Jump to content

KB891711 Windows 98 Security Patch finally fixed!


Tihiy

Recommended Posts

I NOW recommend AGAINST using any unofficial patch like Tihiy's as MDGx recently gave me the links to download the newly revised KB891711 updates from Microsoft.

Link to get Windows 98 KB891711 Update V2:

http://download.windowsupdate.com/msdownlo...443b0208e0e.EXE

Link to get Windows ME KB891711 Update V2:

http://download.windowsupdate.com/msdownlo...9a9d05d2eed.EXE

Use these updates instead as the kb891711.exe and q891711.dll files are now version 4.10.2223 instead of 4.10.2222.

Link to comment
Share on other sites


erpdude8, don't p*** of Tihiy. Let's see what his patch does, see what Microsoft patch does and I will choose for one or other.

However Windows 98 isn't my daily base system so I'll have to test it yet.

Link to comment
Share on other sites

  • 2 weeks later...

The only problem I have with Tihiy's UNofficial 891711 patch is that it has user32.dll file version 4.10.2232. This is for Win98 SE ONLY. darn it! Using

this one on Win98 FE is a BIG MISTAKE and can corrupt Win98 FE systems. Tihiy's patch should have TWO versions of user32.dll files. One specifically for Win98 FE [Gold] and one for Win98 SE. back to the drawing board!

HEY! The Q291362 patch for Win98 has TWO versions of user.exe & user32.dll files. Read MS support article 291362:

http://support.microsoft.com/kb/291362

Q291362 has v4.10.2001 of user.exe & user32.dll files for Win98 FE Gold and v4.10.2231 of user.exe & user32.dll files for Win98 SE. Tihiy should modify the Win98 FE version of user32.dll from Q291362 so that it'll be v4.10.2002 when implementing KB891711.

AVOID Tihiy's patch if using WinME [unless he can make a specific ME version]. The user.exe/user32.dll files in WinME are 4.90.300x.

Link to comment
Share on other sites

erpdude8, don't p*** of Tihiy. Let's see what his patch does, see what Microsoft patch does and I will choose for one or other.

However Windows 98 isn't my daily base system so I'll have to test it yet.

UH, what was it you're trying to say to me??? you're pathetic, hp38guser!

...and Tihiy's 891711 patch is missing an uninstall feature while Microsoft has the uninstall feature of their KB891711 patches for W98/WME & they DO show up in the Add/Remove programs control panel app.

dont give up Tihiy! your 891711 patch needs improvement. it took Microsoft to get things right the second time around with KB891711 for W98/WME.

Link to comment
Share on other sites

  • 3 weeks later...
I NOW recommend AGAINST using any unofficial patch like Tihiy's as MDGx recently gave me the links to download the newly revised KB891711 updates from Microsoft.

Link to get Windows 98 KB891711 Update V2:

http://download.windowsupdate.com/msdownlo...443b0208e0e.EXE

Link to get Windows ME KB891711 Update V2:

http://download.windowsupdate.com/msdownlo...9a9d05d2eed.EXE

Use these updates instead as the kb891711.exe and q891711.dll files are now version 4.10.2223 instead of 4.10.2222.

*EDITED* ok, found out the differences in version:

Old, V1 Update:

kb891711.exe - v4.10.2222

q891711.dll - v4.10.2222

New, V2 Update:
kb891711.exe - v4.10.2223

q891711.dll - v4.10.2222

:thumbup

Link to comment
Share on other sites

  • 1 month later...

Seems that Windows Update no longer looks on the KB891711 registry entries but for the existance of the KB891711.exe and Q891711.dll file inside the System\KB891711 directory.

BTW, patch seems to work fine here, even if you got accidentely the KB891711.exe patch installed. The patch is included in Dutch SP now :hello:

Link to comment
Share on other sites

  • 4 months later...

a newer but unofficial 891711 patch has been created by an anonymous user that is mentioned here:

http://www.msfn.org/board/?showtopic=58780

it's called U891711. If successful, U891711 can put Microsoft's KB891711 security update for Win98/ME AND Tihiy's TI891711 patch out to pasture.

author of U891711 says that TI891711 is "no real replacement since it offers only limited protection" and that 16-bit programs [like the ones from the Windows 3.x days] can "bypass TI891711.DLL completely." so this means that 16bit programs can circumvent the TI891711 fix. another black eye for TI891711.

Tihiy might want to visit the above site and test out the U891711 patch.

Link to comment
Share on other sites

author of U891711 says that TI891711 is "no real replacement since it offers only limited protection" and that 16-bit programs [like the ones from the Windows 3.x days] can "bypass TI891711.DLL completely." so this means that 16bit programs can circumvent the TI891711 fix. another black eye for TI891711.

to be fair and not be all negative about Tihiy's TI891711 patch, it did work okay under win98se systems as i've tested it on one 98se machine. when I installed it under other Windows 9x platforms like 98fe and ME, I got different results. TI891711 was useless under winme and it gave a few BSODs under win98fe. TI891711 was meant for 98 SE only and wasnt flexible enough to work under other win9x systems. it offered protection against rogue 32-bit apps but not 16-bit apps.

Link to comment
Share on other sites

  • 4 weeks later...

I've tried the official one old and new

Tihiy's TI891711

and now U891711

I'm sure U891711 is better than MSN's

But it still slows my system down(less responsive).

I think is the fact that KB891711.exe is running as a service(always)

Tihiy's TI891711 doesn't run KB891711.exe upon bootup.

So i will continue to use use Tihiy's TI891711, I'm a gamer and I need the resources.

PIII 450MHz 256MB

WIN 98SE, sesp21a-en.exe, 98SE2ME.EXE(ver 3.7), TI891711, 98KRNLUP.EXE

Link to comment
Share on other sites

--gaming with a PIII 450mhz? -YEOWTCH!... -is that possible at all? (maybe original Tetris :lol: )

;) [...and I thought I had it tough, gaming with a P4 Celeron (ew!) 1.8g (128k cache! yuk)]

-my heart goes out to ya, man...

Edited by PsycoUnc
Link to comment
Share on other sites

-tihiy: granted, it's not likely, but any possible security hole can/will eventually be exploited, and should be plugged... (of course, people on very old/slow rigs may be willing to take that chance, if it means better performance, so there will always be a use of and appreciation for your fix... not to mention, I'm still a bit "iffy" about using ANY program/fix from someone who's "anonymous"; my paranoia has kept me completely infection-free all these years... :yes: )

Link to comment
Share on other sites

  • 5 months later...

Uh oh.... Maybe not.

MS05-002: Vulnerability in cursor and icon format handling could allow remote code execution

Article ID : 891711

Last Review : May 15, 2006

Revision : 3.0

Technical update April 12, 2005:

• Security update 891711 Microsoft Windows Millennium Edition, Windows 98 Second Edition, and Windows 98 packages were re-released on April 12, 2005.

• When you install the security update 891711 original packages on a computer that is running Windows Millennium Edition, Windows 98 Second Edition, or Windows 98, the computer may stop responding. This issue has been corrected in the April 12, 2005, release.

• The April 12, 2005, release runs as a system service on Windows Millennium Edition, Windows 98 Second Edition, and Windows 98. The Close Program dialog box does not list Kb891711.exe.

The following known issues only apply to the packages that were re-released on April 12, 2005:

• Uninstalling security update 891711 removes the entries from the registry and deletes the files from the system. However, uninstalling security update 891711 leaves an empty folder on the system.

• On a computer that is running Windows Millennium Edition, Microsoft System Information (MSINFO32) does not list security update 891711. The Windows 98 and Windows 98 Second Edition version of MSINFO32 does list security update 891711 (Kb891711.exe). Most third-party applications that display processes will list Kb891711.exe.

• On a computer that is running Windows Millennium Edition, Windows 98 Second Edition, or Windows 98, System Configuration Utility (MSCONFIG) only shows Kb891711.exe on the Startup tab.

• If you disable the previous release through MSCONFIG, MSCONFIG may have two entries of Kb891711.exe after you install the version of security update 891711 that was re-released on April 12, 2005. One of these entries is selected, and one of these entries is not selected. When you select the entry that is not selected, MSCONFIG prompts you to restart the computer. After you restart the computer, only one entry is listed, and the one entry is selected. This behavior occurs because of the behavior of MSCONFIG and does not affect the ability of security update 891711 to help protect the computer as long as one of the entries is selected.

http://support.microsoft.com/default.aspx?...kb;en-us;891711

Everyone's "unofficial" patch seems to be from March, and therefore would not be correct.

There MUST be an official M$ release, for I got it via WU yesterday, but can NOT find a standalone .EXE to archive!

Anyone have a link to the official MS post-April update download?

Link to comment
Share on other sites

Anyone have a link to the official MS post-April update download?

See my quote, emarkay, for the links to "official" KB891711 V2 updates for Win98/ME:

I NOW recommend AGAINST using any unofficial patch like Tihiy's as MDGx recently gave me the links to download the newly revised KB891711 updates from Microsoft.

Link to get Windows 98 KB891711 Update V2:

http://download.windowsupdate.com/msdownlo...443b0208e0e.EXE

Link to get Windows ME KB891711 Update V2:

http://download.windowsupdate.com/msdownlo...9a9d05d2eed.EXE

Use these updates instead as the kb891711.exe and q891711.dll files are now version 4.10.2223 instead of 4.10.2222.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...