[Drugwash]

With SlimBrowser (IE based, currently IE6-SP1 on Win98SE) page is too wide. Funny thing is I checked the page code when the thread was younger (not that I'd make much of HTML anyway) and reducing only codebox sizes (to 50%) didn't make any difference, so it must be something with the background layout (the whitish portion that can be seen to the right). Couldn't pinpoint the issue though so I left it alone after a few failed attempts.

This post has been edited by Drugwash: 09 October 2008 - 10:31 AM

[CharlotteTheHarlot]

UPDATE TO POST #1

The top post has been re-written to describe the current ZIP package suite (downloaded on 2009-04-08).

Win9x fans will notice that three more utilities no longer operate.

-CTH-

[Queue]

I grabbed the ''ExeVersion'' utility from here:
http://www.msfn.org/board/index.php?s=&...st&p=791707
and used it on the newest version of AutoRuns and it seemed to restore functionality on Win9x. I mean, I haven't tested it thoroughly, but it starts up and lists stuff. I'm still holding on to my last official versions that work on Win9x anyway, but hot darnn, I wish I'd noticed ExeVersion sooner.

Erm, obviously the OP knows of this utility, but I think it's still a viable comment.

Queue

This post has been edited by Queue: 15 April 2009 - 11:49 PM

[Controller Khan]

herbalist, on Sep 3 2008, 09:51 PM, said:

I couldn't help but notice that right after MS bought Sysinternals, many of their utilities became quite a bit larger in size, with no obvious changes in the way they work or their features.
Examples:
Process Explorer
Version 10.04 is 1.37MB
Version 10.21 is 3.45MB

Regmon
Version 7.03 is 417KB
Version 7.04 is 600KB

Filemon
Version 7.03 is 436KB
Version 7.04 is 730KB

I see no real changes in any of these from the last Sysinternals versions to the MS versions, except that the "save as" option of the MS versions of Filemon and Regmon doesn't work on 98. The previous versions do. I really have to wonder just what they changed that nearly doubled their size or even more.

look at the Resources BINRES, they added PE64(AMD64) drivers and exe files.


you can use e.g Resource Hacker for viewing Resources. 

[CharlotteTheHarlot]

There is some related discussion presently occuring in this thead: Win98 vulnerability?.

Since Multibooter was asking about previous versions of Autoruns I thought I would inventory what I had and report back here. These are unmodified distros ...

 
AUTORUNS EXE .... 40,960 ... 09-29-00 .... 5:46p ... Autoruns.exe_0120
AUTORUNS EXE .... 65,536 ... 12-28-02 .... 4:41p ... Autoruns.exe_0201
AUTORUNS EXE .... 81,920 ... 01-08-03 .... 6:36p ... Autoruns.exe_0203
AUTORUNS EXE ... 110,592 ... 10-24-03 .... 9:41a ... Autoruns.exe_0302
AUTORUNS EXE ... 114,688 ... 04-07-04 .... 7:36a ... Autoruns.exe_0403
AUTORUNS EXE ... 118,784 ... 05-14-04 ... 10:45a ... Autoruns.exe_0411 [color="#FF0000"]<-- Crashes Win9x![/color]
AUTORUNS EXE ... 135,168 ... 06-19-04 .... 1:13p ... Autoruns.exe_0431
AUTORUNS EXE ... 135,168 ... 06-26-04 ... 11:51a ... Autoruns.exe_0432
AUTORUNS EXE ... 155,648 ... 08-24-04 .... 3:07p ... Autoruns.exe_0500
AUTORUNS EXE ... 172,032 ... 11-12-04 ... 12:48p ... Autoruns.exe_0600
AUTORUNS EXE ... 172,032 ... 12-20-04 .... 3:24p ... Autoruns.exe_0610
AUTORUNS EXE ... 181,776 ... 03-02-05 ... 10:26a ... Autoruns.exe_0700
AUTORUNS EXE ... 218,640 ... 06-16-05 .... 5:00p ... Autoruns.exe_0800
AUTORUNS EXE ... 243,216 ... 07-21-05 .... 4:13p ... Autoruns.exe_0812
AUTORUNS EXE ... 247,312 ... 07-27-05 .... 9:15a ... Autoruns.exe_0813
AUTORUNS EXE ... 316,944 ... 10-05-05 .... 5:49p ... Autoruns.exe_0821
AUTORUNS EXE ... 337,424 ... 10-28-05 ... 12:44p ... Autoruns.exe_0831
AUTORUNS EXE ... 345,616 ... 12-07-05 .... 4:51p ... Autoruns.exe_0843
AUTORUNS EXE ... 348,160 ... 03-08-06 .... 5:03p ... Autoruns.exe_0850
AUTORUNS EXE ... 352,256 ... 03-30-06 .... 1:49p ... Autoruns.exe_0851
AUTORUNS EXE ... 398,912 ... 06-22-06 ... 12:39p ... Autoruns.exe_0852
AUTORUNS EXE ... 398,912 ... 07-10-06 .... 2:22p ... Autoruns.exe_0853
AUTORUNS EXE ... 621,368 ... 11-01-06 .... 1:07p ... Autoruns.exe_0854
AUTORUNS EXE ... 529,792 ... 01-18-07 .... 3:31p ... Autoruns.exe_0860
AUTORUNS EXE ... 529,792 ... 01-22-07 .... 1:11p ... Autoruns.exe_0861
AUTORUNS EXE ... 542,080 ... 07-09-07 ... 11:23a ... Autoruns.exe_0870
AUTORUNS EXE ... 542,080 ... 07-24-07 .... 3:58p ... Autoruns.exe_0871
AUTORUNS EXE ... 546,176 ... 08-16-07 .... 9:43a ... Autoruns.exe_0872
AUTORUNS EXE ... 546,176 ... 08-19-07 .... 8:40p ... Autoruns.exe_0873
AUTORUNS EXE ... 594,984 ... 12-14-07 .... 1:55p ... Autoruns.exe_0900
AUTORUNS EXE ... 599,080 ... 01-03-08 ... 10:40a ... Autoruns.exe_0901
AUTORUNS EXE ... 599,080 ... 01-09-08 .... 3:32p ... Autoruns.exe_0902
AUTORUNS EXE ... 603,176 ... 01-31-08 .... 5:23p ... Autoruns.exe_0910
AUTORUNS EXE ... 603,176 ... 02-06-08 ... 10:38a ... Autoruns.exe_0911
AUTORUNS EXE ... 603,176 ... 02-07-08 .... 9:30a ... Autoruns.exe_0912
AUTORUNS EXE ... 603,176 ... 02-25-08 ... 12:44p ... Autoruns.exe_0913 [b][color="#FF0000"]<-- Last Win9x[/color][/b]
AUTORUNS EXE ... 622,120 ... 05-09-08 .... 1:56p ... Autoruns.exe_0920
AUTORUNS EXE ... 622,632 ... 05-12-08 .... 4:31p ... Autoruns.exe_0921
AUTORUNS EXE ... 645,160 ... 07-15-08 .... 4:39p ... Autoruns.exe_0930
AUTORUNS EXE ... 645,672 ... 07-21-08 .... 9:40a ... Autoruns.exe_0931
AUTORUNS EXE ... 645,672 ... 07-24-08 ... 10:00a ... Autoruns.exe_0932
AUTORUNS EXE ... 646,184 ... 08-21-08 .... 9:30a ... Autoruns.exe_0933
AUTORUNS EXE ... 646,184 ... 08-29-08 ... 10:32a ... Autoruns.exe_0934
AUTORUNS EXE ... 644,976 ... 10-15-08 .... 9:25a ... Autoruns.exe_0935
AUTORUNS EXE ... 645,488 ... 12-10-08 .... 2:40p ... Autoruns.exe_0936
AUTORUNS EXE ... 647,024 ... 12-17-08 .... 9:11p ... Autoruns.exe_0937
AUTORUNS EXE ... 647,024 ... 01-09-09 .... 9:12a ... Autoruns.exe_0938
AUTORUNS EXE ... 647,552 ... 02-03-09 ... 10:32a ... Autoruns.exe_0939
AUTORUNS EXE ... 648,064 ... 03-27-09 .... 9:24a ... Autoruns.exe_0940
AUTORUNS EXE ... 648,064 ... 04-02-09 .... 4:47p ... Autoruns.exe_0941 

Please note that the version number in that list appears appended to the LFN after an underscore, with a leading zero. So Autoruns.exe_0941 obviously means Autoruns v9.41.

I have not been able to locate any binaries between v9.13 (last Win9x) and v9.21.

As mentioned in the top post and more recently by Queue, there may be some hope in manually patching some of these using a tool by SteelBytes. I have not had the time lately but will endeavor to at some point.

NOTE: If any mods are reading this perhaps you might comment on the ethicality of documenting here the results of patching System Internals utilities (see my concerns in the top post). I'm guessing it will be ok since other Microsoft files are commonly patched and discussed (for example UXTHEME). But it can't hurt to ask anyway.

Thanks! -=[CTH]=-

EDIT: found a few more versions and added them to the list.

This post has been edited by CharlotteTheHarlot: 02 May 2009 - 08:33 PM

[CharlotteTheHarlot]

UPDATE TO POST #1

The top post has been re-written to describe the current ZIP package suite (downloaded on 2009-08-26).

Win9x fans will notice that one more utility no longer operates.

-CTH-

[dencorso]

CharlotteTheHarlot, on May 2 2009, 01:05 AM, said:

As mentioned in the top post and more recently by Queue, there may be some hope in manually patching some of these using a tool by SteelBytes. I have not had the time lately but will endeavor to at some point.

NOTE: If any mods are reading this perhaps you might comment on the ethicality of documenting here the results of patching System Internals utilities (see my concerns in the top post). I'm guessing it will be ok since other Microsoft files are commonly patched and discussed (for example UXTHEME). But it can't hurt to ask anyway.

You can report freely your results regarding the patching of System Internals utilities.
What you cannot do (Rule 1.b) is to actually redistribute the patched binaries (nor the unpatched binaries, but, for them, you can provide links to the original software provider/vendor site, if you so want).

[CharlotteTheHarlot]

dencorso, on Aug 29 2009, 02:23 AM, said:

CharlotteTheHarlot, on May 2 2009, 01:05 AM, said:

As mentioned in the top post and more recently by Queue, there may be some hope in manually patching some of these using a tool by SteelBytes. I have not had the time lately but will endeavor to at some point.

NOTE: If any mods are reading this perhaps you might comment on the ethicality of documenting here the results of patching System Internals utilities (see my concerns in the top post). I'm guessing it will be ok since other Microsoft files are commonly patched and discussed (for example UXTHEME). But it can't hurt to ask anyway.

You can report freely your results regarding the patching of System Internals utilities.
What you cannot do (Rule 1.b) is to actually redistribute the patched binaries (nor the unpatched binaries, but, for them, you can provide links to the original software provider/vendor site, if you so want).

I thank you sir!

[M()zart]

CharlotteTheHarlot, on Oct 8 2008, 11:03 PM, said:

Also, have any users of Firefox/Mozilla/Opera/(other) noticed any page width anomolies? So far they seem immune.

Firefox 3.5. Horizontal scrolling appears because of too large boxes. Opera works good.

[CharlesF]

CharlotteTheHarlot, on Aug 31 2008, 10:56 AM, said:

Autoruns.exe .... 9.13 ..... 603,176 ... 02-25-08 ... 12:44p ... ok (Windows)
Procexp.exe .... 11.11 ... 3,654,696 ... 02-27-08 .... 1:05p ... ok (Windows)

With KernelEx 4.0 Final2 installed on Win98SE, last versions are fine:
* Autoruns 9.53
* ProcessExplorer 11.33


EDIT after more tests:
Well, Autoruns 9.53 is running ...but with errors, like false-'File not found'.
Even Autoruns 9.13 is running but not displaying correctly Default Icon's of the entries.
So, last fully functional version for me, seems to be 9.12!

For Process Explorer same thing, last version doesn't display the process name when cursor is rolling over the CPU history or Commit.
Last good version for me is 11.31.

This post has been edited by CharlesF: 30 November 2009 - 05:41 PM

[MDGx]

FYI...

* RegMon v7.04 32-bit for Windows 9x/NT4/2000/ME/XP/2003/Vista/2008/7 monitors
and displays in real time all Registry changes:
http://www.microsoft.com/technet/sysintern...ion/regmon.mspx
Direct download [265 KB, freeware]:
http://www.filewatch...271346.0.0.html
How to FIX RegMon 7.0x to run properly on Windows 95/98/ME:
http://support.micro....com/?id=931822

* Autoruns 32-bit for Windows 9x/NT4/2000/ME/XP/2003/Vista/2008/7 detects +
displays all autostart/startup programs/monitors/TSRs/processes/services from
all startup folders + Registry entries (freeware):
http://www.microsoft.com/technet/sysintern...s/autoruns.mspx
- Autoruns 9.56 for Windows 2000/XP/2003/Vista/2008/7 [577 KB]:
http://download.sysi...es/autoruns.zip
- OLD Autoruns 8.73 for Windows 9x/NT4/ME [485 KB]:
http://files3.brothe...oruns-8.-73.zip

* TCPView GUI + TCPVcon command line v2.54 32-bit tools for Windows
9x/NT4/2000/ME/XP/2003/Vista/2008/7 monitor, display + close all active TCP +
UDP endpoints, lists remote addresses + TCP connection(s) status:
http://www.microsoft.com/technet/sysintern...ng/tcpview.mspx
Direct download [208 KB, freeware]:
http://download.sysi...les/tcpview.zip
Windows 95/OSR1/OSR2 require Winsock Upgrade 2.0 [963 KB] already installed:
http://support.micro....com/?id=182108

* Process Explorer 32-bit for Windows
9x/NT4/2000/ME/XP/2003/Vista/2008/7 for x86, x64, AMD64 + IA64 CPUs displays +
monitors ANY app/process/thread/TSR/executable (freeware):
http://www.microsoft.com/technet/sysintern...ssexplorer.mspx
- Process Explorer 11.33 for Windows 98/2000/ME/XP/2003/Vista/2008/7 [1.54 MB]:
http://download.sysi...essexplorer.zip
- OLD Process Explorer 9.25 32-bit for Windows 95/OSR1/OSR2 [1.18 MB]:
http://www.toolzbyda...ils/procexp.exe
Windows 95/OSR1/OSR2 require Winsock Upgrade 2.0 [963 KB] already installed:
http://support.micro....com/?id=182108

HTH

Edit:
Added MSKB fix URL for RegMon.

This post has been edited by MDGx: 23 December 2009 - 11:05 PM

[CharlesF]

MDGx, on Dec 1 2009, 06:18 PM, said:

* RegMon v7.04 32-bit for Windows 9x

RegMon and FileMon are broken here.
I get an error message:
"FILEVXD.VXD is not loaded properly.: The system cannot find the file specified." with Filemon,
and "REGVXD.VXD is not loaded properly.: The system cannot find the file specified." with RegMon,
when launching them.

Same thing with an older version (6.04).
Any idea?

[CharlotteTheHarlot]

UPDATE TO POST #1

The top post has been re-written to describe the current ZIP package suite: 2009-12-01. (downloaded on 2009-12-18).

Win9x fans will notice no functional changes except for the fact that both FILEMON and REGMON are no longer distributed in the Suite.

-CTH-

[whatever420]

CharlesF, on Dec 13 2009, 10:04 AM, said:

RegMon and FileMon are broken here.
I get an error message:
"FILEVXD.VXD is not loaded properly.: The system cannot find the file specified." with Filemon,
and "REGVXD.VXD is not loaded properly.: The system cannot find the file specified." with RegMon,
when launching them.

Same thing with an older version (6.04).
Any idea?

Maybe this will help...?

Error message when you try to run the Sysinternals FileMon and RegMon...

[CharlotteTheHarlot]

Just an FYI to everyone concerned with the firewall alerts due to phone home boilerplate code found in the System Internals utilities circa the Microsoft acquisition (some posts here at MSFN about it in Win98 vulnerability, where Multibooter noted the behavior).

An explanation is found at System Internals in 2006 the thread Process Explorer and Internet Access, which was just before the Microsoft takeover.

In short, the phoning home occurs for two reasons that I can see ...

The utilities attempt to verify digital signatures, which can be disabled in the GUI of each app under options (which apparently only appears on WinXP and above).

Also there can be internet access initiated from the using help file, no doubt from some JavaScript in the source code of the compiled CHM.

[CharlotteTheHarlot]

UPDATE TO POST #1

The top post has been re-written to describe the current ZIP package suite: 2010-04-15. (downloaded on 2010-04-17).

Win9x fans will notice no functional changes among the very few remaining compatible utilities distributed in the Suite.

-CTH-

[CharlotteTheHarlot]

UPDATE TO POST #1

The top post has been re-written to describe the current ZIP package suite dated: 2010-08-02. (downloaded on 2010-08-17).

Win9x fans will notice no functional changes among the very few remaining compatible utilities distributed in the Suite.

Interestingly, the newest utility: RAMMAP.EXE requires Vista or higher. This means that both Win9x and WinXP are now victims of Microsoft's latest compilers. Wonderful. So to any WinXP users: Welcome to the Party pal!

-CTH-

[rainyd]

I hope it is right place: I've found replacement (at least partially) for Process Explorer - Process Viewer for Windows (PrcView) 5.2.15.
It works under Win9x but

Quote

Please note that performance and monitoring-related functionality will not run on Windows 9x/Me

http://www.teamcti.c...iew/prcview.htm

[CharlesF]

rainyd, on 23 August 2010 - 07:07 AM, said:

I've found replacement (at least partially) for Process Explorer - Process Viewer for Windows (PrcView) 5.2.15.

Hummm, why do you need to replace Process Explorer?

This Process Viewer doesn't seems better to me.

[egrabrych]

@MDGx:

MDGx, on 01 December 2009 - 11:18 AM, said:

* Autoruns 32-bit for Windows 9x/NT4/2000/ME/XP/2003/Vista/2008/7 detects +
displays all autostart/startup programs/monitors/TSRs/processes/services from
all startup folders + Registry entries (freeware):
- Autoruns 9.56 for Windows 2000/XP/2003/Vista/2008/7 [577 KB]:
http://download.sysi...es/autoruns.zip

And why not: Autoruns 9.57 (http://www.filehippo..._autoruns/6658/)?