Board is corrupting my scripts grrrrr in Site Bugs

Re: Board is corrupting my scripts grrrrr

Thu, 17 Apr 2008 11:17:27 EDT

CalamityJane : It's just that...a workaround. I would really prefer the code tags not pollute the feature by making the contents a numbered list. Maybe there is a reason for that I don't know?

Re: Board is corrupting my scripts grrrrr

Mon, 07 Apr 2008 20:57:12 EDT

lilhurricane : ..so that work-around is ok for you now?

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 21:43:07 EDT

CalamityJane : *Muah* ~kisses~

You've made my day!

And thank you so much.

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 21:38:16 EDT

fourboxers : Most welcome CJ.

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 21:37:38 EDT

CalamityJane : Let's Roll!
registry code:

File::
C:\WINDOWS\system32\dtdhyaav.dll
C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll
C:\WINDOWS\system32\mboqeskb.exe
 
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32]

I can definitely work with that!

Can I thank you enough fourboxers :)

--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals)

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 21:32:31 EDT

fourboxers :

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 21:30:47 EDT

CalamityJane :

said by fourboxers :

It's not really registry but it seems to work.

~It's a little bit Country and a little bit Rock N Roll~

Part of a scripting feature in a fix tool we use called ComboFix
(Avenger also does similar custom scripts)

What tags then to do that?

You're an absolute love for helping with this!
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals)

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 21:26:28 EDT

fourboxers : registry code:

File::
C:\WINDOWS\system32\dtdhyaav.dll
C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll
C:\WINDOWS\system32\mboqeskb.exe
 
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32]

It's not really registry but it seems to work.

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 21:18:55 EDT

CalamityJane : Is there a way to highlight with the pre tags so they know exactly what text is to be copied?

And those extra spaces are NOT in my original script :(

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 21:16:05 EDT

CalamityJane : I got fourboxers here helping me on IM with this...Thanks FB! :)

Let's give this a try:


File::    
C:\WINDOWS\system32\dtdhyaav.dll    
C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll    
C:\WINDOWS\system32\mboqeskb.exe    
     
Registry::      
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]       
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]       
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]       
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk ]      
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32 ]

It works, I think (at least in preview it does, gotta test)! {{{hugs}}} to fourboxers

So, I guess this makes this a *Jane being an idiot* topic...the pre tags will do what I want :)

Ok, wait...in preview I see some extra spaces inserted in those last two registry key fixes?

--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals)

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 21:04:07 EDT

lilhurricane : Don't do that ;)

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 21:00:52 EDT

CalamityJane : either way, my having to include instructions to:

1. Hover your mouse over the small gray area above the black box you see below

2. Now locate the *view plain* if you are using firefox or *copy to clipboard* if using IE (and what is Opera view?)

3. Ok click that...

4. Now you will see a text file pop up

5. Now, copy and paste....[insert copy and paste instruction]

Why do the code tags have to create numbered lists?

~opens package of razor blades - holds above wrists~

NO, no, no. I have to deal with newbies here! :mad:
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals)

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 20:54:46 EDT

lilhurricane : This is IE:

[att=1]

This is FF:

[att=2]

So yes, there's a difference I'm seeing as well

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 20:49:22 EDT

CalamityJane : Oh, gawd - It's "view plain"? in firefox.

I have to try to explain that to newbies posting here for help?

...am about ready to slit my wrists at this point. Our newbs in Security Cleanup can barely get copy and paste right.

I don't complain often but this really suks for the Tech support forums.
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals)

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 20:40:29 EDT

CalamityJane : Wonder if I just posted it in bold...and said copy the following text you seen in bold and paste into notepad:

File::
C:\WINDOWS\system32\dtdhyaav.dll
C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll
C:\WINDOWS\system32\mboqeskb.exe

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32]

*nope - even in preview that is broken

The code tags didn't used to do this and that is what we were using before
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals)

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 20:36:22 EDT

CalamityJane : *replies to self*

Nope, still not fixed. Firefox browser copies that as a numbered list and corrupts my script:

1. File::
2. C:\WINDOWS\system32\dtdhyaav.dll
3. C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll
4. C:\WINDOWS\system32\mboqeskb.exe
5.
6. Registry::
7. [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]
8. [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]
9. [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]
10. [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk]
11. [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32]
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals)

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 20:34:52 EDT

CalamityJane : *test*

--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals)

Re: Board is corrupting my scripts grrrrr

Fri, 04 Apr 2008 20:34:01 EDT

lilhurricane : Still occurring, Janie?

Re: Board is corrupting my scripts grrrrr

Thu, 03 Apr 2008 10:57:58 EDT

CalamityJane :

said by Zupe :

Looks like a candidate for »Site Bugs

I took a quick look, didn't see any previous posts about that issue.

Me either. I requested lilhurricane to move there (unless this is just a "Jane being an idiot" problem.)
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals)

Re: Board is corrupting my scripts grrrrr

Thu, 03 Apr 2008 10:54:11 EDT

Zupe : Looks like a candidate for »Site Bugs

I took a quick look, didn't see any previous posts about that issue.
--
Brain: Pinky, are you pondering what I'm pondering?
Pinky: I think so, Brain, but "Snowball for Windows"?

Re: Board is corrupting my scripts grrrrr

Thu, 03 Apr 2008 10:28:18 EDT

CalamityJane :

said by Zupe :

If not, maybe it's browser specific? I'm using IE6 here (work).

Ding, ding, ding! We have a winner. It's broken in Firefox, works in IE.

It didn't do that before as I have always used FF in here.

So what that means is our members have to be using IE for the script to copy properly. If you try copy and paste with FF it adds those numbers or symbols which screws up the script.
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals)

Re: Board is corrupting my scripts grrrrr

Thu, 03 Apr 2008 10:08:44 EDT

Zupe : It seems to be working normally for me at the moment, are you still having that issue? Maybe it was just a temporary problem?

If not, maybe it's browser specific? I'm using IE6 here (work).
--
Brain: Pinky, are you pondering what I'm pondering?
Pinky: I think so, Brain, but "Snowball for Windows"?

Re: Board is corrupting my scripts grrrrr

Thu, 03 Apr 2008 05:50:42 EDT

CalamityJane : Uh yup. Bill's script here is doing it too:

# KILLALL::
#
# File::
# C:\WINDOWS\uccspecb.sys
# C:\Documents and Settings\Batman\Application Data\MSN6\msnupdate!@#@.exe

»[Trojan] HJT Log: My email is sending out tons of spam by itself

Is this some new "feature"? Defeats the whole purpose of code tags to make a numbered list! This is really gonna make it hard.
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals)

Board is corrupting my scripts grrrrr

Thu, 03 Apr 2008 05:40:54 EDT

CalamityJane : Anyone else having a problem?

The code tags are adding symbols to my script and the quote tags chop up long registry entries:

quote:
File::
C:\WINDOWS\system32\dtdhyaav.dll
C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll
C:\WINDOWS\system32\mboqeskb.exe

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32]

The above comes out like this on copy and paste

1. File::
2. C:\WINDOWS\system32\dtdhyaav.dll
3. C:\Documents and Settings\All Users\Application Data\xmvwtobm.dll
4. C:\WINDOWS\system32\mboqeskb.exe
5.
6. Registry::
7. [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B1226B4-0B81-5117-37BD-06CE9BA42546}]
8. [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1D04CDB9-767F-15DD-5E30-081FD0F44FE3}]
9. [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}]
10. [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcArpQk]
11. [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winpdc32]
»HJT Log: New Install Already Dirty!

I ended up having to create the script in a text file for him and attaching it as a zip.

--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2008
Proud Member of ASAP (Alliance of Security Analysis Professionals)