What Causes Programs to Detect Win9X

[PROBLEMCHYLD]

What is it that allows Programs to detect that you are using Win98/SE/ME?

Is it Registry files/Systems files etc...

[Glenn9999]

A system file call. GetVersion() and GetVersionEx() I believe.

(Edited: I stand corrected.)

Edited November 19, 2007 by Glenn9999

[PassingBy]

Hmmm .....

From what I understand, most programs will check the windows version/platform thru kernel32 GetVersion/GetVersionEx (or so like that) to determine the platform ... For W98SE, the use of KernelEx will override this setting ... I was looking into making a similar system wide hooking DLL to override precisely this that will work on all W9X ... but unfortunately due to the lack of time and expertise at the moment, it'll have to take a back seat ...

There are several other ways thru the use of system file version checks that may be used too ...

Rgds

[Glenn9999]

From what I understand, most programs will check the windows version/platform thru kernel32 GetVersion/GetVersionEx (or so like that) to determine the platform ... For W98SE, the use of KernelEx will override this setting ... I was looking into making a similar system wide hooking DLL to override precisely this that will work on all W9X ... but unfortunately due to the lack of time and expertise at the moment, it'll have to take a back seat ...

http://msdn2.microsoft.com/en-us/library/ms724451.aspx

It seems three or four function calls would need to be hooked in multiple DLLs (either renamed or created). As you correctly point out, most programs will probably use GetVersion or GetVersionEx, but there are a multitude of methods, including ones that are automatic within the compiler.

GetVersion/GetVersionEX in Kernel32.dll

IsOS() in SHLWAPI.DLL http://msdn2.microsoft.com/en-us/library/bb773795.aspx

GetProductInfo() in KERNEL32.DLL http://msdn2.microsoft.com/en-us/library/ms724358.aspx

VerifyVersionInfo() in KERNEL32.DLL http://msdn2.microsoft.com/en-us/library/ms725492.aspx

but 9 times out of 10, though, if something is meant for NT/XP/2000/Vista, it won't be architecturally capable of running on 9X most times anyway, if we're talking about fooling a program into thinking it's on a different version.

[galahs]

I know Media Player 9's installer checks the registry entry for version number.