CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
edit:
April 3rd, @10:35AM
| Board is corrupting my scripts grrrrr
Anyone else having a problem?
The code tags are adding symbols to my script and the quote tags chop up long registry entries:
quote:
File::
C:\WINDOWS\system32\dtdhyaav.dll
C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll
C:\WINDOWS\system32\mboqeskb.exe
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32]
The above comes out like this on copy and paste
1. File::
2. C:\WINDOWS\system32\dtdhyaav.dll
3. C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll
4. C:\WINDOWS\system32\mboqeskb.exe
5.
6. Registry::
7. [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]
8. [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]
9. [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]
10. [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk]
11. [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32]
»HJT Log: New Install Already Dirty!
I ended up having to create the script in a text file for him and attaching it as a zip.
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
| Uh yup. Bill's script here is doing it too:
# KILLALL::
#
# File::
# C:\WINDOWS\uccspecb.sys
# C:\Documents and Settings\Batman\Application Data\MSN6\msnupdate!@#@.exe
»[Trojan] HJT Log: My email is sending out tons of spam by itself
Is this some new "feature"? Defeats the whole purpose of code tags to make a numbered list! This is really gonna make it hard.
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
Zupe
Premium,MVM
join:2001-11-29
New York, NY
clubs:
| reply to CalamityJane
It seems to be working normally for me at the moment, are you still having that issue? Maybe it was just a temporary problem?
If not, maybe it's browser specific? I'm using IE6 here (work).
--
Brain: Pinky, are you pondering what I'm pondering?
Pinky: I think so, Brain, but "Snowball for Windows"? |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
edit:
April 3rd, @10:29AM
| said by Zupe  :If not, maybe it's browser specific? I'm using IE6 here (work). Ding, ding, ding! We have a winner. It's broken in Firefox, works in IE.
It didn't do that before as I have always used FF in here.
So what that means is our members have to be using IE for the script to copy properly. If you try copy and paste with FF it adds those numbers or symbols which screws up the script.
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
Zupe
Premium,MVM
join:2001-11-29
New York, NY
clubs:
| reply to CalamityJane
Looks like a candidate for »Site Bugs
I took a quick look, didn't see any previous posts about that issue.
--
Brain: Pinky, are you pondering what I'm pondering?
Pinky: I think so, Brain, but "Snowball for Windows"? |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
edit:
April 3rd, @10:58AM
| said by Zupe :Looks like a candidate for » Site BugsI took a quick look, didn't see any previous posts about that issue. Me either. I requested lilhurricane to move there (unless this is just a "Jane being an idiot" problem.)
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
lilhurricane
Crunchin' For Cures
Premium,Mod
join:2003-01-11
Purple Zone
clubs:  | Still occurring, Janie? |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
| reply to CalamityJane
*test*
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
| *replies to self*
Nope, still not fixed. Firefox browser copies that as a numbered list and corrupts my script:
1. File::
2. C:\WINDOWS\system32\dtdhyaav.dll
3. C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll
4. C:\WINDOWS\system32\mboqeskb.exe
5.
6. Registry::
7. [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]
8. [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]
9. [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]
10. [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk]
11. [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32]
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
| Wonder if I just posted it in bold...and said copy the following text you seen in bold and paste into notepad:
File::
C:\WINDOWS\system32\dtdhyaav.dll
C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll
C:\WINDOWS\system32\mboqeskb.exe
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32]
*nope - even in preview that is broken
The code tags didn't used to do this and that is what we were using before
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
| reply to CalamityJane
Oh, gawd - It's "view plain"? in firefox.
I have to try to explain that to newbies posting here for help?
...am about ready to slit my wrists at this point. Our newbs in Security Cleanup can barely get copy and paste right.
I don't complain often but this really suks for the Tech support forums.
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
lilhurricane
Crunchin' For Cures
Premium,Mod
join:2003-01-11
Purple Zone
clubs:
 ·Comcast
Host:
TV over IP
Software
RCN
Inside Insight
Team Discovery
| This is IE:
This is FF:
So yes, there's a difference I'm seeing as well |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
edit:
April 4th, @09:05PM
| either way, my having to include instructions to:
1. Hover your mouse over the small gray area above the black box you see below
2. Now locate the *view plain* if you are using firefox or *copy to clipboard* if using IE (and what is Opera view?)
3. Ok click that...
4. Now you will see a text file pop up
5. Now, copy and paste....[insert copy and paste instruction]
Why do the code tags have to create numbered lists?
~opens package of razor blades - holds above wrists~
NO, no, no. I have to deal with newbies here! 
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
lilhurricane
Crunchin' For Cures
Premium,Mod
join:2003-01-11
Purple Zone
clubs: | Don't do that  |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
| reply to CalamityJane
I got fourboxers here helping me on IM with this...Thanks FB! :)
Let's give this a try:
File::
C:\WINDOWS\system32\dtdhyaav.dll
C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll
C:\WINDOWS\system32\mboqeskb.exe
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk ]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32 ]
It works, I think (at least in preview it does, gotta test)! {{{hugs}}} to fourboxers
So, I guess this makes this a *Jane being an idiot* topic...the pre tags will do what I want :)
Ok, wait...in preview I see some extra spaces inserted in those last two registry key fixes?
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL | Is there a way to highlight with the pre tags so they know exactly what text is to be copied?
And those extra spaces are NOT in my original script  |
|
fourboxers
Premium,Mod
join:2003-05-04
Scarborough, ON
clubs:
Host:
Windstream
TekSavvy
For Sale/Wanted
AT&T Northeast
| registry code:File::
C:\WINDOWS\system32\dtdhyaav.dll
C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll
C:\WINDOWS\system32\mboqeskb.exe
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32]
It's not really registry but it seems to work. |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
edit:
April 4th, @09:31PM
| said by fourboxers :It's not really registry but it seems to work. ~It's a little bit Country and a little bit Rock N Roll~
Part of a scripting feature in a fix tool we use called ComboFix
(Avenger also does similar custom scripts)
What tags then to do that?
You're an absolute love for helping with this!
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
fourboxers
Premium,Mod
join:2003-05-04
Scarborough, ON
clubs: | |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL
| Let's Roll!
registry code:File::
C:\WINDOWS\system32\dtdhyaav.dll
C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll
C:\WINDOWS\system32\mboqeskb.exe
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32]
I can definitely work with that!
Can I thank you enough fourboxers :)
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals) |
|
