Ethical Hacking Training at InfoSec Institute Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: Problem with path variables in a cmd shell, Windows IR script |
|---|---|
| Date: | Fri, 12 May 2006 01:39:07 -0400 (EDT) |
On Tue, 9 May 2006 15:59 +0200, l1st3r@gmx.net wrote:
[snip]Hi
I am trying to create a windows first response IR script for Windows 2000 Pro using binaries that do not touch the file system, but am having problems making the environment variables stick.
set path:d:\IR\...; etc...
[snip]
PROBLEM
It does not matter whether I run this from CD or from the writable USB stick, as user or as Administrator (runas /user:Administrator e:\cmdenv.bat), the environment variables appear to be set OK (tested with "set".) But when I run the ir batch script on a second test system, filemon shows that the program DLLs are still taken from the system32 directory. There is no searching for DLLs in the CDROM / USB stick, the environment variables appear to have been ignored. It does not look like a permissions problem.
Does anyone know how to force the DLL paths within a batch script / cmd shell?
One thing: the syntax should be
set path=d:\IR\...;
^
not set path:d:\IR\...;
^-BPB
University of Michigan AntiVirus Team Leader University of Michigan Data Recovery Team Leader PGP 2.6.2 key fingerprint: 0D A5 98 3C 91 DA E0 DD 9C 6D FA 8F 4D 34 95 ED
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: Problem with path variables in a cmd shell, Windows IR script, Bastian Schwittay |
|---|---|
| Next by Date: | Re: Recovering files from RAID 0 set, Rik Bobbaers |
| Previous by Thread: | Re: Problem with path variables in a cmd shell, Windows IR script, l1st3r |
| Next by Thread: | DFRWS File Carving Challenge, Brian Carrier |
| Indexes: | [Date] [Thread] [Top] [All Lists] |