - Spanner intheWorks
/SpannerITWks |
|
controler
join:2003-11-02 | reply to controler
Spanner
I never got a reply from DCS on this and most likely never will. It only happens with spoolsv.exe running.
So you say it is the meta feature huh that they use to tag files? |
|
SpannerITWks
Premium
join:2005-04-22
| controler
Hey well i'm NO expert you All know that, but when i saw Irondell's post about the 'clean' JPGs, a bell immediately started ringing. Yeah, the bells the bells lol.
Anyways as cleaning image files " can " remove ALL MetaData, i'm " presuming " there " may " be a connection there. Quite why spoolsv.exe needs to be running @ the same time i'm not 100% sure.
But as i was just writing the above, the bells started again lol. Didn't the WMF exploit fiasco have some connection with spoolsv.exe, or was it the TextCreateRange exploit, or maybe both ?
Possibly someone can verify this, or otherwise !
Spanner
--
I Only Know What I Know, But I'm Learning all The Time - Stay Safe - Spanner intheWorks
/SpannerITWks |
|
controler
join:2003-11-02
| reply to controler
Spanner
I hear that but have that hole sealed as far as MS knows.
It happens on any install I have. Doesn't matter which computer. When I see it on a fresh install on a new computer I wonder. Support will not even make a peep on this one.
If there is hidden meta stuff attached to those JPGs, The site don't know about it I am sure. I know Melanie personaly.
con |
|
