Configure your Windows Server 2003 virtual system for analysis.
Log on to the virtual machine as administrator.
If the Windows Server Post-Setup Security Updates page appears, select Finish.
If the Manage Your Server window page appears, select Don't Display the page at logon and close the page.
Disable the shutdown event tracker:
Select → , type
gpedit.msc, then click OK.In the Group policy object editor page, select → → , then double-click Display Shutdown Event Tracker.
Select Disabled, then click OK.
Close the Group policy object editor page.
Install the hotfix for Windows Server 2003 Service Pack 1 (if applicable).
Note
Skip this step if you have Windows Server 2003 Service Pack 2.
Go to http://support.microsoft.com/hotfix/KBHotfix.aspx? kbnum=899260&kbln=en-us and install the hotfix corresponding to your version of Windows Server 2003.
Restart the virtual machine.
In the Windows command prompt, run the
tlntsvr /servicecommand.
Turn off the firewall in the virtual image: Select → → → .
Start the telnet service in the virtual image:
Click Start and right-click My Computer.
Select → → , then double-click Telnet.
In the Telnet Properties (Local Computer) page, select Automatic for the Startup type, then select → → .
Run the MergeIDE batch file on the virtual machine:
Download MergeIDE.zip from the following URL on the native computer and then copy it to the virtual machine.
https://www.virtualbox.org/raw-attachment/wiki/Migrate_Windows/MergeIDE.zip
Extract MergeIDE.zip and run the MergeIDE batch file in the VM.
Enable FTP in the virtual image:
Select → → → .
In the Windows Components wizard, double-click Application Server, then double-click Internet Information Services(IIS).
In the Internet Information Services(IIS) pop-up window, select these entries:
File Transfer Protocol (FTP) Service
Common Files
Internet Information Services Manager
Click OK, then click Next.
In the Windows Components wizard, click Finish when the FTP installation is complete.
In the Insert Disk message, click Cancel.
In the Windows XP Setup message, select OK.
Configure FTP settings in the virtual image:
Select → → → , then double-click Internet Information Services.
In the Internet Information Services page, expand the entry under Internet Information Services, then expand FTP Sites.
Right-click on Default FTP Site, select → .
Browse to the C:\ drive, select Read, Write, and Log visits.
Click Apply, then click OK.
Set automatic logon:
Select → , type
rundll32 netplwiz.dll,UsersRunDll, then pressEnter.In the User Accounts window, deselect
Users must enter a user name and password to use this computerand clickApply.In the Automatically log on page, provide these credentials.
User name —
AdministratorPassword —
cr@cker42Confirm Password —
cr@cker42
Disable Windows updates:
Select → → → .
Select Turn off Automatic Updates.
Click Apply and then click OK.
Configure Microsoft Office:
To analyze Microsoft Word, Excel, and PowerPoint files, install Microsoft Office 2003 on the virtual machine.
Lower the security to run macros for the Office applications. In Microsoft Word 2003 and select → → , select Low, then click OK. Do the same for other applications such as Microsoft Excel and PowerPoint.
Go to http://www.microsoft.com/en-us/download/details.aspx?id=3 and download the required Microsoft Office compatibility pack for Word, Excel, and PowerPoint File Formats, then install them on the virtual machine.
You need the compatibility pack to open Microsoft Office files that were created in a newer version of Microsoft Office. For example, to open a .docx file using Office 2003, you need the corresponding compatibility pack installed.
In the Compatibility Pack for the 2007 Office system dialog, select Click here to accept the Microsoft Software License Terms, then click OK.
Configure Adobe Reader:
To analyze PDF files, download Adobe Reader to the native host and copy it to the VM.
Open Adobe Reader and click Accept.
In Adobe Reader, select → → , then remove Check for updates.
In Adobe Reader, select → → , then deselect Adobe Updates.
Configure Java:
Open Java in the Control Panel.
In the Update tab, deselect Check for Updates Automatically.
In the Java Update Warning message, select Do Not Check and then click OK.
Configure system startup:
Run the
msconfigcommand.From the Startup tab, deselect reader_sl and jusched, then click OK.
Note
reader_sl is available only when Adobe Reader is installed.
In the System Configuration message, select
Restart.In the System Configuration Utility message, select Don't show this message or launch the System Configuration Utility when Windows start, then click OK.
Configure the default browser:
In Internet Explorer, select → .
In Home page select Use Blank or Use new tab based on the version of Internet Explorer.
From the Privacy tab, uncheck Turn on Pop-up Blocker.
Go to the Advanced tab of the Internet Options and locate Security, then select Allow active content to run in files on My Computer.
Note
The VM administrator password
cr@cker42is required for VM profile creation. ATD system updates it to a random string as a part of VM creation. The running sandbox VM will have a random password.