I think I found the culprit

  • Thread starter Thread starter casey.o
  • Start date Start date
C

casey.o

I took my laptop to a WIFI and downloaded the definition files (DF) for
Security Essentials (SE). Luckily I had the program, because the laptop
is also infected. It would not even allow me to go to sites like
Kapersky, Avast, etc. I did manage to download Avira off of
oldapps.com, and after that. all downloads stopped at 99% and would not
finish. I may have gotten the downmloaded DF files for Security
Essentials, but when I found that there were close to 400 files infected
on the laptop, I decided to just forget the XP desktop and format the
f*cker.

After running SE on the laptop and having to click "Fix it" almost 400
times over a 2.5hour period, it says it suspended those files, then said
it would take a few seconds to complete. That was 2 hours ago. I cant
close Se, nothing else works on the computer except IE8 will load, but
not download anymore. But I did get a prog, called Microsoft Malicious
Software Removal Tool, that runs, and it did a quick check, said it
fixed around 20 erors, then said click to run it in Deep mode, or Full
mode, something like that. It's doing that now. SE cant be stopped
though. It's showing 55 infected files (out of 26,327 files scanned)
at the moment and rising. In fact while typing that sentence it rose to
71.

SE shows the virus as Win32/Sality.AM for EVERY one of those nearly 400
files.

I dont think there is going to be any fixing that computer either.

I DO have a backup, but it's just a COPY, not a clone. I dont trhink
the copy will allow the computer to boot. I'm also not sure how to
replace the copy, other than maybe booting from Linux, and in order to
do that, I will have to get someone to burn me a copy of some sort of
linux on a CD. The laptop has XP-PRO. I dont have a retail copy or
the original Cd for this Lenovo T-53 But I do have a Dell branded
XP-Pro Cd. Maybe Paul or someone can tell me how to go about this,
because I'm lost. And before I spend the ebay prices on a retail XP CD,
I may as well just buy another pre-installed older laptop. Or, I'd
seriously consider sending the whole computer to someone that really
knows linux and have them install that instead, since I really only use
it as a browser at WIFIs, and nothing more. As long as it runs Firefox
or Seamonkey, I dont much care what the OS is, and if I have to cope
with this kind of mess again, or run so much AV software to slow the
computer way down, then I'd rather not use Windows at all.

I may or may not install XP on that laptop, depending on what and how it
needs to be done, and I am now at a complete loss how.

Not to put down XP for those of you who like it, but I wont be using it
at all anymore on any home desktop computers. In fact I wont use any MS
Windows anymore except Win98 and maybe 2K. It looks like Win98 may be
the only OS that survives this mess. I dont know if my dual booted
Win2K partition is infected or not. That is where I first noticed the
problem, but the problem was only shown to be on the flash drive. I'm
not sure how to find out if the 2K files are infected or not. I'd like
to run that Microsoft Malicious Software Removal Tool on Win2K, but to
copy it there means using another flash drive that may well get
infected, or maybe the file will be infected by that time. (It did say
on the MS site that the file runs on Win2k and up). But maybe I should
just replace the whole Win2K folder as well as the Documents and
Settings folder. I have a very recent copy of it right on the computer,
and that is easy to delete the files and reinstall then while booted to
Win98. I dont think there is any AV software the will run on Win2K
anymore and definately not Win98.

Note: This Win98 and Win2K computer can NOT boot from a flash drive.
In fact it only has USB 1.0.
 
linux on a CD. The laptop has XP-PRO. I dont have a retail copy or
the original Cd for this Lenovo T-53 But I do have a Dell branded
XP
Click to expand...

OOPS, it's a T-43 , not 53 (typo)
 
Hi Casey

You do seem to have more than your fair share of problems!!!

Have you any idea where you picked up all this malware?

Dave
Click to expand...

I dont have a clue where I got it from......

According to the Security Essentials, there was Firefox 22 on the
computer which is told me to delete, and said it was infected. But I
never ran it. I just upgraded from FF8 to FF14 a few weeks ago, and
since I was at a WIFI, I decided to download anther newer version, but
not the latest. I just downloaded FF22, for possible later us, rather
than try to download it on dialup. Since I never ran it, I cant see how
that caused the infection, but I deleted it anyhow.

My only other thought is that I just picked up another computer, which
has a brand new install of XP-Pro. It booted right up, but I wanted to
look at the hardware so I copied a utility to it with a flash drive,
which looks at all the hardware. (CPU-Z or also called CPU-ID). I know
that file is fine, I use it on all computers. But if that computer has
the virus, I suppose it could have been transferred to the flash drive,
which was later installed in my other computers. But for now, I dont
even want to touch that computer. I already have 3 computers involved,
so I dont want to add a 4th.

I'm so fed up with this whole thing, I'm seriously considering selling
all my computers on Ebay and getting out of computers entirely. I waste
much time fighting with them, when I should be doing other more
important stuff. This is why I'd rather just find a professional to
install a simple linux distro on my laptop, make sure the WIFI works,
and be done with it. If I have to spend $50, I think that beats
spending 50 hours of frustration time. Sure I can buy a linux CD for $5
and install the OS, but I dont have a clue how to setup the WIFI stuff,
and then there will be the huge hassle of finding drivers.

I enjoy using computers and even enjoy building the hardware part of
them, but fighting software makes me very stressed out, and it's not
good for my health. Either way, I have made a decision to quit using
Windows, other than Win98. XP is no longer supported, and after this
ordeal, I now see how support is needed. There is no way in hell that I
want to use Win7 or 8. I think XP is too complicatred, and too risky.

However, I do need at least email access for my work and personal use.
I think I can continue using Win98 on dialup for that, and still get
some weather radar maps too. But the thought of just gradually shifting
over a smartphone may be in the future, as prices drop for the service.

Looking back over the last few months, I have spent many many
frustrating hours fighting with software, CD burrners, internet
connections, and more..... Most of the time I've spent online was
trying to find solutions for the computer problems. I almost feel like
I've become a slave to these goddamn nmachines. Then I ask myself why?
Sure, I can get some music and videos, or look up a reference of google,
but when I think of the money I spend and even worse the hours and hours
of time, I probably be ahead buying some music CDs, DVD movies, and
getting a set of encyclopedias at a rummage sale. I lived for 40+ years
of my life without all this crap, and life was much easier back then.
Maybe back tracking is a good thing..... All I really need is a
telephone, a word processing typewriter, and my tv set for the news.
And maybe the newspaper. But I would find it hard to be without email.
Other than that, who needs these damn irritating computers!!!
 
OOPS, it's a T-43 , not 53 (typo)
Click to expand...

Hi Casey

You do seem to have more than your fair share of problems!!!

Have you any idea where you picked up all this malware?

Dave
 
I dont have a clue where I got it from......
Click to expand...

<Snipped great tale of woe for brevity only>

Oh dear, Casey!

I've been there and done that! :-)

My solution was to buy an Apple iMac 6 years ago http://www.apple.com
/imac/ so I've always got a reliable machine at hand.

I still play around with other computers though for fun and to help
friends and neighbours. Here's a story I related on another group a
while ago:

I have on my desk a Dell Inspiron N5110 laptop which has
been dropped on the floor by the nine year old son of my builder friend,
Peter! It is in pieces, having been taken apart by an ex-systems analyst
friend of Peter in order to remove the 2.5 inch 500GB hard drive. I
wonder if you can tell me if it was /really/ necessary to remove the
keyboard and dvd/CD unit in order to remove the hard drive? I've not yet
researched the situation!

I did, though, test the Hard Drive and discovered that it has failed.
:-( The good news, though, is that I have a bone fide copy of Disk
Drill which I have used to recover 88GB of data from the duff disk!

http://i62.tinypic.com/m75q1j.jpg

I transferred this to my portable hard drive, lent it to Peter and he
has now copied the data to a new Windows 8 laptop at his own home and
returned my PHD to me! Great fun - and the only cost involved has been
my time! As I'm sure you know only too well, it's a great feeling when
you can help someone out of a hole!

++++++

I am pleased to report that I did successfully mend the broken hinge
using JB Weld and ordered a replacement 500GB Hard Disk on Friday from
Amazon. Although I didn't elect to pay extra for next day delivery (or
indeed pay *anything* for delivery!) you can imagine my surprise when
the hard disk arrived on Saturday morning!

We had lost all electrical power in our home at 7pm on Friday and it was
still off when the postman arrived at around 9.30am. With no access to
the Internet and therefore no means of refreshing my memory by watching
the video again, I decided that I'd attempt to rebuild the computer
anyway! What else was I going to do with no power?!!!

Long story short, here's a piccie of the three main parts once I'd
installed the new hard drive (it is housed underneath the motherboard).
http://i61.tinypic.com/x1j5mh.jpg

Once fully assembled, I fitted the battery, pressed the 'on' button and
........... the machine jumped into life! Whoopee! :-D I had never
encountered the miniturised thin flat cable connectors before, but once
I realised *how* they operated, the connections were a doddle!

As a quick test, I loaded Ubuntu 8.1 from a CD that I had ordered by
post some years ago. All seems fine!

If Peter doesn't have re-installation disks from Dell for Windows 7
(he's searching!!) is there some way of downloading bone fide software
from the Internet and then validating with the product key information
on the sticker on the underside of the computer?

In the meantime, I've downloaded the Antergos ISO recently suggested by
Max. I'll now endeavour to convert it into a bootable CD and then try
loading that onto the Dell! I'll let you know how that goes - I'll try
not to make any more coasters!

==

You can read the whole thread here if you wish:
https://groups.google.com/d/msg/alt.2600/BOPL0_WkjRY/Xz0gZp8zYoEJ

Ubuntu Linux seemed like a cross between Windows and The Apple OS X and
was a doddle to install and set up. If I were you I'd download and try
it for yourself! Full details here: http://www.ubuntu.com/

I wish you good luck! :-)

Dave
 
The Sality Reg Keys link is dead, but there's one on
archive.org and it is a small file (~8KB).

https://web.archive.org/web/2013051...persky.com/downloads/utils/sality_regkeys.zip

It includes a "Disable autorun.reg". What a sense of
humor they have...

Disable autorun.reg
SafeBootWinXP.reg

The latter one, appears to be defining a set of files
for F8 Safe boot at startup.

To run those, you right-click the file, and
select "Merge". And that would likely
take administrator privilege.

Paul
Click to expand...

Funny thing, I just downloaded that "killer file".
I also have one less computer to fight with. The formerly XP desktop
machine has been formatted and I'm installing a 2007 version of PcLinux
on it. (That is all I have on a CD). From what I read about this
virus, there is little fixing of it since it damages files. I'll still
have to find out how to replace my backup of XP on the laptop, but I am
considering finding someone to install linux on it, if I can find
someone. I could buy a CD and install the OS, but I dont even want to
attempt to try to set up the WIFI part of it, especially since I would
have to do it in public or in my car.

How do I go to administrator for that privledges. I never understood
that. I should be there all the time as the only user.....

I dont have time to respond to your other reply now, but I do have one
other quick question. I want to make sure autorun is disabled in
Win2000. To disable it in XP, I found this:


REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\IniFileMapping\Autorun.inf]
@="@SYS:DoesNotExist"

Put into notepad, save as (any filename).REG
Click on it.

Will this same one work for Win2000, or do I need another? (Other
wording). I have hunted the web and cant find much for Win2K. At least
that will block any possible continued contaminations from that that OS
(If it did affect Win2K).

That's about it.
My install of PcLinux is done and it booted. That's the first good
thing that has happened since this mess began....
Except now I have to learn how to use it, even though I have played
around iwth the live CD a little. At least this method is cheaper than
buying a Mac..... Of course I'll still have to try to connect a modem
to this thing! But that's another story and another day (or year)....

In the meantime, that MS malicious tool has found 462 infected files and
is still running, after about 4.5 hours.... (on the laptop).
(I think that computer is history)......
 
I took my laptop to a WIFI and downloaded the definition files (DF) for
Security Essentials (SE). Luckily I had the program, because the laptop
is also infected. It would not even allow me to go to sites like
Kapersky, Avast, etc. I did manage to download Avira off of
oldapps.com, and after that. all downloads stopped at 99% and would not
finish. I may have gotten the downmloaded DF files for Security
Essentials, but when I found that there were close to 400 files infected
on the laptop, I decided to just forget the XP desktop and format the
f*cker.

After running SE on the laptop and having to click "Fix it" almost 400
times over a 2.5hour period, it says it suspended those files, then said
it would take a few seconds to complete. That was 2 hours ago. I cant
close Se, nothing else works on the computer except IE8 will load, but
not download anymore. But I did get a prog, called Microsoft Malicious
Software Removal Tool, that runs, and it did a quick check, said it
fixed around 20 erors, then said click to run it in Deep mode, or Full
mode, something like that. It's doing that now. SE cant be stopped
though. It's showing 55 infected files (out of 26,327 files scanned)
at the moment and rising. In fact while typing that sentence it rose to
71.

SE shows the virus as Win32/Sality.AM for EVERY one of those nearly 400
files.

I dont think there is going to be any fixing that computer either.

I DO have a backup, but it's just a COPY, not a clone. I dont trhink
the copy will allow the computer to boot. I'm also not sure how to
replace the copy, other than maybe booting from Linux, and in order to
do that, I will have to get someone to burn me a copy of some sort of
linux on a CD. The laptop has XP-PRO. I dont have a retail copy or
the original Cd for this Lenovo T-53 But I do have a Dell branded
XP-Pro Cd. Maybe Paul or someone can tell me how to go about this,
because I'm lost. And before I spend the ebay prices on a retail XP CD,
I may as well just buy another pre-installed older laptop. Or, I'd
seriously consider sending the whole computer to someone that really
knows linux and have them install that instead, since I really only use
it as a browser at WIFIs, and nothing more. As long as it runs Firefox
or Seamonkey, I dont much care what the OS is, and if I have to cope
with this kind of mess again, or run so much AV software to slow the
computer way down, then I'd rather not use Windows at all.

I may or may not install XP on that laptop, depending on what and how it
needs to be done, and I am now at a complete loss how.

Not to put down XP for those of you who like it, but I wont be using it
at all anymore on any home desktop computers. In fact I wont use any MS
Windows anymore except Win98 and maybe 2K. It looks like Win98 may be
the only OS that survives this mess. I dont know if my dual booted
Win2K partition is infected or not. That is where I first noticed the
problem, but the problem was only shown to be on the flash drive. I'm
not sure how to find out if the 2K files are infected or not. I'd like
to run that Microsoft Malicious Software Removal Tool on Win2K, but to
copy it there means using another flash drive that may well get
infected, or maybe the file will be infected by that time. (It did say
on the MS site that the file runs on Win2k and up). But maybe I should
just replace the whole Win2K folder as well as the Documents and
Settings folder. I have a very recent copy of it right on the computer,
and that is easy to delete the files and reinstall then while booted to
Win98. I dont think there is any AV software the will run on Win2K
anymore and definately not Win98.

Note: This Win98 and Win2K computer can NOT boot from a flash drive.
In fact it only has USB 1.0.
Click to expand...

I probably would have started with an offline scanner.

To bootstrap yourself, you need at least one clean computer.
Even if it means going to the public library with a blank
CD-R in hand, to download some tool.

There is that Kaspersky offline scanner I mentioned before.
It will quarantine stuff.

There is also an offline scanner here. I've never heard of
this before.

http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline

The Microsoft info page for Sality is laughable, and no help
at all. Instead of writing an idiotic summary they might have
said something cryptic like "level and reload".

*******

The next step, is to do a site search on Bleepingcomputer.

site:bleepingcomputer.com Win32/Sality.AM

It's not looking good. The OP in the thread here, tried to use
offline tools and didn't make progress.

http://www.bleepingcomputer.com/forums/t/339164/i-hate-win32sality/

Apparently your enemy is nasty enough, there is a separate
cleaner tool :-) How cool is that ? The purpose of the "killer"
is likely to at least neutralize it long enough to apply
some bandaids.

*******

Salitykiller
http://support.kaspersky.com/downloads/utils/salitykiller.zip

MSRT
http://www.microsoft.com/downloads/...E0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

SalityRegKeys (removes excess registry keys)
http://support.kaspersky.com/downloads/utils/sality_regkeys.zip

KB2286198 (dated 2010, so check Windows Update log to see if
it is present already - this can be downloaded for safe keeping)
http://www.microsoft.com/en-us/download/details.aspx?id=14416

Details of 2286198 - I don't even have this one in my Windows
Update log ?
https://technet.microsoft.com/library/security/ms10-046

The 2286198 is probably to help prevent re-infection
until the cleanup work is done.

From the Bleepingcomputer page...

Disconnect as many of your pc's from the network as soon
as possible. Run SalityKiller and MSRT on each pc while
still disconnected from the network. Then extract and
run Sality Reg Keys on each infected pc.

Make sure KB2286198 is installed on each pc/server.
Install it manually if you have to do so.

You'll also need to delete all of Sality .LNK files.

Presumably the .lnk files use a specially crafted icon,
to take advantage of MS10-046.

It could even be a program folder you brought from the
Win98 machine (which didn't have the exploit), and it
became activated on a WinXP machine.

Using your favorite search engine, you can probably
find a few more threads about your enemy. The site search
on sites like this, digs up lots of stuff (lots of noise
though - you have to slog through pages of stuff to
find the nuggets within).

site:bleepingcomputer.com Win32/Sality.AM

It's times like this, it would be good to have
a USB key with a "write protect" switch. What you
could try (some day, perhaps not today), is
an SD memory with a write protect on it. You can
get a USB key with an SD hole on the side, which
converts an SD flash memory into a USB key.

This picture shows a green write protect switch
on a Secure Digital card. Taking your SalityKiller
over to the target machine, with the switch in
the protect position, the malware can't write an
autorun.inf on it.

http://upload.wikimedia.org/wikiped...svg/200px-SD_card_unlocked_and_locked.svg.png

I have an older version of this one. I put an SD
from my camera into it, and then read the pictures
off it as if it was a USB key. I like an adapter
with few standards supported, so there won't be
too many slots and the slots won't be too flimsy.
So it is possible to make a write-protected USB,
if you cannot manage to find a dedicated one.

http://www.bestbuy.com/site/transce...01&st=transcend usb secure digital &cp=1&lp=1

HTH,
Paul
 
Paul said:
I probably would have started with an offline scanner.

To bootstrap yourself, you need at least one clean computer.
Even if it means going to the public library with a blank
CD-R in hand, to download some tool.

There is that Kaspersky offline scanner I mentioned before.
It will quarantine stuff.

There is also an offline scanner here. I've never heard of
this before.

http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline

The Microsoft info page for Sality is laughable, and no help
at all. Instead of writing an idiotic summary they might have
said something cryptic like "level and reload".

*******

The next step, is to do a site search on Bleepingcomputer.

site:bleepingcomputer.com Win32/Sality.AM

It's not looking good. The OP in the thread here, tried to use
offline tools and didn't make progress.

http://www.bleepingcomputer.com/forums/t/339164/i-hate-win32sality/

Apparently your enemy is nasty enough, there is a separate
cleaner tool :-) How cool is that ? The purpose of the "killer"
is likely to at least neutralize it long enough to apply
some bandaids.

*******

Salitykiller
http://support.kaspersky.com/downloads/utils/salitykiller.zip

MSRT
http://www.microsoft.com/downloads/...E0-E72D-4F54-9AB3-75B8EB148356&displaylang=en


SalityRegKeys (removes excess registry keys)
http://support.kaspersky.com/downloads/utils/sality_regkeys.zip

KB2286198 (dated 2010, so check Windows Update log to see if
it is present already - this can be downloaded for safe keeping)
http://www.microsoft.com/en-us/download/details.aspx?id=14416

Details of 2286198 - I don't even have this one in my Windows
Update log ?
https://technet.microsoft.com/library/security/ms10-046

The 2286198 is probably to help prevent re-infection
until the cleanup work is done.

From the Bleepingcomputer page...

Disconnect as many of your pc's from the network as soon
as possible. Run SalityKiller and MSRT on each pc while
still disconnected from the network. Then extract and
run Sality Reg Keys on each infected pc.

Make sure KB2286198 is installed on each pc/server.
Install it manually if you have to do so.

You'll also need to delete all of Sality .LNK files.

Presumably the .lnk files use a specially crafted icon,
to take advantage of MS10-046.

It could even be a program folder you brought from the
Win98 machine (which didn't have the exploit), and it
became activated on a WinXP machine.

Using your favorite search engine, you can probably
find a few more threads about your enemy. The site search
on sites like this, digs up lots of stuff (lots of noise
though - you have to slog through pages of stuff to
find the nuggets within).

site:bleepingcomputer.com Win32/Sality.AM

It's times like this, it would be good to have
a USB key with a "write protect" switch. What you
could try (some day, perhaps not today), is
an SD memory with a write protect on it. You can
get a USB key with an SD hole on the side, which
converts an SD flash memory into a USB key.

This picture shows a green write protect switch
on a Secure Digital card. Taking your SalityKiller
over to the target machine, with the switch in
the protect position, the malware can't write an
autorun.inf on it.

http://upload.wikimedia.org/wikiped...svg/200px-SD_card_unlocked_and_locked.svg.png


I have an older version of this one. I put an SD
from my camera into it, and then read the pictures
off it as if it was a USB key. I like an adapter
with few standards supported, so there won't be
too many slots and the slots won't be too flimsy.
So it is possible to make a write-protected USB,
if you cannot manage to find a dedicated one.

http://www.bestbuy.com/site/transce...01&st=transcend usb secure digital &cp=1&lp=1


HTH,
Paul
Click to expand...

The Sality Reg Keys link is dead, but there's one on
archive.org and it is a small file (~8KB).

https://web.archive.org/web/2013051...persky.com/downloads/utils/sality_regkeys.zip

It includes a "Disable autorun.reg". What a sense of
humor they have...

Disable autorun.reg
SafeBootWinXP.reg

The latter one, appears to be defining a set of files
for F8 Safe boot at startup.

To run those, you right-click the file, and
select "Merge". And that would likely
take administrator privilege.

Paul
 
The Sality Reg Keys link is dead, but there's one on
archive.org and it is a small file (~8KB).

https://web.archive.org/web/2013051...persky.com/downloads/utils/sality_regkeys.zip

It includes a "Disable autorun.reg". What a sense of
humor they have...

Disable autorun.reg
SafeBootWinXP.reg

The latter one, appears to be defining a set of files
for F8 Safe boot at startup.

To run those, you right-click the file, and
select "Merge". And that would likely
take administrator privilege.

Paul
Click to expand...

Funny thing, I just downloaded that "killer file".
I also have one less computer to fight with. The formerly XP desktop
machine has been formatted and I'm installing a 2007 version of PcLinux
on it. (That is all I have on a CD). From what I read about this
virus, there is little fixing of it since it damages files. I'll still
have to find out how to replace my backup of XP on the laptop, but I am
considering finding someone to install linux on it, if I can find
someone. I could buy a CD and install the OS, but I dont even want to
attempt to try to set up the WIFI part of it, especially since I would
have to do it in public or in my car.

How do I go to administrator for that privledges. I never understood
that. I should be there all the time as the only user.....

I dont have time to respond to your other reply now, but I do have one
other quick question. I want to make sure autorun is disabled in
Win2000. To disable it in XP, I found this:


REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\IniFileMapping\Autorun.inf]
@="@SYS:DoesNotExist"

Put into notepad, save as (any filename).REG
Click on it.

Will this same one work for Win2000, or do I need another? (Other
wording). I have hunted the web and cant find much for Win2K. At least
that will block any possible continued contaminations from that that OS
(If it did affect Win2K).

That's about it.
My install of PcLinux is done and it booted. That's the first good
thing that has happened since this mess began....
Except now I have to learn how to use it, even though I have played
around iwth the live CD a little. At least this method is cheaper than
buying a Mac..... Of course I'll still have to try to connect a modem
to this thing! But that's another story and another day (or year)....

In the meantime, that MS malicious tool has found 462 infected files and
is still running, after about 4.5 hours.... (on the laptop).
(I think that computer is history)......
Click to expand...

The Microsoft article on Sality, comically claims Sality "makes
the files larger". That implies EXE files are patched with new
code. The interesting part would be how that is done, and whether
it is reversible or destructive (erased some of the working code
of the file). Maybe the Kaspersky tool attempts repair ? If it
only quarantines, that implies destructive changes to the OS.
If you could get it booted, you could try "sfc /scannow". But
I don't know how you'd do that if offline. If the OS won't
boot, it would be pretty hard to do that.

*******

There is a "lecture" here on IniFileMapping...

http://blogs.technet.com/b/fdcc/arc...failure-and-an-ill-advised-registry-hack.aspx

including a reference to how you're supposed to do it...

http://support.microsoft.com/kb/967715

It's possible I used that article 967715 some time ago, when the
article was just a bit shorter than it is now.

*******

Linux is really not all that much different than Windows.
Windows has Command Prompt. Linux has Terminal (or equivalent).
Both Windows and Linux have permissions. Both have administrator
and user accounts, to provide control over who can do what.

Lots of Linux can be done from the GUI. More than was possible
with the older Unix OSes.

Linux will have a Package Manager, and that's how you add
programs to it. For example, to do dialup, you start with
a keyword such as "PPP", and then see what packages show
up in the Package Manager for that. Then, go read a tutorial
article on PPP Setup, to see if there are any special
considerations, anything that needs configuring (header
compression perhaps). Linux will use "useful defaults', but
they can't anticipate some ancient dialup pool you might
be using. Even PPP in Windows could have some surprises.

I would hope a skeletal set of PPP packages is already
on there. As otherwise, it would be pretty hard to get online
with the thing (you'd have to download the packages separately,
and use command-line invocation to finish the job).

An irritation for me, is the temporal evolution, the unnecessary
changes, and goofiness that ensues. For example, at one
time, I would use "ifup" and "ifdown" to control an Ethernet
port. Those have virtually disappeared, to be replaced by
other things. In one case, an additional level of "management"
was added, which actually fouled up and prevented networking
from working.

I have a 50:50 track record on fixing Ethernet. And at least
part of that, is the fact I can't read or search for
tutorial articles while working on it. I used to know a couple
things I could do to get stuff working, but by changing the
subsystems every time I turn around, all the stuff you learn
can easily get thrown out the window.

That won't prevent you from using your new Linux, but it does
cause a large number of tutorial pages to be less than useful.
On the Ubuntu site, there might be an article, where
there will be a separate sentence added to a procedure
for each OS release. Which makes the instructions terribly
hard to follow. "Am I running Cat or Dog release?".

One thing I can promise you about Linux - when something
needs to be adjusted, your time estimate should be "eight hours".
I was finding it "takes all day" to do even trivial things.
That comes from being too careful I guess. Sure, lots of
things only take a few minutes - when they work right.
It's when you have to drop to the command line level,
that the time estimates go out the window.

Paul
 
Back
Top