Jump to content

Blocking Flash Games Software restriction Policies... Hash


Recommended Posts

Posted

Hmm, not sure with this one, as I have not tested with vanilla systems.

The program does need certain 'trusts' and I have found that on a CC3 system it wont run from a users workspace (N: drive), but needs to be run from the C: drive.

I will have to investigate trusts in vb.net more in the new version.

 

I now have the new version tracking and killing games run from attachments in email :-) Both by hashcheck and looking for swf embeded in other files (.xls etc)

 

Still needs a lot of work but its getting there :-)

Posted (edited)

I'm positively salivating! :eek:

 

The running of games in emails is a real thorn in our side here, and until recently we've had no permission to go through student mail boxes due too the school policy on protecting their privacy!

 

This is being changed for the future thank god. However, it just seems there are too many barriers in the way these days.

 

Keep the motivation going PeterP :D

 

First of all thanks for a gamekiller!

I'm trying to get it working on our network and have a problem.

We are on a vanilla 2003 network, I deployed gamekiller to some test clients OK, but cant get it to work with students. The problem seems to be that gamekillerapp.exe starts as a student logs in and the process runs as that user. Problem is we have our students pretty locked down via group policy, so the gamekiller app doesnt seem to have the priviledges to kill the saflashplayer.exe process or block the swf file from running in IE! very annoying!

I logon as admin with gamekiller running and it works fine!! Should be the other way round. I guess It needs to run gamekillerapp.exe as system or local admin account to work?? Or maybe I'm doing something wrong?

Help!

 

I set up a service to run GameKiller2 that logged on with one of our Enterprise Admin accounts. This was during testing mind you, I never fully deployed it due to the fact the ICT courses were using Flash in their curriculum. Waiting on the hash checking version ;)

Edited by EJWill
Posted

Hello we are having trouble with students running emulators from usb sticks and user areas is there an efficent way to just block .exe from running?

 

Evan Hayes

 

The Oldershaw School

Posted
Hello we are having trouble with students running emulators from usb sticks and user areas is there an efficent way to just block .exe from running?

 

Evan Hayes

 

The Oldershaw School

 

If you're using Group Policy, then Software Restriction Policy should be able to blanket block .exe files. There are other forum threads more dedicated to that however.

Posted

Massive thanks for this PeterP... we now have a vehicle for this uphill battle!

 

We've got some new file servers with screening to move onto this summer and a flash killer will help big time! Looking forward to your developments.

 

Thanks again.

Guest TheLibrarian
Posted
hi there,

just giving this a test on a vanilla network:

when i execute the exe im getting:

 

http://i39.tinypic.com/8vursx.jpg

 

Any Ideas please?

 

This looks to me like you are trying to run the app from a network drive.

 

Dot Net 2 and onwards are very fussy about running from network shares.

 

AFAIK you have to install the Dot Net SDK on every PC to get access to the Dot Net configuration tool, which is where you set up the framework to trust certain executables running from network shares.

 

There could be ways round this with certificates, but to be honest all of what I have said is my understanding from a very brief look at Dot Net framework (which generally tends to make me spit).

  • 2 weeks later...
Posted

I have been having a quick read of this particular thread and am quite interested in this software gamekiller2, the links seem to be down any chance someone can upload the link again?

This software sounds like exactly what i have been looking for.

Many thanks to the creator for the hard work that has been put into is so far. Cant wait to see a later realease. (provided this is still being worked on?)

Posted
I have been having a quick read of this particular thread and am quite interested in this software gamekiller2, the links seem to be down any chance someone can upload the link again?

This software sounds like exactly what i have been looking for.

Many thanks to the creator for the hard work that has been put into is so far. Cant wait to see a later realease. (provided this is still being worked on?)

 

Hey mate,

 

Link should be back online again within a few hours. I had to take emergency backups of the sites that were on my web server due to a failing hard drive. Also, needed some root DNS changes so I'm doing maintenance at the beginning of the holidays opposed to nearer September.

 

I'll give you a PM when it's back online.

Posted

I managed to download the software thanks for that!

Just trying to run it now and it appears to open from what i can see but then closes straight away. Any ideas? anything in particular required.

I have all the .net's installed all the way to v3.5

Posted (edited)

Gamekiller2 is targetted on .net 2

If the program is running, you should see a small magnifying glass in the task bar.

 

Have you made sure to edit the .ini file and make the paths relevent to your setup, the permissions on the logs directory and you have a valid hashlist.

 

The supplied hashlist tool isnt actually able to create the hashlist from scratch, it's badly written and will only append to an existing list (so you need to handcraft the 1st couple of entries)

 

The new version is still being worked on, but development has slowed (Summer is always so busy here, so many new machines and rebuilds happening)

Edited by peterp
  • 2 weeks later...
Posted

I wish I could say the same, we've been let down by a delivery of 3 servers and a SAN. Think I've gone through the entire TV listings of BBC iPlayer to keep myself sane.

 

Take your time though PeterP :)

  • 1 month later...
Posted
I seem to have found a bug with this. I don't think it should be a bug as it should be testing the file hash but it seems to me that if a file is named in a certain way it isn't terminated. If I rename the file to anything else it is. PM me for details.
Posted

Via GPO if you look at either:

Computer Configuration --> Administrative Templates --> Internet Explorer --> Security Page --> Local Machine Zone

or

User Configuration --> Administrative Templates --> Internet Explorer --> Security Page --> Local Machine Zone.

 

The setting Allow Active Scripting if you set that to Enabled then set Allow Active Scripting to Disabled

 

It will prevent SWF files from running in the My Computer Zone (Meaning if someone tries to run a file from the hard drive, or a portable drive it will come up as a white screen in the browser, but they are still able to view SWF content from other websites.

 

I am only in the preliminaries on testing this, but so far it is working.

  • 4 weeks later...
Posted

the kids here have started playing a java based game.

 

I have got gamekiller working for swf games but not java.

 

Will this work with java and if so what do i put in for the kill= option?

 

Dan G

Posted

Hi, If I remember properly, when you run standalone java on the machine it runs under the process javaw. If you put the option kill=javaw then it should fix your problem.

 

Keep in mind that this will stop all standalone java from running on the machine so if you have something like accipio then it will stop it from working.

 

Trav

Posted
Hi, If I remember properly, when you run standalone java on the machine it runs under the process javaw. If you put the option kill=javaw then it should fix your problem.

 

Keep in mind that this will stop all standalone java from running on the machine so if you have something like accipio then it will stop it from working.

 

Trav

 

i tried kill=javaw yesterday and again this morning.

Does not kill it.

Posted
If there is a new version of java released since I got it working. I will see if I can find out what the process is called and I will get back to you.

 

Trav

 

that would be great.

 

the version we have on our pcs is

 

J2SE Runtime Environment 6.0 Update 5.msi

 

Dan

Posted
The problem is that by leaving that kid to waste their time the school are failing them.

 

 

No, they are failing themselves! It is their future and they have to be responsible for their own actions. We have found that SWF files can be run from most programs which makes it impossible to stop, banning them through the proxy will only stop the ones on the intenet, the ones they bring in are another thing.

They need to address their attitude to learning.

Posted

I have had a checked and the process name that runs is definitely called javaw. I'm not sure if you have a copy of the game that you have to check what the process name is on your system. Can you send me a copy of your ini file (it may be an idea to take out your password)? I have a copy of the game which I have attached if you need it.

 

It seems to be an unusual problem but i'm sure we will get to the bottom of it.

 

Trav

Java Example.zip

Posted
I have had a checked and the process name that runs is definitely called javaw. I'm not sure if you have a copy of the game that you have to check what the process name is on your system. Can you send me a copy of your ini file (it may be an idea to take out your password)? I have a copy of the game which I have attached if you need it.

 

It seems to be an unusual problem but i'm sure we will get to the bottom of it.

 

Trav

 

 

that game you attached didn't kill either.

 

attached is our game and ini

 

thanks for help

mcp.zip

Posted

Hi,

 

Sorry for the delay, I had been bombarded with problems for teachers and pupils. I have had a look at your file and tried to use your configuration on one of our machines and you are right, it doesn't stop java from running. I examined your config file and found that you had made the same mistake as me in your settings. The KILL command is case sensitive when looking at the processes. Change your Javaw to lowercase (javaw) and it should kill java as well.

 

Trav

 

P.S. Thanks for the new game ;)

  • Thanks 1
Posted
Hi,

 

Sorry for the delay, I had been bombarded with problems for teachers and pupils. I have had a look at your file and tried to use your configuration on one of our machines and you are right, it doesn't stop java from running. I examined your config file and found that you had made the same mistake as me in your settings. The KILL command is case sensitive when looking at the processes. Change your Javaw to lowercase (javaw) and it should kill java as well.

 

Trav

 

P.S. Thanks for the new game ;)

 

 

thanks for that. it now blocks java games.

 

what about ones that have an .exe

see attached

 

Dan

LineRider V1.1.zip

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...