Circumventing SRP and AppLocker by design, with LoadLibraryEx

Thanks as well. Can't believe I forgot to add it to the list.

 

Planned hotfix release is November 3 - see http://www.mountknowledge.nl/2011/0...-applocker-using-vb-script-in-word-and-excel/.

 

Thanks for the update Mr. Brian.

 

Good news, thanks MrBrian

 

Good news!
Just to clarify, that Hotfix will be included in Windows Update?
thanks

Edit
Just did the simple test described here: http://www.mountknowledge.nl/2011/0...-applocker-using-vb-script-in-word-and-excel/

Althought the .exe is not allowed by SRP (not whitelisted in parental controls), it was able to run!

 

It makes us want to slap whoever thought of that "design", right? I wonder if whoever came with that idea was eating some magic mushrooms.

 

Lol! Thats right!

This time i repeated the process with a .exe that requires admin. privileges and it was unable to run. I got the message:
"CreateProcessAsUser failed: 740"

 

One more day, folks! Just on more day!!!

-edit-

I suppose I was wrong... It's past half day of 04-11-2011, and still nothing. I wonder if it's still day 3 in US?

I wonder if this is going to happen at all, or if they just prefer to let the "backdoor" be? lol

 

Is this damn thing for real or simply a joke? Are you familiar with any official information from Microsoft stating they're going to fix it?

It's already day 5, and I'm sure the U.S is only like eight hours behind, so... is this actually for real or was it simply some stupid joke?

 

I'm also waiting...

 

It seems KB370118 was just an internal fix number. It has just been released as KB2532445 at http://support.microsoft.com/kb/2532445. The hotfix is available upon request (see link at top of the article).

This fix almost got delayed again, because of a conflict with another hotfix to the kernel. Luckily KB2532445 drew the shortest straw and was released first.

 

Thanks RichieB2B

Will give the hotfix a go once I've bedded down the latest round of Windows Updates.

Cheers.

 

Thanks...

Did any systems blow up already after applying the hotfix?

 

Come on m00nbl00d, I'd have thought you'd be on this like bees to honey, you were so impatiently waiting for it

 

I won't be checking my e-mail any time soon. I'm lazy to switch user accounts, right now. I'm on my restricted user account to access the web, in general. I have another user account for accessing my e-mail.

So, did you blow up you computer?

 

Too chicken to try it on the host machine yet Will try the vm first and let you know tomorrow after I run it for a while.

 

installed on the vm last night, no issues earlier today, so I installed on the host and all is fine so far, althtough no guarantees something won't eventually surface. You might want to image your system before applying the patch if that's what you're into

 

Thanks wat0114 for being the crash test dummy

 

LOL! you're welcome

 

Just looked at this thread again lol. About time Microsoft released it. Time to install. Good to hear you didn't have any issues wat.

 

So, you're going to be the second lab rat... We need a third one...

 

Why thank you, m00nbl00d!

Still waiting with trepidation, but so far so good

 

Yep So far the hotfix is working without issues.

 

Working fine here either.

 

Does anyone know if this has been released through Windows Update ?