Tripredacus

I am wondering about this again. We have a customer that got it also. I checked my logs and we got it on the 14th, but it was only on my USB key. Trend cleaned out the rootkit and the autorun.inf but that isn't the virus itself. Those are just files it creates. This makes me thing that the virus does not propogate via other drives, in other words, it is not possible to spread it via UFDs. Does this sound right? Our virus scan results are only finding the files it had created, not the virus itself. This leaves me in doubt that perhaps some of our servers are still infected with the virus but isn't being detected?

Ok the file you want is P17.inf. Make sure your sound card has a HWID of VEN_1102&DEV_0007. You can see this in Device Manager under the Details tab, and select Hardware ID. Fortunately, I already had this downloaded and extracted.

I've had problems getting multiple Sound Blasters to work in Vista 32bit. Never tried 64. I had to contact Creative Support but I was doing something that wasn't supported. Make sure you do not have any other Creative Software installed, and also say your motherboard doesn't have a Creative audio chip on it. I'll take a look at the drivers to see if I can see anything. I don't have a system to test this out in so that'll have to do.

That was regular Audigy SE search on that site but There were like 3 other Audigy SE options in the list to pick from. Make sure they don't have anything different. Also you could try to install it manually and point to the INF from the installer. You may have to extract the installer with Winrar or so. I've done this once in Vista 32, but my situation was different because I imagine your PC isn't in the Audit pass anymore.

I've not found Conflicker doing anything to winlogon.exe. Also unless something has changed in the past week, Conflicker hasn't been activated last I knew. If you have Conflicker, unhide your protected system files, go into Recycler and see if you can find a folder with SID in it... I forget which one, also your root volumes of all drives will have this in it, and an autorun.inf that points to that SID.

Is this the one you got? http://support.creative.com/Products/Produ...e=Sound+Blaster The first one in the list.

This thread doesn't seem like it should be here.

I remember also having problems getting VM Additions to install. I think that you just autorun the CD (or ISO) after you've installed Windows. It should work like that.

There is an HTA example in my sig. As far as the Flash one, I can't provide you with that. I made a demo Projector and loaded it into my winpe.wim. It works fine, being totally capable of managing files and writing to local drives. Projector isn't very easy to use nowadays because Macromedia(Adobe) has removed many functions from Flash to allow direct system integration, so you'll need to use an old version of Flash. For example, newer Projector apps won't let you delete files from the hard drive. This is because Flash is typically used as a web application, not as a standalone one. Aside from the one in WinPE, I had also made a DemoShield replacement in the past that launched off an install CD. Basically, you build your app in Flash, then instead of making an SWF, you publish to a Projector EXE instead. They work perfectly fine in WinPE all by itself, without having to hack it at all. Alternatively, you could also build a shell using AutoIT I suppose.

This was posted elsewhere, but in another forum. http://www.msfn.org/board/index.php?showtopic=128772 Do you know if a new OPK version has come out as well?

The Logon hours are a block, not a timer. So say you have a dude in sales. The sales department is open from 7am to 8pm. You set the logon hours to be between that period M-F. But say you've got a dude in Accounting, and they are only open from 7am to 4pm. You set those hours appropriately. If you are concerned about a specific person working longer than they are supposed to be there, you can modify their logon hours to be a couple over than someone else. If someone stays late to work on something and doesn't tell anyone, then yes they might get logged off while working, and thus won't be able to log back on. However if you set their logon hours appropriately, this shouldn't happen. To be safe (to start) you can set that everyone's hours end at say, 10pm. Your XP clients aren't going to be affected by this option, so you might still get a problem concerning them.

what command are you using to map the network drive? what error does it give you?

I read through all the posts in Application Installs regarding the ability to do a silent install of McAfee, but nothing is working for me. I've tried the following switches: /quiet /norestart /f /silent /q /qb Using any of the above switches seems to do nothing at all and the installer goes as per usual. The filename is VSP_121341_trial30OEM_Release.exe. During the install, it is called McAfee SecurityCenter. After it is installed, the MCSHELL.exe has a file version of 7.2.0.0 It was downloaded from their site In September 2007. What could the switches be for doing a silent for this guy?

I am trying to automate some of our application installs, but one script in particular is popping a confirmation prompt, and does not run automatically. This script is a batch file that installs OfficeReady from a network drive. Is Vista prompting these boxes because I am trying to run a program located on a network share? Note, this is Audit Pass, and the UAC is not enabled. The batch file (which initially has a prompt), also runs an EXE file and an MSP file (which it seems to know what to do with that by itself). In XP (SP2 or SP3) I know I can turn off these prompts by modifying the registry for CheckEXESignature, RunInvalidSignature and LowRiskFileTypes. What is the Vista equivalent for this?

I've only used HTAs and Flash Projector apps as shells for WinPE.

The following is only available to Vista clients and newer (Server 2008 and Windows 7, etc). You need to specify User Logon hour restrictions in order for this to work. Open the Group Policy editor. Navigate to the following: Default Domain Policy (yours might be called something else) User Configuration Administrative Templates Windows Components Windows Logon Options and the option to pick is: Set action to take when logon hours expire. You can select Logoff, lock workstation, etc. Its describes it in the GPEdit Window what your options are. If you are dealing with Legacy clients, you are going to need to find another way to do it.

You need to set NTFS and Share permissions on the Server. You access this under Share->Permissions and also the Security Tab.

As noted on the front page, along with my comment, Conflicker is showing up (again) and I've been having issues with it. Originally it came into our network via an unprotected (new install) server that got infected before we got the the Windows Update site. It had then infected both of my USB keys. We formatted that server and redid it and it was fine after that. I scanned my USB keys with our corporate Trend and cleaned them out. Now what is happening is that while all of our systems are clean of it, the remnants keep reappearing! By that, I mean the SID folder in the Recycler directory, and the autorun.inf. As far as I can tell, the virus wasn't doing anything more than make these files, but it is not showing up on any of our scans anymore, but these files keep showing up every couple days on our UFDs. Anyone else having a problem with this worm?

Verify that the PS2 ports are not disabled in the BIOS. erm wait, you tried serial mice not PS2 mice?

It sounds like an ownership issue? Try to change ownership on a file to your account and see if that lets you view them.

Maybe this helps. http://kb.mozillazine.org/Command_line_arguments Look at the end of the table.

Doesn't Vista come with the Windows pictures slideshow screensaver? Wouldn't that be the same thing basically?

I'm not familiar with that shell, sorry.

You wouldn't need to open the command prompt and type all that in. Just make a batch file and stick it on your desktop or something. It doesn't sound like your gamepad supports power management features.

It can be done with Swish, and presumably Flash as well, since Swish is basically cheap-o Flash.