eidenk

In this thread about where to find Win98 SE, two supermoderators have immediately agressively interfered and one of them has closed it soon afterwards without real reason but invoking "piracy" when there was absolutely nothing wrong in it. The poor man who created the thread just wanted to know if anyone knew if there were places where he could find 98SE for a decent price and said he didn't want to hear answers from any XP salesman (You will remember that the top topic at that time was Unforgiven's very long thread about XP versus 98 that was very much about bashing 98 users and trying to convince them to upgrade to XP). Here there is a package that is posted since more than a day for anyone to download and that obviously contains scores of pirated non freely-redistributable MS files that furthermore claims to be an entire micro MS OS with setup if I understand well. And no one that has authority does anything about it. So what the f*** is going on ?

Thanks for your links Jaclaz. There was a couple of downloads I hadn't done yet through the threads that are here.

Hi Petr, it just came to my mind that Killbit may just be a phonetic equivalent (a mnemonic) for the Hex value of 400 (which is one Kilobyte in Decimal if I am correct).

I am a Win ME user and I have entirely removed the Still Image Monitoring / Scanner and Camera Wizzard components from it since a long time.

So MDGx, you 've tried all versions of Sysedit on all 9x systems in all possible IE and Packs configuration. Can you confirm that the version of Sysedit that comes bundled with 98SE loads a broadly different set of modules when it is used on Win ME ? Or not ?

Hi gentlemen, 1) Is this not entirely illegal to post such a pack, apparently including scores of non freely redistributable MS files ? Is there any moderator or admin around ? 2) Besides this, what software do I need to extract this spanned archive ? You've already managed to install all this + use it and assess its quality ? You are not worried that there are here possibly grounds to close this forum including your own thread ?

So what are the modules loaded by Sysedit.exe now that you have a freshly installed and presumably clean system ? I would be interested to know.

Hi Petr, I have done a little bit if searching and put all the patches you quote into one single mergeable registry file. The "Killbit" is apparently nothing more than a flag preventing IE to load the ocxs or dlls corresponding to the flagged GUIDs. I did not find some of those GUIDS under the CLSID key because I either removed those components and cleaned the registry afterwards or those components aren't present on an ME System (iepreld.ocx). I was vulnerable to the ADO vulnerability and that might be the reason why I suffered 3 times in a year from unauthorized disk write and code execution after clicking on external links of some websites. REGEDIT4 ;MSADO15.DLL vulnerability Fix ;http://support.microsoft.com/default.aspx?kbid=870669 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{00000566-0000-0010-8000-00AA006D2EA4}] "Compatibility Flags"=dword:00000400 ;iepreld.ocx vulnerability Fix ;http://support.microsoft.com/kb/231452 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{16E349E0-702C-11CF-A3A9-00A0C9034920} "Compatibility Flags"=dword:00000400 ;eyedog.ocx vulnerability Fix ;http://www.microsoft.com/technet/security/bulletin/fq99-032.mspx [HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{06A7EC63-4E21-11D0-A112-00A0C90543AA}] "Compatibility Flags"=dword:00000400 ;scriptlet.typelib vulnerability Fix ;http://www.microsoft.com/technet/security/bulletin/fq99-032.mspx [-HKEY_CLASSES_ROOT \CLSID\{06290BD5-48AA-11D2-8432-006008C3FBFC}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}] ;WUV3IS.DLL Prevents IE from using windows update engine ? ;No Doc found [HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CEBC955E-58AF-11D2-A30A-00A0C903492B}] "Compatibility Flags"=dword:00000400 PS : I wrote in an earlier post that GUIDS were flagged with a value of 1024. This is because I use RegMagik which displays the values in decimal format. 400 (Hexadecimal) = 1024 (Decimal).

I have never experienced such problems with InstallWatch, nor any problems at all with it for that matter. And I use it quite extensively since some time. I imagine you have problems with your system in general, which is why you seek to remove SP2. And which is why you ere having errors with explorer. InstallWatch is anyway useless for you in your particular situation.

Screenshot

If I am correct, and I think I am, browsing this very board or maybe using the search facility, will yeld all links you are seeking for. Better maybe to bring up those old threads in front instead of posting new ones that no one will answer.

Hi Petr, What are {16E349E0-702C-11CF-A3A9-00A0C9034920}, {06A7EC63-4E21-11D0-A112-00A0C90543AA} ? They exist under the ActiveX compatibility key and have all a compatibility value of 1024 but they don't exist anywhere else in my registry. {CEBC955E-58AF-11D2-A30A-00A0C903492B} is to be found under the ActiveX compatibility key where it has a compatibility value of 1024 and at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components where it is described as AutoUpdate Detection Engine. {00000566-0000-0010-8000-00AA006D2EA4} does not exist under the ActiveX compatibility key on my system but is a CLSID value corresponding to C:\PROGRAM FILES\COMMON FILES\SYSTEM\ADO\MSADO15.DLL, part of the MDAC runtime. I have IE5.5 SP2 and MDAC 2.8 installed.

Click on "Config" and then go in the "Misc" tab to disable "Run in System Tray" and "Run on Startup".

I found that one : Open Containing Folder for Windows 98

You could do it by hand for replacing the files by opening SP2 installer (7-Zip can do that) looking at all the files it replaces. Extract all the corresponding files from your install cabs, put them somewhere in a folder and create a wininit.ini file in your windows folder for automatically replacing them at next startup before windows loads. For restoring modified registry entries I have no solution to offer. You will probably find in the inf which registry values have been modified or added but you will get no clue as to what the original values might have been. If Gape (or someone else) is kind enough, he will monitor an install of SP2 with Install Watch Pro (Freeware) and post here the exports. This soft allows to export in REGEDIT4 format and in separate files the original and the new registry values. It then requires little work (mostly cleaning off irrelevant data) to create a registry file to merge in the registry and restore it to the state it was prior to the install. If used to its full power (albeit at the expense of speed) this soft allows, additionally to the registry exports to monitor the whole drive for file changes with information including size, date, path, version and CRC32 checksum. It will even optionally monitor filetypes for precise content change (works with any text filetypes, haven't tested this function on binaries). With this soft any installation can be reverted provided that this installation does not prevent alltogether to restart windows. But even in this case provided the user has not choosen to do the second snapshot after reboot (InstallWatch does ask you if you want to do so if it detects the creation of a wininit.ini file when you click on Analyze), the database will contain all the information needed to know why the system did not restart. Hope this will help.

Yes, there is little way to do a mistake of that sort reading with Process Explorer. I find this very weird as the two systems aren't supposed to be broadly different so that I assume the dlls loaded by sysedit should be the same (not the same version) on the two systems. All the MS dlls you list (except for MSCMS.DLL and ICM32.DLL) are loaded on my system but not by Sysedit. Additionally I imagine my system my system is quite close from a Win 98SE one as I have removed all ME specific components from it (apart from new DOS mode). Mystery.

That's actually achieved it would seem. LinkAnd what about Brain Fingerprinting ? Or microchiping ? VeriChip That's what I see in the Windows ME video. And that's why I do not like it. I think Eiger is likely to be very much of that trend. 604 rv04 That's a superb demo I just came across. It does run well fullscreen in 1024x768 32bpp with a just a Geforce 2 MX. I hope you'll enjoy watching it as much as I did.

I have used this very tool (as well as others such as Taskinfo, PrcView and Current Process to confirm what I was reading with Process Explorer) to post the list of modules loaded by sysedit.exe on my system. What I cannot understand is why our two lists are so broadly different. Maybe one of us does not use the the Process Explorer tool properly...

It has been updated to nothing as I am using Win ME as I have written. I think that if you replace Kernel32.dll, your system most probably won't work at all anymore. What tool are you using to list the modules loaded by Sysedit.exe ? Your list looks more like what is loaded by Explorer.exe.

Hi WatcherSea, Just to let you know I am using Win98SE's Sysedit on Win ME IE5.5 SP2 (+ Q867282 Security Update) without problem. As well, on my system, Sysedit loads only the following Microsoft modules : ADVAPI32.DLL 4.90.3000 GDI32.DLL 4.90.3000 KERNEL32.DLL 4.90.3000 OLE32.DLL 4.71.3328 OLEAUT32.DLL 2.40.4275 USER32.DLL 4.90.3001 VERSION.DLL 4.90.3000

All I can say is that in Windows ME it does replace the built-in Thumbnail view and is accessed the same way : by clicking thumbnail under explorer views on the toolbar. In 98 SE I don't know as I am not currently running it. I cannot help you more than that I think.

Any more details ?

Done.

Does this screenshot help ?

I've just installed it. It's nice but it's not exactly my cup of tea. If only because it always floats on the screen (No send to tray or minimize option apparently) and uses around 8-10 % each of the resources (GDI, User, System) which is a lot.