Security warning asking to open or save file



GregE
07-09-2005, 11:12 PM
I have rebuilt a WinXPSP2 machine and when the user goes to a website trying
to run launch.asp, the security warning pops up. It does not happen on other
machines. Looking around it seems to be something with a data stream or
something. Any help would be greatly appreciated.

PA Bear
07-09-2005, 11:13 PM
Is this machine fully up-to-date at Windows Update? Are the other machines
(which I assume are also running WinXP SP2)?
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security

GregE wrote:
> I have rebuilt a WinXPSP2 machine and when the user goes to a website
> trying to run launch.asp, the security warning pops up. It does not
> happen on other machines. Looking around it seems to be something with a
> data stream or something. Any help would be greatly appreciated.

Sandi - Microsoft MVP
07-09-2005, 11:13 PM
I'd like to know what the text of this security warning actually is ;o)

--

__________________________________________
Sandi's Site has changed - for instructions on how to
find old URLs, go here:
http://msmvps.com/spywaresucks/archive/2005/05/14/46971.aspx

Hyperlinks used to ensure advice is current
Sandi - Microsoft MVP since 1999
http://inetexplorer.mvps.org

Visit the Internet Explorer Community
http://www.microsoft.com/windows/ie/community/default.mspx

"PA Bear" <PABearMVP@gmail.com> wrote in message
news:uZ1TwVIdFHA.796@TK2MSFTNGP09.phx.gbl...
> Is this machine fully up-to-date at Windows Update? Are the other
> machines (which I assume are also running WinXP SP2)?
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE/OE) & Security
>
> GregE wrote:
>> I have rebuilt a WinXPSP2 machine and when the user goes to a website
>> trying to run launch.asp, the security warning pops up. It does not
>> happen on other machines. Looking around it seems to be something with a
>> data stream or something. Any help would be greatly appreciated.
>

GregE
07-09-2005, 11:13 PM
It has all updates. It is a Gateway that is about 2 years old. All the
others are, too. I had to rebuild this PC using the recovery CD from
Gateway. I manually added SP2 and slipstreamed it. All others can go to the
website, except one. The one that is having the problem will not run the
page. It tries for a split second and then a Security warning box opens
asking whether you wan to run, save or cancel the launch.asp. The
firewalling has been turned off.

"GregE" wrote:

> I have rebuilt a WinXPSP2 machine and when the user goes to a website trying
> to run launch.asp, the security warning pops up. It does not happen on other
> machines. Looking around it seems to be something with a data stream or
> something. Any help would be greatly appreciated.

PA Bear
07-09-2005, 11:13 PM
Please include previous message(s) in your replies here, Greg.

Who are what is issuing this "Security warning", please?

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/archive/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security

GregE wrote:
> It has all updates. It is a Gateway that is about 2 years old. All the
> others are, too. I had to rebuild this PC using the recovery CD from
> Gateway. I manually added SP2 and slipstreamed it. All others can go to
> the website, except one. The one that is having the problem will not run
> the page. It tries for a split second and then a Security warning box
> opens asking whether you wan to run, save or cancel the launch.asp. The
> firewalling has been turned off.
<paste>
> Robear wrote:
> Is this machine fully up-to-date at Windows Update? Are the other
> machines (which I assume are also running WinXP SP2)?
> --
> "GregE" wrote:
> > I have rebuilt a WinXPSP2 machine and when the user goes to a website
> > trying to run launch.asp, the security warning pops up. It does not
> > happen on other machines. Looking around it seems to be something with
> > a data stream or something. Any help would be greatly appreciated.

GregE
07-09-2005, 11:13 PM
Microsoft's. It has the yellow security shield.

"PA Bear" wrote:

> Please include previous message(s) in your replies here, Greg.
>
> Who are what is issuing this "Security warning", please?
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/archive/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine.blogspot.com/
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE/OE) & Security
>
> GregE wrote:
> > It has all updates. It is a Gateway that is about 2 years old. All the
> > others are, too. I had to rebuild this PC using the recovery CD from
> > Gateway. I manually added SP2 and slipstreamed it. All others can go to
> > the website, except one. The one that is having the problem will not run
> > the page. It tries for a split second and then a Security warning box
> > opens asking whether you wan to run, save or cancel the launch.asp. The
> > firewalling has been turned off.
> <paste>
> > Robear wrote:
> > Is this machine fully up-to-date at Windows Update? Are the other
> > machines (which I assume are also running WinXP SP2)?
> > --
> > "GregE" wrote:
> > > I have rebuilt a WinXPSP2 machine and when the user goes to a website
> > > trying to run launch.asp, the security warning pops up. It does not
> > > happen on other machines. Looking around it seems to be something with
> > > a data stream or something. Any help would be greatly appreciated.
>

GregE
07-09-2005, 11:13 PM
look at figure 7 in this article. This is the error when it tried to
load/launch launch.asp from the site. It seems to be a Wxp issue. It also
happens with Mozilla.

http://redmondmag.com/columns/article.asp?EditorialsID=716

"PA Bear" wrote:

> Please include previous message(s) in your replies here, Greg.
>
> Who are what is issuing this "Security warning", please?
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/archive/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine.blogspot.com/
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE/OE) & Security
>
> GregE wrote:
> > It has all updates. It is a Gateway that is about 2 years old. All the
> > others are, too. I had to rebuild this PC using the recovery CD from
> > Gateway. I manually added SP2 and slipstreamed it. All others can go to
> > the website, except one. The one that is having the problem will not run
> > the page. It tries for a split second and then a Security warning box
> > opens asking whether you wan to run, save or cancel the launch.asp. The
> > firewalling has been turned off.
> <paste>
> > Robear wrote:
> > Is this machine fully up-to-date at Windows Update? Are the other
> > machines (which I assume are also running WinXP SP2)?
> > --
> > "GregE" wrote:
> > > I have rebuilt a WinXPSP2 machine and when the user goes to a website
> > > trying to run launch.asp, the security warning pops up. It does not
> > > happen on other machines. Looking around it seems to be something with
> > > a data stream or something. Any help would be greatly appreciated.
>

Ramesh, MS-MVP
07-09-2005, 11:13 PM
Greg,

Does this occur in all the websites (with .asp pages) or one in particular?
If it's a particular page, pls post the URL.

--
Ramesh, MS-MVP
Windows Shell/User

Windows XP Troubleshooting
http://www.winhelponline.com

Windows XP Newsgroup Setup Instructions for Outlook Express:
http://www.microsoft.com/windowsxp/expertzone/newsgroupsetup.mspx

"GregE" <GregE@discussions.microsoft.com> wrote in message
news:A6AAAEA1-3554-42F8-8A31-3B501C27D801@microsoft.com...
> look at figure 7 in this article. This is the error when it tried to
> load/launch launch.asp from the site. It seems to be a Wxp issue. It
> also
> happens with Mozilla.
>
> http://redmondmag.com/columns/article.asp?EditorialsID=716
>
> "PA Bear" wrote:
>
>> Please include previous message(s) in your replies here, Greg.
>>
>> Who are what is issuing this "Security warning", please?
>>
>> Checking for/Help with Hijackware
>> http://aumha.org/a/parasite.htm
>> http://aumha.org/a/quickfix.htm
>> http://aumha.net/viewtopic.php?t=5878
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/archive/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://defendingyourmachine.blogspot.com/
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE/OE) & Security
>>
>> GregE wrote:
>> > It has all updates. It is a Gateway that is about 2 years old. All
>> > the
>> > others are, too. I had to rebuild this PC using the recovery CD from
>> > Gateway. I manually added SP2 and slipstreamed it. All others can go
>> > to
>> > the website, except one. The one that is having the problem will not
>> > run
>> > the page. It tries for a split second and then a Security warning box
>> > opens asking whether you wan to run, save or cancel the launch.asp.
>> > The
>> > firewalling has been turned off.
>> <paste>
>> > Robear wrote:
>> > Is this machine fully up-to-date at Windows Update? Are the other
>> > machines (which I assume are also running WinXP SP2)?
>> > --
>> > "GregE" wrote:
>> > > I have rebuilt a WinXPSP2 machine and when the user goes to a website
>> > > trying to run launch.asp, the security warning pops up. It does not
>> > > happen on other machines. Looking around it seems to be something
>> > > with
>> > > a data stream or something. Any help would be greatly appreciated.
>>

GregE
07-09-2005, 11:15 PM
The client has to log in to a site. Once there, they can go to alot of other
places in the site. When they then click on one of the options, to go to a
particular place (truck parts), it looks like it wants to load the page for
about a second then opens the security about whether you want to open, save
or cancel launch.asp. The other computers at the client do not have this
problem. I can give more info tomorrow, if neded after talking and remoting
into the client.

"GregE" wrote:

> I have rebuilt a WinXPSP2 machine and when the user goes to a website trying
> to run launch.asp, the security warning pops up. It does not happen on other
> machines. Looking around it seems to be something with a data stream or
> something. Any help would be greatly appreciated.

Robert Aldwinckle
07-09-2005, 11:16 PM
"GregE" <GregE@discussions.microsoft.com> wrote in message news:739B6DA5-94E9-4D75-9353-D0C24545CA8F@microsoft.com...
> The client has to log in to a site. Once there, they can go to alot of other
> places in the site. When they then click on one of the options, to go to a
> particular place (truck parts), it looks like it wants to load the page for
> about a second then opens the security about whether you want to open, save
> or cancel launch.asp.


Did you get more information from the client yet?

FWIW here is a draft reply I just found in my Deleted Items folder.
(Oops.)


Run... control folders (e.g press Win-R and enter that)

Check to see if there is a Folder Type associated with that .asp extension
and in particular if it is marked: Confirm open after download


> The other computers at the client do not have this problem.

Perform the same check on them and see if there is a difference.


> I can give more info tomorrow, if neded after talking and remoting
> into the client.


Good luck

Robert Aldwinckle
---


>
> "GregE" wrote:
>
>> I have rebuilt a WinXPSP2 machine and when the user goes to a website trying
>> to run launch.asp, the security warning pops up. It does not happen on other
>> machines. Looking around it seems to be something with a data stream or
>> something. Any help would be greatly appreciated.

GregE
07-09-2005, 11:16 PM
I found the problem, by accident. While looking at a loe of Google answers,
a lot mentioned errors with Citrix and WXPsp2. I thought nothing of it since
the client does not use Citrix. One of the sites mentioned adding the web
page link having problems to the trusted zone. When I started typeing in the
link, it auto-completed and one of the completed options had '?NFUSE' at the
end. This told me that the site was using NFUSE. Too bad the site's owners
did not let us know. Seems the Web Citrix clinet could not install. I
installed the latest Citrix client (version 9) and it seems to work, except
that when entering the parts site it loads Citrix first. Solved. Thanks for
all your help. There are tons of questions on this site and I am glad people
took the time to assist me.

"GregE" wrote:

> The client has to log in to a site. Once there, they can go to alot of other
> places in the site. When they then click on one of the options, to go to a
> particular place (truck parts), it looks like it wants to load the page for
> about a second then opens the security about whether you want to open, save
> or cancel launch.asp. The other computers at the client do not have this
> problem. I can give more info tomorrow, if neded after talking and remoting
> into the client.
>
> "GregE" wrote:
>
> > I have rebuilt a WinXPSP2 machine and when the user goes to a website trying
> > to run launch.asp, the security warning pops up. It does not happen on other
> > machines. Looking around it seems to be something with a data stream or
> > something. Any help would be greatly appreciated.

Robert Aldwinckle
07-09-2005, 11:16 PM
Greg,

Good feedback. Thanks. That's a new one for us.
I'm not sure I have understood all the details though,
especially how the reported symptom occurs. <g>
E.g. I had the impression that the file which needed
to be opened or saved was an .asp file?
I suspect it was really an .ica file instead?

Anyway, your extra keywords are eye-opening.
After much background reading...

http://noc.guntersvilleboe.com/Citrix/index.htm

(MSN search for
citrix nfuse "internet explorer" open save
)


Perhaps you would have had better help from a
terminal server or other admin oriented newsgroup?
This one is mainly used by end-users for UI and
error recovery issues.


Thanks again for introducing me to an interesting area.


Robert
---


"GregE" <GregE@discussions.microsoft.com> wrote in message
news:CC592EEC-51EF-4E81-8E5E-B495AB8A0A6F@microsoft.com...
>I found the problem, by accident. While looking at a loe of Google answers,
> a lot mentioned errors with Citrix and WXPsp2. I thought nothing of it since
> the client does not use Citrix. One of the sites mentioned adding the web
> page link having problems to the trusted zone. When I started typeing in the
> link, it auto-completed and one of the completed options had '?NFUSE' at the
> end. This told me that the site was using NFUSE. Too bad the site's owners
> did not let us know. Seems the Web Citrix clinet could not install. I
> installed the latest Citrix client (version 9) and it seems to work, except
> that when entering the parts site it loads Citrix first. Solved. Thanks for
> all your help. There are tons of questions on this site and I am glad people
> took the time to assist me.
>
> "GregE" wrote:
>
>> The client has to log in to a site. Once there, they can go to alot of other
>> places in the site. When they then click on one of the options, to go to a
>> particular place (truck parts), it looks like it wants to load the page for
>> about a second then opens the security about whether you want to open, save
>> or cancel launch.asp. The other computers at the client do not have this
>> problem. I can give more info tomorrow, if neded after talking and remoting
>> into the client.
>>
>> "GregE" wrote:
>>
>> > I have rebuilt a WinXPSP2 machine and when the user goes to a website trying
>> > to run launch.asp, the security warning pops up. It does not happen on other
>> > machines. Looking around it seems to be something with a data stream or
>> > something. Any help would be greatly appreciated.


Security warning asking to open or save file