98 FE + 98 SE + ME updates + patches + (hot)fixes

[MDGx 0]

I've recreated KRNL386.EXE 4.10.1999 [English] patches to include OS version detection for Q891711 bug:

http://www.msfn.org/board/?showtopic=46581

[Tihiy 246]

Why there are different versions for FE and SE?

[MDGx 0]

Updated unofficial Q891711 + Q234967 patches [both English] = they all work now:

http://www.msfn.org/board/?showtopic=46581

This the scoop about patched KRNL386.EXE 4.10.1999 [sent by patch author]:

I did not obtain patched KRNL386.EXE from Microsoft.

I patched its code many years ago after random crashes that could not be reproduced or explained began to affect my work.

Microsoft Windows98-KB891711-v2-ENU.EXE patch still needs to be installed.

Only the files in Windows98-KB891711-v2-ENU.EXE protect against the icon and cursor vulnerability.

KRNL386.EXE allows Microsoft patch to work without crashing the system.

The scoop about the fixed VOLTRACK.VXD [sent by patch author]:

I am attaching the correct VOLTRACK.VXD file for Win98.

The one I sent you before by mistake could not work - it was an earlier attempt at fixing the problem described in Knowledge Base Article KB234697 and it created an incorrect stack frame.

Fixed VOLTRACK.VXD 4.10.1999 [patched by the same person who sent KRNL386.EXE] works on the 2 PCs I've tested, with both 98 FE + 98 SE.

Note that VOLTRACK.VXD patch is English, NOT Japanese.

Why there are different versions for FE and SE?

I made 1 installer for 98 FE and 1 for 98 SE [total of 4 = see links above] because the "TargetWin9xVersion=" directive in the SED file [i used IEXPRESS.EXE from XP SP2] allows to install only on 1 specific OS build.

This line:

TargetWin9xVersion=4.10.2222

allows to install only on 98 SE.

This line:

TargetWin9xVersion=4.10.1998

allows to install only on 98 FE.

[Petr 0]

I am attaching the correct VOLTRACK.VXD file for Win98.

The one I sent you before by mistake could not work - it was an earlier attempt at fixing the problem described in Knowledge Base Article KB234697 and it created an incorrect stack frame.

Fixed VOLTRACK.VXD 4.10.1999 [patched by the same person who sent KRNL386.EXE] works on the 2 PCs I've tested, with both 98 FE + 98 SE.

Note that VOLTRACK.VXD patch is English, NOT Japanese.

<{POST_SNAPBACK}>

Q234697 article title is "Computer Hangs When Viewing Empty ORB Removable Drive in Japanese Windows 98".

So what is corrected by this new VOLTRACK.VXD if it is not for Japanese Windoes 98? And why Diskvsd.vxd is missing?

Petr

[MDGx 0]

I am attaching the correct VOLTRACK.VXD file for Win98.

The one I sent you before by mistake could not work - it was an earlier attempt at fixing the problem described in Knowledge Base Article KB234697 and it created an incorrect stack frame.

Fixed VOLTRACK.VXD 4.10.1999 [patched by the same person who sent KRNL386.EXE] works on the 2 PCs I've tested, with both 98 FE + 98 SE.

Note that VOLTRACK.VXD patch is English, NOT Japanese.

Q234697 article title is "Computer Hangs When Viewing Empty ORB Removable Drive in Japanese Windows 98".

So what is corrected by this new VOLTRACK.VXD if it is not for Japanese Windoes 98? And why Diskvsd.vxd is missing?

Petr

Didn't get that info.

I'll ask, and will let you know.

[MDGx 0]

Gape, Petr + Tihiy:

Got more info about VOLTRACK.VXD patch:

The changes comprise more than just a short code string - the relocation

table is also affected. The original VOLTRACK.VXD intended to use a

counter in order to keep track of the number of removable drives or drives

with removable media, but the code was incomplete and buggy. The counter

has been disabled in 4.10.1999 (the counter is also disabled in

4.90.3000).

I assumed there was only one Knowledge Base Article re the counter in

VOLTRACK.VXD 4.10.1998 when I replied the other day. I now read article

KB234697. It refers to an issue different from the one fixed by the file

I sent you. It fixes the issue described in KB249824 "BUG: VOLTRACK Is

Erroneously Unloaded After 255 Device Additions and Removals."

Therefore VOLTRACK.VXD fixes the issue in Q249824, not the issue in Q234697.

Therefore WinME doesn't need a VOLTRACK.VXD patch.

Also got patched KRNL386.EXE 4.90.3001 for Windows ME.

Posted here:

http://www.mdgx.com/web.htm#WME

and at top of this topic:

http://www.msfn.org/board/?showtopic=46581

Top of topic updated 5-24-2005:

- please check out revised KRNL386.EXE + VOLTRACK.VXD fixes

- updated MSKB Q article numbers

- repackaged the installers to reflect changes

- created installer for KRNL386.EXE 4.90.3001

KRNL386.EXE patch [for either 98 FE, 98 SE or ME] doesn't need Q891711 installed, works independent of it, but it is recommended to install KRNL386.EXE patch after Q891711 patch, just in case any Kernel errors/lockups show up.

Note that KRNL386.EXE patches and Q891711 patches are now available for all 3 editions: 98 FE, 98 SE + ME.

All patches are for English editions.

Hope this helps.

[MDGx 0]

I have been sent more info about KRNL386.EXE patch:

I sent MS the same file I sent you more than two months ago, informing MS of three issues with the original security fix KB891711.EXE:

1. A superfluous Trap to Debugger (INT 3) is in KB891711.EXE (4.10.2222).

2. KB891711.EXE (4.10.2222) does not really run as a service. It is terminated when a user logs off and is not restarted until a reboot.

3. The function calls to KERNEL cause problems because of the bugs in KRNL386.EXE.

MS fixed 1 & 2, but  did not address 3.

The coding errors in KRNL386.EXE are against the most basic principles of writing 80x86 machine language code.

I am aware [besides KRNL386.EXE] of only one other Windows file that had a similar issue, but MS fixed that one shortly after it started causing problems. MS may not want to fix the two bugs in KRNL386.EXE because, technically, they would have to create localized versions of it for all language versions of Win98 they once offered.

[erpdude8 13]

well guys I'm back from beta testing Spybot 1.4 RC releases. They have NOW posted the final release of Spybot S&D 1.4. For those using Spybot under W98se, download and install Spybot S&D 1.4 NOW!!! If you had a beta or an RC release of Spybot 1.4, uninstall it and install the final version.

MDGx, I will send you the Q262232 patch later in the day. Let me know if you need anymore patches.

-erpdude8

[MDGx 0]

Thankx erpdude8, got it.

Edited June 16, 2005 by MDGx

[erpdude8 13]

How about combining the Q243450 esdi_506.pdr and VOLTRACK.VXD Q249824 fixes, MDGx? I mean, put those two updated win98 files into one patch.

also, see my post edited on June 10, 2005 on the first page of this thread.

Edited June 13, 2005 by erpdude8

[MDGx 0]

How about combining the Q243450 esdi_506.pdr and VOLTRACK.VXD Q249824 fixes, MDGx?  I mean, put those two updated win98 files into one patch.

also, see my post edited on June 10, 2005 on the first page of this thread.

<{POST_SNAPBACK}>

1. I'm afraid I can't do that. The esdi_506.pdr patch is official from MS, the voltrack.vxd patch is unofficial [patched file was sent to me by a concerned user].

2. About merging FE + SE patches I made using Iexpress:

Please check your email: I've sent the explanation why this doesn't work.

[azagahl 0]

New critical patches available on Windows Update (June 15, 2005):

Cumulative Security Update for Internet Explorer 6 Service Pack 1 (KB883939)

Download size: 3.0 MB

Security issues have been identified that could allow an attacker to compromise a computer running Microsoft Internet Explorer and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Read more...

Q329048: Security Update (Windows 98)

Download size: 267 KB

This update resolves the "Unchecked Buffer in File Decompression Functions" security vulnerability in Windows 98. Download now to help prevent a specially malformed file from causing unauthorized

Sorry, I don't have the files yet...

edit: I use 98 SE and the second patch applies apparently.

Edited June 15, 2005 by azagahl

[Petr 0]

New critical patches available on Windows Update (June 15, 2005):

Cumulative Security Update for Internet Explorer 6 Service Pack 1 (KB883939)

Download size: 3.0 MB

Security issues have been identified that could allow an attacker to compromise a computer running Microsoft Internet Explorer and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Read more...

Q329048: Security Update (Windows 98)

Download size: 267 KB

This update resolves the "Unchecked Buffer in File Decompression Functions" security vulnerability in Windows 98. Download now to help prevent a specially malformed file from causing unauthorized

Sorry, I don't have the files yet...

edit: I use 98 SE and the second patch applies apparently.

<{POST_SNAPBACK}>

The files are available here:

June update contains for Windows 98:

MS05-026 KB896358

Windows98-KB896358-ENU.EXE

contains files:

HH.EXE

HHCTRL.OCX

ITIRCL.DLL

ITSS.DLL

HHSETUP.DLL

version 5.2.3790.309 (srv03_gdr.050413-1540).

It is apparently newer version than version 5.2.3790.1830 (srv03_sp1_rtm.050324-1447) contained in Windows 2003 Server SP1 and in MDGx's help update.

It could be a problem to install lower version number (309) over higher (1830).

MS05-025 KB883939

IE6.0sp1-KB883939-Windows-98-ME-x86-ENU.exe

Install files:

BROWSEUI.DLL 6.00.2800.1622 (xpsp2.050218-1437)

CDFVIEW.DLL 6.00.2800.1612 (xpsp2.041207-1145)

IEPEERS.DLL 6.00.2800.1497

INSENG.DLL 6.00.2800.1475

MSHTML.DLL 6.00.2800.1506

MSRATING.DLL 6.00.2800.1623 (xpsp2.050222-1638)

PNGFILT.DLL 6.00.2800.1506

SHDOCVW.DLL 6.00.2800.1658 (xpsp2.050427-1138)

SHLWAPI.DLL 6.00.2800.1612 (xpsp2.041207-1145)

URLMON.DLL 6.00.2800.1487

WININET.DLL 6.00.2800.1506

It is interesting that file versions are 6.0.2800, i.e. for IE6.0SP2.

Maybe the BROWSEUI.DLL problem is solved?

Edited June 15, 2005 by Petr

[Tihiy 246]

It is interesting that file versions are 6.0.2800, i.e. for IE6.0SP2.

Maybe the BROWSEUI.DLL problem is solved?

IE6SP2 have 6.0.2900 file versions. As for MS "xpsp2" tags for IE6SP1 - there was interesting article somewhere@msdnblogs.

And browseui.dll was solved long time ago as MDGx says.

[Petr 0]

It is interesting that file versions are 6.0.2800, i.e. for IE6.0SP2.

Maybe the BROWSEUI.DLL problem is solved?

IE6SP2 have 6.0.2900 file versions. As for MS "xpsp2" tags for IE6SP1 - there was interesting article somewhere@msdnblogs.

And browseui.dll was solved long time ago as MDGx says.

<{POST_SNAPBACK}>

Yes, you are right, I confused myself with IE6 (2600) version.

There is nice overview at http://support.microsoft.com/kb/164539

I thought MDGx wrote that it is necessary to use the browseui.dl file frox xpsp2?

Petr