[PB] MSN Messenger - Blocage des fichiers potentiellement dangereux

Débloquer la sécurité sur le transfert de fichiers (avec Windows XP SP2)

MSN Messenger 7 partage les informations de sécurité d'Internet Explorer sous Windows XP Service Pack 2. Lors de transferts de fichiers, MSN Messenger bloque les fichiers qui sont susceptibles de contenir des virus. Vous pouvez désactiver cette protection selon l'extension des fichiers. Il faut noter que les paramètres de sécurité d'Internet Explorer seront modifiés.

Pour désactiver le blocage du transfert de fichiers :

Ouvrez l'éditeur de registre, Démarrer, Exécuter, saisissez regedit.

Naviguez jusqu'à la clé suivante : HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies

Créez ensuite la clé Associations dans Policies.

Créez ensuite la valeur chaîne LowRiskFileTypes

Modifiez sa valeur en entrant les extensions à autoriser. Vous pouvez entrer plusieurs extensions les séparant par des points-virgules.
Exemple : .mp3;.msi;.avi;.pdf

Sais tu à quoi corresponde les extensions de fichiers que tu as mis ds ton poste au dessus ?

Tu vas tuer ton pc en 24 heures !!!

Disable Digital Signature Checking in Internet Explorer

CODE
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download]
"CheckExeSignatures"="no"
"RunInvalidSignatures"=dword:00000001



Prevent Windows from checking Zone Information in files when user tries to open them in Windows Explorer

CODE
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations]
"LowRiskFileTypes"=".exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;"



Prevent Windows from preserving Zone Information in file attachments

CODE
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments]
"SaveZoneInformation"=dword:00000001



Prevent users from manually removing Zone Information from file attachments

CODE
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments]
"HideZoneInfoOnProperties"=dword:00000001




The last 4 tweaks need a bit of explanation. I'm sure everyone noticed Windows XP SP2 Security Warnings when opening downloaded files in Internet and Windows Explorer. CheckExeSignatures and RunInvalidSignatures disable "The publisher could not be verified" prompts when running downloaded files. When a user downloads a file from the Internet, Windows automatically marks the file attachment with its zone information (such as Restricted, local, internet..) Based on file's zone information Windows assignes a proper risk level (High, Moderate, or Low) To disable this feature SaveZoneInformation is set to 1. Files listed in LowRiskFileTypes are not blocked by Windows and a security message is never displayed. If LowRiskFileTypes is not configured, downloads that were made before SaveZoneInformation was set to 1, will still display Warning message.

When HideZoneInfoOnProperties is set to 1, the "Unblock" button in file's properties, allowing user to remove zone infomation manually, is not displayed.

I have been looking at the file transfer issue myself. I think the registry patch is easy for people to apply, but it has affects on other parts of windows attachment policies. I have been working on a patch just for messenger to stop it checking the windows attachment policies. I know it doesn't really matter how you solve this problem, and as always in software there is many solution for the same problem.

I have come up with the following binary patch on the MSN Messenger 7.0.0732 exe to re-enable blocked file transfers, if you know what you are doing with a hex editor here is the info, or maybe someone will include in there patcher in furture versions.