<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Teh Tech &#187; KB940157</title>
	<atom:link href="http://tehtech.com/tag/kb940157/feed/" rel="self" type="application/rss+xml" />
	<link>http://tehtech.com</link>
	<description>Being an Admin is Hard Enough</description>
	<lastBuildDate>Wed, 14 Jul 2010 16:14:56 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Automatically Remove Windows Search 4.0</title>
		<link>http://tehtech.com/automatically-remove-windows-search-40/</link>
		<comments>http://tehtech.com/automatically-remove-windows-search-40/#comments</comments>
		<pubDate>Mon, 22 Mar 2010 02:24:00 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Kaseya]]></category>
		<category><![CDATA[Rants]]></category>
		<category><![CDATA[Scripts]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[Batch]]></category>
		<category><![CDATA[KB940157]]></category>
		<category><![CDATA[Windows Search]]></category>
		<category><![CDATA[Windows update]]></category>

		<guid isPermaLink="false">http://tehtech.com/?p=99</guid>
		<description><![CDATA[Microsoft has a funny way of sneaking &#8216;features&#8217; in with patches. In this case Windows Search 4.0 is not really a feature as much as a problem. It was installed on a few of the networks I support as part of our weekly patching, and the next day I got a bunch of calls about reduced [...]]]></description>
			<content:encoded><![CDATA[<p>Microsoft has a funny way of sneaking &#8216;features&#8217; in with patches. In this case Windows Search 4.0 is not really a feature as much as a problem. It was installed on a few of the networks I support as part of our weekly patching, and the next day I got a bunch of calls about reduced performance. I figured that people would complain until it finished indexing. Not the case, it seemed to cripple computers and crush servers. It indexed to the point of actually leaving no resources for users to authenticate to one of our terminal servers. I started looking for a fix and came up with this:<br />
<span id="more-99"></span><br />
<span style="color: #000000;">Kaseya:</span></p>
<div class="box">
<p>Script Name: Remove Windows Search 4.0<br />
Script Description:</p>
<p>IF Test File<br />
Parameter 1 : C:WINDOWS$NtUninstallKB940157$spuninstspuninst.exe<br />
Exists :<br />
THEN<br />
Execute File<br />
Parameter 1 : C:WINDOWS$NtUninstallKB940157$spuninstspuninst.exe<br />
Parameter 2 : /quiet /norestart<br />
Parameter 3 : 3<br />
OS Type : 0<br />
ELSE</p></div>
<p><span style="color: #000000;">Windows logon script or batch file:</span></p>
<div class="box">C:WINDOWS$NtUninstallKB940157$spuninstspuninst.exe /quiet /norestart</div>
<p>If you are using kasaya you can import that script directly and run it to remove the &#8216;feature&#8217;. You can also add the above line to a login script or batch file. This will automatically, silently remove the update with no user intervention or popup.  it literally just disappears.</p>
<p><span style="color: #ff0000;">WARNING: running this on a terminal server with users logged in will cause new users to not be able to authenticate until you restart the server.  Always follow best practice for software uninstalls.  Careful when you run it on servers <img src='http://tehtech.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </span></p>
<p>Just a nice simple way to remove windows search 4.0 infection from your network.</p>
<p>[ad]</p>
]]></content:encoded>
			<wfw:commentRss>http://tehtech.com/automatically-remove-windows-search-40/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
