if i where to download a logonui.exe from let say www.themesXP.com

can i just make it into a cab file and replace my original logonui.exe

in my i385 folder

or "must"

i place my modified logonui.exe in my $$\System32\

i tried the first method and it crapped out my computer.

it keeps turning itself off.

hehhehehe

thanks

Are you using the logonui for SP2??

of course SP2 y does it matter?

**** right, it does!

You wont be able to bootup if you are using a logonui from SP1. The file version has changed with SP2. In addition have you used modifype on the edited logonui.exe before compressing it and placing it in the I386 folder?

BTW...I edited my logonui.exe using "RESTORATOR" replaced most of the icons, bmps, compressed it using makecab and placed it in the I386 folder and absolutely no problems at all. As a matter of fact most of my files are edited in my I386 folder and so far I haven't had any problems at all.

**** i didn't know that ... CRAP!

no wonder i can't boot my computer anymore. oh well.

can u give more info on this Restorator.

thanks dude

Do a search on google for Restorator. Its similar to Resource Hacker and Resource Hacker but more powerful. You can do a mass replace of icons and bmps using Restorator.

You can open 2 similar dll's at the same time and copy and paste the entire bmp or the icon strings from one dll to another. It took me about 3 minutes to hack shell32.dll and replace all the icons in it (about 1600 icons).

ok i will give it a go

what are the steps in hacking the logoui.exe?

i just want to change the background that is all.

thanks

DON'T download a theme, logonui or whatsoever from themexp.org!!!

Files from themexp.org contain ad/spyware!!

I recently downloaded a theme and after installing it I had many different spy/-adware stuff on my computer.

I just had done a scan with Ad-Aware before installing and it didn't find anything.

P.S.: Be careful with removing already installed themexp stuff: after I removed it, my network connections were killed and I couldn't surf the internet anymore!

A better option:

1. Make a background (640x480) that you want, in bitmap format.

2. Download and install StyleXP.

3. Use it to change the background to the .bmp you want.

4. Your original logonui.exe is kept safely aside, and this one is the new default.

5. Copy away the modified logonui.exe to where you want

6. And the next time you need to replace it (after a windows install), directly use your modified logonui (no need to install StyleXP).

Hoping this helps....

DON'T download a theme, logonui or whatsoever from themexp.org!!!

Files from themexp.org contain ad/spyware!!

I recently downloaded a theme and after installing it I had many different spy/-adware stuff on my computer.

I just had done a scan with Ad-Aware before installing and it didn't find anything.

P.S.: Be careful with removing already installed themexp stuff: after I removed it, my network connections were killed and I couldn't surf the internet anymore!

Hmm... that's strange. I've been downloading from ThemeXP.org for years now and I've NEVER had any problem with spy/adware coming from them.

What files have you downloaded that contain spy/adware?

Also, files on ThemeXP.org are made by other people so some people may be of the malicious type.

i've never found any spyware on themexp too.

this thread can be of interest

or what i do is put my hacked logonui file in my

\$OEM$\$$\system32\

folder on the cd

and during my runonceex i have it run my reg file.

and in my reg file is

;ADDS MY LOGON. LogonHomer must be in windows\system32 !!! or it wont work
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"UIHost"="%windir%\\system32\\LogonHomer.exe"

almost same as SiMoNsAyS but without hex

and of course name the .exe what ever you want.

or what i do is put my hacked logonui file in my

\$OEM$\$$\system32\

folder on the cd

and during my runonceex i have it run my reg file.

and in my reg file is

;ADDS MY LOGON. LogonHomer must be in windows\system32 !!! or it wont work
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"UIHost"="%windir%\\system32\\LogonHomer.exe"

almost same as SiMoNsAyS but without hex

and of course name the .exe what ever you want.

the variable %windir% works without an hex value??... interesting...

ya just have to put in 2 \\ dont work with just one \

i've never found any spyware on themexp too.

themexp does have spyware, & tons of popups.. the files that have a red * at the top of them . it says something like "the author has allowed us to save money" or something like that contains searchnow & other spyware if u download the file it asks if u wanna install the themexp.org file & gives u spyware pages EVEN if u uncheck the "do not install..." it installs it anyways, so what i do, is keep a vmware xp box handy & drag & drop 2 that & extract the file so my "good" pc doesnt get spyware