QuickTime Data Execution Prevention Alert

Started by zappaDPJ, Sep 10, 2009, 14:26:33

Previous topic - Next topic

0 Members and 2 Guests are viewing this topic.

zappaDPJ

I've just installed QuickTime V7.6.4 on Vista and after installation I got a DEP alert from Vista. I've seen this alert very rarely before but in all cases it was genuine and triggered by a virus. I'm not sure if it was the installation process or the subsequent autorun of QuickTime that triggered the alert but in any case I've removed all traces of it from my PC.

The installation files were from a genuine Apple download triggered by their software dialing home for updates. What I don't know is if this has happened because the download contains an embedded virus or if QuickTime is executing code from unauthorised system workspace.

I can't find any real references to this on google and I'm just wondering if anyone else running Vista has updated QuickTime today?
zap
--------------------

This post reflects my own views, opinions and experience, not those of IDNet.

somanyholes

Do you have dep enabled for all programs or just windows services? Can you get a md5/sha1 checksum of the file to compare?

Gary

Quote from: zappaDPJ on Sep 10, 2009, 14:26:33
I've just installed QuickTime V7.6.4 on Vista and after installation I got a DEP alert from Vista. I've seen this alert very rarely before but in all cases it was genuine and triggered by a virus. I'm not sure if it was the installation process or the subsequent autorun of QuickTime that triggered the alert but in any case I've removed all traces of it from my PC.

The installation files were from a genuine Apple download triggered by their software dialing home for updates. What I don't know is if this has happened because the download contains an embedded virus or if QuickTime is executing code from unauthorised system workspace.

I can't find any real references to this on google and I'm just wondering if anyone else running Vista has updated QuickTime today?
I had the same download last night and had no dep trigger, I did have one earlier in the year and after running chkdsk my file structure needed repair so that may have caused an issue with how the program was installing at the time, do a virus scan and run chckdsk to see if your drive has any issues and do what so said as well. I always leave Nods 32 v4 and Prevx 3 running when i install anyway just in case, and have had no issues so far doing it that way  :fingers: its best to make sure the files are clean depending on what you run to protect your system as some programs do affect driver installs.
Damned, if you do damned if you don't

zappaDPJ

I've ran a virus scan after removing the software and deleting the download. Everything appears to be in order.

Quote from: somanyholes on Sep 10, 2009, 14:35:16
Do you have dep enabled for all programs or just windows services? Can you get a md5/sha1 checksum of the file to compare?

Just Windows Services. Unfortunately I've removed all traces of the download so I can't compare.

It does seem that this might be an issue with Apple software because I have found users having similar problems updating iTunes and iPhone software.
zap
--------------------

This post reflects my own views, opinions and experience, not those of IDNet.

Rik

That's why I'm waiting a bit, Zap, I have no need for the new features, so I'll let them debug the thing first.
Rik
--------------------

This post reflects my own views, opinions and experience, not those of IDNet.

Gary

Odd how some have issues but many like myself have none whatsoever  :dunno:
Damned, if you do damned if you don't

Rik

Rik
--------------------

This post reflects my own views, opinions and experience, not those of IDNet.

Gary

Quote from: Rik on Sep 11, 2009, 09:11:56
'Twas ever thus, Gary. :)
I think the quicktime was a security update though Rik, although I confess I have no idea what the previous version was anymore  ;D http://www.theregister.co.uk/2009/09/11/apple_security_updates/

Edit: It WAS a security update to Quicktime :sigh: iTunes 9 works very well I must say
Damned, if you do damned if you don't

Rik

Don't ask me, I avoid it like the plague. :)
Rik
--------------------

This post reflects my own views, opinions and experience, not those of IDNet.

Gary

Damned, if you do damned if you don't

Sebby


Rik

Rik
--------------------

This post reflects my own views, opinions and experience, not those of IDNet.

Sebby


Rik

Rik
--------------------

This post reflects my own views, opinions and experience, not those of IDNet.

Sebby


Rik

Rik
--------------------

This post reflects my own views, opinions and experience, not those of IDNet.

Sebby

Isn't that a quote from that programme with Dale Winton? :P

Rik

I can safely say I wouldn't know, Seb. ;D
Rik
--------------------

This post reflects my own views, opinions and experience, not those of IDNet.

Sebby


Gary

Damned, if you do damned if you don't

Sebby