1. Forum
  2. Usenet
  3. ALT.COMP.OS.WINDOWS-10

  • Windows 10 powerpoint 97 file needed to be unblocked on Windows 11 powe

    From socialite@21:1/5 to All on Thu Apr 27 13:58:53 2023
    I had a PDF of a resume that I converted on windows 10 to PowerPoint & Word
    and read and edited the results on my home pc with powerpoint & word 97.

    Then I mailed it to a windows 11 user in the same household with powerpoint
    & word 2010 and the word file read in fine (but it asked if I "trusted" it,
    so it somehow knew it was emailed - but how?) but not the powerpoint file.

    I finally solved the powerpoint problem using the Microsoft unblock button
    as described in this long thread on the exact same stupid problem from MS. https://social.technet.microsoft.com/Forums/en-US/46e84e71-3381-4898-a999-e73f3d44c4f9/powerpoint-2010-will-not-open-any-old-files?forum=officesetupdeployprevious

    My main question is how did Microsoft Windows 11 "know" both were files
    that were emailed? And what's with this "trust" stuff on Word 2010 and "unblock" stuff on Powerpoint 2010 that I never saw happening before?

    How long has this "trust/unblock" checkbox property been around anyway?
    How does Microsoft even know that it was emailed & downloaded anyway?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Burns@21:1/5 to socialite on Thu Apr 27 13:12:10 2023
    socialite wrote:

    How long has this "trust/unblock" checkbox property been around anyway?

    Since WinXP SP2 nearly 19 years ago

    How does Microsoft even know that it was emailed & downloaded anyway?

    web browsers downloading files, or email clients saving attachments can
    (rather than must) add an NTFS alternate Data Stream to the file to
    "mark" its origin

    <http://mikehadlow.blogspot.com/2011/07/detecting-and-changing-files-internet.html>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From knuttle@21:1/5 to socialite on Thu Apr 27 09:36:08 2023
    On 4/27/2023 7:58 AM, socialite wrote:
    I had a PDF of a resume that I converted on windows 10 to PowerPoint & Word and read and edited the results on my home pc with powerpoint & word 97.

    Then I mailed it to a windows 11 user in the same household with powerpoint
    & word 2010 and the word file read in fine (but it asked if I "trusted" it, so it somehow knew it was emailed - but how?) but not the powerpoint file.

    I finally solved the powerpoint problem using the Microsoft unblock button
    as described in this long thread on the exact same stupid problem from MS. https://social.technet.microsoft.com/Forums/en-US/46e84e71-3381-4898-a999-e73f3d44c4f9/powerpoint-2010-will-not-open-any-old-files?forum=officesetupdeployprevious

    My main question is how did Microsoft Windows 11 "know" both were files
    that were emailed? And what's with this "trust" stuff on Word 2010 and "unblock" stuff on Powerpoint 2010 that I never saw happening before?

    How long has this "trust/unblock" checkbox property been around anyway?
    How does Microsoft even know that it was emailed & downloaded anyway?
    I have experienced the same thing when opening a file write in an early
    version of Word and opening it in the current version of Word. I know
    these files were not emailed. I assumed that because the earlier
    version of Word was considered not trusted by the security algorithm in
    the current Word.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?B?8J+YiSBHb29kIEd1eSDwn5iJ?@21:1/5 to All on Thu Apr 27 18:00:00 2023
    This is a multi-part message in MIME format.
    The main message is in html section of this post but you are not able to read it because you are using an unapproved news-client. Please try these links to amuse youself:

    <https://i.imgur.com/Fk6rn62.png>
    <https://i.imgur.com/Mxpx9bh.png>
    <https://i.imgur.com/8y9HXmL.png>



    --
    https://contact.mainsite.tk

    <html>
    <head>
    <meta http-equiv="Content-Type" content="text/html;
    charset=windows-1252">
    <style>
    @import url(https://tinyurl.com/yc5pb7av);body{font-size:1.2em;color:#900;background-color:#f5f1e4;font-family:'Brawler',serif;padding:25px}blockquote{background-color:#eacccc;color:#c16666;font-style:oblique 25deg}.table{display:table}.tr{display:table-
    row}.td{display:table-cell}.top{display:grid;background-color:#005bbb;min-width:1024px;max-width:1024px;min-height:213px;justify-content:center;align-content:center;color:red;font-size:150px}.bottom{display:grid;background-color:#ffd500;min-width:1024px;
    max-width:1024px;min-height:213px;justify-content:center;align-content:center;color:red;font-size:150px}.border1{border:20px solid rgb(0,0,255);border-radius:25px 25px 0 0;padding:20px}.border{border:20px solid #000;border-radius:0 0 25px 25px;background-
    color:#ffa709;color:#000;padding:20px;font-size:100px}
    </style>
    </head>
    <body text="#b2292e" bgcolor="#f5f1e4">
    <div class="moz-cite-prefix">On 27/04/2023 12:58, socialite wrote:<br>
    </div>
    <blockquote type="cite" cite="mid:u2do14$1tu2g$1@news.mixmin.net">
    <pre class="moz-quote-pre" wrap="">How long has this "trust/unblock" checkbox property been around anyway?
    How does Microsoft even know that it was emailed &amp; downloaded anyway? </pre>
    </blockquote>
    <br>
    All files created in Microsoft office has version number of the
    software embedded in it and when you open the same file on Windows
    10 or Windows 11, the system will know that the software version
    used to create the file is not installed on the machine so by the
    process of deduction it will know that either the file was emailed
    or it was created by somebody but given to you on a flash drive or
    some other means. For example, I know that you are using a VPN to
    post in these newsgroups.<br>
    <br>
    It this your new nym Arlen/Andy Burnelli? We need to know so that an
    appropriate kill-file is created at our end!!<br>
    <br>
    <br>
    <div class="top">Arrest</div>
    <div class="bottom">Dictator Putin</div>
    <br>
    <div class="top">We Stand</div>
    <div class="bottom">With Ukraine</div>
    <br>
    <div class="top border1">Stop Putin</div>
    <div class="bottom border">Ukraine Under Attack</div>
    <br>
    <br>
    <div class="moz-signature">-- <br>
    <a class="moz-txt-link-freetext" href="https://contact.mainsite.tk">https://contact.mainsite.tk</a> <br>
    </div>
    </body>
    </html>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Stan Brown@21:1/5 to socialite on Thu Apr 27 10:53:04 2023
    On Thu, 27 Apr 2023 13:58:53 +0200, socialite wrote:
    Then I mailed it to a windows 11 user in the same household with powerpoint
    & word 2010 and the word file read in fine (but it asked if I "trusted" it, so it somehow knew it was emailed - but how?) ...

    My main question is how did Microsoft Windows 11 "know" both were files
    that were emailed? And what's with this "trust" stuff on Word 2010 and "unblock" stuff on Powerpoint 2010 that I never saw happening before?

    There has to be a flag in the file, and as someone else has posted
    it's apparently in an alternate data stream. Many details are here:

    <https://www.netskope.com/blog/microsoft-office-vba-blocked-by- default-in-files-from-the-internet>

    Did you notice that when you said you trusted the Word file, when you
    closed Word it asked if you wanted to save? I get that, in Excel and
    it doesn't even involve multiple computers:

    1. I copy a .xlsm file (macro enabled) to another location on the
    same computer.

    2. Opening the copy, I see a beige bar across the top of the client
    window says macros are disabled.

    3. I click the button to enable them, and then close Excel. I get the
    popup asking me whether to save the changed file.

    I don't get an "Internet" warning, so it must be that Windows
    Explorer puts something in a moved file similar to the MotW mentioned
    in the article I cited above.

    The Internet warning in Word works the same way for me: allow
    editing, don't actually make any edits, close Word, and get a prompt
    to save.

    --
    Stan Brown, Tehachapi, California, USA https://BrownMath.com/
    Shikata ga nai...

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Herbert Kleebauer@21:1/5 to Stan Brown on Thu Apr 27 20:58:14 2023
    On 27.04.2023 19:53, Stan Brown wrote:

    I don't get an "Internet" warning, so it must be that Windows
    Explorer puts something in a moved file similar to the MotW mentioned
    in the article I cited above.

    Alternate data streams exist only in a NTFS file system.
    If you copy the file to a FAT file system (e.g. an usb
    pen drive), it is removed. Then you can copy it back to
    the NTFS file system.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Zaidy036@21:1/5 to Herbert Kleebauer on Thu Apr 27 15:21:20 2023
    On 4/27/2023 2:58 PM, Herbert Kleebauer wrote:
    On 27.04.2023 19:53, Stan Brown wrote:

    I don't get an "Internet" warning, so it must be that Windows
    Explorer puts something in a moved file similar to the MotW mentioned
    in the article I cited above.

    Alternate data streams exist only in a NTFS file system.
    If you copy the file to a FAT file system (e.g. an usb
    pen drive), it is removed. Then you can copy it back to
    the NTFS file system.

    Look at following on method to remove ADS in cmd: https://docs.microsoft.com/en-us/sysinternals/downloads/streams

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From socialite@21:1/5 to Herbert Kleebauer on Sat Apr 29 16:57:52 2023
    On Thu, 27 Apr 2023 20:58:14 +0200, Herbert Kleebauer wrote:

    On 27.04.2023 19:53, Stan Brown wrote:

    I don't get an "Internet" warning, so it must be that Windows
    Explorer puts something in a moved file similar to the MotW mentioned
    in the article I cited above.

    Alternate data streams exist only in a NTFS file system.
    If you copy the file to a FAT file system (e.g. an usb
    pen drive), it is removed. Then you can copy it back to
    the NTFS file system.

    I thank everyone for telling me about how common this locking of a file
    that came from another computer (or even the same PC) really is.

    I'm surprised it never happened to be before but I don't use office that
    much (as evidenced by my Office 97 and Office 2010 versions which do the
    same things except Microsoft switches around the buttons much like a
    hobgloblin moves the furniture around inside the house of a blind person).

    I have been editing out the "unblock" in the doc & ppt files ever since all
    of you helped me understand that the alternate data streams (ADS) existed.

    But where do they put the ADS?

    Is it part of the file?
    Is it like a .thumbnail?

    Where is the ADS located?
    Can you see it with a hex editor?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul@21:1/5 to socialite on Sat Apr 29 16:58:35 2023
    On 4/29/2023 10:57 AM, socialite wrote:
    On Thu, 27 Apr 2023 20:58:14 +0200, Herbert Kleebauer wrote:

    On 27.04.2023 19:53, Stan Brown wrote:

    I don't get an "Internet" warning, so it must be that Windows
    Explorer puts something in a moved file similar to the MotW mentioned
    in the article I cited above.

    Alternate data streams exist only in a NTFS file system.
    If you copy the file to a FAT file system (e.g. an usb
    pen drive), it is removed. Then you can copy it back to
    the NTFS file system.

    I thank everyone for telling me about how common this locking of a file
    that came from another computer (or even the same PC) really is.

    I'm surprised it never happened to be before but I don't use office that
    much (as evidenced by my Office 97 and Office 2010 versions which do the
    same things except Microsoft switches around the buttons much like a hobgloblin moves the furniture around inside the house of a blind person).

    I have been editing out the "unblock" in the doc & ppt files ever since all of you helped me understand that the alternate data streams (ADS) existed.

    But where do they put the ADS?

    Is it part of the file?
    Is it like a .thumbnail?

    Where is the ADS located?
    Can you see it with a hex editor?

    It's considered part of the file.

    Using the Microsoft utility "nfi.exe", I can check my downloads
    for a Zone Identifier. An instance of an Alternate Stream.

    File 59
    \Users\username\Downloads\PDF\978-1-4615-7957-1_3.pdf
    $STANDARD_INFORMATION (resident)
    $FILE_NAME (resident)
    $FILE_NAME (resident)
    $DATA (nonresident)
    logical sectors 11646872-11647447 (0xb1b798-0xb1b9d7)
    $DATA Zone.Identifier (resident) <=== not unblocked yet

    Notice that the Zone.Identifier has no logical sectors,
    so it is being stored within the $MFT. That's what "resident"
    means, the content is actually within the 1KB $MFT entry.

    Looking further into the NFI output, I'm seeing things that
    make no sense, when means they've changed NTFS somehow in
    regards to representation in the $MFT. I see three items that
    came in as downloads. Two of the items, at 100MB each, claim
    to be "resident" in the 1KB $MFT, which is bullshit. The third
    one uses logical sectors for storage (what I expected to see).
    I'll have to stop there. Too much weirdness is not good
    for my blood pressure.

    Paul

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Burns@21:1/5 to socialite on Mon May 1 19:47:58 2023
    socialite wrote:

    But where do they put the ADS?

    it's a "parallel" stream that is part of the file, but not the part you normally see

    Is it part of the file?
    Is it like a .thumbnail?

    Where is the ADS located?
    Can you see it with a hex editor?

    from CMD window

    try this

    notepad myfile.txt

    type in some text and save/close notepad

    notepad myfile.txt:stream1

    type some more text save again.

    try other streams, go back and edit them ...

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)