Internet Explorer 6 and UURollup

[ppgrainbow]

This is actually very good news because now we know for sure that v9b is OK while v10 is not OK which means that there indeed must be something in v10 that causes the problems. The bad thing is that I can't reproduce the problem here so it's impossible for me to test it myself but I'll have a look at the differences between v9b and v10 and try to figure out what may be the reason.

Thank you for the help.

I do agree that there is indeed something wrong in UURollup v10 that might be causing problems. It would be good to extract the contents Windows2000-UURollup-v9b-x86-ENU.exe and Windows2000-UURollup-v10-x86-ENU.exe and investigate to see which offending files could be causing the right click mouse functionality in Internet Explorer 6 and Character Map to not work correctly.

[tomasz86]

I use KDiff3 to easily compare folders. It compares all files and you can also compare the content of text files too. In fact, a lot of files were added to UURollup-v10 if you compare it with v9b but only a few of them are really significant. The new shell32.dll is definitely the most important difference between them. Tomorrow I'll try to check them thoroughly.

Edit: I've managed to do a quick comparison of the information .txt files and these are all "new" files in UURollup-v10:

autoitx3.dll 3.3.8.1
comct232.ocx 6.0.98.16
comct332.ocx 6.7.0.9816
comctl32.ocx 6.0.98.16
comdlg32.ocx 6.1.98.16
cygwin1.dll 1007.15.0.0
dblist32.ocx 6.1.98.16
gdiplus.dll 5.2.6002.22791
HAL.DLL 5.0.2195.6692
halaacpi.dll 5.0.2195.6692
halacpi.dll 5.0.2195.6692
halapic.dll 5.0.2195.6692
halborg.dll 5.0.2195.6692
halmacpi.dll 5.0.2195.7007
halmps.dll 5.0.2195.7007
halsp.dll 5.0.2195.6692
hfsecper.inf
hfsecupd.inf
libeay32.dll 1.0.1.3
libiconv2.dll 1.12.2872.39125
libintl3.dll 0.14.4.1952
libmmd.dll 12.0.12.2
libpng15.dll 1.5.10.0
libssl32.dll 1.0.1.3
mci32.ocx 6.1.98.16
mscomct2.ocx 6.1.98.16
mscomctl.ocx 6.1.98.33
mscomm32.ocx 6.1.98.16
msdatgrd.ocx 6.1.98.16
msdatlst.ocx 6.1.98.16
msflxgrd.ocx 6.1.98.14
mshflxgd.ocx 6.1.98.16
msinet.ocx 6.1.98.16
msmask32.ocx 6.1.98.16
msstdfmt.dll 6.1.98.16
msstkprp.dll 6.1.98.16
msvcp60.dll 6.2.3104.0
msvcrt10.dll
mswinsck.ocx 6.1.98.17
normaliz.dll 6.0.5441.0
notepad.exe 5.1.2600.5512
ntkrnlmp.exe 5.0.2195.7382
ntkrnlpa.exe 5.0.2195.7382
ntkrpamp.exe 5.0.2195.7382
ntoskrnl.exe 5.0.2195.7382
openal32.dll 6.14.357.25
picclp32.ocx 6.1.98.16
richtx32.ocx 6.1.98.16
shell32.dll 5.0.3900.7171
sndrec32.exe 5.1.2600.5671
ssleay32.dll 1.0.1.3
sysinfo.ocx 6.1.98.16
tabctl32.ocx 6.1.98.16
uniproc\ntdll.dll 5.0.2195.7084
update.sys 5.0.2195.7160
wrap_oal.dll 2.2.0.7
zlib1.dll 1.2.5.0

Most of them come from Kel's Runtimes and I really *doubt* these ones would cause any of the problems you've experienced. If we exclude them then these ones are left:

gdiplus.dll 5.2.6002.22791
HAL.DLL 5.0.2195.6692
halaacpi.dll 5.0.2195.6692
halacpi.dll 5.0.2195.6692
halapic.dll 5.0.2195.6692
halborg.dll 5.0.2195.6692
halmacpi.dll 5.0.2195.7007
halmps.dll 5.0.2195.7007
halsp.dll 5.0.2195.6692
hfsecper.inf
hfsecupd.inf
msvcp60.dll 6.2.3104.0
normaliz.dll 6.0.5441.0
notepad.exe 5.1.2600.5512
ntkrnlmp.exe 5.0.2195.7382
ntkrnlpa.exe 5.0.2195.7382
ntkrpamp.exe 5.0.2195.7382
ntoskrnl.exe 5.0.2195.7382
shell32.dll 5.0.3900.7171
sndrec32.exe 5.1.2600.5671
uniproc\ntdll.dll 5.0.2195.7084
update.sys 5.0.2195.7160

Now let me exclude a few files about which I'm 100% sure that they are fine. After doing that these are left:

HAL.DLL 5.0.2195.6692
halaacpi.dll 5.0.2195.6692
halacpi.dll 5.0.2195.6692
halapic.dll 5.0.2195.6692
halborg.dll 5.0.2195.6692
halmacpi.dll 5.0.2195.7007
halmps.dll 5.0.2195.7007
halsp.dll 5.0.2195.6692
normaliz.dll 6.0.5441.0
ntkrnlmp.exe 5.0.2195.7382
ntkrnlpa.exe 5.0.2195.7382
ntkrpamp.exe 5.0.2195.7382
ntoskrnl.exe 5.0.2195.7382
shell32.dll 5.0.3900.7171
uniproc\ntdll.dll 5.0.2195.7084
update.sys 5.0.2195.7160

Do you see anything strange? I do There should be present:

ntdll.dll 5.0.2195.7084
uniproc\ntdll.dll 5.0.2195.7084

but there's only one of them, i.e.:

uniproc\ntdll.dll 5.0.2195.7084

It means that there is a bug in UURollup-v10. I forgot to update the multiprocessor ntdll.dll. At the moment UURollup-v10 has two different versions of ntdll.dll, like this:

ntdll.dll 5.0.2195.7083
uniproc\ntdll.dll 5.0.2195.7084

The first one is a multiprocesser one and the second one is a uniprocessor file.

On the other hand I don't think that fixing it will have any effect on your problem as you're using a single-core CPU, right? Still, thanks to you we've managed to find it I'll fix the bug first and then we can continue the investigation. There are only 15 new files to check.

Edit2: Actually not even 15. I'm almost sure one of the following files is faulty (update.sys is very unlikely to be the one):

ntkrnlmp.exe 5.0.2195.7382
ntkrnlpa.exe 5.0.2195.7382
ntkrpamp.exe 5.0.2195.7382
ntoskrnl.exe 5.0.2195.7382
shell32.dll 5.0.3900.7171
update.sys 5.0.2195.7160

We can do real testing now Could you launch the VM, install UURollup-v9b again (using the modified update.ver), and check if everything is OK? Do not uninstall anything - just install it over the existing updates.

If everything is OK with v9b then you should try to install v10 again but disable in the update inf (add ; at the beginning) all lines containing:

ntkrnlmp.exe
ntkrnlpa.exe
ntkrpamp.exe
ntoskrnl.exe

Leave "shell32.dll" and "update.sys" untouched. I suspect these kernel related files to cause the problem.

Edited July 2, 2012 by tomasz86

[ppgrainbow]

I use KDiff3 to easily compare folders. It compares all files and you can also compare the content of text files too. In fact, a lot of files were added to UURollup-v10 if you compare it with v9b but only a few of them are really significant. The new shell32.dll is definitely the most important difference between them. Tomorrow I'll try to check them thoroughly.

Edit: I've managed to do a quick comparison of the information .txt files and these are all "new" files in UURollup-v10:

autoitx3.dll 3.3.8.1
comct232.ocx 6.0.98.16
comct332.ocx 6.7.0.9816
comctl32.ocx 6.0.98.16
comdlg32.ocx 6.1.98.16
cygwin1.dll 1007.15.0.0
dblist32.ocx 6.1.98.16
gdiplus.dll 5.2.6002.22791
HAL.DLL 5.0.2195.6692
halaacpi.dll 5.0.2195.6692
halacpi.dll 5.0.2195.6692
halapic.dll 5.0.2195.6692
halborg.dll 5.0.2195.6692
halmacpi.dll 5.0.2195.7007
halmps.dll 5.0.2195.7007
halsp.dll 5.0.2195.6692
hfsecper.inf
hfsecupd.inf
libeay32.dll 1.0.1.3
libiconv2.dll 1.12.2872.39125
libintl3.dll 0.14.4.1952
libmmd.dll 12.0.12.2
libpng15.dll 1.5.10.0
libssl32.dll 1.0.1.3
mci32.ocx 6.1.98.16
mscomct2.ocx 6.1.98.16
mscomctl.ocx 6.1.98.33
mscomm32.ocx 6.1.98.16
msdatgrd.ocx 6.1.98.16
msdatlst.ocx 6.1.98.16
msflxgrd.ocx 6.1.98.14
mshflxgd.ocx 6.1.98.16
msinet.ocx 6.1.98.16
msmask32.ocx 6.1.98.16
msstdfmt.dll 6.1.98.16
msstkprp.dll 6.1.98.16
msvcp60.dll 6.2.3104.0
msvcrt10.dll
mswinsck.ocx 6.1.98.17
normaliz.dll 6.0.5441.0
notepad.exe 5.1.2600.5512
ntkrnlmp.exe 5.0.2195.7382
ntkrnlpa.exe 5.0.2195.7382
ntkrpamp.exe 5.0.2195.7382
ntoskrnl.exe 5.0.2195.7382
openal32.dll 6.14.357.25
picclp32.ocx 6.1.98.16
richtx32.ocx 6.1.98.16
shell32.dll 5.0.3900.7171
sndrec32.exe 5.1.2600.5671
ssleay32.dll 1.0.1.3
sysinfo.ocx 6.1.98.16
tabctl32.ocx 6.1.98.16
uniproc\ntdll.dll 5.0.2195.7084
update.sys 5.0.2195.7160
wrap_oal.dll 2.2.0.7
zlib1.dll 1.2.5.0

Most of them come from Kel's Runtimes and I really *doubt* these ones would cause any of the problems you've experienced. If we exclude them then these ones are left:

gdiplus.dll 5.2.6002.22791
HAL.DLL 5.0.2195.6692
halaacpi.dll 5.0.2195.6692
halacpi.dll 5.0.2195.6692
halapic.dll 5.0.2195.6692
halborg.dll 5.0.2195.6692
halmacpi.dll 5.0.2195.7007
halmps.dll 5.0.2195.7007
halsp.dll 5.0.2195.6692
hfsecper.inf
hfsecupd.inf
msvcp60.dll 6.2.3104.0
normaliz.dll 6.0.5441.0
notepad.exe 5.1.2600.5512
ntkrnlmp.exe 5.0.2195.7382
ntkrnlpa.exe 5.0.2195.7382
ntkrpamp.exe 5.0.2195.7382
ntoskrnl.exe 5.0.2195.7382
shell32.dll 5.0.3900.7171
sndrec32.exe 5.1.2600.5671
uniproc\ntdll.dll 5.0.2195.7084
update.sys 5.0.2195.7160

Now let me exclude a few files about which I'm 100% sure that they are fine. After doing that these are left:

HAL.DLL 5.0.2195.6692
halaacpi.dll 5.0.2195.6692
halacpi.dll 5.0.2195.6692
halapic.dll 5.0.2195.6692
halborg.dll 5.0.2195.6692
halmacpi.dll 5.0.2195.7007
halmps.dll 5.0.2195.7007
halsp.dll 5.0.2195.6692
normaliz.dll 6.0.5441.0
ntkrnlmp.exe 5.0.2195.7382
ntkrnlpa.exe 5.0.2195.7382
ntkrpamp.exe 5.0.2195.7382
ntoskrnl.exe 5.0.2195.7382
shell32.dll 5.0.3900.7171
uniproc\ntdll.dll 5.0.2195.7084
update.sys 5.0.2195.7160

Do you see anything strange? I do There should be present:

ntdll.dll 5.0.2195.7084
uniproc\ntdll.dll 5.0.2195.7084

but there's only one of them, i.e.:

uniproc\ntdll.dll 5.0.2195.7084

It means that there is a bug in UURollup-v10. I forgot to update the multiprocessor ntdll.dll. At the moment UURollup-v10 has two different versions of ntdll.dll, like this:

ntdll.dll 5.0.2195.7083
uniproc\ntdll.dll 5.0.2195.7084

The first one is a multiprocesser one and the second one is a uniprocessor file.

On the other hand I don't think that fixing it will have any effect on your problem as you're using a single-core CPU, right? Still, thanks to you we've managed to find it I'll fix the bug first and then we can continue the investigation. There are only 15 new files to check.

Edit2: Actually not even 15. I'm almost sure one of the following files is faulty (update.sys is very unlikely to be the one):

ntkrnlmp.exe 5.0.2195.7382
ntkrnlpa.exe 5.0.2195.7382
ntkrpamp.exe 5.0.2195.7382
ntoskrnl.exe 5.0.2195.7382
shell32.dll 5.0.3900.7171
update.sys 5.0.2195.7160

We can do real testing now Could you launch the VM, install UURollup-v9b again (using the modified update.ver), and check if everything is OK? Do not uninstall anything - just install it over the existing updates.

If everything is OK with v9b then you should try to install v10 again but disable in the update inf (add ; at the beginning) all lines containing:

ntkrnlmp.exe
ntkrnlpa.exe
ntkrpamp.exe
ntoskrnl.exe

Leave "shell32.dll" and "update.sys" untouched. I suspect these kernel related files to cause the problem.

Oh, dear. You're absolutely right! We thought that this would be the final update, but no...there is a bug in UURollup v10! I feel that it would be safer to revert to v9b. I will launch the VM, reinstall UURollup v9, modify the update.inf file and report back when I'm done. This shouldn't have a effect at all since this is on a motherboard with a single core processor.

As for the bug in UURollup v10, please do fix it and hopefully, there will be a UURollup v10a...the update that fixes the bugs that I described in this thread.

Update: Okay, relaunched the Windows 2000 VM, I even disabled the following files (added ; at the beginning): ntkrnlmp.exe, ntkrnlpa.exe, ntkrpamp.exe and ntoskrnl.exe. When that was done, I reinstalled UURollup v9b and UURollup v10. After the reboot, the same thing happened. Right clicking the mouse still crashes IE6 and the Character Map fails to work correctly.

Edited July 2, 2012 by ppgrainbow

[tomasz86]

I hope you didn't disable the files in v9b...

This is exactly what I'm asking for

1. Unpack v9b. Open update.ver and remove all lines except the first one. Don't touch update.inf. Install UURollup using update.exe and reboot.

2. After reboot check if IE6 is working properly. If yes then go to 3.

3. Unpack v10. Open update.inf and disable all lines with ntkrnlmp.exe, ntkrnlpa.exe, ntkrpamp.exe and ntoskrnl.exe. Don't touch update.ver. Install UURollup using update.exe and reboot.

4. After reboot check if IE6 is working properly. Share the results.

If these kernel files are indeed buggy then there won't be UURollup-v10b but rather UURollup-v11. This is too serious issue for a minor update (b,c,d,e, etc. are minor updates).

Edited July 2, 2012 by tomasz86

[ppgrainbow]

I hope you didn't disable the files in v9b...

This is exactly what I'm asking for

1. Unpack v9b. Open update.ver and remove all lines except the first one. Don't touch update.inf. Install UURollup using update.exe and reboot.

2. After reboot check if IE6 is working properly. If yes then go to 3.

3. Unpack v10. Open update.inf and disabled all lines with ntkrnlmp.exe, ntkrnlpa.exe, ntkrpamp.exe and ntoskrnl.exe. Install UURollup using update.exe and reboot.

4. After reboot check if IE6 is working properly. Share the results.

I already unpacked v9b and v10 respectively.

I didn't even touch the files in the v9b version of update.inf (located in Windows2000-UURollup-v9b-x86-ENU) and yes, I did remove all of the lines except the first line in update.ver of that directory and IE6 worked properly.

In the update.inf file located in the C:\Windows2000-UURollup-v10-x86-ENU directory, I already commented out the line with ntkrnlmp.exe, ntkrnlpa.exe, ntkrpamp.exe and ntoskrnl.exe with a ; in the beginning, installed UURollup v10, rebooted and still, neither IE6 nor Character Map didn't work properly.

Installing v9b worked fine, but I can verify that something is buggy with v10 involving the right clicking mouse in Internet Explorer 6 and the Character Map app.

Edited July 2, 2012 by ppgrainbow

[tomasz86]

After installing this "modified" version of UURollup-v10 could you check file version of NTKRNLPA.EXE and NTOSKRNL.EXE present in %systemroot%\system32?

Could you also repeat the procedure from #19 but this time commenting "shell32.dll" too? After the installation please check files version of shell32.dll.

Edited July 2, 2012 by tomasz86

[ppgrainbow]

After installing this "modified" version of UURollup-v10 could you check file version of NTKRNLPA.EXE and NTOSKRNL.EXE present in %systemroot%\system32?

Could you also repeat the procedure from #19 but this time commenting "shell32.dll" too? After the installation please check files version of shell32.dll.

Okay, I will try that and verify the file versions of NTKRNLPA.EXE and NTOSKRNL.EXE. The versions of those files will be compared with the original version and UURollup v9. I will once again report back with the results.

I already commented out shell32.dll too incase you didn't know.

[ppgrainbow]

I saw your note last night and I applied USP 5.1, before applying UURollup v9b and then UURollup v10. Problems still arose when I right clicked the mouse button in Internet Explorer 6 and Character Map not working at all due to an Access Violation (0xC0000005).

I will get back to you via notes when I have the time.

I once again, reapplied these updates here's what I found.

The original versions of the following files remain untouched either in a clean installation of Win2k with the updates from the Windows Update website applied and applying USP 5.1:

ntkrnlmp.exe -> 5.0.2195.7376

ntkrnlpa.exe -> 5.0.2195.7376

ntkrpamp.exe -> 5.0.2195.7376

ntoskrnl.exe -> 5.0.2195.7376

shell32.dll -> 5.0.3900.7155

Now, when I apply UURollup v9b, the versions of the files below change:

ntkrnlmp.exe -> 5.0.2195.7381

ntkrnlpa.exe -> 5.0.2195.7381

ntkrpamp.exe -> 5.0.2195.7381

ntoskrnl.exe -> 5.0.2195.7381

shell32.dll -> 5.0.3900.7680

But when I apply URollup v10, the versios of these files: ntkrnlmp.exe, ntkrnlpa.exe, ntkrpamp.exe and ntoskrnl.exe do not change. They remain at version 5.0.2195.7381. The version of shell32.dll also remain at 5.0.3900.7680.

Now, looking in the C:\Windows2000-UURollup-v10-x86-ENU directory, ntkrnlmp.exe, ntkrnlpa.exe, ntkrpamp.exe and ntoskrnl.exe all have version 5.0.2195.7382. What I found is that the version of shell32.dll in that directory is version is newer, but has a lower revision of 5.0.3900.7171.

Now, the version of kernel32.dll found in the C:\WINDOWS\System32 directory is 5.0.2195.7154. That file was untouched when I applied the update from UURollup v9. The version of the kernel32.dll remains the same in the same C:\Windows2000-UURollup-v10-x86-ENU directory.

So, in short...something is amiss with some of the offending files in the UURollup v10 here.

Edited July 3, 2012 by ppgrainbow

[tomasz86]

There seems to be something wrong with the installer. All files should be replaced with the ones coming from UURollup-v10 regardless of their version.

Can you confirm that the only case when IE6 got broken was after installing UURollup-v10? Did everything work OK after applying USP5.1 and later after installing UURollup-v9b?

[ppgrainbow]

There seems to be something wrong with the installer. All files should be replaced with the ones coming from UURollup-v10 regardless of their version.

Can you confirm that the only case when IE6 got broken was after installing UURollup-v10? Did everything work OK after applying USP5.1 and later after installing UURollup-v9b?

Yep. I can conclude that all of the files should be properly updated with the ones coming from UURollup v10, but it's not doing that.

But, everything did went okay after I installed USP 5.1 and installing UURollup v9b. I can now clearly confirm that IE6 (in regards to the right clicking the mouse that causes the browser to crash) and Character Map got broken after installing UURollup v10.

If there is going to be a UURollup v10a, for me, it would be best to either wait or revert back to UURollup v9b. If UURollup v10a does come out, I will have to test it out in a Win2k VM before applying it on the host PC.

Edited July 3, 2012 by ppgrainbow

[tomasz86]

I'll try to prepare a fixed version as soon as possible. I still don't know what causes the IE6 problem but at least I know that something is wrong with the files not being replaced and I also need to fix the ntdll.dll version inconsistence problem.

Remember that you must clear the update.ver from UURollup-v9b before installing it over UURollup-v10. If you don't then I can't guarantee that your system will be bootable.

[ppgrainbow]

I'll try to prepare a fixed version as soon as possible. I still don't know what causes the IE6 problem but at least I know that something is wrong with the files not being replaced and I also need to fix the ntdll.dll version inconsistence problem.

Remember that you must clear the update.ver from UURollup-v9b before installing it over UURollup-v10. If you don't then I can't guarantee that your system will be bootable.

Preparing a fixed version of UURollup v10 would sound good. I could have cleared the update.ver file on the host PC, but it might have been too late to reverse the changes now.

I guess that I will have to wait until the fixed version of UURollup v10 is released. Thanks so much for the help and let me know if a fixed version of UURollup v10 (v10a revision) is ready!

Edit: As far as I know, the fixed version of UURollup will be version 11 (v11) and not 10a as I recall.

Edited July 4, 2012 by ppgrainbow

[ppgrainbow]

I ran UURollup v11 beta and still the same thing. Internet Explorer 6 does not work properly and Character Map refuses to run.

In addition to this, Character Map crashes and throws this message in the Application Log section of the Event Viewer...so we may find the culprit:

The application CharMap.exe, generated an application error. The error occurred on 07/04/2012 13:03:32.828. The exception generated was c0000005 at address 77FE360D [LdrShutdownThread].

I'm wondering if LdrShutdownThread has been implemented in ntdll.dll in this version, UURollup v10 or not or if it's causing problems?

As for Internet Explorer 6, it would be a good idea to weed down which dependency or DLL is causing IE6 to crash upon using the right click on the mouse.

I might have to run UURollup v9b and UURollup v10 and then apply UURollup v11 beta while this is being investigated.

Edited July 5, 2012 by ppgrainbow

[tomasz86]

I've uploaded a new test version with a different ntdll.dll. Could you try it out? The download location is the same as before (just choose the newest file).

LdrShutdownThread is present in all versions of ntdll.dll, including the official one but you're right that there are many new APIs in the last WildBill's version of ntdll.dll and I'm guessing there might be something wrong with it. The new test version of UURollup-v11 uses exactly the same ntdll.dll as UURollup-v9b.

After installing the new test version please tell me what versions of ntdll.dll and shell32.dll you've got in the system.

Edited July 5, 2012 by tomasz86

[ppgrainbow]

I've uploaded a new test version with a different ntdll.dll. Could you try it out? The download location is the same as before (just choose the newest file).

LdrShutdownThread is present in all versions of ntdll.dll, including the official one but you're right that there are many new APIs in the last WildBill's version of ntdll.dll and I'm guessing there might be something wrong with it. The new test version of UURollup-v11 uses exactly the same ntdll.dll as UURollup-v9b.

After installing the new test version please tell me what versions of ntdll.dll and shell32.dll you've got in the system.

I will test it out in a Win2k VM and report back.

Can you send me a note with the link to the new test version of UURollup v11 first before I do it?