Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [Full-disclosure] abnormal behavior Gmail logon |
|---|---|
| Date: | Tue, 30 May 2006 21:33:29 +0200 |
Take a look at: HKEY_CURRENT_USER\Software\Classes\.htm You will see "FirefoxHTML" **if firefox is your default browser**. The server is just sending a html file, which, according to the registry of the client machine, has to be rendered by "firefox.exe" (HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\command). The guy installed firefox, then made it the default browser, and then he uninstalled firefox. But the registry setting is there. As far as I can see there is nothing bad here but the incorrect uninstall process of Firefox. Regards. ------------------------------------------------------------------ This e-mail and the documents attached are confidential and intended solely for the addressee; it may also be privileged. If you receive this e-mail in error, please notify the sender immediately and destroy it. As its integrity cannot be secured on the Internet, the Atos Origin group liability cannot be triggered for the message content. Although the sender endeavours to maintain a computer virus-free network, the sender does not warrant that this transmission is virus-free and will not be liable for any damages resulting from any virus transmitted. Este mensaje y los ficheros adjuntos pueden contener informacion confidencial destinada solamente a la(s) persona(s) mencionadas anteriormente. Pueden estar protegidos por secreto profesional Si usted recibe este correo electronico por error, gracias de informar inmediatamente al remitente y destruir el mensaje. Al no estar asegurada la integridad de este mensaje sobre la red, Atos Origin no se hace responsable por su contenido. Su contenido no constituye ningun compromiso para el grupo Atos Origin, salvo ratificacion escrita por ambas partes. Aunque se esfuerza al maximo por mantener su red libre de virus, el emisor no puede garantizar nada al respecto y no sera responsable de cualesquiera danos que puedan resultar de una transmision de virus ------------------------------------------------------------------
On Tue, 30 May 2006 20:22:59 +0200, Oscar Fajardo Sanchez said:
"FIREFOXHTML" is the *filetype*, the file name is "loading.html".
So Internet Explorer now is trying to open the html file whith the program firefox.exe, which is not there. So IE prompts the user for action.
Yes yes and all that. The point is - why did Gmail (presumably) look at the User-Agent: string that was sent, and serve up a Firefox file rather than the IE it probably should have? IE is Doing The Right Thing by asking. Gmail is misbehaving by serving up something that IE feels the need to ask the user about. *THAT* is the odd behavior.
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
| Previous by Date: | Re: [Full-disclosure] abnormal behavior Gmail logon, Valdis . Kletnieks |
|---|---|
| Next by Date: | Re: [Full-disclosure] abnormal behavior Gmail logon, Valdis . Kletnieks |
| Previous by Thread: | Re: [Full-disclosure] abnormal behavior Gmail logon, Valdis . Kletnieks |
| Next by Thread: | Re: [Full-disclosure] abnormal behavior Gmail logon, Valdis . Kletnieks |
| Indexes: | [Date] [Thread] [Top] [All Lists] |