IDNetters Forums

Technical News & Discussion => Windows News & Discussion => Topic started by: zappaDPJ on Sep 10, 2009, 14:26:33

Title: QuickTime Data Execution Prevention Alert
Post by: zappaDPJ on Sep 10, 2009, 14:26:33
I've just installed QuickTime V7.6.4 on Vista and after installation I got a DEP alert from Vista. I've seen this alert very rarely before but in all cases it was genuine and triggered by a virus. I'm not sure if it was the installation process or the subsequent autorun of QuickTime that triggered the alert but in any case I've removed all traces of it from my PC.

The installation files were from a genuine Apple download triggered by their software dialing home for updates. What I don't know is if this has happened because the download contains an embedded virus or if QuickTime is executing code from unauthorised system workspace.

I can't find any real references to this on google and I'm just wondering if anyone else running Vista has updated QuickTime today?
Title: Re: QuickTime Data Execution Prevention Alert
Post by: somanyholes on Sep 10, 2009, 14:35:16
Do you have dep enabled for all programs or just windows services? Can you get a md5/sha1 checksum of the file to compare?
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Gary on Sep 10, 2009, 15:02:31
Quote from: zappaDPJ on Sep 10, 2009, 14:26:33
I've just installed QuickTime V7.6.4 on Vista and after installation I got a DEP alert from Vista. I've seen this alert very rarely before but in all cases it was genuine and triggered by a virus. I'm not sure if it was the installation process or the subsequent autorun of QuickTime that triggered the alert but in any case I've removed all traces of it from my PC.

The installation files were from a genuine Apple download triggered by their software dialing home for updates. What I don't know is if this has happened because the download contains an embedded virus or if QuickTime is executing code from unauthorised system workspace.

I can't find any real references to this on google and I'm just wondering if anyone else running Vista has updated QuickTime today?
I had the same download last night and had no dep trigger, I did have one earlier in the year and after running chkdsk my file structure needed repair so that may have caused an issue with how the program was installing at the time, do a virus scan and run chckdsk to see if your drive has any issues and do what so said as well. I always leave Nods 32 v4 and Prevx 3 running when i install anyway just in case, and have had no issues so far doing it that way  :fingers: its best to make sure the files are clean depending on what you run to protect your system as some programs do affect driver installs.
Title: Re: QuickTime Data Execution Prevention Alert
Post by: zappaDPJ on Sep 10, 2009, 15:41:53
I've ran a virus scan after removing the software and deleting the download. Everything appears to be in order.

Quote from: somanyholes on Sep 10, 2009, 14:35:16
Do you have dep enabled for all programs or just windows services? Can you get a md5/sha1 checksum of the file to compare?

Just Windows Services. Unfortunately I've removed all traces of the download so I can't compare.

It does seem that this might be an issue with Apple software because I have found users having similar problems updating iTunes and iPhone software.
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Rik on Sep 10, 2009, 15:45:43
That's why I'm waiting a bit, Zap, I have no need for the new features, so I'll let them debug the thing first.
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Gary on Sep 11, 2009, 09:11:03
Odd how some have issues but many like myself have none whatsoever  :dunno:
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Rik on Sep 11, 2009, 09:11:56
'Twas ever thus, Gary. :)
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Gary on Sep 11, 2009, 09:13:09
Quote from: Rik on Sep 11, 2009, 09:11:56
'Twas ever thus, Gary. :)
I think the quicktime was a security update though Rik, although I confess I have no idea what the previous version was anymore  ;D http://www.theregister.co.uk/2009/09/11/apple_security_updates/

Edit: It WAS a security update to Quicktime :sigh: iTunes 9 works very well I must say
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Rik on Sep 11, 2009, 09:15:16
Don't ask me, I avoid it like the plague. :)
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Gary on Sep 11, 2009, 09:16:05
Quote from: Rik on Sep 11, 2009, 09:15:16
Don't ask me, I avoid it like the plague. :)
;D
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Sebby on Sep 11, 2009, 10:35:05
Quote from: Gary on Sep 11, 2009, 09:13:09
iTunes 9 works very well I must say

You should see it on a Mac. ;) ;D
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Rik on Sep 11, 2009, 10:36:06
So bring yours round. ;D
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Sebby on Sep 11, 2009, 10:38:27
It's not exactly portable. :P
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Rik on Sep 11, 2009, 10:42:36
Bring the desk. ;D
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Sebby on Sep 11, 2009, 10:42:59
I can't, it's fixed to the wall. :P
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Rik on Sep 11, 2009, 10:45:48
Bring the wall! ;D
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Sebby on Sep 11, 2009, 11:39:51
Isn't that a quote from that programme with Dale Winton? :P
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Rik on Sep 11, 2009, 12:05:27
I can safely say I wouldn't know, Seb. ;D
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Sebby on Sep 11, 2009, 12:08:43
:rofl:
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Gary on Sep 11, 2009, 23:55:04
Quote from: Sebby on Sep 11, 2009, 10:38:27
It's not exactly portable. :P
Quote from: Sebby on Sep 11, 2009, 10:35:05
You should see it on a Mac. ;) ;D
Wouldn't it look damp and crinkled  ;)
Title: Re: QuickTime Data Execution Prevention Alert
Post by: Sebby on Sep 12, 2009, 13:12:03
:grn: