Page 1 of 1 1
Topic Options
#148836 - 2005-09-29 11:33 PM Killing Win9x machines
tr6boy Offline
Starting to like KiXtart

Registered: 2001-10-24
Posts: 131
Is there a way a KiXtart script can mangle Win9x networking well enough and then reboot the machine so it effectively keeps it from being able to communicate on the network next boot? This isn't supposed to be a malicious intent, though it might seem so. These are corporate-owned systems, and their managers have been warned for over a year that all Win9x is to be kept off the network as of a date in October. We're just trying to ensure that if a Win9x machine makes it to a domain login, it will get no farther, and upon rebooting will not be able to communicate TCP/IP. Hopefully this will force those stragglers to cough up and buy more secure manageable machines. Any ideas?
Top
#148837 - 2005-09-30 12:00 AM Re: Killing Win9x machines
Bryce Offline
KiX Supporter
*****

Registered: 2000-02-29
Posts: 3167
Loc: Houston TX
a hammer to the hd...?
Top
#148838 - 2005-09-30 12:06 AM Re: Killing Win9x machines
Gargoyle Offline
MM club member
*****

Registered: 2004-03-09
Posts: 1597
Loc: Valley of the Sun (Arizona, US...
Code:
if @producttype = "windows 95" logoff



at least puts them into an endless loop
_________________________
Today is the tomorrow you worried about yesterday.

Top
#148839 - 2005-09-30 12:42 AM Re: Killing Win9x machines
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
you forgot endif.

you could just remove a dll or two.
in win9x that is possible.

you can actually easily destroy the whole system remotely if sharing is enabled. (I did that once just to try out on one open win9x system found on universities network)
_________________________
!

download KiXnet

Top
#148840 - 2005-09-30 12:51 AM Re: Killing Win9x machines
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
not sure can you del win.com but try:
Code:

if exist("%windir%\win.com")
del "%windir%\win.com"
SHELL "%windir%\RUNDLL32.EXE user.exe,ExitWindows"
endif

_________________________
!

download KiXnet

Top
#148841 - 2005-09-30 04:11 AM Re: Killing Win9x machines
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
That would stop Windows 9x from running at all which is not the question he asked was it?

Just modify a few registry entries in the IP section of the registry and they won't log onto any network but can still run.

Top
#148842 - 2005-09-30 04:29 AM Re: Killing Win9x machines
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
doc, you are too soft...
_________________________
!

download KiXnet

Top
#148843 - 2005-09-30 06:03 AM Re: Killing Win9x machines
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
http://www.fdisk.com/fdisk/scriptfdisk.txt


An FDISK script from a patron of www.fdisk.com named Ryan:

To make FDISK do whatever you want, automagically
go through a dry run in FDISK and write down all the options you enter
edit a file and call it fdisk.scr
in that file, put each option, one per line, and make sure you press
return after each one
save the file
now, when you run fdisk, make sure you run fdisk < fdisk.scr
and viola.. you are all fdisked up

as an example my batch file looked like this
REM ** autoform.bat**
echo Run FDISK?
choice /c:yn
if ERRORLEVEL 2 then goto FORMAT
if ERRORLEVEL 1 then goto FDISK
:FDISK
call fdisk.bat
goto END
:FORMAT
format c: /s/u
goto END
:END

REM **fdisk.bat**
fdisk < fdisk.scr

Top
#148844 - 2005-09-30 02:20 PM Re: Killing Win9x machines
Chris S. Offline
MM club member
*****

Registered: 2002-03-18
Posts: 2368
Loc: Earth
We did this this year here at work. We didn't go so far as to delete critical systems files, but we sure did rename them during the logon script. And to show how insecure 9x is, it let us! Anyway, end result is we no longer have to support 9x!
Top
#148845 - 2005-10-05 04:44 PM Re: Killing Win9x machines
tr6boy Offline
Starting to like KiXtart

Registered: 2001-10-24
Posts: 131
Hi again guys - I'm still trying to come up with the best solution for this. My original subject line was poorly chosen; as NTDOC pointed out, I don't want to destroy Windows, just keep it from spitting TCP/IP anymore. So I tried analyzing a before and after snapshot on a PC, but I'm not getting very far.

Doc, you mentioned "Just modify a few registry entries in the IP section of the registry and they won't log onto any network but can still run." Can I get some help on what part of the registry you're referring to? I think that's the right approach, but I'm not sure what to remove. Thanks again all.

Top
#148846 - 2005-10-05 05:07 PM Re: Killing Win9x machines
maciep Offline
Korg Regular
*****

Registered: 2002-06-14
Posts: 947
Loc: Pittsburgh
Maybe something here could help

Windows 9x TCP/IP Registry Entries

Top
#148847 - 2005-10-05 05:47 PM Re: Killing Win9x machines
Allen Administrator Offline
KiX Supporter
*****

Registered: 2003-04-19
Posts: 4572
Loc: USA
I was just messing with a 98 box and in the Registry renamed the key

HKLM\System\CurrentControlSet\Services\Class\NetTrans to
HKLM\System\CurrentControlSet\Services\Class\-NetTrans

Rebooted and IP was effectively dead.

Might give that a try.
_________________________
(... better days ahead)

Top
Page 1 of 1 1


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 2220 anonymous users online.
Newest Members
Viginette, ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder
17888 Registered Users

Generated in 0.061 seconds in which 0.031 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org