Blocking Flash Games Software restriction Policies... Hash

[linkazoid]

Once again, Im having to come back to this as students are driving staff mad with flash games.

 

I have it working on a test machine and it works great but how can I package it up for a vanilla domain. I tried using WinInstall LE but it didnt work properly.

 

Regards,

 

Michael

[peterp]

most of the issues will be that I have probably hard coded some paths that are cc3 specific.

i think my original source code is floating around somewhere (sourceforge). you could take a peek there and re-compile it maybe.

 

sorry for the lack of caps, typing while eating lunch.

[linkazoid]

Right I finally have this working... I have deployed it to a room and logged on as a student and was able to kill the task with task manager. Defeating the purpose!

 

We have task manager enabled so that they can kill a crashed application if needed. Is there any way I can make it run as system so that the user can not kill the process?

[kili]

Deny them access to taskmgr immediately you must be mad allowing access to this function. They can stop all sorts of services i.e ant virus using taskmgr

[linkazoid]

Deny them access to taskmgr immediately you must be mad allowing access to this function. They can stop all sorts of services i.e ant virus using taskmgr

 

All important software runs as the SYSTEM user, so cannot be killed by a normal user. Users can only kill applications that they have started.

[kili]

All important software runs as the SYSTEM user, so cannot be killed by a normal user. Users can only kill applications that they have started.

 

Your a braver man than I am, don't give them access wherever possible

[p858snake]

Right I finally have this working... I have deployed it to a room and logged on as a student and was able to kill the task with task manager. Defeating the purpose!

 

We have task manager enabled so that they can kill a crashed application if needed. Is there any way I can make it run as system so that the user can not kill the process?

 

Perhaps you could look and find a package that can run software as a service, that should stop them from being to kill it.

[burgemaster]

Hi Grayda,

 

Could you please let me know how using group policy, you:

 

- Prevent certain filetypes from being copied anywhere

 

We would like to completely block SWF from being copied from thier D: / E: USB flash drives.

Many thanks

Tim

[oz187]

Has anyone got a working copy of GameKiller2 still loafing about really have a problem with stopping people in unmanaged areas accessing SWF Files.

 

Many Thanks,

 

Owen

[gjdb]

Here you go: Hotfile.com: 1-CLICK Dateihoster: GameKiller2.zip

[SamBeckett]

Hi

this looks like its worth a try, we also have a lot of FG players (little sods)

 

has anyone got a working link to the app?

Thanks

[dwhyte85]

Right I finally have this working... I have deployed it to a room and logged on as a student and was able to kill the task with task manager. Defeating the purpose!

 

We have task manager enabled so that they can kill a crashed application if needed. Is there any way I can make it run as system so that the user can not kill the process?

 

You could run a script to sleep for a minute then check the process is running, then if it isn't - re-run the application.

[burgemaster]

Hi all,

 

This seems to be working great apart from one small bug here:

When students goto "My Computer" then select their N drive (homedrive) and then load a swf file it gets blocked (the path is N:game.swf) ... but

If they goto Start then "My Documents", they can sucessfully load the game. This is because the path is "\\nas\student_drives\00a\game.swf"

 

Does anyone please know how to get it to work when they load a game through a \\nas\etc instead of N:

OR

Does anyone please know how to change the "My Documents" to load up N: ?

 

Currently in AD we have the Documents folder set up as: "Redirect to the users Home Directory"

 

Many thanks in advance

[burgemaster]

Click here for GameKiller 2.5

 

I have been looking through the source code for gamekiller2 released here by peterp and with some help from "Jenner" on vbforums, managed to overhall Gamekiller

1) BUG FIXED - Software did not check UNC paths only drives (e.g. N:\game.swf), so "\\server\share\file.swf" would not ever get checked/caught.

2) BUG FIXED - If any of the symbol characters % ^ & { } [ ] # ` were used in the path or filenames anywhere, it would not check the SWF file.

3) BUG FIXED - Right Click or constant random entering passwords in the taskbar icon would sometimes cause MCP to crash.

4) FEATURE - "SHOWICON=TRUE/FALSE" added to the INI. Hide the tray icon at PC level using the INI file.

5) FEATURE - Hide the Tray icon on all workstations - Add SHOWICON or HIDEICON line to the hashtxt.txt file to make the tray icon appear or hide on next recheck of hashlist.txt

6) FEATURE - Wait for mapped drives / paths - If any of the paths in the INI are not found on first load, it will then wait 10sec before checking once more. When the paths are found it will continue to load.

7) FEATURE - Repackaged into a single .MSI for installation on Vanilla networks. Now no REG files or BAT installers to be run.

8) CHANGE - Now installs just 3 files into "%Program Files% \ MCP", these are MCP.exe, MCP.INI, Interop.SHDocVw.dll and also one shortcut to MCP.exe in the start-up folder.

9) CHANGE - To try and stop students guessing what this app does and potentially attack it, all references to "GameKiller2" have been changed to "MCP"

10) CHANGE - Got rid of form-based timers and combined them into a background thread. The background thread requires far less system resources and loops on the same interval as the primary timer.

11) CHANGE - Icon added to the EXE

12) CHANGE – Runs with less footprint, now only around 12000k on Win7 64bit. Not seen CPU usage pretty go over 1%

13) CHANGE - MCP now looks to see if hashlist.txt has changed every 100 cycles (1sec) and if so, reloads immediately. LOADTIMER=X is removed from INI (If timer is set to check the workstation every 5sec this will be 500sec between hashlist.txt checks)

14) Tested on win XP 32/64, Vista 32, Win 7 32/64.

Edited January 20, 2011 by burgemaster

[saudus]

Burgemaster,

 

am interesteing in using this Gamekiller software, please email a link to the software or development site, as all the links in the forum topic appear to be dead.

 

Thank you

[email protected]

Steve Audus

IT System Manager

Chaucer BEC

Chaucer Business and Enterprise College

[SpuffMonkey]

I'd appreciate a working link too - thanks

[h0kan]

Burgemaster,

 

I want to see your program, but all links doesn't work.

 

please email a link to the software on

hlevak(DOG)mail.ru

thank you in advance

[StephenHardy]

I seem to have done something wrong here.... It doesn't matter where I put the hashlist file nothing in there appears to get blocked, rather the FlashPlayer is killed... It did work last night but not now - not sure what I have done. I have removed and reinstalled but still the same issue - any clues?

[stylemessiah]

Be a bit of a dictator on this one, advise all users that flash files not generated as part of course work will constitute a breach of school policy and result in their account being filescreened for flash files. Thats a simple thing to do.

 

Put the onus back on them, and take it off yourself

 

Dont forget who sets the rules

 

If they want to pass a course the balls in their court.

 

I would probably make them save legitimate course related flash files in one shared folder (with subfolders per student) for their class.

 

That way you would only have to monitor that shared folder.

 

Then i would filescreen flash files out of existence within their home folders

 

Thats just one way id probably go about it.

 

You might also consider, if you havent done so already, removing executable permissions for removable drives (Removable Storage Access in Group Policy)

 

We got sick of spending hours trying to work around students trying to work around us, and came to the realisation that if they were spending time trying to circumvent school policy, then they were not applying themselves to coursework anyways, and the best thing to do was to actually enforce school policy and if necessary lock their account down even further as well.

 

Such students tend to play on the fact that any mitigation you attempt will have to apply to every one and think you will likely not do so as the effects on many would cause disruption. Switch the tables on this thinking and save yourself hours of frustration by punishing the particular user, and not everyone.

 

Let them know who's in charge.

Edited March 21, 2013 by stylemessiah

[StephenHardy]

This is actually working - I was being a bit of a gun jumper. The Hash rules only apply when the user attempts to run the .swf in IE, FlashPlayer itself is simply killed - which is fine by me - students creating work can preview in IE and I will get a list of .swfs to check any way. However, within 20 minutes 1 bright spark started to run their games in WMP - which I removed from students and installed VLC - so at present this solution is kind of working for me

[PaulBM]

Is the GameKiller software still available for download? I've tried the links but they appear broken now.

[Arthur]

I've tried the links but they appear broken now.

This link still works.

[Towelie88]

Does Gamekiller only work with IE or is there a way for it to notice what's going on in Chrome?