Windows XP guest registration request

[llewellyn]

I have actually solved the problem of Registration or lack of it and record the solution here for others

There is a software for windows called  Winpatrol . It is available as a free download on the internet.
It its basic form it does many usefull things and even more if you pay for and download the PLUS version.

Among other things
It shows what software is set to be loaded and run at start up in a windows system. I first used it  when I was running Windows ME.
I never ran antivirus software because Win patrol caught and stopped any new software that tries to run.User has to approve every bit of software that runs on the system.
Using Winpatrol I went through all the Microsoft programs  set up to run on my XP  guest and killed the ones that I could see  would have to do with the Registration nonsense. I disabled two programs.
Winpatrol puts a Scotty Dog icon in the tray and if any new software appears and tries to run the DOG Barks.
If you install anything new the dog barks as soon as it runs.It stops the software running until you have  approved  it.
 

[menotu]

Crikes - that surprises me that no Anti Virus/Malware software is needed if Win Patrol is being used.

[agmg]

It doesn't sound like a very "tidy" solution to me, but if it works for you, I'll just pass...

You never know with Windows 

[kjpetrie]

I will be interested to know what happens when the 30 days are up...

You might just have prevented the software that monitors the bomb from running. Doesn't necessarily mean you've disabled the bomb.

[llewellyn]

If I missed the bomb this time I will know the instant it tries to run (my Dog will bark) and then I will completely delete the BOMB software. From my long experience with  Win Patrol I am very confident I will get it sorted. I will make a point, after 30 days ,of reporting here what actually happens and will make a note of the softwares name so every one will know what to look for.

I do not suppose It was anything but luck that kept viruses out of my Windows PC , but the scotty dog barked many a time when some sort of Malware tried to run. The Win patrol system stopped it running and asked for authority . I just clicked  DELETE and never found out what the program was.  Only once in many years I got a boot sector virus which prevented booting so the Winpatrol Scotty dog never got to see it.
After WindowsME  I moved to Redhat for own use but had to keep a windows PC running for the accounting package. That PC never went on internet and no games allowed so never had exposure to viruses.

I wonder if some Linux wizkid will pick up the watchdog idea and make one for Linux.
PS the full version is well worth the price of USD 49 for any windows user. the free version is doing what I need - it will ensure the bomb will only TRY  to run once.

[kjpetrie]

As it's a VM, you might be able to keep it going by saving rather than shutting down, and the bomb, which runs as part of the boot process, might not get the chance. On the other hand, if it does, I doubt the dog will have started monitoring before it halts the boot and either demands activation, or if you've removed that tool, just hangs.

But we''l see.

The key point here is whether your databases will be happy with saving the state, or whether your data gets corrupted by doing that. I found Lotus Approach doesn't like being saved for some reason (I presume something to do with buffering), but all software is different.

[llewellyn]

Using Scotty Dog I found two items in the start up file for XP. They were from source Microsoft and had names that strongly indicated they had to do with date. Scotty Dog makes it possible to prevent a program from running without actually deleting it which is what I should have done. Had I not deleted them I would be able to tell the names here now.
I have done all sorts of tests to see if any normal functions of XP have been affected and everything in Xp seems to be running OK without those two.
I hope that as there is no date info being stored somewhere, the bomb, if it is still embedded somewhere, will find that the system is at the 23rd day (that is the day on which I barred those two items from running).
Scotty Dog documentation does give warnings thta when you suspend programs there is the risk of making  XP non bootable so I would advise caution playing with this. At end September I will record here what actually happens.

[Tony]

llewellyn, basically you're running Linux, and Win XP in VirtualBox. That's about it.

Not sure how to put this. I'm a trained MVP Malware removal Expert
WinPatrol, or any 'third party Software' primarily is a GUI for accessing Advanced features of Windows. Basically what you are doing is utilising the MSconfig Utilility, via WinPatrol. Sure Scotty is cool, important however to get to the guts of the system to truly control these Windows utilities.
You can RUN > "services.msc" also and shut off Services such as, Windows Updates, and on, and on. For legal reasons I wont say any more about disabling Windows services. Black Viper
xp-AntiSpy also takes control of some nuisance 'Services'.

The most useful of these "old favourites" is, ERUNT which takes a Snapshot of your Registry, you install a program, don't like it, run the Erunt Snapshot and your OS will be restored to the state before Installing 'the program.' ERUNT works; Windows System Restore doesn't.
To take it all back home, I believe you running WinXP (Service Pack 3 would be a good idea, latest Drivers, Security, etc.) in a Linux install inside Virtualbox is the Dynamic feature that pleases you.
Say you ran WinXP SP3 outside of Linux, and NOT encased in VB; you'd quite simply be a 'Malware Magnet.'

I've read a few of your threads and you have an imaginative perspective on things, nonetheless, no disrespect intended, I believe you are a Linux Man, and have little understanding of Activating Windows; running Windows, or even what Winpatrol is. Reason I've linked to some stuff is in the hope you may learn something deeper about what you are doing.

I've thrown you a plethora of 'Tools' which you may find interesting; also to the Educated, all these "Tools" have nefarious further functions which I can't speak of here. In fact just knowing the "services.msc", and "msconfig" commands gives access to many things exploited in Windows.
They are also cool utilities for the general Windows User, to save some time tweaking.

A little story about a virus, a broken Modem, and Winpatrol.
I was off line due to my Modem giving up; whilst waiting on delivery the next day for a new one I realised I had a Virus. Odd situation as I've never had a Windows Virus; without being able to go online I felt what a great opportunity to play with this Virus. I used Winpatrol to stop it starting. I noticed in 'Startup' programs once stopping the infected program(Trojan) that each time I stopped it starting a new program appeared. Viruses change their name, they do all sorts of amazing things, to the point when I was cleaning Malware we renamed our removal tools, as the Malware is programmed to identify the removal tools.

Sorry about all that, however I felt llewellyn may find my stories of interest.  

[llewellyn]

Thank you so much Tony  for all the info. I thought I would be forced to join a windows forum somewhere and its fantatsic that you noticed this Topic.
I am making a copy of your reply and will keep in my ¨Linux know how¨"folder so I can easily find it when needed.
Your input will also be vey usefull for others who run into this problem and they will find the answers here ITS JUST GREAT.

[Tony]

Your very welcome llewellyn; I'm glad you took the info in the way I intended, as informative links which hopefully point you to other links whilst getting some basics in tools MS do supply.

I had noticed your imaginative posts and projects. Unfortunately that's just a small % of my terrifying cache of MS info.  

I've notes over about 6 years, collecting about 10 GB's of info over that time on the 'MS innards', during my studies and mentorship from the community of MVP's, and Anti-Malware experts, who volunteer so much of their time to teach others (MS being so lacking in this area !); and how the advanced tools in Windows were being exploited, plus how they could be used to tweak your MS 'ride'.
How to tidy up the mess of a Virus attack without formatting the HDD. Tedious goes nowhere in describing these old techniques.

A decade of XP, now two MS OS's in as many years almost, and another on the way however a lot is just eye candy appealing to people who think; moreso have been trained (Hypnotised to think), to grab the newest offerings from MS, believing ,"It must be better."

Keeping up with malcreants is not easy, and I'm totally sick of it. They'll never stop, ever. Too many holes to exploit !

The PCLinuxOS Forum is what I've fondly termed my 'Holiday / Retirement Place'.
I love it!

(p.s) There's a more than a few Windows Techs on the Forum here !  

Edited: 08 October 2012, 04:56:57 - by me.