Innocent Devil

ya, i think the XP setup is little bit hesitant to a mirror udf (-u1) filesystem, thats y u got that delay Okay i managed to get acopy of bcdedit.exe just running a bcdedit.exe /? gives Commands that control Emergency Management Services for a boot application ========================================================================== /bootems Enables or disables Emergency Management Services for a boot application. /ems Enables or disables Emergency Management Services for an operating system entry. /emssettings Sets the global Emergency Management Services parameters. then running bcdedit.exe /bootems /? This command enables or disables Emergency Management Services for the specified entry. bcdedit /bootems [<id>] { ON | OFF } <id> Specifies the identifier of the entry to be modified. Although this command will work for any entry, it is only effective for boot applications. Example: The following command enables Emergency Management Services for the boot manager: bcdedit /bootems {bootmgr} ON So to turn off the [EMS Enabled] run bcdedit -store <BCD file> /bootems {bootmgr} OFF where BCD file is the BCD store that is to be put in the DVD

What is the puropse of creatin multiple threads with same Qn??? 1.Read forum rules 2.Seach the forum b4 u posting, check those kind are aswred or not 2.Specify problem correctly and legibly Moderators r u seeing this ????

checked with IceSword found nothing in red btw iexplore.exe problem too solved its bcoz ,i havnt configured the Phone and Modem options in CP after setting region and code and all, rebooted there after no iexplore.exe process initiated by winlogon.exe (i dunno y i should set this as i use cable internet connecting directly 2 the lan card ) to conclude that I hope the problem is ALMOST solved. still the presence of scrsys16_061230.scr in Sreensaver list is a prob. wen i select it, avast detects and moves to chest (i afraid even that triggers the reactivation of the trojan) Another problem to add is that i cant unhide folders (it resets back to hide folders) in registry i found that HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden is a REG_SZ value, is it actually a REG_DWORD? maually making it a DWORD fails, as it automaically revert back to REG_SZ

but the site says Not yet Available

1) that seems unusual, i never been in such situaton, i usually get the press f6 to install 3party driver screen (hint: it might due to the dvd filesystem) 2) better to put -j1 or -n(not verified) but if u install.wim is >2gb no way to use -j1 (joliet restriction) else it better use j1 rather than u1 3) just disable ems support (go deep with bcdedit /v /enum to get is guid or try with bcdedit help) ( sorry i 4 got the details, & not able to check that as am not at home)

u may hav lost the codec config, the 1-click windows uses avi file for the animation of progress (i think so) di u nlited and removd codecs?? try installing some codec packs

Hi you said that 75mb can be remooved + other 75mb of duplicates files can be removed from who is going to install from DVD. Could anyone indicate exactly which folder to remove? only these files are required if u install by booting-off dvd boot.wim and install.wim in Sources folder BCDin boot folder bootmgr in root of dvd

this happens wen the default vga driver cannot support these resolution on u r grafix card try adding driver with nlite and then changed hivesys.inf or try another utility named bvidchng.exe (given in the unatteded guide)

if they have WAIK for SP1 then it must have updated boot.wim too

Exactly Note on XP: does anybody consider agreeing to Alexa which finds out our searching habits wen pressing F8 to EULA ??

what about this?? A grub menu booting 100+ systems of Dos, Windows, Linux, BSD and Solaris but the problem is Mac OS X Leopard Its illegal, unless u doing this in a Mac

cmd.exe problem solved its due to some autorun entry in HKLM\software\Cicrosoft\Command Processor {thanx to Sysinternals autoruns} its loads 2 memory by userinit {HKLM\Software\Microsoft\windows NT\CurrentVersion\winlogon} userinit=C:\WINDOWS\system32\userinit.exe,rundll32.exe userinit.exe,rundll32.exe,rundll32.exe start,rundll32.exe C:\WINDOWS\system32\winsys16_061230.dll start i deleted it and put just C:\WINDOWS\system32\userinit.exe wat is supposed to be default uerinit value ?? Now, problem is from winlogon and iexplore.exe after loading desktop iexplore.exe runs in background, by checking with unlocker it is locked by winlogon.exe how to prevent this? ,why winlogon starting it ?? The root of the Trojan is still hidden (ans i cant make un hide folders, it just resets) and can be seen in list of screensaves as scrsys16_061230

So new spyware on the block, M$ promoted Spyware, isn't it ??? is that a big brother to Alexa ??

nice trick do they think pirates would be happy just with a copy of Vista ??

As I said, i tried boot time scanning, found nothing if iput it ignore in avast (clicking Noaction button) another problem happens, sme process opens iexplore.exe and it consumes memory, there is lot of iexplore.exe process in taskmgr let me check once more with boot time scanning .....

yes first run through bcdedit /enum /v to get the GUID of the vista entry then do bcdedit -store <store_name> /set {GUID} loadoptions DDISABLE_INTEGRITY_CHECKS BUT it will apply only on the booting DVD, it wont be ther wen it is written to the HDD afterall this affect only to the WinPE which is booting from the DVD the vista u need to do that will booted only after first reboot of setup am still unable to integrate this option in DVD i tried to mount the install.wim and by editing the bcd template in System32\config of the image no use, its not working. Does anybody know from wher the installer in WinPE phase copied a default set of bcd store to hdd? or is it creating dynamically by the setup routine ??

i still say, to make it clutter free is to use keep 2 bootloader (ie bootmgr and grub or isolinux) use bootmgr to boot and load all flavours of Windows (smbdy need to remove sig-check in 2k3 SP2 SETUPLDR.BIN) and load grub or isolinux from it and grub or isolinux to boot all linux variants for a iso there will always be class of filesystem. i tired to load bootmgr from islonux but sme clash b/w Joliet and RockRidge made me back i resorted to grub grub is a worderful boot loader to see AFAIK it is the only loader able to load all kind of *nix variants (and to chainload others too) with grub4dos projects grldr, u can boot a cdrom manually or even work as standalone mini-console in grubshell

No, thats not a typo i used an pgm (windows app) to load bootable iso images from harddisk while booting (sorry i 4got the apps name) , it has a nice gui for doing that wen i further dug int that app it uses source patched version of grub to support ntfs parttion and iso booting it was able to load even gzipped disk images (floppy) look at this isoemu Also refer "http://www.911cd.net/forums//index.php?showtopic=18045&st=45" yes , bootmgr can load bootsectors, just read BCD store knowledge base or try getting help by running bcdedit /? i used loop grub (on mbr) and boormgr (on C: drive) to load each other , just for fun

previousla i did that first run sfc /purgecache then sfc /cachesize=0 still it resurfaces wen i open cmd

try GRUB to do that, with some source patches grub is able to load ISO images and can even boot iso images. but u can do with bootmgr to load all version of Windows (XP,2003,Vista) then load grub to get all linux to boot (i suggest this is better method) or use ISOLINUX for linux if u want vista kind of OS to boot bootmgr is a must (AFAIK u cant do without it)

the trojan name is mis-typed it actually Win32:hupigon-BQO

whever i open cmd.exe avast! warns thats the files named scrsys16_061230.scr winsys16_061230.dll are infected by Win32:hupigon-BQO [Trj] and winsys32_061230.dll infected by Win32:Delf-ECW [Trj] then i press move to chest this appears everytime cmd is opened i tried boot time scannin and deleted these files but it reappears wen cmd opens also tries microsoft malicious software removal tool am using xp sp2 rtm with avast! 4.7 Home edition EDIT: It is a trojan sorry, i mis typd the trojan name, now its corrected

I would not say it solves it. It's a pretty nasty fix. It took me a week to sort through all the extra fonts and sys files that it wanted (beyond the above list) to make this work. I would still really like to see this fixed / figured out. From what I've heard from my employers, Microsoft has no interest in perfecting the sysprep technology for anything but Vista related. So I'd say it's up to us... again... Well correct, but this problem is caused by nLite, not by Sysprep. I dont Think its a nLite problem i386 (or the source files directory) is supposed to be der (with all files) wen u specify "InstallFilesPath = C:\Sysprep\i386" its setup routine check my previous post der is nothing to do with nLite

why not try D A M N Small Linux aka DSL or Puppy Linux

Simple answer NO to run a Macintosh OS u need to own a Mac Hardware (ie iMac, Mack Book, Mac Pro etc) der r some versions of Tiger (crackd) can be run on a generic X86 PCs am afraid it is ILLEGAL do some torrent searches 8)