Re: Boot sequence?



Hi,
1. Just some clarity in terms. A "Service" is a application running in the
"Background as a PROCESS?"

2. It sounds like that a SERVICE can start in the boot up sequence of the
Operating System and not require a User/Administrator to login?

3. It also sounds like that a Service needs to be first installed at the
Administation level before it can operate?

Thank for your assistance,

MDW



"John Phillips" wrote:

> I suppose, but there's no bigger potential than an app which runs (and
> perhaps has no visible windows) after somebody logs in. In fact, it's
> probably less, because as Arkady pointed out, one needs to have
> administrator-level privileges in order to install/start/stop a service.
>
> Only a firewall can prevent applications from sending data to the network
> without your explicit concent. Using the XP firewall (and numerous
> 3rd-party software firewalls), you can explicitly grant and deny network
> access to applications (including services I believe). IIRC, the XP
> firewall starts up immediately after tcpip.sys.
>
>
> John
>
> "MDW" <MDW@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:4D16FD64-A0E0-485B-ABC5-E257EE0E59B5@xxxxxxxxxxxxxxxx
> > Hi,
> > So then does this make it a back door potential security exploit? If I
> > don't to login and can create a background process, what then is securing
> > the
> > Operating System for DOS, Malware or any other type of software illegally
> > transmitting a TCP/IP before login?
> >
> > "Mike" wrote:
> >
> >> A service can use TCP/IP calls without anyone having logged into the
> >> computer.
> >>
> >> "MDW" wrote:
> >>
> >> > Hi,
> >> > So then, one would need to login first so that a service (Windows App)
> >> > could
> >> > use TCP over IP? Could a background process generate a TCP/IP signal
> >> > without
> >> > logging into the computer?
> >> >
> >> > Thanks,
> >> >
> >> > MDW
> >> >
> >> > "Alexander Nickolov" wrote:
> >> >
> >> > > As soon as the TCP driver is up (tcpip.sys). E.g. you set that
> >> > > as a dependency of your service. Note that applications run
> >> > > after a user logs on, hence you may need a service.
> >> > >
> >> > > --
> >> > > =====================================
> >> > > Alexander Nickolov
> >> > > Microsoft MVP [VC], MCSD
> >> > > email: agnickolov@xxxxxxxx
> >> > > MVP VC FAQ: http://www.mvps.org/vcfaq
> >> > > =====================================
> >> > >
> >> > > "MDW" <MDW@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >> > > news:25686CA1-87C1-4DC1-8569-5830B53EDE57@xxxxxxxxxxxxxxxx
> >> > > > When a Microsoft Operating System is booting up. What is the
> >> > > > earliest
> >> > > > possible time a Dos/Command/GUI - Window's Application can send a
> >> > > > TCP/UDP/ICMP over IP? I am aware that DHCP does it on the boot
> >> > > > that
> >> > > > broadcast a non-routable signal, but what about a Dos/Command/GUI
> >> > > > Applications?
> >> > > >
> >> > > > Do I have to be login as a User before a GUI Windows application
> >> > > > can send
> >> > > > a
> >> > > > TCP/UDP/ICMP over IP or can it do it as a background process before
> >> > > > I
> >> > > > login?
> >> > > >
> >> > > > Do you know of any Microsoft documentation that also provides
> >> > > > additional
> >> > > > information on this subject. Any assistance is much appreciated!
> >> > > >
> >> > > > Thanks,
> >> > > >
> >> > > > MDW
> >> > >
> >> > >
> >> > >
>
>
>
.



Relevant Pages

  • Re: some kind of attack. i need some help here!
    ... i do have a firewall in place; and since they exploited the sshd, ... > Here is why you need a clean install ... > Get all the vendor updates to your distro. ... > Always login from the console, no su, telnet, ssh,.. ...
    (comp.os.linux.security)
  • Re: [Fedora] Seeing input on Securing the Linux system from intrusions and attacks.
    ... during initial setup phase, this firewall remains until updates are all ... That's true on XP Professional and on Server 2003... ... Server allows two concurrent logins; presumably one can login as a mere mortal and use RDP to connect as an administrator; I simply connect as an administrator from my Linux box. ...
    (Fedora)
  • Re: FTP Login flood
    ... I believe some smart router or firewall will have this kind of feature. ... They are still attempting to login, ... > they did succeed in doing until I allowed the Event Log to overwrite, ... > this is followed by the flood of login attepts from a different ...
    (microsoft.public.inetserver.iis.security)
  • Member Server Login Slow DMZ-Internal Subnet
    ... I had a requirement to place a member server on my DMZ and have it login to ... AD across the firewall. ... - 123 tcp ... - 137 udp ...
    (microsoft.public.win2000.security)
  • Re: Neither, buy a router.
    ... I don't use a "personal firewall" myself, ... personal firewalls with their routers, and it is not just a marketing ploy. ... > 1) Software firewalls utilize CPU cycles on the machine they run on. ...
    (comp.security.firewalls)

Quantcast