Ticket #47 (closed test: fixed)

Opened 2 years ago

Last modified 9 months ago

IE Language Pack Install Prompt

Reported by: knwang Assigned to: knwang
Priority: high Milestone:
Component: Excluded Registry/File/Process Version: none
Severity: none Keywords: regkey,registry,exclude,language,IE,pack
Cc:

Description (Last modified by knwang)

When spidering a website that requires a specific language pack to be installed in Internet Explorer, the HoneyClient integrity check function outputs the following changes: 

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms (added)
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International (changed)
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\CpMRU (added)
HKEY_USERS\S.+\Software\Microsoft\Internet Explorer\IntelliForms (added)
HKEY_USERS\S.+\Software\Microsoft\Internet Explorer\International (changed)
HKEY_USERS\S.+\Software\Microsoft\Internet Explorer\International\CpMRU (added)

An example URL we browsed that resulted the above changes (If you choose to go to this URL, we cannot guarantee the safety of this site):

http://www.legendmagic.com/

Attachments

Change History

01/31/07 17:40:06 changed by knwang

  • description changed.

02/01/07 13:24:35 changed by kindlund

TODO: Update wiki page to reflect new ticket.

02/01/07 13:33:53 changed by kindlund

Testing notifications.

11/20/07 16:03:15 changed by xkovah

  • status changed from new to closed.
  • resolution set to fixed.

Haven't seen this recently, so I'm sure it's handled in the current exclusion lists.

Add/Change #47 (IE Language Pack Install Prompt)




Change Properties
Action