PC Review


Reply
Thread Tools Rate Thread

Re: Can an EXE bypass user confirmation while invoking another EXE?

 
 
Kromag
Guest
Posts: n/a
 
      22nd Jun 2009
One way is by subverting. Look up Patch Guard. But I would not do this if I
were you.
You could seriously harm your users as well as your own security.

There's a whitepaper written up on Google code about this and many other
places.

"kskarun" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>
> I have 2 applications written in Delphi. The first exe (with a user
> interface) calls another using ShellExecuteEx(), which runs as a
> background process.
>
> When the first exe invokes the second, one of these two things happen:
>
> 1. When I log in as an admin, a UAC dialog comes up with the
> Allow/Cancel prompts. Selecting Allow continues the execution.
>
> 2. If I log in as non-admin, an admin credentials dialog box is
> displayed, and I need to enter the admin username/password to continue.
>
> On both occasions, I want the second exe to run without any user
> intervention. How can I make it possible?
>
> And yes, I tried applying the ElevateCreateProcess mitigation as
> suggested by SUA tool, but it doesn't seem to work - the behavior is as
> before.
>
> Thanks for your help.
>
>
> --
> kskarun
>
> __________ Information from ESET Smart Security, version of virus
> signature database 4176 (20090622) __________
>
> The message was checked by ESET Smart Security.
>
> http://www.eset.com
>
>
>


__________ Information from ESET Smart Security, version of virus signature database 4176 (20090622) __________

The message was checked by ESET Smart Security.

http://www.eset.com



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Bypass SHIFt bypass mrgrine@gmail.com Microsoft Access Form Coding 3 10th Mar 2008 09:25 PM
Any way to bypass the purge confirmation with IMAP accts? =?Utf-8?B?SUlJQnJhZElJSQ==?= Microsoft Outlook Installation 1 2nd Jan 2006 02:01 AM
How to bypass the Registry Editor modification confirmation dialog box? Mark Zhang Microsoft Windows 2000 CMD Promt 2 17th Oct 2003 07:33 PM
Confirmation Page stops working - where is "server's applicaitonlog" usually stored and any idea why confirmation page died? A.Ron Carmichael Microsoft Frontpage 1 2nd Sep 2003 10:37 AM
Confirmation Fields not appearing on confirmation form Rick Budde Microsoft Frontpage 1 13th Jul 2003 02:49 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 03:18 PM.