WMI, Query Windows SecurityCenter2">securitycenter

In Windows Vista, the WMI query to get anti-virus information has been changed. Pre-Vista clients used the root/SecurityCenter namespace, while Post-Vista clients use the root/SecurityCenter2 namespace. But not only the namespace has been changed, an example using the query "select ...Read More

CPU type of a dotNet assemby">

If you need to change the CPU type on a dotNet assembly for example, if the assembly needs to write to a registry key and does not work correctly on a 64b machine. Per default it's any CPU, so the ...Read More

darkstat

Darkstat Website: http://dmr.ath.cx/net/darkstat/ Darkstat for Windows port Website: http://www.neophob.com You need WinPcap to use this tool: http://www.winpcap.org - I tested it with version 4.1 beta2. Download: Windows Binary Windows Source (Ugly hack) Example: c:>darkstatdarkstat 3.0.707 (built with libpcap 2.4) WinPcap devices: WARNING: if you don't see any devices here, ...Read More

You can run a cmd.exe shell on vista without login and with full system rights: take ownership of file %WINDIR%system32magnify.exe change permission of file %WINDIR%system32magnify.exe and add full control to your user copy cmd.exe to %WINDIR%system32magnify.exe (overwrite) logoff start "Ease of access" and select "Make ...Read More

Quote from MS Technet: Q: Hey, Scripting Guy! How can I delete folders based on a wildcard character? For example, how can I delete all the folders whose name starts with December? A: Hey, RR. Well, that depends. If you’re running Windows ...Read More

CYGWIN, MPD, shared mem, fork’s and quirk’s">

I tried to compile mpd for Windows using Cygwin. After adding some workarounds (add fake_getaddrinfo.h, check http://musicpd.org/mantis/view.php?id=1566) I was able to compile mpd. But when I tried to start it, mpd failed: $ ./mpd --no-daemon --stdout --verbose binding to any address flushing warning ...Read More

NET Permissions — sign an .NET assembly">

If you want to execute .NET assembly’s from a network share (as an example) you need to increase permissions for this file. Per default you are only allowed to execute local .NET assemblies. You uniquely identifying a .NET assembly by added ...Read More

SetACL is a set of routines for managing Windows permissions (ACLs) from the command line, from scripts and from programs. These routines can be used from various container or interface programs. (http://setacl.sourceforge.net/). If you start with setacl.exe the syntax might be ...Read More

When you look at the taskmanager you'll see several svchost processes. If you want to know what a specific svchost process does keep on reading... Use the CLI command "tasklist /svc" to see it's corresponding PID c:> tasklist /SVC ... svchost.exe ...Read More

CDO.Message (cdosys.dll) to send an SMTP Mail with importance (as a VBS Script)">

I had to create a .VBS script to create an automated E-Mail message. The hardest part was to set the importance of the mail, I've found the solution here: http://www.lewisroberts.com/?p=64 Here come's the script: Dim iMsg Dim iConf Dim Flds Dim ...Read More

I wanted to edit some Registry permissions with the command line utility setacl.exe and wrote a little script to automate this stuff. The name of the registry key is HKEY_LOCAL_MACHINESOFTWAREGeutebrück – yes, with a nasty umlaut. When I used cmd.exe ...Read More

Standard user's in big companies usually runs as unprivileged users, thus they cannot execute admin tasks. But sometimes it's necessary to run a task with admin rights (automated software deploy) - runas, in some situations, is a bad idea because ...Read More