RE: [BLACKBOX] Windows 7

From: null <">
Date: Mon, 06 Aug 2012 15:22:54 +0000

Hi Bob,
 
hmm, we are migrated to Windows 7 (with Applocker blocking all applications, which
are not explicitely allowed, i.e. have not been explicitely authorized by having been
fed into the group policy editor, i.e.,
 
gpedit ->
    Console Root->Local Computer Policy
->Computer Configuration
              ->Windows Settings
                ->Security settings
                    ->Application Control Policies
                        ->Applocker
                           ->Executable Rules
 
Right Click on Executable Rules and select

    Create New Rule -> File Hash -> browse to BlackBox.exe

Here BlackBox fails awfully by yielding an exception message box saying:
 
   " is not a valid Win32 application (Exception from HRESULT: 0x800700C1)"
 
Ok. Digging heavily into the PE format and with some help from the NET
(see https://code.google.com/p/corkami/wiki/PE#Optional_Header)
I found out that AppLocker checks for whatever reason the Linker Version.
 
During updating DevLinker to the correct linker version I also corrected
a minor error in the calculation of the timestamp of the linker. My updated
version of DevLinker is included as StdCoded file …
 
But I guess that this does not have any connection to the problems you
are encountering with your application.
 
In the meantime I learned some interesting stuff about compatibility
between Windows 7 and XP especially about “user account control”
and the so called “virtual store”. The most interesting link is this one:
 <http://answers.microsoft.com/en-us/windows/forum/windows_7-security/how-to-disable-virtualstore-in-windows-7/55dce284-0dcd-46af-892e-d2b9cf5bcff6> http://answers.microsoft.com/en-us/windows/forum/windows_7-security/how-to-disable-virtualstore-in-windows-7/55dce284-0dcd-46af-892e-d2b9cf5bcff6
 
It also might be necessary to update BlackBox.exe.Manifest (but I don’t
know how to tell it what it is allowed to do).
 
Till today, I did not encounter any program, which yielded a trap avalanche
under Win 7 …
If you had used WinApi directly, I would check all direct calls into Windows DLLs
for correct parameter lists. Maybe Win7 got pickier or reused an unused
parameter.
 
Regards
--
   Bernhard
 
 
From: BlackBox [mailto:BLACKBOX{([at]})nowhere.xySent: Monday, August 06, 2012 1:59 PM
To: BLACKBOX{([at]})nowhere.xySubject: Re: [BLACKBOX] Windows 7
 
Maybe check the Windows UAC rights?
Mon, 6 Aug 2012 11:13:40 +0000 ?? "Campbell, Robert (SELEX GALILEO, UK)" <robert.d.campbell{([at]})nowhere.xyHello
We are migrating our computers to Windows 7.
I have previously run a few simple BlackBox test programs, and not seen any problems.
Today we ran a real application for the first time, and are swamped by hundreds of low-level TRAP windows
(the ones without clickable links) complaining of illegal memory accesses. This happens every time. The
application is about 10 years old, and has always been stable. It is not particularly memory or CPU greedy.
I don't think it does any risky 'low-level' things, but it will possibly have some WinApi calls.
The entire BlackBox directory is an exact copy of one that runs reliably on XP machines.
Have other people had similar problems? Is there something like a Windows 7 'compatibility' mode I should
know about?
Regards
Robert
SELEX Galileo Ltd
Registered Office: Sigma House, Christopher Martin Road, Basildon, Essex SS14 3EL
A company registered in England & Wales. Company no. 02426132
********************************************************************
This email and any attachments are confidential to the intended
recipient and may also be privileged. If you are not the intended
recipient please delete it from your system and notify the sender.
You should not copy it or use it for any purpose nor disclose or
distribute its contents to any other person.
********************************************************************
----
To unsubscribe, send a message with body "SIGNOFF BLACKBOX" to LISTSERV{([at]})nowhere.xy 





Received on Mon Aug 06 2012 - 17:22:54 UTC

This archive was generated by hypermail 2.3.0 : Thu Sep 26 2013 - 06:30:00 UTC