Jump to content

SKiTLz

Member
  • Posts

    215
  • Joined

  • Last visited

  • Donations

    0.00 USD 
  • Country

    Canada

Posts posted by SKiTLz

  1. I want to create a tree with various reg tweaks. I don't however want to create a spearte *.reg file for each tweak. Is there a way to mainuplate the registry defirectly from install.ini as apposed to only regedit /s ?

    Thanks guys.

  2. Just wondering what the purpose of the CONFIG-EXTRA.INF file is.

    From what I can see the contents of CONFIG.INF and CONFIG-EXTRA.INF are the same. Not only that but mkimg.cmd appears to just overwrite CONFIG-EXTRA.INF anyways.

    Just trying to learn the WinPE (Microsoft) build process to better customize it.

    Cheers

  3. thats because sfcfiles.dll is built on the fly during the install. So including a pre-hacked one wont work. At least not anyway I know.

    It has always worked fine for me hacking after. Defeats the hole automation idea but it does work.

    Only thing I can think of is let the default be and build at runtime then have your hacked one copy over with a script on first boot.

  4. Ridiculously simple trick that I can't believe I never thought of.

    I like a clean Program Files dir like most. I use to edit sfcfiles.dll to zero out the dirs so I could remove them.

    Much easier way is to just use attrib +S +H and hide them. I always have hidden files viewed but not system files. So for anyone like me you can just mark it as a system file.

    So simple I cant believe I never thought of it. Can do it on things that make the dir structure messy that the OS actually needs too.

    Sure most of you already thought of it, but for anyone slow like me I thought Id share.

  5. I use to just disable WFP but decided to try and clean my Install to be less 'Hacked' if you will.

    Problem being is the xerox and microsoft frontpage folders in %ProgramFiles% really tick me off.

    Searched the forum for a bit and didn't find much on excluding certain files or folders without disabling WFP.

    Anywho, ended up with a hacked SFCFILES.DLL that excludes both these dirs. Tested and works perfect. WFP is still active as I tried to remove a few files and it wouldnt allow me or they came straight back.

    Both the xerox and microsoft frontpage dirs are no longer present and don't come back after a restart.

    I've attached the SFCFILES.DLL for anyone that's interested. Any other files or Dirs can be easily added too. These are just the two that bother me.

    CRC header has been changed so XP wont complain.

    :D

    EDIT: File is 4kb over 150kb limit. Can't compress anymore. Will post it when I find a place to host it.

    EDIT: Thanks for the links. Uploaded HERE

  6. Im trying to add a ramdisk to my WinPE disc. Just had a quick question reguarding these INF entries.

    0x4,"ControlSet001\Services\Ramdriv\Parameters","DebugComp",0xffffffff
    0x4,"ControlSet001\Services\Ramdriv\Parameters","DiskSize",0x04000000
    0x1,"ControlSet001\Services\Ramdriv\Parameters","DriveLetter","B:"
    0x4,"ControlSet001\Services\Ramdriv\Parameters","RootDirEntries",0x00000200
    0x4,"ControlSet001\Services\Ramdriv\Parameters","SectorsPerCluster",0x00000002

    What do the 0x4, 0x1 etc represent? I noticed theres no HKLM or HKCU.. Is this them in another form?

    Cheers

  7. I have a copy of WinPE but also know about PEBuilder. Just wondering if theres any advantage to either?

    So far Im finding WinPE's customization a little tedious. HIVE files are converted to a binary so I have to re-build everytime I want to make a change. Things like that.

    So is there any real advantage to either or just personal preference? WinPE have anything built in that PEBuilder doesn't?

    Cheers

  8. I know theres a few different programs out there.. But I keep seeing peoples screenshots with nice looking mac os x start bars... What program are they using? I dont want the rest of the bloated features of most..

    Cheers

  9. Found another problem with one of the Registry Tweaks listed.

    ;-----  These NTFS tweaks improve file system performance.

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]

    "NtfsDisable8dot3NameCreation"=dword:00000001

    "NtfsDisableLastAccessUpdate"=dword:00000001

    "Win95TruncatedExtensions"=dword:00000001

    The problem was a folder opening at Windows startup called C:\PROGRA~1\Symantec. The NtfsDisabled8dot3NameCreation dword caused this problem with NAV (Check out This Thread - on page 28).

    Change the dword to "NtfsDisable8dot3NameCreation"=dword:00000000

    that one doesnt make sense too me.

    All that setting does is disable 8.3 DOS Name Creation on files (which is what the path you posted is)

    So all you would have to do is change the path of whatever was starting at boot.

    I might be missing something but for all the bad tweaks Disable8dot3NameCreation definately isnt one.

  10. Spent the night looking for this info myself. Though I'd pass it on incase anyone else is looking for it.

    Seems with SP2 Microsoft decided they would limit the concurrent TCP connections to 10. Means for anyone using P2P or anyone trying to iniate alot of connections for whatever reason will be limited in their speeds.

    Heres the fix.

    **EDIT YOUR FILES AT YOUR OWN RISK. I NOR MSFN TAKES ANY RESPONSIBILITY IF YOU SCREW YOUR NETWORK STACK**

    With that said it does work and is running currently on my machine.

    The file we need to edit is C:\Windows\System32\drivers\tcpip.sys

    This file should be exactly 359,040 bytes

    1. Open it up in your in your Hex Editor.

    2. Goto Offset 130 (Hex) or 304 (Decimal)

    3. Replace these 4 bytes 6E 12 06 00 with these 4 bytes 62 13 06 00

    4. Goto Offset 4F322 (Hex) or 324386 (Decimal) (make sure its from the beginning of the file not your previous place)

    5. Replace these 4 bytes 0A 00 00 00 with these 4 bytes FE FF FF 00

    Save and ignore any WFP error messages you may recieve.

    This will remove all limitations. So be warned if you are a click happy person and you do get infected with a worm its sure as hell going to spread pretty quick.

  11. Ok I suck at batch scripting. I know some of you are gurus so this will be a walk in the park.

    File1

    App Name

    Last Updated

    now every time I do a build I want the last updated to update but cant figure out how.

    I tried using findstr to strip the last updated line then echo it back but I dont know how to pipe program output to a variable. I couldd store it in a temp file but thats not the cleanest.

    Anyone know?

    Cheers

  12. No problem. Their just basic ADM templates. Theres alot of info around on formatting them. Main thing with them is for a large amount of tweaks they are quite time consuming to write.

    Here is just a portion of mine. Do a google on ADM templates and read up then compare to mine and it may make it easier to understand them off the bat.

    CLASS MACHINE
      CATEGORY "System"
         KEYNAME "SOFTWARE\Policies\Microsoft\Windows\Custom"
         POLICY "Disable BSOD Automatic Restart"
            #if VERSION >= 3
            EXPLAIN "Control if the system should automatically restart in the event of a system crash."
            #endif
            VALUENAME "DisableBSODRestart"
            VALUEON NUMERIC 1
            VALUEOFF NUMERIC 0
            ACTIONLISTON
               KEYNAME "SYSTEM\CurrentControlSet\Control\CrashControl"
                  VALUENAME "AutoReboot"
                  VALUE NUMERIC 0
            END ACTIONLISTON
            ACTIONLISTOFF
               KEYNAME "SYSTEM\CurrentControlSet\Control\CrashControl"
                  VALUENAME "AutoReboot"
                  VALUE NUMERIC 1
            END ACTIONLISTOFF
         END POLICY; Disable BSOD Automatic Restart
      END CATEGORY; System
      CATEGORY "Network"
         KEYNAME "SOFTWARE\Policies\Microsoft\Windows\Custom"
         POLICY "Disable Participating in Master Browser Election"
            #if VERSION >= 3
            EXPLAIN "Stops this computer from participating in the elections process to store available network nodes."
            #endif
            VALUENAME "DisableBrowserElection"
            VALUEON NUMERIC 1
            VALUEOFF NUMERIC 1
            ACTIONLISTON
               KEYNAME "SYSTEM\CurrentControlSet\Services\Browser\Parameters"
                  VALUENAME "MaintainServerList"
                  VALUE "No"
                  VALUENAME "IsDomainMaster"
                  VALUE "False"
            END ACTIONLISTON
            ACTIONLISTOFF
               KEYNAME "SYSTEM\CurrentControlSet\Services\Browser\Parameters"
                  VALUENAME "MaintainServerList"
                  VALUE "Yes"
                  VALUENAME "IsDomainMaster"
                  VALUE "True"
            END ACTIONLISTOFF
         END POLICY; Disable Participating in Master Browser Election
      END CATEGORY; Network
      CATEGORY "File System"
         KEYNAME "SOFTWARE\Policies\Microsoft\Windows\Custom"
         POLICY "Disable NTFS last-access timestamp"
            #if VERSION >= 3
            EXPLAIN "Determines whether NTFS updates the last-access timestamp on each directory when it lists the directories on an NTFS volume."
            #endif
            VALUENAME "DisableNTFSLastAccess"
            VALUEON NUMERIC 1
            VALUEOFF NUMERIC 0
            ACTIONLISTON
               KEYNAME "SYSTEM\CurrentControlSet\Control\FileSystem"
                  VALUENAME "NtfsDisableLastAccessUpdate"
                  VALUE NUMERIC 1
            END ACTIONLISTON
            ACTIONLISTOFF
               KEYNAME "SYSTEM\CurrentControlSet\Control\FileSystem"
                  VALUENAME "NtfsDisableLastAccessUpdate"
                  VALUE NUMERIC 0
            END ACTIONLISTOFF
         END POLICY; Disable NTFS last-access timestamp
         POLICY "Disable NTFS 8.3 Name Creation"
            #if VERSION >= 3
            EXPLAIN "This setting controls whether MS-DOS compatible 8.3 file names should be generated on NTFS partitions."
            #endif
            VALUENAME "Disable8dot3"
            VALUEON NUMERIC 1
            VALUEOFF NUMERIC 0
            ACTIONLISTON
               KEYNAME "SYSTEM\CurrentControlSet\Control\FileSystem"
                  VALUENAME "NtfsDisable8dot3NameCreation"
                  VALUE NUMERIC 1
            END ACTIONLISTON
            ACTIONLISTOFF
               KEYNAME "SYSTEM\CurrentControlSet\Control\FileSystem"
                  VALUENAME "NtfsDisable8dot3NameCreation"
                  VALUE NUMERIC 0
            END ACTIONLISTOFF
         END POLICY; Disable NTFS 8.3 Name Creation
      END CATEGORY; File System
      CATEGORY "Windows Components"

  13. If anyone is interested I've been putting all USEFUL tweaks into an ADM template to just add to your group policy. Looks alot more professional.

    Writing it by hand though so it could take me some time to finish with the amount of tweaks.

    Also means you can toggle certain tweaks with only one key. For instance the change to add Services to the My Computer context menu is as follows.

    [HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\services] 
    @=hex(2):53,00,65,00,72,00,76,00,69,00,63,00,65,00,73,00,00,00
    "SuppressionPolicy"=dword:4000003c
    [HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\services\command]
    @=hex(2):25,00,77,00,69,00,6e,00,64,00,69,00,72,00,25,00,5c,00,73,00,79,00,73, 00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,6d,00,63,00,2e,00,65,00,78,00, 65,00,20,00,2f,00,73,00,20,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52, 00,6f,00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00, 32,00,5c,00,73,00,65,00,72,00,76,00,69,00,63,00,65,00,73,00,2e,00,6d,00,73, 00,63,00,20,00,2f,00,73,00,00,00

    With my template all you have to do is Change HKCU\Software\Policies\Microsoft\Windows\Custom "EnableServicesContext" to 1.

    Just like normal policies.

    If anyone else wants it I'll post when Im done. Save anyone else puting the time in.

×
×
  • Create New...