DigeratiPrime

The Outlook shutdown behavior was changed with Office 2007 SP2 http://msdn.microsoft.com/en-us/library/dd239276.aspx http://blogs.msdn.com/rgregg/archive/2008/...ack-2-beta.aspx http://support.microsoft.com/kb/968774

Download http://downloads.vmware.com/d/details/wkst...mRqQHdiZGR0Kg== Release Notes http://www.vmware.com/support/ws7/doc/rele...otes_ws701.html

As a remake it looks good imo, but there are better games now imo.

That video was put together fast. An oversized iPod Touch indeed, a $200 netbook can do more.

You can 'EXTEND' video across displays if the output renderer is using DirectX and not Overlay.

http://www.michaelv.org/ Amazing that it supports Cleartype and my widescreen monitor

Just for fun I took the test in under a minute.

What's the purpose of OS2, to clean OS1? IMO best way to prevent getting infected: don't logon as an Administrator. Easier to manage since Vista with UAC, again improved in 7. IMO best way to protect against boot viruses is: Bitlocker using a TPM. Bitlocker introduced with Vista, improved upon in 7. Since Vista you can repartition, shrink or expand volumes in Disk Manager without rebooting. The RAM disk idea is not bad, but you're not really supposed to do production work in PE. Other things to consider: Truecrypt, RAID, NTFS permissions, Deepfreeze/Returnil type software.

Well that would be another topic IMO. Isn't VPC free? You can download it here. As for XP I would take a look at the Product ID (PID), find the key, see if its activated etc. BTW on the subject matter of the book, check out this site if you haven't: http://www.forensicswiki.org/wiki/Main_Page

First thing I was going to suggest, enough to convince me its corrupted.

Nice find MSE detects it as PWS:Win32/Inido!rts We'll fix it...

CAB and WIM files on Windows install media use LZX compression http://en.wikipedia.org/wiki/LZX

I would be interested to see what ProcessMonitor shows. Have you done any modifications to the msc (xml) file?

Windows Firewall only has notifies for processes that want to listen on a port, not outbound connections.

My favorite host based firewall is no doubt Windows Firewall with Advanced Security, introduced with Vista. I can manage it with the mmc snap-in (wf.msc) or command line using the netsh advfirewall firewall context. Only problem is no outbound notifications, there is an app for that though http://www.sphinx-soft.com/Vista/index.html

Best way is to mount the volume offline and then browse files, that way even a rootkit cannot hide files.

Thanks dencorso, I had forgotten about this topic because I gave up on the idea of installing to a SDHC but was dealing with a seperate problem through bcdedit. I think there may be a difference between installing to USB and SDHC, not confirmed though. Also my use of "x" just refers to whatever the target or destination volume letter is, not a specifically hard coded variable in this case I might give this another try on a rainy day, I noticed an error in my previous post, emphasis added:

What edition of Office 2007 do you have? from http://office.microsoft.com/en-us/products...spx?ofcresset=1

It's been a busy 25th year so far, cheers!

Yup, just point sysprep at the driverpacks, let acronis handle HAL. This is only relevant for XP, since Vista and the WIM format HAL detection is no longer a problem.

What version of Acronis True Image are you using? IIRC Acronis does not include "driver packs" as they would increase the image size. Best bet is probably to use Universal Restore as a HAL solution, and let Sysprep handle the driverpacks. I reccomend the driverpacks in the root of the drive to be detected and then removed after the image is restored. Driverpacks.net Forum Universal Imaging http://forum.driverpacks.net/viewforum.php?id=30 Acronis User Guide PDF: http://download.acronis.com/pdf/BackupReco...serguide.en.pdf

Perhaps create an administrative install point of both and/or use a transform (mst) file? msiexec options: Windows ® Installer. V 5.0.7600.16385 msiexec /Option <Required Parameter> [Optional Parameter] Install Options </package | /i> <Product.msi> Installs or configures a product /a <Product.msi> Administrative install - Installs a product on the network /j<u|m> <Product.msi> [/t <Transform List>] [/g <Language ID>] Advertises a product - m to all users, u to current user </uninstall | /x> <Product.msi | ProductCode> Uninstalls the product Display Options /quiet Quiet mode, no user interaction /passive Unattended mode - progress bar only /q[n|b|r|f] Sets user interface level n - No UI b - Basic UI r - Reduced UI f - Full UI (default) /help Help information Restart Options /norestart Do not restart after the installation is complete /promptrestart Prompts the user for restart if necessary /forcerestart Always restart the computer after installation Logging Options /l[i|w|e|a|r|u|c|m|o|p|v|x|+|!|*] <LogFile> i - Status messages w - Nonfatal warnings e - All error messages a - Start up of actions r - Action-specific records u - User requests c - Initial UI parameters m - Out-of-memory or fatal exit information o - Out-of-disk-space messages p - Terminal properties v - Verbose output x - Extra debugging information + - Append to existing log file ! - Flush each line to the log * - Log all information, except for v and x options /log <LogFile> Equivalent of /l* <LogFile> Update Options /update <Update1.msp>[;Update2.msp] Applies update(s) /uninstall <PatchCodeGuid>[;Update2.msp] /package <Product.msi | ProductCode> Remove update(s) for a product Repair Options /f[p|e|c|m|s|o|d|a|u|v] <Product.msi | ProductCode> Repairs a product p - only if file is missing o - if file is missing or an older version is installed (default) e - if file is missing or an equal or older version is installed d - if file is missing or a different version is installed c - if file is missing or checksum does not match the calculated value a - forces all files to be reinstalled u - all required user-specific registry entries (default) m - all required computer-specific registry entries (default) s - all existing shortcuts (default) v - runs from source and recaches local package Setting Public Properties [PROPERTY=PropertyValue] Consult the Windows ® Installer SDK for additional documentation on the command line syntax. Copyright © Microsoft Corporation. All rights reserved. Portions of this software are based in part on the work of the Independent JPEG Group.

I havent used nlite in a while, but I remember it's pretty much self explantory, esp the compatibility options. As for services you definetly need 'Workstation'.

You want to archive each email into a seperate file? Also curious why use Foxmail when there is Thunderbird?

Hmm, what program did you use to make your backups or clone file? Vmware makes virtualization software and not backup software. I am guessing by "Station" you mean "Workstation"? It may be possible to recover some of your files from the drive you "wiped". What exactly do you mean by "wipe out", aka what steps did you perform? I would suggest you stop using that drive until we learn more.