SP2 and .exe files

[Viper6]

Hi all

I installed SP2 now everytime i open an .exe file I get a message saying the publisher could not be verified. Are you sure you want to run the software?

This is really annoying any way to disable it?

[whitedragon]

I think it's in the Security Center somewhere...anyway, it's called Data Execution Protection (DEP). I know it can be adjusted, but I can't remember how to get to it...

[Herby]

I think it's in the Security Center somewhere...anyway, it's called Data Execution Protection (DEP). I know it can be adjusted, but I can't remember how to get to it...

585754475[/snapback]

You can disable DEP but you still get the warnings...

Disable Data Execution Prevention (DEP)

WARNING: Microsoft recommends that you do NOT disable DEP globally.

To do this would make your computer less secure.

In cases where DEP causes application failures, Microsoft strongly recommends that you contact the application vendor to determine if a DEP-compatible update is available.

Installing such an update is the preferred solution for application compatibility issues with DEP.

Disabling DEP system-wide using boot.ini

1. Click Start, and then click ControlPanel.

2. Under Pickacategory, click PerformanceandMaintenance.

3. Under or Pick a Control Panel icon, click System.

4. Click the Advanced tab, and in the Startup and Recovery area, click Settings.

5. In the SystemStartup area, click Edit.

6. In Notepad, click Edit and then click Find.

7. In the Findwhat field, type /noexecute and then click FindNext.

8. In the Find dialog box click Cancel.

9. Replace the policy_level (for example, "OptIn" default) with "AlwaysOff? (without the quotes).WARNINGb>: Be sure to enter the text carefully.

Note: Your boot.ini file switch should now read:

/noexecute=AlwaysOff

10.b> In Notepad, click File and then click Save.

11.b> Click OK to close StartupandRecovery.

12.b> Click OK to close SystemProperties and then restart your computer.

This setting does not provide any DEP coverage for any part of the system, regardless of hardware DEP support.

Verifying DEP is Disabledb>1.b> Click Start, and then click ControlPanel.

2.b> Under Pickacategory, click PerformanceandMaintenance.

3.b> Under or Pick a Control Panel icon, click System.

4.b> Click the Advanced tab.

5.b> In the Performance area, click Settings and then click DataExecutionPrevention.

6.b> Verify that the DEP settings are unavailable and then click OK to close PerformanceSettings.

7.b> Click OK to close SystemProperties then close PerformanceandMaintenance.

More info: http://support.microsoft.com/kb/875352

http://www.microsoft.com/technet/security/...p/depcnfxp.mspx

[Herby]

Found it! :D

Inside the attached zip are three reg files:

- Disable Digital Signature Checking for all files.reg

- Disable Digital Signature Checking for exe files.reg

- Enable Digital Signature Checking.reg (default)

Merge the reg file that you want to use and Restart your Computer.

Digital_Signature_Checking.zip

[Viper6]

Found it!  :D

Inside the attached zip are three reg files:

- Disable Digital Signature Checking for all files.reg

- Disable Digital Signature Checking for exe files.reg

- Enable Digital Signature Checking.reg (default)

Merge the reg file that you want to use and Restart your Computer.

585759948[/snapback]

thanks guys

also found this...

http://reviews.cnet.com/4520-10168_7-5543540-1.html?tag=nav

[JiveMasterT]

awesome information, this is exactly what i was looking for.

[Rablet]

Great, have been looking for this. Thanks a lot!

[Bold_Fortune]

Cool Reg Files.

I too bumped into that site with that information, too. I also followed the advice given there.

I was wondering, though, if after following the advice on that site, if it makes the "Default" reg file that Herby gave us invalid for me?

I mean, did my making those settings changes as prescribed on that site already make a couple of changes to the registry in the same locations Herby's reg files point to.

Herby's UNDO (Default) reg file looks like this:

Windows Registry Editor Version 5.00

;Enable Digital Signature Checking (Open File - Security Warning)

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download]

"CheckExeSignatures"="yes"

"RunInvalidSignatures"=dword:00000000

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations]

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments]

But my registry shows in that location:

"CheckExeSignatures"="no" already.

So did the settings I made according to that site already make this one change for me?

And if I choose to UNDO (set to default...at least back to how the registry entries appear for me before using Herby's reg files), should I change Herby's entry " CheckExeSignatures"="yes" to " CheckExeSignatures"="no"

(By the way, Herby, I think you're the cat's pajamas. You give a lot of great advice here at NeoWin.)

[Herby]

^^ Thanks! :happy:

"CheckExeSignatures"="yes" = the default value.

The changes as prescribed on that site change some of the same values as within the reg files.

[JRosenfeld]

For downloaded .exe (usually app installation files), to stop the are you sure you want to run this notice, right click on the file, click properties, click unblock; then when you double click on it it will just run.

[scoutysvt]

thx for this thread.. Now I found the solution to my problem ... now I could tell:

- Love SP2 :) , instead of "Hate this sh**" :crazy:

hehe

Good job ! :cool:

[Kier]

Sorry to drag this up again, I get the annoying Open File - Security Warning when trying to run an .bat file I use everyday. I can't open the .zip attached by Herby, corrupt or missing error, can someone email it to me or re attach it to this thread so I can get rid of this annoying message.

Thank you for your time.

K

[war]

Kier download a copy of winrar 3.51 and download it.

But anyways just in case:

http://s55.yousendit.com/d.aspx?id=2AT046N...8C0GOWYRUQ6I1FG

[Kier]

Thanks war, saved me messing around and creating digital signatures for my work. :D