@winxpi: Just copying the file might mess up IE. That's why I'm waiting until MS rereleases 918899 to include it in my patch.

the_guy

Does BROWSEUI.DLL in this package fix the delete large files bug
Created from Win2000 SP4 IE 6.0 SP1 MS06-042 [Q918899] Security Fix:

I have no idea what bug you're talking about. I don't believe it does. I don't even know if Microsoft is aware of the issue. I plan on requesting KB915113 which updates browseui.dll to version 6.0.2800.1807 in the next few days.

the_guy

Don't think so because the browselc.dll file is also a culprit.

Not even close, PROBLEMCHYLD. Note the"delete large files" problem only occurs under Win98 & ME and does not happen under Win2000/XP. MUST use BROWSEUI.DLL file from IE 5.5 SP2 KB905915 patch and BROWSELC.DLL file from IE 5.5 SP2.

anyway, I use xplorer2 to delete or even shred large number of files and will not hang my Win98/ME machines.



MDGx, can the author of unofficial 918547 gdi.exe & gdi32.dll v4.10.2227 Win98se update, patch the gdi.exe and gdi32.dll files for Win98fe and release them as v4.10.2004?

Please see this post:
http://www.msfn.org/board/?s=&showtopi...st&p=550394
____________________________________

I have tried to install your hotfix v2 on Win98SE + IE 6.0 SP1 and all I get is this message:

"The version of Windows you have installed does not match the update you are trying to install."

So I extracted urlmon.dll, copied it over to %windir%\system and then regsvr32-ed it.

The 1st hotfix [v1] works ok:
http://www.mdgx.com/files/IE918899.EXE

Please send me the official Q923672 fix at your convenience.
E-mail [please click the blue E-mail link]:
http://www.mdgx.com/form.htm
Thanks in advance.

Can he take a look at the code of U912919 of v4.10.2003 of the gdi.exe and gdi32.dll files?
nah, I dont like the idea of using 4.10.2227 under Win98 FE as it may break Win98 FE or cause BSOD errors.

I'm going to re-create the Q231942 ios.vxd 4.00.1114 fix for Win95 SR2 as the patch is faulty and wont install the updated ios.vxd file. I'll send you the "corrected" Q231942 patch ASAP.

You did right with extracting.

This is a "feature-problem" this message should prevent on installing the fix on wrong systems.
But if you installed 918899 before somehow that it only includes one newer file it despite using the proper system refuses to install.

It did also happen on my system so you can manually install the new file
or a better workaround is to open the installer with e.g. ResourceHacker go to
RCData and delete the "VERCHECK" ressource.

I tried 2x to send you the fix but I got "delivery failed".
Hopefully I uploaded it:
Here
Although the zip file is called "283500..." but it contains the fix.

erpdude8:

This is your answer:Hope this helps.

if i install Q918547 and don't install Q912919 will it cause problems?

Boh these fixes install identical files on Win98SE:
GDI32.DLL + GDI.EXE 4.10.2227

Description found at:
http://www.mdgx.com/web.htm#9SU

* Windows 98/98 SE Graphics Rendering Engine (GRE) Windows MetaFile (WMF)
Security Vulnerability Fixes (English):
http://www.microsoft.com/technet/security/...n/ms06-026.mspx
Q918547: Unofficial Windows 98 SE GDI32.DLL + GDI.EXE 4.10.2227 Fix:
http://www.mdgx.com/files/918547.TXT
Direct download [328 KB]:
http://www.mdgx.com/files/Q918547.EXE
STRONGLY RECOMMENDED: Q918547 above provides the BEST Fix!
OBSOLETE fixes:
- Microsoft Windows 98/98 SE Q918547.DLL 4.10.2224 + KB918547.EXE 4.10.2224
Fix [145 KB]:
http://download.windowsupdate.com/msdownlo...0a47a89e3ce.exe
BUG: Q918547.DLL + KB918547.EXE Fix above installs BUGgy INF file!
FIX: MUST Install this INF Fix [63 KB]:
http://www.mdgx.com/files/918547FX.EXE
AFTER installing Q918547.DLL + KB918547.EXE Fix above!
- U918547: Unofficial Windows 98/98 SE/ME Q918547.DLL 4.10.2226 + KB918547.EXE
4.10.2226 Fix:
http://www.mdgx.com/files/U918547.TXT
Direct download [113 KB]:
http://www.mdgx.com/files/U918547.EXE
Symantec: Microsoft Windows GDI WMF Handling Heap Overflow Vulnerability:
http://securityresponse.symantec.com/avcen...tent/18322.html
Inside the WMF Format [Acrobat PDF format, 113 KB, right-click to save!]:
http://pferrie.tripod.com/vb/wmf.pdf

* Unofficial Windows 98/98 SE Graphics Rendering Engine (GRE) Windows
MetaFile (WMF) GDI32.DLL + GDI.EXE (4.10.2003 for Win98/98 SP1 + 4.10.2227
for Win98 SE) Security Vulnerability Fix:
http://www.microsoft.com/technet/security/...n/ms06-001.mspx
Direct download [380 KB, English]:
http://www.mdgx.com/files/Q912919.EXE
More info:
http://www.mdgx.com/files/918547.TXT
More info:
http://www.microsoft.com/technet/security/...n/ms06-026.mspx
More info:
http://www.msfn.org/board/?showtopic=46581&st=193
MouseTrap WMF BUG detection tool (freeware):
http://www.grc.com/wmf/wmf.htm
More info:
http://www.kb.cert.org/vuls/id/181038/

Hope this helps.

_________________________________________

About IE918899 hotfix v2:
Is it possible to change SED code to allow install on all 98/98 SE/ME systems with IE 6.0 SP1 pre-installed?

I got the official W2K SP4 fix.
Thanks again.

BTW:
The delivery failure is probably caused by Gmail [my email account] which doesn't allow to send EXE or ZIP file attachments.
Such file extensions must be renamed to some unknown extension, like EXX, ZZZ etc.

If you mean that it can be installed without getting an error message
(I think the message is shown because v2 includes nearly the same files versions like v1 does)
then use ResourceHacker go to RCData and delete the "VERCHECK" ressource and thats it.

winxpi:

What I meant was...

If possible, can you please modify the vercheck function and repackage the hotfix to include the older URLMON.DLL from the 1st hotfix [v1]?
This way everybody will be able to install it, not only the people who never installed v1.
Right now who installed v1, cannot install v2, therefore can't install newer urlmon.dll.

If you have the time to do this, I'll post it at my site to replace older v1 hotfix.

Thanks for your time.

no it will not. Q918547 provides the same security fix as Q912919 except Q912919 also bundles GDI files for Win98fe.

OOPSIE, the_guy. Microsoft has just changed their mind. They will NOT re-release MS06-042 for Win2k SP4/WinXP SP1 today August 22 as they've found new problems with it. See MS security bulletin MS06-042 now and look in the "Caveats" section:
http://www.microsoft.com/technet/security/...n/MS06-042.mspx

oh and read this Bink.nu article as MS06-042 for IE6 SP1 seems to "open" a new security vulnerability:
http://bink.nu/Article8130.bink
If that's true, then I will advise NOT to install MS06-042 for IE6 SP1

and also http://blogs.technet.com/msrc/archive/2006/08/22/448689.aspx

Petr

Another link is a security advisory: here.

the_guy

I have recently tested unofficial HLINK.DLL KB920670 (Q920670.exe) and MSXML3.DLL KB909363 (Q909363.exe) patches for Win98/ME/NT4. They do NOT work as they ask for those files and can not find them.

I found flaws in the 920670.inf and kb909363.inf files. [SourceDiskNames] should be changed to [SourceDisksNames] in both of those INF files (yup, add the "s" after Disk). Make the change and the unofficial patches will work.

also the direct download link to Frontpage 2000 Server extensions listed on MDGx's IE page:
ftp://ftp.microsoft.com/products/frontpag...e2k_x86_eng.exe
this version is 4.0.2.4317! the same one from the MS Windows Update site:
http://download.windowsupdate.com/msdownlo...7AA803C071A.exe
Both FPSE 2k downloads are exactly the same whether or not it is download from MS FTP or MS WU site.

Frontpage 2000 Server Extensions version 4.0.2.5526 (v1.3) is NOT available anymore at ANY Microsoft site whether HTTP or FTP.
FPSE 2k version 4.0.2.5526 can be downloaded here:
http://www.download.com/Frontpage-2000-Ser...4-10106086.html

Thanks for noticing.

When I ran FPSE2K from MS ftp site, the opening screen said:When I ran FPSE2K from MS WU site, I got this message:But after installation, both had the same version build for all files.
I'll keep the WU link, because displays the correct version.

Thanks for the links.

Finally v2 of Cumulative Update for Internet Explorer 6 SP1 (KB918899)

More to read: MS06-042 Re-released

(BTW, the updated file URLMON.DLL has version 6.00.2800.1568 (RTMQFE) and 6.00.2800.1567 (RTMGDR) and is dated August 5th.)

Petr

I have to giggle.

I called the unofficial Win9x KB918899 with new urlmon.dll v2 : IE6.0sp1-KB918899-v2-x86-ENU.exe
and MS called the official 2k/XP fix : IE6.0sp1-KB918899-Windows-2000-XP-v2-x86-ENU.exe .
Its just ironic that they did also name it v2 and so nearly the same name .

No surprise, Microsoft uses always the same convention, all corrected fixes were v2:

WindowsXP-KB911280-v2-x86-ENU.exe
WindowsXP-KB908531-v2-x86-ENU.exe
WindowsMedia10-KB911565-v2-x86-ENU.exe
WindowsXP-KB900485-v2-x86-ENU.exe
WindowsXP-KB889527-v3-x86-ENU.exe
WindowsInstaller-KB893803-v2-x86.exe
WindowsXP-KB319740-v5-x86-ENU.exe

So
IE6.0sp1-KB918899-Windows-2000-XP-x86-ENU.exe is the first release
IE6.0sp1-KB918899-Windows-2000-XP-v2-x86-ENU.exe is the second release
IE6.0sp1-KB918899-Windows-2000-XP-v3-x86-ENU.exe would be the third release
etc.

It was changed with Windows Vista, here even the first version has v1 in the filename:

Windows6.0-KB918899-v1-x86-EN-US.MSU

Petr

Ohh thx for enlightenment.
I think I only knew it from Windows update where websites are called e.g:

v3.windowsupdate.microsoft.com/
v4.windowsupdate.microsoft.com/

Maybe I should join MS because I even use same file names.

V3 Windows Update site only works for Win95, winxpi. V4 Windows Update site works only for Win98/ME. I visited the WU sites with different versions of Windows to prove that.



you did not fix the unofficial HLINK.DLL [Q920670.EXE] and unofficial MSXML3.DLL [Q909363.EXE] patches, MDGx. they still do not work. please make these corrections and repost the patches.

909363 is replaced by 919587, and I will send MDGx an unofficial patch for that in the next few days.

What problem are you having with 920670 erpdude?

the_guy

Q920670.EXE updated:

* Unofficial Windows 98/98 SE/NT4 SP6a/ME Hyperlink Object HLINK.DLL
5.2.3790.2748 Security Vulnerability Fix:
http://www.microsoft.com/technet/security/...n/ms06-050.mspx
Direct download [163 KB, English]:
http://www.mdgx.com/files/Q920670.EXE

Please try again see if it works ok.

I'll wait about Q909363 until the_gui sends me the newer Q919587 update, and then I'll replace the buggy one with the new one.

Thanks.
___________________________________________

winxpi:

I got the source for IE918899 v2.
I'll try to fix it, and if I do, I'll post it here.
Thanks a bunch.

HLINK.DLL file from unofficial 920670 does NOT install and asks for the file. I already found the problem with U920670's INF file and sent a revised one to MDGx a few days ago and Q920670.exe file should work now.

UPDATED 8-29-2006

Updated:
- Win98SE KERNEL32.DLL patch for 2-4 GB files with proper fixed API.
- WinME KERNEL32.DLL patch for 2-4 GB files with proper fixed API.
- Revised IE918899.EXE v2 = now installs properly.
- Buggy Q250876.EXE NWPP32.DLL patch step-by-step install guidelines.
- Q920670.EXE HLINK.DLL patch corrected INF to install properly.

all we need now is a "Win98 FE kernel32.dll fix" for 2-4GB file copying. I'd be outraged if there isn't one.
To get the benefit of the 923762 fix included in 918899 V2, install the RTMQFE edition (NOT the RTMGDR variety) to update the URLMON.DLL file to the one mentioned in MS article 923762.

be sure to add the QFEInstalled DWORD registry with a value of 1 under the "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer" key in Regedit before using IE918899.exe

@erpdude8: Both the gdr and qfe versions of 918899v2 include the fix.

Original fix:
GDR: 6.0.2800.1565
QFE: 6.0.2800.1566

923762/Revised fix:
GDR: 6.0.2800.1567
QFE: 6.0.2800.1568

MS made a typo in the security bulletin.

the_guy

I'll contact MS and they'll make a correction to their security bulletin. Still waiting for "Kernel32.dll 2GB-4GB files with proper fixed API" 4.10.2002 patch for Win98 FE.

MDGx, I have some questions about the "MORESTAK: Windows 9x/ME 16-bit Programs Stack Memory Patch" listed on your page. How do you use it? Do I have to run MORESTAK.EXE in native DOS or while Win98/ME is running. Do I have to specify which 16bit EXE files (like WINFILE.EXE and PROGMAN.EXE) that needed to be patched by MORESTAK.EXE.? Documentation on using MORESTAK.EXE is still unclear and the utility is not in english. How do I really know MORESTAK.EXE did its job?

I think you need to ony call MORESTAK from a dos prompt.

All you need is to run MORESTAK.EXE followed by the 16-bit file you want to patch [it's a patcher, not a memory resident (TSR)].
Example:

MORESTAK WINFILE.EXE

Patched files must be placed in the same directory where the original resides, overwriting the original.
You should keep a backup of the original file in a safe location.
MORESTAK must be run only from a DOS box/window, not from true/native MS-DOS.

About testing patched files:
I have no idea how to test them, because just like you said, documentation is sketchy + unclear.
Maybe an email to the author would bring some light into this subject?
Maybe he can write a small testing tool if you ask him?
His (updated) web site is here [please note that morestak is only in German]:
http://www-user.tu-chemnitz.de/~omat/hs_fr...re/morestak.htm
The patch is here:
http://www-user.tu-chemnitz.de/~omat/viewz...ip/MORESTAK.EXE
Pascal source here:
http://www-user.tu-chemnitz.de/~omat/viewz...RC/MORESTAK.PAS
Source text here:
http://www-user.tu-chemnitz.de/~omat/viewz...AK.PAS?auto=PAS

This is the guy who developed original DOSLFN:
http://www-user.tu-chemnitz.de/~omat/hs_freeware/freew.html
Improved DOSLFN [based on original above]:
http://www.geocities.com/jadoxa/doslfn/

BTW:
I have updated MORESTAK.ZIP [6 KB]:
http://www.mdgx.com/files/MORESTAK.ZIP
to include usage guidelines + examples [MORESTAK.TXT].

HTH

UPDATED 9-4-2006

Updated:
- Kernel fixes for 2-4 GB files for both 98FE + 98SE inside same EXE installer = COPY2GB.EXE .
- IE918899.EXE v2 repacked to include nircmd + start for WinME install.
- 98SE2XP: Now installs also on WinME + added newer L3CODECP.ACM 3.4.0.0 from WMP11 XP Beta 2.
- 98SEMP10: added newer L3CODECP.ACM 3.4.0.0 from WMP11 XP Beta 2.
- L3CWMP11: added newer L3CODECP.ACM 3.4.0.0 from WMP11 XP Beta 2.

___________________________________________


This is the Win98 FE (First Edition) KERNEL32.DLL 4.10.2002 patched by anonymous author to correctly manipulate 2-4 GB files.
COPY2GB.EXE includes both 98(FE) + 98SE kernel32.* files, detects OS build and installs appropriate file.
Please install to make sure proper kernel build is installed.
After install, run make2gb.exe on a drive/partition with free space > 2 GB to make sure the patched files work properly with 2 GB or larger files:
I have tested it on both tweaked 98SE and "from scratch" 98SE. Works ok.

* Unofficial Windows 98/98 SE 2-4 GB Files Errors KERNEL32.DLL (4.10.2002 for Win98/98 SP1 + 4.10.2226 for Win98 SE) Fix:
http://support.microsoft.com/?id=318293
Direct download [349 KB, English]:
http://www.mdgx.com/files/COPY2GB.EXE
More info:
http://www.msfn.org/board/?showtopic=81200

___________________________________________


In the light of anonymous author's comments about MORESTAK, I have removed all references to MORESTAK from my web site:HTH

ok. I was supposed to release beta 5 of the 98FE SP2 today but I had to hold it off so I can include the kernel32.dll v4.10.2226 file to fix the 2-4 GB Copy problem. I'll post it up later this week.

the unofficial KB919587 patch and the official KB919587 hotfix are not yet posted at MDGx's web site and it has been almost 2 weeks. have you obtained the actual KB919587 hotfix yet?

@erpdude8: something weird happened when I sent the fixes, and they did not send. I did not resend them yet as my main computer has had some problems (power supply not working). I will resend them tonight or tomorrow morning.

It will also include some new ones.

the_guy

I don't think the Q250876 hotfix for Win98 is buggy. It works fine. It's the WIN95 version [named KB250876.exe] that will NOT install under the OSR2 versions of Win95. Post these steps for the WIN95 version of Q250876 and remove these steps for Win98 as the WIN98 version of Q250876 works as expected.

also the unofficial Jet 4.0 KB910906 patch for Win9x/2000/ME/NT4 does not work. same problem as unofficial KB920670 patch. Change [SourceDiskNames] to [SourceDisksNames] in the 910906.inf file and U910906 patch will work.

UPDATED 9-5-2006

I have fixed Q909363:

* MSXML 3.0 SP7 XSL Transformations Errors MSXML3.DLL 8.70.1107 Fix:
http://support.microsoft.com/?id=909363
MSXML 3.0 SP7 Patch for Windows 98/98 SE/ME [536 KB]:
http://www.mdgx.com/files/Q909363.EXE

I have also removed install instructions for Q250876.EXE [installs ok as is]:

* Microsoft Windows 98/98 SE Print Queue Errors NWPP32.DLL (4.10.1999 for Win98/98 SP1 + 4.10.2224 for Win98 SE) Fix:
http://support.microsoft.com/?id=250876
Direct download [159 KB, English]:
http://www.mdgx.com/files/Q250876.EXE

Also fixed Q910906.EXE:

* Jet 4.0 SP8 Database Engine Fix for Windows 9x/ME:
http://support.microsoft.com/?id=910906
Unofficial Jet 4.0 SP8 Patch for Windows 9x/ME [1.42 MB]:
http://www.mdgx.com/files/Q910906.EXE

HTH

There are two different versions of Q250876 hotfix

The first (154296 bytes) contains nwpp32.dll 4.00.955 and has TargetWin9xVersion=4.0.950-4.3.1220
The second (168608 bytes) contains nwpp32.dll 4.00.956 and has TargetWin9xVersion=4.0.950

Maybe the 4.00.956 version does not work in OSR2?

http://support.microsoft.com/kb/q250876/ lists version 4.00.955 only.

Petr

UPDATED · 9-6-2006

Updated:
- 98SE2XP: reverted back to older L3CODECP.ACM 3.3.2.44 from WMP10 XP.
- 98SEMP10: reverted back to older L3CODECP.ACM 3.3.2.44 from WMP10 XP.

nwpp32.dll file version 4.00.956 should work okay under Win95 OSR2 Petr. MS just forgot to make the 4.00.956 hotfix work under the OSR2 versions.

Thiis is the error i get after installing Q910906
Unable to fine the function "DllregisterServer"
in the file "C:\Windows\System\MSREPL40.DLL


Also Q918547 doesn't register

same here, I get error message registering MSREPL40.DLL with unofficial 910906 patch under a WinME computer. I dont think it is necessary to "RegSrv" the MSREPL40.DLL file.

original XP KB910906 hotfix does NOT "DllregisterServer" the DLL files. remove the RegisterOCXs=RG and [RG] sections from the Q910906.inf file and revise unofficial 910906 patch for Win9x/ME/2000/NT4.

PROBLEMCHYLD, can you be more specific on Q918547 not registering? do you mean the Q918547 files do not show up on QFECheck or that the Q918547 files are not registered by REGSVR32.EXE?

What i mean is after i apply the patch its still telling me at Windows Update to install as if it didn't

have you applied the official MS KB918547 patch for Win98 SE? OR the UNofficial KB918547 patch listed on MDGx's web site?

the unofficial update
should i apply official update and then the unofficial

yes. apply the official MS KB918547 update for Win98, install the Win98 KB918547 QFE registry fix from MDGx's web site and then apply the unofficial KB918547 patches. see this topic on U918547 patches:

http://www.msfn.org/board/index.php?showtopic=77218

i thought the other updates was obselete
http://www.msfn.org/board/index.php?s=&...st&p=525191