+ Post New Thread
Results 1 to 4 of 4
Wireless Networks Thread, Deploying a MS Hotfix VIA RM APPAGENT in Technical; We have recently been hit by a fairly minor USB stick virus which turned out to be SHeuR2.MHX. I have ...
  1. #1
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,354
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60

    Deploying a MS Hotfix VIA RM APPAGENT

    We have recently been hit by a fairly minor USB stick virus which turned out to be SHeuR2.MHX. I have created a batch file for the virus removal and I have been able to run it on the affected machines. The problem now is that our AV RM Virus Protect 4 (or to normal people Symantec Corp) doesn't pick it up, either on the USB stick or on the host machine, this means reinfection from a USB stick is highly likely and we will be back to square 1 very quickly.

    I have come across KB971029 which disables the autorun functionality on all but optical media meaning that even an infected USB cannot be used to infect the networked machines. The hotfix comes as an exe file which I haven't ever packaged up before.

    Code:
    [General]
    Name=KB971029
    Version=v1.0.0.0
     
    [Package]
    Description=Windows XP SP2 Security Update KB925486
    Version=1.0.0.0
    OS=5.1.2WS
    ExeFile=KB971029.exe
    UninstallExeFile=c:\windows\$NTUninstallKB971029$\Spuninst\spuninst.exe
    Addcommand= /passive /quiet /norestart
    UninstallCommand= /passive /quiet /norestart
    reboots=1

    Do I need anything else in the .ini file the accompanies the exe file? Also can you add custom packages to the tools folder rather than the applications? Apologies if these are silly questions!

    Many Thanks

  2. #2
    ajs
    ajs is offline

    Join Date
    Jun 2008
    Location
    Wigton, Cumbria
    Posts
    226
    Thank Post
    2
    Thanked 35 Times in 35 Posts
    Rep Power
    23
    Looks OK to me, although shouldn't the description entry say KB971029 rather than KB925486?

    Other than that, copy the folder into Tools, update Package List and you should be able to assign it :-)

  3. Thanks to ajs from:

    Jamo (14th May 2010)

  4. #3
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,354
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60
    O dear! Yes it should it has been copied and pasted from another package and I edited it! Obviously unsuccessfully!!

    Thanks for your help

  5. #4


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,070
    Thank Post
    232
    Thanked 2,719 Times in 2,007 Posts
    Rep Power
    797
    I did the same thing a while ago and my INI file looks like this...

    Code:
    [Package]
    Description=Windows XP Security Update KB971029
    Version=1.0.0.0
    OS=5.1.2WS,5.1.3WS
    ExeFile=WindowsXP-KB971029-x86-ENU.exe
    UninstallExeFile=C:\Windows\$NTUninstallKB971029$\Spuninst\spuninst.exe
    Addcommand= /passive /quiet /norestart
    UninstallCommand= /passive /quiet /norestart
    reboots=1

    Like you, we had an autorun-style virus that RMVP4 didn't detect, so I logged a call with RM and they submitted it to Symantec on our behalf, since they have an enterprise support agreement with them. A day or so after we did this, I found VP4 detected the virus.

  6. Thanks to Arthur from:

    Jamo (14th May 2010)

SHARE:
+ Post New Thread

Similar Threads

  1. can i use this hotfix.....
    By Little-Miss in forum Learning Network Manager
    Replies: 2
    Last Post: 14th May 2010, 09:48 AM
  2. KB939383 Hotfix Requried
    By plock in forum Windows
    Replies: 15
    Last Post: 24th March 2008, 11:37 AM
  3. Randomly named hotfix folders
    By tscnmuk in forum Windows
    Replies: 3
    Last Post: 22nd December 2007, 11:38 AM
  4. Hotfix for KB article 888254
    By tosca925 in forum Windows
    Replies: 8
    Last Post: 26th April 2007, 09:00 PM
  5. MS Hotfix - PDB file?
    By woody in forum Windows
    Replies: 4
    Last Post: 14th March 2007, 11:28 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •