Jump to content

DarkShadows

Member
  • Posts

    268
  • Joined

  • Last visited

  • Donations

    0.00 USD 
  • Country

    United States

Everything posted by DarkShadows

  1. I'm using Windows XP, so this isn't an issue for me. Duh, I have actually read that about that tweak before. I don't know why I never thought about using it in this context! I'm using English as well. 1. Good 2. Smart 3. Great. I didn't think this was possible. Have you used this for some time? Are there any Windows issues as a result? 4. So this could be changed (hard-coded) into a customized (encrypted) copy of the code. 5. Same as 4. above. 6. Have you tested this to ensure that the NewAdmin in fact does logon automatically? No problems with this, it really shouldn't do this anyway. Hmm... This is not good. Like I said above (which i just edited because I didn't say it too clearly), I have used TweakUI to set a user to AutoLogon, and in TweakUI one specifies a password, however using RegSnap, I have never seen the password anywhere. But this was with the renamed Administrator account, which may work differently than another user account. See, we can't have the password out in the open, that is the major requirement to all of this madness. We want to control what the user accounts are, and what there passwords are, but we do not want them out in the open. If they sit there unencrypted in the registry, they are out in the open. Somehow the most recent version of TweakUI handles this correctly. I'm just trying to find a way to do it before Windows boots the first time. I have to duck out of my office, customer has developed huge issues. I won't get back to testing this for a couple of days. But I appreciate your assistance!
  2. I know the default Administrator account can be renamed (I'm already doing that). And, I'm pretty sure it can moved to a different group with lesser privileges. But, I was under the impression that it could not be deleted. Isn't this incorrect? Under the scenario you are suggesting, Is there any way to prevent the new 'Administrator' account from being displayed on the Welcome screen, like the built-in Administrator in account? I'm trying to hide the 'Administrator' account (and its password) from my users. If that is possible, then an unencrypted password for the original Administrator account in winnt.sif isn't so bad. Hard-coding the password present another challenge as well. It would awesome If the program in question could pull part of the password from an environmental variable at execution time. Then, part of the password would be hard-coded (a more secure portion), while another part would pulled from an environmental variable (a portion that changed from PC to PC). Then each PC would have a unique password, but also containing a secure standard. This could be easily remembered by the people who are authorized to service the PCs, but would be difficult for unauthorized people to ascertain.
  3. I would really like to: Specify an encrypted Administrator password in winnt.sif Rename Administrator to <NewAdminName> Create my other new user accounts. Autologon with NewAdminName I can do all of these things, just not together. Number 1 gets in the way of number 4 as documented below. Has anyone found a way around this limitation? I have tried the following to the registry file from CmdLines.txt: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "DefaultUserName"="NewAdminName" "DefaultDomainName"="ComputerName" "AltDefaultUserName"="NewAdminName" "AltDefaultDomainName"="ComputerName" "AutoAdminLogon"="1"But after GUI setup completes and Windows reboots, the first Administrator logon it gives me an error. I have used TweakUI to set the NewAdminName as the AutoLogon user, and then tried to watch what registry values changed with RegSnap. It shows DefaultUserName and AutoAdminLogon. Any ideas?
  4. See this thread. http://www.msfn.org/board/index.php?showto...nistrator&st=30
  5. Please read this post and participate responsibly and within your own conscience. Thanks. In case, you are unaware, Google used to support tool called the Google Deskbar which is quite different from the Google Desktop of today. I (and many others) believe Google Deskbar to be the best desktop search-engine interface tool one can install on a PC. If you download and try the Google Deskbar, you will find it a fairly quick and easy way to search the Internet, and without any performance or security drawbacks. Later, I will post some tips and tricks for Google Deskbar. However, Google has essentially done away with Google Deskbar, in favor of Google Desktop Search. Google is essentially feeding off of Google Deskbar's popularity, to feed interest in Google Desktop. The thing is most people who use Google deskbar like it very much for what it is: fast and un-intrusive. However, if you search around the web for articles on Google Desktop Search (now called Google Desktop) you will see all manner of security and performance concerns. In fact, here is a significant issue I posted in Google Groups. I encourage you to try Google Deskbar and participate in the following grass roots movement. ----- While you cannot get it from Google anymore, you can download Google Deskbar directly from PCWorld.com. Install the Google Deskbar. After installation, turn the Report Aggregate Usage Statistics check box in the Google Deskbar Options dialog. It is my hope that Google can tell how many people are actually using Google Deskbar versus how many are using Google Desktop. Driving up the usage statistics should help the cause. Use the Google Deskbar, And I mean really use it! (It's a great tool so this shouldn't be hard). Every time you do an Internet search it must be from the Google Deskbar, this helps drives those statistics. Once you have used it for a week, go to Options > About Google Deskbar > Email Suggestions, and send Google a well-thought-out, and spell-checked email message. In your own words, state everything you like about the Google Deskbar, and everything you do not like about Google Desktop. For now I would not suggest many changes to Google Deskbar, as that defeats the intended purpose. Google Deskbar's main strong point is that it is small, light-weight, works very fast, yet is a very powerful tool- we don't want it to grow big, fat and slow (like the Google Desktop). We want this as alight-weight alternative to the Google Desktop. NOTE: When you are done typing and spell-checking your email, copy all of the text to memory for step #5 below, before you send it. If you have not already done so, it is also recommended to post your information from step #4 above in the Google Deskbar Group. You can quickly get to this group by clicking on the link located in Options > About Google Deskbar > Online discussion. If you are not registered with Google Groups, you will have to register (you can use you own email address to register). If you are willing to do all of this, create a new thread and paste the same information that you placed into your email. This will create discussion board traffic, and Google will be more likely to get the hint. You might also consider posting it to the Google Desktop group. If you participate in other on-line technical forums, newsgroups, or discussion threads, or just know people who use a PC and Google search, discuss this issue openly with them and encourage them participate. Share this information with anyone who has expressed a reasonable interest. Please respect people's junk email preferences, as we really need their help and participation. when sending this information along, Please do not forward this entire message on, as the email will eventually get ugly an unruly. People tend to get turned off by long multi-forwarded email threads with lots of angle brackets. Just copy and paste the text between the lines, paste it into your own email message, and type an intro to your friends. Encourage the people you send this information to, to also follow these steps. We need a grass-roots movement to drive up the usage statistics for Google Deskbar. And we need an email campaign. If everyone interested tells just just a few people, we will soon generate the statistics to help Google get the message. ------
  6. Probably shortly after they release Vista... Nope, later. Straight From The Horse's Mouth: Source: Windows Service Pack Road Map Source: Microsoft's Product for Lifecycle Information I don't know about you, but to me, when Microsoft says "preliminary," I take it to mean "at the the earliest." Have they ever released something on schedule? You guessed it people, that means another year (or longer) of keeping track of umpteen hotfixes (what are we up to 40+, depending on what you are running?). If you are not using a DVD to install Windows XP yet, you soon will be. This is ridiculous! "Go straight to the source and ask the horse, he'll give you the answer that you endorse. That is, of course, unless that horse is the famous Mr. Bill!"
  7. ABBREVIATIONS: YM = Yahoo! Messenger RunKey = [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Yahoo! Pager"="\"C:\\Program Files\\Yahoo!\\Messenger\\ypager.exe\" -quiet" XP = Windows XP Professional (everything should work the same for Windows XP Home or Windows 2000) UA = Unattended Installation OBJECTIVES STATUS: Accomplished—See post #1 this topic thread. Accomplished—YM installs quietly (i.e. without prompts or progress bars). NOTE: Solution is not yet included in Post #1 because the ultimate command line switch combination may change to meet other objectives. for now, the switches are: Start /Wait "Yahoo! Messenger" ymsgr7us.exe /SP- /VERYSILENT /NORESTART Latest Analysis YM launches immediately after installation completes, when installing on fully-booted XP. From other posts in this thread (i.e. I haven't verified these results) this also occurs during XP UA. YM may accomplish the auto-launch as a result of the installation program itself, or via a registry value located under RunKey. At this time, it's uncertain "which came first the chicken or the egg." My educated guess (based on the behavior in the bullet below) is that the installation program triggers the auto-launch. It is clear now that whenever a user first launches YM, the RunKey and "Default" preferences registry settings are created as a result. This has been verified on a PC with three user accounts; only the account that orginally installed YM, has the YM "Default" preferences and RunKey registry settings. The other two XP user accounts do not auto-launch YM when first logging into XP after YM installation (one account is limited, the other an administrator). However, once these other two users manually launch YM, the YM "Default" preferences and RunKey registry settings are immediately created.Attempted Work Arounds: Use the following script command to kill the YPager.exe process during installation: TaskKill /F /T /IM YPager.exe > Nul This works to kill the process once, but it will launch again upon next log on for the user account that installed YM. Import the following registry file to avoid future YM auto-launch: Windows Registry Editor Version 5.00 ; Remove registry key to automatically run Yahoo! Pager at user log on. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Yahoo! Pager"=- The above registry setting will only affect the user account, under which YM was installed (which if installed from CmdLines.txt is the .Default User). Immediately after YM installtion, the other user accounts do not have yet this RunKey registry setting to delete, and will not have it until after the first time the user manually launches YM. [*] Incomplete—Currently working on default registry settings that may avoid the RunKey registry setting creation the first time the user launches YM (in Objective E. below). [*] Latest Analysis Importing preferences for single, known YahooID works well. It appears as if the YM "Default" preferences are stored under [HKEY_CURRENT_USER\Software\Yahoo\Pager] in various subkeys and values. Once a user logs into YM with a YahooID, a new key is created [HKEY_CURRENT_USER\Software\yahoo\Profiles\YahooID]. This key is initially empty, but after the user customizes preferences, this key contains several subkeys and values that seem to override the YM "Default" preferences. If the above theory about YM's "Default" preferences registry settings holds true, I believe a simple script that runs once for each user, importing a .reg file with "Default" YM preferences, should achieve this objective. Such a script would have to execute prior to the user's first manual launch of YM. I do not yet know how to accomplish this. If the "Default" preferences approach does not work, perhaps the script could prompt the user for their YahooID when they first log into XP after YM has been installed, and simply import a preferences registry file customized for that YahooID. Could possibly modify the Start Menu icon to point to a script that checks for this. Will attempt to: Save a registry file with the preferences from a known user's account. Try to coerce YM to use the preferences from the known user's account as "Defaults" by relocating where these settings are placed in the registry Develop a script that imports a imports HKCU .reg file with the new "Default" preferences registry settings. [*] Incomplete—The installation log defaults to %ProgramFiles%\Yahoo!\Messenger\INSTALL.LOG. If it cannot be re-routed through installation switches, this log file could always be copied to the desired location in the installation script after installation is completed. However, installation switches would be preferred. This file can be copied to another location, but cannot be moved. This file tells the YM uninstaller what to remove from the PC, and if it cannot be found, the uninstaller errors. NOTE: The results above (in this post) are occuring during testing on a running Windows XP operating system, I have not yet tested in an UA XPCD installation. Any insights into achieveing any of these objectives are welcome. I'm currently not working at my office that has Virtual PC installed this week, but I'll be testing this further. After objectives are successfully met , with no issues, I will update the first post of this thread accordingly with the step-by-step how to guide.
  8. Original Topic Question: (Removed from post #1 and re-posted here.) Has anyone successfully silently installed Yahoo! Messenger 7? Also, I think I should more clearly state some objectives here, since I want to do more than simply install the application. OBJECTIVES: Obtain a clean Yahoo! Messenger installation executable Install Yahoo! Messenger silently and unattended (from a .cmd script for now) Disable launching of Yahoo! Messenger immediately after installation. Disable launching of Yahoo! Messenger upon user log on for all Windows XP users that are: Already-created To-be-created Pre-Configure Yahoo! Messenger Preferences for all Windows XP users that are: Already-created To-be-created [*] Re-direct the installation log file to a chosen folder. ATTEMPTED ACTIONS: Attempted installing Yahoo! Messenger 7 with the following (Inno Setup) parameters: Start /Wait "Yahoo! Messenger" ymsgr7us.exe /SP- /VERYSILENT /NORESTART /LOGFILE=C:\Installs\Logs\YahooMessenger.log OBJECTIVES STATUS: Accomplished—See post #1 this topic thread. Accomplished—Yahoo! Messenger installs quietly (i.e. without any prompts or progress bars). NOTE: The soution is not yet included in Post #1 because the ultimate command line switch combination may change to meet other objectives. Failed—Yahoo! Messenger launches immediately after installation is complete; need to suppress this. For now I'm using the following to kill the process: TaskKill /F /T /IM YPager.exe > Nul I believe the registry entry below may be responsible for automatically running the application immediately after it's installed. (I'm testing on a fully booted Windows XP operating system with a user logged in, and the application runs immediately after installation.) However, I believe during an unattended installation, the application would most likely will not launch until after both the installation is complete and a user has logged on. So perhaps deleting the registry setting below from each user's profile, before they log on would suppress the auto-run. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Yahoo! Pager"="\"C:\\Program Files\\Yahoo!\\Messenger\\ypager.exe\" -quiet"Windows Registry Editor Version 5.00 I plan on importing this registry entry into each user's profile as they logon to avoid the auto-run. However, I'm not sure this will work (since it may delete the registry setting after Yahoo! Messenger runs), or impact future users: ; Remove registry key to automatically run Yahoo! Pager at user log on. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Yahoo! Pager"=-Windows Registry Editor Version 5.00 Incomplete—The objective above must succeed before this one has a chance of succeeding. Incomplete—Importing preferences for single, known YahooID works well. However, each YahooID's preferences are stored under a registry subkey for that YahooID. This will require developing a script that either edits these registry settings or a .reg file for each YahooID. Perhaps this script should prompt the user for their YahooID when they first log into windows after the application has been installed? The only current action taken toward this objective thus far is to save a registry file with the desired settings from a known user's account. Incomplete—The installation log defaults to %ProgramFiles%\Yahoo!\Messenger\INSTALL.LOG. If it cannot be re-routed through installation switches, this log file could always be copied to the desired location in the installtion script after installation is completed. However, installation switches would be preferred. NOTE: The results above (in this post) are occuring during testing on a running Windows XP operating system, I have not yet tested in an UA XPCD installation. Any insights into these objectives are welcome. I'm not at my office that has Virtual PC installed this week, but I'll be testing this further. After all objectives are met, I will update the first post of this thread accordingly.
  9. This first post in this thread will eventually be edited to contain the entirety of the final solution. For now it only contains tested methods. Please read the thread and add what value you can. Thanks! Yahoo! Messenger Installation Steps Obtain a clean Yahoo! Messenger installation executable: Download msgr7us.exe from the Yahoo web site Run msgr7us.exe Deselect several invasive options on page 2 of 6 of the installation dialog by clicking on Custom Install: NOTE: These are my suggested settings: Accept EULA on page 3 of 6 of the installation dialog. Continue through the installation dialog to page 5 of 6 and STOP. Manually create this folder: %ProgramFiles%\Yahoo!\Installs, and open a copy of Windows Explorer to it. Upon clicking [Next] on page 5 of 6, monitor the folder above; during the web installation's download, ymsgr7us.exe (total size=8453 KB) will be copied here. From the folder above, copy the file above to a working folder. This is the complete Yahoo! Messenger installation file, minus the other Yahoo! application installations. Uninstall Yahoo! Messenger to continue working with and testing the silent installation. Install Yahoo! Messenger silently and unattended (from a .cmd script for now): See thread below for current status... ...to be continued...
  10. Ryan, By any chance did you test running this update as a program install from any of the following? • CmdLines.txt • GuiRunOnce • RunOnceEx If so, what were your results? Also when you were prompted to save a file, do you remember which file? I'm wondering if there could perhaps be a integration conflict similar to how KB885835 and KB885250 gave us fits? I'm away from my test machine this week so I can't test this myself right now.
  11. Or alternatively you could just create the following icon: Target: %SystemRoot%\system32\cmd.exe /C Start "Title" /REALTIME %SystemRoot%\System32\Taskmgr.exeStart in: %SystemRoot%\system32 Then, click on [Change Icon] and put this path in the Look for icons in this file: %SystemRoot%\System32\Taskmgr.exeAnd choose your favorite Task Manager Icon.
  12. I'm sorry I can't help you further with your problem, I do not use the tools you mentioned.
  13. your link is for media player 9 . not 10.Would you believe the WMP 9 version worked with WMP 10? Got file the size and version mixed up.. thanksBoth fixed now. Thanks guys ! (I have a new found appecriation for the work Incroyable does!)
  14. Integration—WORKS. Unattended Installation—WORKS -------------------------------------------------------------------------------------- MS WINDOWS XP PRO SP2 - (40) WITH Windows Media Player 10 & MSN Messenger 7 installed *** NEW *** KB911564 -› Vulnerability in Windows Media Player plug-in with non-Microsoft Internet browsers could allow remote code execution. Download -› 598 KB (February 14, 2006) Switches: KB911564.exe /q /n /z *** NEW *** KB911565 -› Vulnerability in Windows Media Player could allow remote code execution. Download -› 2.2 MB (February 14, 2006) Switches: KB911565.exe /q /n /z *** NEW *** KB913446 -› Vulnerability in TCP/IP could allow Denial of Service. Download -› 786 KB (February 14, 2006) Switches: KB913446.exe /q /n /z *** NEW *** KB911927 -› Vulnerability in Web Client Service could allow remote code execution. Download -› 604 KB (February 14, 2006) Switches: KB911927.exe /q /n /z Plus the updated Malicious Software Removal Tool (KB890830) *** NEW *** KB890830 -› Microsoft® Windows® Malicious Software Removal Tool (v1.13) Download -› 1.4 MB (February 14, 2006) Switches: KB890830.exe /q (cannot use the /integrate; option)
  15. I own full licenses of both Zone Alarm Internet Suite 2006, and Norton Internet Security (2002, 2004, and 2006). I find Zone Alarm 2006 has the strongest Firewall with the most granular controls per web site. I also find it still allows for faster PC performance. However, a huge downside is when you get an alert regarding a new web site, it doesn't let you know the site name, or take you its entry on the site list. It just lets you know what things were blocked, not were they came from. Some web pages pull objects from like 3-6 sites, and you need to see the site names so you can tweak things accordingly (I lock down everything an open it back up web page by web page). Zone Alarm anti-virus scheduler is weaker than Norton's. It's anti-virus scheduler cannot be scheduled for off-hours unless the PC remains fully on 24/7 (i.e. it cannot go into S3 standby mode). Also, unless I missed something, a user must be logged in to perform an anti-virus scan. That blows small office or home office out of the water, where several people may share the PC but only one person administers the PC. Zone Alarm Ad blocking does not appear as strong as Norton's, especially with web sites that use Macromedia Flash or Shockwave Advertisements. I find that the Norton Suite strong in everything that Zone Alarms is weak in (and vice versa). I prefer Norton Anti-Virus mainly because I can use the Windows XP Scheduler Service to schedule anti-virus definition updates and scans. I typically configure the PC to go into Suspend To RAM Standby (S3) after 30 minutes of inactivity. Then using the Windows XP Scheduler, the PC is woken up every night at 2:00 AM, it first downloads the latest viruses updates, then scans the entire system, then goes back to S3 Standby 30 minutes after it completes. I also use Windows Backup the same way at 4:00 AM. A user need not be logged in for either to run. Norton has **** good advertisement blocking. The firewall is adequate, but the Interface to the advanced web site settings has been chunked up over the past few versions (I still prefer 2002 because all the site settings are together in one place, and are accessible by the tray icon menu). System Performance also has taken a noticeable hit successively with each version from 2002 to 2006. Until I can figure out how to get Zone Alarm to sing and dance to the Windows Scheduler the way Norton can, I'm sticking with Norton for my customers. But I do look forward to the Day when the Zone Alarm scheduler grows up in that area. I do not use either suite's Anti-Spam offerings, since there are much better independent anti-spam software solutions. I have customers using Norton's Parental Control, but I have not yet looked in-depth at Zone Alarm's equivalent. As to uninstalling: I have one the very PC I type to you now (in this order) • Installed NIS 2002 (right after build) • Uninstalled 2002 (year or so later) • Installed NIS 2005 15-day trial (late 2004) • Uninstalled NIS 2005 15-day trial (late 2004) • Re-installed NIS 2002 (decided to stay with 2002) • Uninstalled 2002 • Installed NIS 2006 15-day trial (a couple months back) • Uninstalled NIS 2006 15-day trial (when it expired) • Installed Zone Alarm 2006 15-day trial • Uninstalled Zone Alarm 2006 15-day trial (when it expired) • Installed NIS 2004 free (90 days) with my motherboard, but never used At no time did any of these packages generate system stability issues, or not uninstall cleanly. All toolbars and buttons were gone from IE and WE, the registry settings were gone, the program files directories were gone. However both have impacted system performance, though Zone Alarm not as noticeable. But like others here, I don't do too much stupid on my PC, and I also spend most of the time behind a hardware firewall. However I must test applications like these because I support customers who will not pay for hardware firewall (which these days this makes little sense since they are nearly the same price as a software firewall). And yes, when I test these apps, I disabled my hardware firewall. Rather, I think that the biggest security threats today are not viruses, Spam or intrusion attacks so much as Ad-ware and Spyware. There is so much junk coming in it's silly. And not a single anti-spyware software does the job. I personally use 4 of them: the one included in Zone Alarm or Norton suite (both of which are lame, Microshaft's Antispyware BetaForLife, SpyBot Search & Destroy (which has the best Immunize function), and Yahoo! toolbar Anti-Spy. All for of these have caught something on my system that the others have never caught. Any ad-ware is rampant, more than you think. No software does anything about (nor do I read anything about) what I call "Link Tracks". When you browse, a web page and click a link to another site, watch your Address URL blank: many advertisers are resorting to using double links: like this: http://SomeAdvertiser.com?fdfrr4rvv/&link=http://TheSiteYouThoughtYouWereGoingto.com And these things really take a long time if you have locked down the advertiser's web site in your Firewall. Culprits include Tribalfusion, ATDMT, DoubleClick, and many others. Oh, I didn't vote in the poll because I don't know enough about the other suites to pick a worst suite. To me Zone Alarm and Norton Tie for the strongest, each has strengths over the other and weaknesses under the other. But I can't knock any of the others having never used them.
  16. If you can boot from a USB-CD-ROM device, and you have no other alternative, you might look into getting an Iomega Rev drive for the job. But this would cost about US $300.00. to get a drive and one 35GB cartridge. REV comes in a USB model, however if memory serves me it is only be compatible with the USB 2.0 specification, not backward compatible with USB 1.1. So your motherboard will have to have native USB 2.0. The REV can be booted from directly without a PE, floppy, etc (though it is slow). I actually tried this once, but I did not complete the installation. I was just trying to see if I could, and it was so slow that my DVD alternative was much faster. Booting from REV should still work through the various stages of Windows Setup, because the Iomega Rev drive uses the UDF file system and appears like a CD-ROM drive from the system's perspective. So it is essentially, booting from a CD, through a USB bus. But as others have pointed out, if your machines are that old, you might not be able to even boot from a USB device at all. And to use a REV drive, you must be able to boot from a USB-CD-ROM device (my Gigabyte motherboard has USB-HDD, USB-FDD, and USB-CD as possible boot devices).
  17. Here's the link (registration required)Available Updates for Windows XP It's on the same Downloads page as the OPK (farther down). However, the list hasn't been updated since July. So I recommend checking the list here at MSFN
  18. A: Hell No!B: <bleep> No! C: Not according to recent scans with: • SpyBot Search & Destroy 1.4 • Yahoo! AntiSpy • PestScan online: • Microsoft AntiSpy NOTE: All applications are Up-to-Date Typed in "Gogle.com", correctly ended up at "http://www.google.com/"Typed in "www.bulls***webpage.com", got "The page you are looking for is currently unavailable..." Page. However the refresh button works perfectly. I have, in this order:1. Updated the above-mentioned anti-spyware applications. 2. Ensured all preventive measures are enabled in each anti-spyware application. 3. Scanned PC with all the above-mentioned anti-spyware applications. All report clean. 4. Using the above-mentioned anti-spyware applications, removed usage tracks of any kind including: • Cookies • Web form values and passwords • Typed URLS • MRU • Recent documents • Windows Temp files • IE Temporary Internet Files • IE History 5. Reviewed all Browser Add-in objects. Everything object listed was present weeks prior to this issue and is from a signed provider, or was installed with my knowledge. 6. Configured SpyBot S & D to scan upon Next Windows Reboot. 7. Rebooted Windows, SpyBot S&D Scan comes up clean. 8. Scanned AGAIN with all the above-mentioned anti-spyware applications. Results again Clean. 9. Grabbed the following Hijack This log. Logfile of HijackThis v1.99.1 Scan saved at 4:25:29 PM, on 10/7/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Iomega\REV System Software\RevUDF.exe C:\WINDOWS\system32\mqsvc.exe C:\WINDOWS\system32\mqtgsvc.exe C:\Program Files\Microsoft AntiSpyware\gcasServ.exe C:\Program Files\GPSoftware\Directory Opus\dopus.exe C:\Documents and Settings\Administrator\Application Data\MyTraveler\MyTraveler.exe C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe C:\Program Files\Google\deskbar-0.5.95.0\ggviewer.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\NOTEPAD.EXE I:\System Security\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = [url="http://red.clientapps.yahoo.com/customize/ycomp/defaults/sb/*http://www.yahoo.com/search/ie.html"][url="http://red.clientapps.yahoo.com/customize/.../search/ie.html"][url="http://red.clientapps.yahoo.com/customize/.../search/ie.html"]http://red.clientapps.yahoo.com/customize/.../search/ie.html[/url][/url][/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [url="http://red.clientapps.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com"]http://red.clientapps.yahoo.com/customize/...//www.yahoo.com[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = [url="http://red.clientapps.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com"]http://red.clientapps.yahoo.com/customize/...//www.yahoo.com[/url] R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe" O4 - HKCU\..\Run: [DOpus] C:\Program Files\GPSoftware\Directory Opus\dopus.exe O4 - HKCU\..\Run: [MyTraveler] C:\Documents and Settings\Administrator\Application Data\MyTraveler\MyTraveler.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ ATI.ACE\CLI.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/ SPELLOPTION.HTM O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/ SPELLCHECK.HTM O8 - Extra context menu item: spellchecker - C:\Program Files\Autospell60\IEspellchecker.htm O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll O15 - Trusted Zone: [url="http://www.gpsoft.com.au"]http://www.gpsoft.com.au[/url] O15 - Trusted Zone: http://*.msfn.org O16 - DPF: ppctlcab - [url="http://ppupdates.ca.com/downloads/scanner/ppctlcab.cab"]http://ppupdates.ca.com/downloads/scanner/ppctlcab.cab[/url] O16 - DPF: Yahoo! Chat - [url="http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab"]http://us.chat1.yimg.com/us.yimg.com/i/cha...t/c381/chat.cab[/url] O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} (Dldrv2 Control) - [url="http://download.gigabyte.com.tw/object/Dldrv.ocx"]http://download.gigabyte.com.tw/object/Dldrv.ocx[/url] O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - [url="http://go.microsoft.com/fwlink/?linkid=39204"]http://go.microsoft.com/fwlink/?linkid=39204[/url] O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - [url="http://www.my-etrust.com/Support/PestScanner/pestscan.cab"][url="http://www.my-etrust.com/Support/PestScanner/"][url="http://www.my-etrust.com/Support/PestScanner/"]http://www.my-etrust.com/Support/PestScanner/[/url][/url][/url] pestscan.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) [url="http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1123705518796"]http://update.microsoft.com/windowsupdate/...b?1123705518796[/url] O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) [url="http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37240.cab"]http://download.zonelabs.com/bin/promotion...canner37240.cab[/url] O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: RevUDFService - Iomega Corp - C:\Program Files\Iomega\REV System Software\RevUDF.exeStill getting this: When I go to edit a post I get the above message only once. When I go to a forum, or thread it will come up several times each page. [EDIT-1] Adding "http://MSFN.org" to trusted sites doesn't help either. [EDIT-2] When using assitant, I get the above dialog with each click in the assitant interface. [EDIT-3] When I just editing this post, the refresh of the thread generated 29 (no exageration!) such dialogs.
  19. My latest contribution. To obtain the Yahoo! Toolbar Silent installation executables: 01. Close all copies of Internet Explorer 02. From Add/Remove Programs: A. Uninstall all previous versions of Yahoo! Anti-Spy. B. Uninstall all previous versions of Yahoo! Toolbar. NOTE: No reboot is required. 03. Open Internet Explorer and browse to http://toolbar.yahoo.com/ 04. Click on the orange [Free Download] button. 05. The installation package should download and launch. 06. You will see the Welcome screen: 07. Click [Next >] to proceed with the installation. 08. Click [i agree] to accept the license agreement. 09. The install completes, displaying the Congratulations screen. 10. IMPORTANT: DO NOT CLICK ANYTHING YET! 11. Open a copy of Windows Explorer and Type %Temp% in the Address Bar. 12. You will see three executables in your temp folder for Yahoo! Toolbar with AntiSpy. • ycomp_6.2.2.0_ypsr_1.14_us_setup_.exe The downloaded installation package file (name changes each version) • ytb_pub_us_setup_.exe Yahoo! Toolbar executable • ypsr_solo_us_setup_.exe Yahoo! AntiSpy executable The last two files have been the same name for at least the last two versions. 13. Copy these two executables to another folder. 15. Now click [Finish >] on the Congratulations screen. NOTE: At this point, the two files we needed are deleted from %Temp%. 16. Download this script which installs these two executables silently (link at bottom of post): :Start @Echo Off CLS Echo. ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ» Echo. º Installing Yahoo! Toolbar with Anti-Spy º Echo. ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ Echo. Echo. Echo. Echo. Please wait... Start /Wait ytb_pub_us_setup_.exe /SILENT Start /Wait ypsr_solo_us_setup_.exe /SILENT CLS Echo. ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ» Echo. º Installing Yahoo! Toolbar with Anti-Spy º Echo. ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ Echo. Echo. Echo. Echo. Done! Echo. PauseYour folder should now have: To test your silent installation: 1. Repeat steps 1-2 from the above list. 2. Open Internet Explorer and confirm the toolbar is gone. 3. Open Add/Remove Programs and confirm the toolbar is gone. 4. Run the script above. 5. Open Internet Explorer and confirm the toolbar is installed. YahooSilentInstall.zip
  20. Not sure if this is a bug with the site or not, but this didn't happen a day or two ago. Man is it annoying! On nearly every page I'm navigating I get this prompt several times per page. It does not matter if I click Yes or No. IE 6 Prompts: The current web page is trying to open a file on your Computer. Do you want to allow this? Current Site: www.msfn.org File: C:\WINDOWS\system32\shdoclc.dll [ Yes ] [ No ] Warning: allowing this can expose your computer to security risks. If you don't trust the current Web page, choose No. Note this doesn't happen at other sites I visit, just MSFN.org Forums
  21. @prathapml- Thanks for posting the direct link. I didn't post it originally because every time I went to the download page, I was prompted for my Passport. I'm surprised the download link isn't password protected. My first post would've had the complete registration process instructions, except that I registered several months ago (before I the OPK download was available), and I never wrote down the registration steps. I agree their registration process is kludgey! Well, at least we got the word out and folks can get there from here a lot easier now!
  22. I can do PhotoImpact 8. The same technique may apply to XL and 10. Q: Is there still like umpteen install packages for the suite? Q: Is the main icon an InstallShield icon? InstallShield icons may look like: • A white computer with blue screen and a white/blue open software box sitting to the front left • A a grayish blue square background with two grayish arrows pointing down and right. Q: Can you download all of the add-ins (Help, Fonts, etc and store them in a folder?
  23. A classic revisited
×
×
  • Create New...