Help - Search - Members - Calendar
Full Version: uxtheme.dl_ hacked !
MSFN Forums > Unattended Windows Discussion & Support > Unattended Windows 2000/XP/2003
Pages: 1, 2

   


Google Internet Forums Unattended CD/DVD Guide
Aaron
Sep 12 2003, 04:44 PM
QUOTE (Yazoo @ Sep 12 2003, 10:54 PM)
Hello, I am having a few problems with this uxtheme.dl_

I copied it to the i386 folder, overwriting the old one, but when I install it doesn't work.  I get the classic style only.  Also the control panel for ATI catalyst 3.7 doesn't install, but the drivers do.  Also the restarting bit at the end doesn't work either sad.gif
Everything else in the batch file works too.  Can someone look at my batch and winnt.sif file:

DefaultThemesOff = no in your winnt.sif is causing Windows to use the Classic Theme by default. However, you should download and install a visual style from www.themexp.org to test if the uxtheme.dl_ hack was successful.
Yazoo
Sep 12 2003, 04:46 PM
I am soooo new to this unattened install business, as of this morning I knew nothing. Thanks for that info Paul. It will make the batch file a little smoother now. But I am still perplexed as to why the UXTHEME.DL_ doesn't work?
Yazoo
Sep 12 2003, 04:49 PM
QUOTE (AaronXP @ Sep 12 2003, 04:44 PM)
QUOTE (Yazoo @ Sep 12 2003, 10:54 PM)
Hello, I am having a few problems with this uxtheme.dl_

I copied it to the i386 folder, overwriting the old one, but when I install it doesn't work.  I get the classic style only.  Also the control panel for ATI catalyst 3.7 doesn't install, but the drivers do. Also the restarting bit at the end doesn't work either sad.gif
Everything else in the batch file works too.  Can someone look at my batch and winnt.sif file:

DefaultThemesOff = no in your winnt.sif is causing Windows to use the Classic Theme by default. However, you should download and install a visual style from www.themexp.org to test if the uxtheme.dl_ hack was successful.

I have tried it with a Visual Style and it didn't work.
Paul 365
Sep 12 2003, 04:51 PM
I was just going to agree with you Aaron but then i looked - and this is what i have in my .sif file an it works perfect.

CODE
[Shell]
   CustomDefaultThemeFile = "%SYSTEMDRIVE%\Windows\Resources\Themes\DarkXP.theme"
   DefaultStartPanelOff = No
   DefaultThemesOff = No
Yazoo
Sep 12 2003, 04:55 PM
if I copy my themes into $OEM$/$$/Themes will the setup copy thefiles into C:\windows\resoureces\themes
Bachus
Sep 12 2003, 04:56 PM
No, to do that it needs to be in $$\Resources\Themes
Paul 365
Sep 12 2003, 04:57 PM
Edit - What he said ^^^ wacko.gif
Aaron
Sep 12 2003, 04:57 PM
oops, made a mistake there!
Yazoo
Sep 12 2003, 05:14 PM
well I'm about to burn another CDR-W then install it on my test bed machine.

Moved themes to $$\Resources\Themes
Cursors to $$\Cursors
and psshutdown.exe to $$\system32

I also copied the UXTHEME.DL_ from this thread to the i386 folder again.
Paul 365
Sep 12 2003, 05:23 PM
Good luck
Aaron
Sep 12 2003, 06:20 PM
Just heard from a source that the process to add your own hacked files into a compressed cab file (EX_, DL_ and such) and getting past the digital signature protection can be done using the CAB SDK from Microsoft. More info soon!

Edit: hmm, the only page I could find: http://msdn.microsoft.com/library/default..../html/cabdl.asp I'll be surprised if an app from 1997 works for creating CAB files for XP
miso1391
Sep 12 2003, 09:26 PM
Hi

AaronXP

Please don't trust your source ! biggrin.gif




hint :
Click me hard biggrin.gif
Aaron
Sep 13 2003, 04:50 AM
What's special about Cabpack that allows Windows Setup to continue without error? Or did you make extra modifications to the UXTheme.dll file itself to bypass the Digital Signature?
Yazoo
Sep 13 2003, 05:08 AM
I haven't got the UXTheme.dll to work yet, my last attempt failed at the GUI with an internal structure error. Also I am tired of erasing and then burning to CDR-W. I'm gonna get Virtual PC and then start again.

@AaronXP: I guess the way to find out is to compress the DLL with Cabpack and see if the installer excepts it. I will give this a go later today after I get VPC.
GreenMachine
Sep 13 2003, 06:25 AM
I am a little confused here. Setup does notice that the UXTHEME.DL_ and SFC_OS.DL_ are "incorrect", and reports so in the setuperr.log. This in itself does not seem to cause any errors ( ... on my system ... ). Does replacing a file with an "incorrect", yet working version generally cause an error, or stop setup? Otherwise, isn't there an OEM setting to allow OEM files to overwrite windows system files? Is the issue really with the compressor: why would CabPack be any better than MS's CabArc? Thanks for any light you can shed on this.
Screemer
Sep 13 2003, 06:31 AM
I have a tip for you guys that want to add the hacked uxtheme.dll to a installed xp at least..

This might have been discussed here but I am posting this anyhow.

1. unpack the zip file. you'll get a uxtheme.dl_
2. expand the uxtheme.dl_ using expand uxtheme.dl_ uxtheme.dll
3. copy uxtheme.dll to c:\
4. reboot into failsafe with command prompt
5. cd %windir%\system32\
6. rename uxtheme.dll uxtheme.dll.old
7. cd\
8. copy uxtheme.dll c:\%windir%\system32\uxtheme.dll
9. reboot back into regular XP

all done..

I have used this method on 3 workstations and they all had fileprotection still enabled.. I LOVE THIS hacked version of uxtheme.dll..smile.gif
miso1391
Sep 13 2003, 07:31 AM
Hi

AaronXP

I told you don't trust your source biggrin.gif ( There is no Digital Signature )




Last hint :
If you click me realmad.gif I will kill you !
Yazoo
Sep 13 2003, 07:43 AM
laugh.gif Why don't you just come out and tell us what you did?

blink.gif I don't see the point in keeping this to yourself :/
Aaron
Sep 13 2003, 07:50 AM
Here's the setuperr.log I got when I used the hacked UXTHEME.DL_ and Metapad compressed into NOTEPAD.EX_:

CODE
Error:
D:\i386\NOTEPAD.EX_ was not copied to C:\WINDOWS\NOTEPAD.EXE because of the following error:
No signature was present in the subject.


***

Error:
Setup detected that the system file named [c:\windows\system32\uxtheme.dll] is not signed properly
by Microsoft.  This file could not be restored to the correct Microsoft version.
Use the SFC utility to verify the integrity of the file.

***


Still works fine though, Setup did not abort or show any screens to say one of the files failed to copy. Even if it did, it may have automatically proceeded. Notepad isn't present in the Windows or dllcache folder but its in System32.
Yazoo
Sep 13 2003, 08:23 AM
I think makecab compressed the file to MSZIP format whereas CabPack allows the LZW compression. I think the setup checks for LZW somehow. God this is addictive wish I was home now and I would check it out.
Aaron
Sep 13 2003, 10:30 AM
You are right, it seems miso1391's hacked UXTHEME.DL_ was made using LZX compression at a value of 21, and the byte size matches my created UXTHEME.DL_ (using cabpack) with miso1931's.

Further tests shows that compressing UXTheme.dll with Windows XP's built-in makecab utility will cause setup to halt. Also, I'm testing the modified notepad.exe with LZX compression, to see if it actually copies to three different folders rather than one (not important, but willing to see the difference smile.gif )

Edit: no difference on notepad.exe whether its compressed with Windows XP's Makecab or Cabpack's LZX compression.

I've noticed that miso1931's uxtheme.dll md5 sum is different to a hacked copy that I've had since SP1 came out, even though they carry the same byte size. The answer lies in that file rather than the compression used.
Paul 365
Sep 13 2003, 10:54 AM
It does have a different md5, but i did a BC of it the other day and it is only 2 bytes that are different. Hardly a lot but who knows....

Edit - Unless that little change causes it to match the sig or md5 of the correct file.... Is that even possible?
Aaron
Sep 13 2003, 11:03 AM
miso's uxtheme.dll needs to be hex-compared with vorte[x]'s hacked uxtheme.dll to see the slight different. (Vorte[x] was the source of the hacked uxtheme files for XP and XP SP1)
Paul 365
Sep 13 2003, 11:16 AM
Thats what i did, using Beyond compare.
Aaron
Sep 13 2003, 11:33 AM
QUOTE (Paul 365 @ Sep 13 2003, 06:16 PM)
Thats what i did, using Beyond compare.

Did it tell you what value was changed at what offset? I would like to try hex-editing vorte[x]'s hacked uxtheme.dll file to force Setup to allow this to go through.
Paul 365
Sep 13 2003, 12:05 PM
It did yes - but as that was the only difference - changing it would just make it the same file as the one miso gave us.
I think i am missing the point as i dont understand what you would gain from that.


Edit sorry it dosnt give me the offset, bc is more of a text based compare tool.
Yazoo
Sep 13 2003, 01:37 PM
Well I finally got the uxtheme.dl_ to install, but I have another problem. Its doesn't reboot like it should and it doesn't clear out the drivers folder. Also the visual style is still classic I have to manually select my visual style and apply it.

@Paul 365: In you post, below, Does it bootup with the DarkXP visual style enabled?
QUOTE
[Shell]CustomDefaultThemeFile = "%SYSTEMDRIVE%\Windows\Resources\Themes\DarkXP.theme"
DefaultStartPanelOff = No
DefaultThemesOff = No
Paul 365
Sep 13 2003, 01:42 PM
yes sir it sure does.

Open your .theme file with a text editor and copy and paste it here, this smacks of a path error or something like that.
Yazoo
Sep 13 2003, 01:51 PM
Heres my .theme file
CODE
; Copyright © Microsoft Corp. 1995-2001

[Theme]

; My Computer
[CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\DefaultIcon]
DefaultValue=C:\Program Files\Object Desktop\IconPackager\Themes\BlueCurve\BlueCurve.icl,1

; My Documents
[CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\DefaultIcon]
DefaultValue=C:\Program Files\Object Desktop\IconPackager\Themes\BlueCurve\BlueCurve.icl,0

; My Network Places
[CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\DefaultIcon]
DefaultValue=C:\Program Files\Object Desktop\IconPackager\Themes\BlueCurve\BlueCurve.icl,2

; Recycle Bin
[CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon]
full=C:\Program Files\Object Desktop\IconPackager\Themes\BlueCurve\BlueCurve.icl,5
empty=C:\Program Files\Object Desktop\IconPackager\Themes\BlueCurve\BlueCurve.icl,4



[Control Panel\Colors]
ActiveTitle=62 113 170
Background=62 113 170
Hilight=62 113 170
HilightText=255 255 255
TitleText=255 255 255
Window=255 255 255
WindowText=0 0 0
Scrollbar=212 208 200
InactiveTitle=246 246 246
Menu=255 255 255
WindowFrame=0 0 0
MenuText=0 0 0
ActiveBorder=212 208 200
InactiveBorder=212 208 200
AppWorkspace=128 128 128
ButtonFace=246 246 246
ButtonShadow=154 154 154
GrayText=117 117 117
ButtonText=0 0 0
InactiveTitleText=139 139 139
ButtonHilight=255 255 255
ButtonDkShadow=92 92 92
ButtonLight=241 239 226
InfoText=0 0 0
InfoWindow=255 255 225
GradientActiveTitle=62 113 170
GradientInactiveTitle=246 246 246
ButtonAlternateFace=181 181 181
HotTrackingColor=68 100 172
MenuHilight=62 113 170
MenuBar=246 246 246


[Control Panel\Cursors]
Arrow=%WinDir%resources\Themes\Ximian\Cursors\BC_NormalSelect.cur
Help=%WinDir%resources\Themes\Ximian\Cursors\BC_HelpSelect.cur
AppStarting=%WinDir%resources\Themes\Ximian\Cursors\BC_working.ani
Wait=%WinDir%resources\Themes\Ximian\Cursors\BC_Busy.ani
NWPen=%WinDir%resources\Themes\Ximian\Cursors\BC_Pen.cur
No=%WinDir%resources\Themes\Ximian\Cursors\BC_Unavailable.cur
SizeNS=%WinDir%resources\Themes\Ximian\Cursors\BC_SizeVert.cur
SizeWE=%WinDir%resources\Themes\Ximian\Cursors\BC_SizeHor.cur
Crosshair=%WinDir%resources\Themes\Ximian\Cursors\BC_Cross.cur
IBeam=%WinDir%resources\Themes\Ximian\Cursors\BC_Select.cur
SizeNWSE=%WinDir%resources\Themes\Ximian\Cursors\BC_SizeDiag2.cur
SizeNESW=%WinDir%resources\Themes\Ximian\Cursors\BC_SizeDiag1.cur
SizeAll=%WinDir%resources\Themes\Ximian\Cursors\BC_Move.cur
UpArrow=%WinDir%resources\Themes\Ximian\Cursors\BC_Up.cur
DefaultValue=Windows default
Link=

[Control Panel\Desktop]
Wallpaper=%WinDir%Resources\Themes\Ximian\Wallpapers\14501Aqua_Blue.jpg
TileWallpaper=0
WallpaperStyle=2
Pattern=
ScreenSaveActive=0

[Control Panel\Desktop\WindowMetrics]

[Metrics]
IconMetrics=76 0 0 0 91 0 0 0 91 0 0 0 1 0 0 0 245 255 255 255 0 0 0 0 0 0 0 0 0 0 0 0 144 1 0 0 0 0 0 1 0 0 0 0 86 101 114 100 97 110 97 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0  
NonclientMetrics=84 1 0 0 1 0 0 0 15 0 0 0 17 0 0 0 18 0 0 0 20 0 0 0 244 255 255 255 0 0 0 0 0 0 0 0 0 0 0 0 188 2 0 0 0 0 0 1 0 0 0 0 86 101 114 100 97 110 97 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 17 0 0 0 15 0 0 0 245 255 255 255 0 0 0 0 0 0 0 0 0 0 0 0 188 2 0 0 0 0 0 1 0 0 0 0 86 101 114 100 97 110 97 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 18 0 0 0 19 0 0 0 245 255 255 255 0 0 0 0 0 0 0 0 0 0 0 0 144 1 0 0 0 0 0 1 0 0 0 0 86 101 114 100 97 110 97 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 245 255 255 255 0 0 0 0 0 0 0 0 0 0 0 0 144 1 0 0 0 0 0 1 0 0 0 0 86 101 114 100 97 110 97 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 245 255 255 255 0 0 0 0 0 0 0 0 0 0 0 0 144 1 0 0 0 0 0 1 0 0 0 0 86 101 114 100 97 110 97 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0  

[boot]
SCRNSAVE.EXE=


[MasterThemeSelector]
MTSM=DABJDKT
ThemeColorBPP=4


[VisualStyles]
Path=%WinDir%resources\Themes\Ximian\Ximian.msstyles
ColorStyle=XimianS
Size=NormalSize
[AppEvents\Schemes\Apps\.Default\.Default\.Current]
DefaultValue=%WinDir%media\Windows XP Ding.wav
[AppEvents\Schemes\Apps\.Default\AppGPFault\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\Close\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\DeviceConnect\.Current]
DefaultValue=%WinDir%media\Windows XP Hardware Insert.wav
[AppEvents\Schemes\Apps\.Default\DeviceDisconnect\.Current]
DefaultValue=%WinDir%media\Windows XP Hardware Remove.wav
[AppEvents\Schemes\Apps\.Default\DeviceFail\.Current]
DefaultValue=%WinDir%media\Windows XP Hardware Fail.wav
[AppEvents\Schemes\Apps\.Default\LowBatteryAlarm\.Current]
DefaultValue=%WinDir%media\Windows XP Battery Low.wav
[AppEvents\Schemes\Apps\.Default\MailBeep\.Current]
DefaultValue=%WinDir%media\Windows XP Notify.wav
[AppEvents\Schemes\Apps\.Default\Maximize\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\MenuCommand\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\MenuPopup\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\Minimize\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\Open\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\PrintComplete\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\RestoreDown\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\RestoreUp\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\RingIn\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\Ringout\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\SystemAsterisk\.Current]
DefaultValue=%WinDir%media\Windows XP Error.wav
[AppEvents\Schemes\Apps\.Default\SystemExclamation\.Current]
DefaultValue=%WinDir%media\Windows XP Exclamation.wav
[AppEvents\Schemes\Apps\.Default\SystemExit\.Current]
DefaultValue=%WinDir%media\Windows XP Shutdown.wav
[AppEvents\Schemes\Apps\.Default\SystemHand\.Current]
DefaultValue=%WinDir%media\Windows XP Critical Stop.wav
[AppEvents\Schemes\Apps\.Default\SystemNotification\.Current]
DefaultValue=%WinDir%media\Windows XP Balloon.wav
[AppEvents\Schemes\Apps\.Default\SystemQuestion\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\SystemStart\.Current]
DefaultValue=%WinDir%media\Windows XP Startup.wav
[AppEvents\Schemes\Apps\.Default\SystemStartMenu\.Current]
DefaultValue=
[AppEvents\Schemes\Apps\.Default\WindowsLogoff\.Current]
DefaultValue=%WinDir%media\Windows XP Logoff Sound.wav
[AppEvents\Schemes\Apps\.Default\WindowsLogon\.Current]
DefaultValue=%WinDir%media\Windows XP Logon Sound.wav
[AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\.Current]
DefaultValue=%WinDir%media\Windows XP Recycle.wav
[AppEvents\Schemes\Apps\Explorer\Navigating\.Current]
DefaultValue=%WinDir%media\Windows XP Start.wav
Aaron
Sep 13 2003, 01:55 PM
QUOTE (Paul 365 @ Sep 13 2003, 07:05 PM)
It did yes -  but as that was the only difference - changing it would just make it the same file as the one miso gave us.
I think i am missing the point as i dont understand what you would gain from that.

What I would gain from it is learning what hex value controls the digital signature. It appears it can be disabled completely in the file, and by learning that we can apply it to other files we want to replace too. smile.gif
Paul 365
Sep 13 2003, 06:15 PM
@yazoo all the settings in your theme use %WinDir%somethin.whatever, I think it is missing the first \ after %windir% - like

%windir%\resources\Themes\Ximian\Ximian.msstyles

Edit - Ive just looked at mine and its like yours so forget that.

Edit again - I have looked at others and they are done correctly, its about 50% each way so i don't think it would hurt to add the offending \ in place but im not sure it will fix your problem.

@ AaronXP - Sorry dude i told you i was missing the point. I still think its the cab thats signed and not the file but time wil tell
Yazoo
Sep 14 2003, 12:30 AM
QUOTE (Paul 365 @ Sep 14 2003, 01:15 AM)
@yazoo all the settings in your theme use %WinDir%somethin.whatever, I think it is missing the first \ after %windir% - like

%windir%\resources\Themes\Ximian\Ximian.msstyles

Edit - Ive just looked at mine and its like yours so forget that.

Edit again - I have looked at others and they are done correctly, its about 50% each way so i don't think it would hurt to add the offending \ in place but im not sure it will fix your problem.

@ AaronXP - Sorry dude i told you i was missing the point. I still think its the cab thats signed and not the file but time wil tell

@Paul it was the .theme file, it's got some custom icons which I didn't copy over.
I copied the icon library over to $$/icons and set the paths in the .theme to reflect that. Now it works great. Thanks for the tip you were on the right track. biggrin.gif Now to start adding other things woot.gif
KonuS
Sep 18 2003, 05:58 AM
QUOTE (miso1391 @ Sep 8 2003, 09:28 AM)
Hi

I have hacked uxtheme as cab ( uxtheme.dl_ ) and windowsxp setup will accept it without error .  thumbup.gif

provide me with a link to upload it so any one can download it

Hacked UXTheme.dll | Hacked UXTheme.dll (mirror)

How did you do this??
Did you use loaders or sth??
or only pack it with other tool then cabarc?? ohmy.gif
Paul 365
Sep 18 2003, 06:34 AM
Look Here
GreenMachine
Sep 18 2003, 10:32 AM
Does this method prevent the error message in the setuperr.txt (or whatever it is called)? I did as many others, and just copied a version posted here into the I386 directory. Works fine, yet is listed as a problem in the error log, and causes a red flaged event in the event log. Does hacking the checksum overcome this problem as well, or does it just prevent setup from crashing?
Paul 365
Sep 19 2003, 08:10 AM
I think it just prevents setup from throwing one. As in, he is just explaining how he made the file in this topic and the wfp cab topic.
kenneth11zz
Sep 23 2003, 12:36 PM
Is this hacked version theme DLL for Windows XP or Windows SP1 or both?

-Kenneth
Aaron
Sep 23 2003, 01:48 PM
It works for SP1, so I wouldn't suggest using this on a copy without SP1.
kenneth11zz
Sep 23 2003, 05:15 PM
Thanks AaronXP. Just making sure since there was no reference to it.

-Kenneth




Google Internet Forums Unattended CD/DVD Guide

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.