Page 1 of 2
How to highlight files with no publisher?
Posted: 25 Jun 2010 14:28
by othersteve
Hey all,
First off, love XYplorer; it's made my life much easier after having integrated my copy into a WinPE build I use regularly for computer repair.
Just a quick question that'd help streamline my work immensely: any way to highlight files with NO publisher/company info? I malware hunt quite often, and with the new kernel-mode rootkits out there, this'd make spotting illegitimate files a heck of a lot easier.
Thanks!
-Steve
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 14:48
by admin
Hi!
Not highlight but you can search for them. Maybe. Is this info available in the properties listed under Configuration | File Info Tips (the long list on the right)?
Don
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 14:52
by othersteve
Hey Don,
Thanks for the speedy reply... your program and support are truly top-notch!
Yes, it is indeed listed. I have the Company item checked under File Info Tips, and it does pop up upon hovering over the file. If it's possible to search for these items and have them independently listed as well, that's awesome. Any way to preset the search option so it's automatically set each time I boot up XYplorer for use?
Sorry for all the questions, I'm just trying to find a way to speed things up. TDSS and other similar rootkits with their driver patching have been driving people nuts. :-)
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 15:07
by admin
othersteve wrote:Hey Don,
Thanks for the speedy reply... your program and support are truly top-notch!
Yes, it is indeed listed. I have the Company item checked under File Info Tips, and it does pop up upon hovering over the file. If it's possible to search for these items and have them independently listed as well, that's awesome. Any way to preset the search option so it's automatically set each time I boot up XYplorer for use?
Sorry for all the questions, I'm just trying to find a way to speed things up. TDSS and other similar rootkits with their driver patching have been driving people nuts. :-)
Good! In that case you just need the
number of that property (you find it in the list in File Info Tips) and form a search term like this:
In the example I use #35 which is "Company" on my system. These numbers differ between different Windows versions. My example will find all items with no Company info ("") on XP SP3.
Preset the search option: you have numerous ways in XY to wrap a search into a one-click thing. Are you rather a mouse or a keyboard man?
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 15:18
by othersteve
I suppose a mouse person; it'd be fantastic to have one of those user buttons on the toolbar perform the search, say, in a specified volume's Windows directory (I don't mind even having different buttons depending on the drive letter, since they frequently change... i.e., UserButton1 searches in c:\windows\system32 and subfolders, UserButton2 searches in d:\windows\system32 and subfolders, and so on up to perhaps G or H).
Thanks again for all of the help!
-Steve
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 15:23
by admin
othersteve wrote:I suppose a mouse person; it'd be fantastic to have one of those user buttons on the toolbar perform the search, say, in a specified volume's Windows directory (I don't mind even having different buttons depending on the drive letter, since they frequently change... i.e., UserButton1 searches in c:\windows\system32 and subfolders, UserButton2 searches in d:\windows\system32 and subfolders, and so on up to perhaps G or H).
Thanks again for all of the help!
-Steve
Very easy. You can even run this search directly through the address bar (means to say: it's a one-liner).
This will search d:\windows\system32 recursively for items without company info.
Code: Select all
d:\windows\system32?prop:#35:"" /r
In a user button you'd wrap it into a script using the
goto command:
Code: Select all
goto 'd:\windows\system32?prop:#35:"" /r';
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 15:36
by othersteve
Amazing; immensely helpful. Thank you so much!
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 15:39
by admin
othersteve wrote:Amazing; immensely helpful. Thank you so much!
You are 100% the target group I have in mind when developing the app. No wonder you are happy now.
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 15:42
by othersteve
admin wrote:othersteve wrote:Amazing; immensely helpful. Thank you so much!
You are 100% the target group I have in mind when developing the app. No wonder you are happy now.
Yeah; now just one other issue: I own a home lifetime license, and apparently I cannot script with it.
D'oh!
-Steve
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 15:51
by j_c_hallgren
othersteve wrote:Yeah; now just one other issue: I own a home lifetime license, and apparently I cannot script with it.
D'oh!
Oops! Guess you took the economy route which now presents a problem...and since Don doesn't have any process/method to upgrade for a additional fee, maybe he might allow to you resell your home vers to friend who has lesser needs when you buy a full vers? Not sure if that's possible but it was just a thought...
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 15:53
by othersteve
j_c_hallgren wrote:othersteve wrote:Yeah; now just one other issue: I own a home lifetime license, and apparently I cannot script with it.
D'oh!
Oops! Guess you took the economy route which now presents a problem...and since Don doesn't have any process/method to upgrade for a additional fee, maybe he might allow to you resell your home vers to friend who has lesser needs when you buy a full vers? Not sure if that's possible but it was just a thought...
Yes; I just noticed this little dilemma. At the time I thought for certain I'd never need the features of the Pro version, and I was certainly on a budget (and still am, but hey). It would be nice to be able to upgrade...
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 16:00
by zer0
j_c_hallgren wrote:...maybe he might allow to you resell your home vers to friend who has lesser needs when you buy a full vers? Not sure if that's possible but it was just a thought...
It is not possible as XYplorer licenses are not transferable
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 16:17
by j_c_hallgren
zer0 wrote:j_c_hallgren wrote:...maybe he might allow to you resell your home vers to friend who has lesser needs when you buy a full vers? Not sure if that's possible but it was just a thought...
It is not possible as XYplorer licenses are not transferable
Yes, that's true but I thought there might be some way this could be handled on a rare exception basis, esp if he were to buy the Pro vers so Don doesn't loose anything by this but gains income from Pro sale.
Believe me, I'm aware that Don is very busy with the coding/testing but also given that XY doesn't "phone home", other than the 'on your honor' aspect, there isn't a way that such a transfer would be quickly detectable...and it certainly would be better for Don than all the warez copies that seem to be floating around...he would still have the income from both sales but the user would be able to get some of his original purchase back from that sale.
I'm always trying to look out for Don's best interests financially so that's why I find the lack of some upgrade process (even at a somewhat higher cost than if done originally) a bit lacking when compared to some other software products.
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 17:07
by admin
Sorry, but there are no exceptions. This is clearly stated on the web site. And the license is not transferable.
Re: How to highlight files with no publisher?
Posted: 25 Jun 2010 17:24
by admin
And BTW: the functionality offered in this thread is not dependent on scripting at all. Only the user button part.