Bootup - Shutdown logger

April 21, 2008

Re: Bootup - Shutdown logger

On Sun, 20 Apr 2008 22:22:45 -0700, "Gary S. Terhune" <none> put

finger to keyboard and composed:

>Franc, try using an apostrophe to comment out the first line of that script,

>"Option Explicit". I don't think it will help, but I'm just curious

>enough...

Same error.

>Otherwise, like I say, probably something in ActiveX, which brings to mind

>the possibility of an IE Repair or IE overinstall.

I don't use IE. I think I installed the updates because they were

required for some other function. I don't think I've ever done a

repair or overinstall.

Anyway here is what is reported in Help > About IE:

Version 6.0.2800.1106

Update versions:; SP1; q240308; q313829; Q330994; Q828750;

- Franc Zabkar

--

Please remove one 'i' from my address when replying by email.

April 21, 2008

Re: Bootup - Shutdown logger

You have the latest IE, and a Repair would probably help. If you don't use

IE, then you use something else. Opera? I don't know about Opera, and

whether installing it in any way affects the IE system. Frankly, this is why

I quit using third-party browsers, way back with Netscape. They MAY provide

more useful features, they MAY help protect from unwanted intrusion better

than IE (I don't happen to think so), but I also hear about lots of problems

that people want to blame on IE, or Windows, that ONLY happen to people who

use third-party browsers. There's a problem like that that shows up here

fairly regularly recently, I forget exactly which, and nobody has the

answer. All I notice is that it always involves a mention of Opera.

In short, I can't quite believe that any third-party browser doesn't include

as a part of installation the breaking of various parts of the IE system

(which is MUCH more than a stupid browser. It's a major component of the

Windows 98 system itself.)

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message

news:3lgo04t2jlev91vsaftd4r9vb5qsqdorrt@4ax.com...

> On Sun, 20 Apr 2008 22:22:45 -0700, "Gary S. Terhune" <none> put

> finger to keyboard and composed:

>

>>Franc, try using an apostrophe to comment out the first line of that

>>script,

>>"Option Explicit". I don't think it will help, but I'm just curious

>>enough...

>

> Same error.

>

>>Otherwise, like I say, probably something in ActiveX, which brings to mind

>>the possibility of an IE Repair or IE overinstall.

>

> I don't use IE. I think I installed the updates because they were

> required for some other function. I don't think I've ever done a

> repair or overinstall.

>

> Anyway here is what is reported in Help > About IE:

>

> Version 6.0.2800.1106

> Update versions:; SP1; q240308; q313829; Q330994; Q828750;

>

> - Franc Zabkar

> --

> Please remove one 'i' from my address when replying by email.

April 21, 2008

Re: Bootup - Shutdown logger

Franc, try this code instead.

********************

Option Explicit

Dim f

With CreateObject("Scripting.FileSystemObject")

Set f = .OpenTextFile("C:\uptime.txt", 8, True)

f.WriteLine "Start " & Now

f.Close

End With

WScript.Quit

**********************

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message

news:3lgo04t2jlev91vsaftd4r9vb5qsqdorrt@4ax.com...

> On Sun, 20 Apr 2008 22:22:45 -0700, "Gary S. Terhune" <none> put

> finger to keyboard and composed:

>

>>Franc, try using an apostrophe to comment out the first line of that

>>script,

>>"Option Explicit". I don't think it will help, but I'm just curious

>>enough...

>

> Same error.

>

>>Otherwise, like I say, probably something in ActiveX, which brings to mind

>>the possibility of an IE Repair or IE overinstall.

>

> I don't use IE. I think I installed the updates because they were

> required for some other function. I don't think I've ever done a

> repair or overinstall.

>

> Anyway here is what is reported in Help > About IE:

>

> Version 6.0.2800.1106

> Update versions:; SP1; q240308; q313829; Q330994; Q828750;

>

> - Franc Zabkar

> --

> Please remove one 'i' from my address when replying by email.

April 21, 2008

Re: Bootup - Shutdown logger

Try using filemon and/or regmon [sysinternals/now Microsoft-TechNet] during

the test of the vbs files.

Look for the specific errors.

--

MEB http://peoplescounsel.orgfree.com

--

_________

"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message

news:3lgo04t2jlev91vsaftd4r9vb5qsqdorrt@4ax.com...

| On Sun, 20 Apr 2008 22:22:45 -0700, "Gary S. Terhune" <none> put

| finger to keyboard and composed:

|

| >Franc, try using an apostrophe to comment out the first line of that

script,

| >"Option Explicit". I don't think it will help, but I'm just curious

| >enough...

|

| Same error.

|

| >Otherwise, like I say, probably something in ActiveX, which brings to

mind

| >the possibility of an IE Repair or IE overinstall.

|

| I don't use IE. I think I installed the updates because they were

| required for some other function. I don't think I've ever done a

| repair or overinstall.

|

| Anyway here is what is reported in Help > About IE:

|

| Version 6.0.2800.1106

| Update versions:; SP1; q240308; q313829; Q330994; Q828750;

|

| - Franc Zabkar

| --

| Please remove one 'i' from my address when replying by email.

April 21, 2008

Re: Bootup - Shutdown logger

On Mon, 21 Apr 2008 09:06:59 -0700, "Gary S. Terhune" <none> put

finger to keyboard and composed:

>Franc, try this code instead.

>

>********************

>Option Explicit

>Dim f

>With CreateObject("Scripting.FileSystemObject")

>Set f = .OpenTextFile("C:\uptime.txt", 8, True)

>f.WriteLine "Start " & Now

>f.Close

>End With

>WScript.Quit

>**********************

Sorry, it still errors out at line 3.

- Franc Zabkar

--

Please remove one 'i' from my address when replying by email.

April 21, 2008

Re: Bootup - Shutdown logger

On Mon, 21 Apr 2008 13:48:52 -0400, "MEB" <meb@not here@hotmail.com>

put finger to keyboard and composed:

>Try using filemon and/or regmon [sysinternals/now Microsoft-TechNet] during

>the test of the vbs files.

>Look for the specific errors.

>

>--

>MEB http://peoplescounsel.orgfree.com

Unfortunately Filemon doesn't allow me to save the output, but these

are the files that are accessed up until the error box:

wshext.dll --- 5.6.0.6626

comdlg32.dll --- 4.72.3510.2300

wshena.dll --- does not exist

wshen.dll --- does not exist

wshenu.dll --- does not exist

gdi32.dll --- 4.10.1998

ole32.dll --- 4.71.2900

start.vbs

d:\fzwork

c:\fzwork

wscript.exe --- 5.6.0.6626

oleaut32.dll --- 2.40.4518

imm32.dll --- 4.10.1998

msvcrt.dll --- 6.10.8924.0

win.ini

wscript.exe.local

c:\program files\wmfpatch\gdihook.dll

kernel32.dll --- 4.10.2222

c:\win98se\sysbckup\ver.dll --- 4.10.1998

d:\temp

c:\win98se\recent\start.vbs.lnk

vbscript.dll --- 5.6.0.7426

c:\win98se\media\chord.wav

I tried replacing vbscript.dll with the earlier version that ships

with Gary's scr56en.exe but the error remained.

I also disabled the gdihook.dll security patch without effect.

I don't know if the missing wshen?.dll files are of any consequence.

From the Filemon log it looks as if the system is looking for the

first file of this type that is available, and it searches for it in

the root, windir, windir\system32, windir\command, and windir\system

directories.

The following discussion suggests that searching for nonexistent

wshen?.dll files is a known issue that has no negative impact:

http://forum.sysinternals.com/forum_posts.asp?TID=5696

- Franc Zabkar

--

Please remove one 'i' from my address when replying by email.

April 21, 2008

Re: Bootup - Shutdown logger

Darn.

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message

news:cjrp04tvlumn9r8aafsflv93srngntf4kk@4ax.com...

> On Mon, 21 Apr 2008 09:06:59 -0700, "Gary S. Terhune" <none> put

> finger to keyboard and composed:

>

>>Franc, try this code instead.

>>

>>********************

>>Option Explicit

>>Dim f

>>With CreateObject("Scripting.FileSystemObject")

>>Set f = .OpenTextFile("C:\uptime.txt", 8, True)

>>f.WriteLine "Start " & Now

>>f.Close

>>End With

>>WScript.Quit

>>**********************

>

> Sorry, it still errors out at line 3.

>

> - Franc Zabkar

> --

> Please remove one 'i' from my address when replying by email.

April 21, 2008

Re: Bootup - Shutdown logger

On Mon, 21 Apr 2008 08:12:41 -0700, "Gary S. Terhune" <none> put

finger to keyboard and composed:

>You have the latest IE, and a Repair would probably help. If you don't use

>IE, then you use something else. Opera?

Yes.

>I don't know about Opera, and

>whether installing it in any way affects the IE system. Frankly, this is why

>I quit using third-party browsers, way back with Netscape. They MAY provide

>more useful features, they MAY help protect from unwanted intrusion better

>than IE (I don't happen to think so), but I also hear about lots of problems

>that people want to blame on IE, or Windows, that ONLY happen to people who

>use third-party browsers. There's a problem like that that shows up here

>fairly regularly recently, I forget exactly which, and nobody has the

>answer. All I notice is that it always involves a mention of Opera.

>

>In short, I can't quite believe that any third-party browser doesn't include

>as a part of installation the breaking of various parts of the IE system

>(which is MUCH more than a stupid browser. It's a major component of the

>Windows 98 system itself.)

I can't see how Opera would be affecting ActiveX. It doesn't support

it natively. Instead it requires a plug-in (which I haven't

installed).

ActiveX and VBScript support in Opera

http://www.opera.com/support/search/view/415/

====================================================================

Opera does not have in-built support for Microsoft's Windows-specific

ActiveX technology or the VBScript scripting language.

Opera does however support the use of Netscape compatible plugins,

which can provide similar functionality to most ActiveX controls.

====================================================================

Running ActiveX controls using the Neptune plug-in

MeadCo produces a plug-in called Neptune, which hosts Microsoft's

WebBrowser control.

What this means is that the Internet Explorer engine can be run within

Opera, and this in effect makes it possible to load and run ActiveX

components.

Note that this only works on Windows, and the same security

precautions should be taken as when running ActiveX components in

Internet Explorer. Using Neptune in Opera is essentially the same as

running Internet Explorer in an Opera window.

====================================================================

- Franc Zabkar

--

Please remove one 'i' from my address when replying by email.

April 21, 2008

Re: Bootup - Shutdown logger

So, without the plug-in, when you hit ActiveX components now, nothing

happens? That's what I'm trying to figure out. Does installing Opera

specifically switch off ActiveX/VBScript in some way. Doesn't sound quite

right, but I still have to think Opera is involved.

Other question I had was if you've used TUI and if you messed with any of

those "IE4" settings?

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message

news:675q0455u1gbp2n38bk3fdb7d03s5cpk3f@4ax.com...

> On Mon, 21 Apr 2008 08:12:41 -0700, "Gary S. Terhune" <none> put

> finger to keyboard and composed:

>

>>You have the latest IE, and a Repair would probably help. If you don't use

>>IE, then you use something else. Opera?

>

> Yes.

>

>>I don't know about Opera, and

>>whether installing it in any way affects the IE system. Frankly, this is

>>why

>>I quit using third-party browsers, way back with Netscape. They MAY

>>provide

>>more useful features, they MAY help protect from unwanted intrusion better

>>than IE (I don't happen to think so), but I also hear about lots of

>>problems

>>that people want to blame on IE, or Windows, that ONLY happen to people

>>who

>>use third-party browsers. There's a problem like that that shows up here

>>fairly regularly recently, I forget exactly which, and nobody has the

>>answer. All I notice is that it always involves a mention of Opera.

>>

>>In short, I can't quite believe that any third-party browser doesn't

>>include

>>as a part of installation the breaking of various parts of the IE system

>>(which is MUCH more than a stupid browser. It's a major component of the

>>Windows 98 system itself.)

>

> I can't see how Opera would be affecting ActiveX. It doesn't support

> it natively. Instead it requires a plug-in (which I haven't

> installed).

>

> ActiveX and VBScript support in Opera

> http://www.opera.com/support/search/view/415/

>

> ====================================================================

> Opera does not have in-built support for Microsoft's Windows-specific

> ActiveX technology or the VBScript scripting language.

>

> Opera does however support the use of Netscape compatible plugins,

> which can provide similar functionality to most ActiveX controls.

>

> ====================================================================

> Running ActiveX controls using the Neptune plug-in

>

> MeadCo produces a plug-in called Neptune, which hosts Microsoft's

> WebBrowser control.

>

> What this means is that the Internet Explorer engine can be run within

> Opera, and this in effect makes it possible to load and run ActiveX

> components.

>

> Note that this only works on Windows, and the same security

> precautions should be taken as when running ActiveX components in

> Internet Explorer. Using Neptune in Opera is essentially the same as

> running Internet Explorer in an Opera window.

> ====================================================================

>

> - Franc Zabkar

> --

> Please remove one 'i' from my address when replying by email.

April 22, 2008

Re: Bootup - Shutdown logger

AS A WORK-AROUND - In filemon, try highlighting the target entries you want,

go to EDIT, select Copy, paste into your favorite text editor.

It really is a shame that the newer versions of these sysinternals tools

will not work properly in Win9X. I still haven't figured out how to get them

to save the output other than via this technique, though I suppose that was

basically what I was doing in the older versions any way {don't need ALL the

output, just whatever you're specifically monitoring for}.

I sent you and Gary, my output for comparison of the target areas, via the

site email address, in case the two of you wish to review potential

errors/fixes using a fairly *base installation* for reference.

Franc, Did you install any updates/mods to: shell; OLE; JAVA, or other

which might be affecting the scripting?

Gary, I sent it to the old mvps.org address {your *news}, lost my old

personal

contacts during the last clean install [yep, dumb thing to do, "thought" I'd

backed them up]...

--

MEB http://peoplescounsel.orgfree.com

--

_________

"Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message

news:e1sp04p5bo9j3btltc8pctg5v3qlsnvtpm@4ax.com...

| On Mon, 21 Apr 2008 13:48:52 -0400, "MEB" <meb@not here@hotmail.com>

| put finger to keyboard and composed:

|

| >Try using filemon and/or regmon [sysinternals/now Microsoft-TechNet]

during

| >the test of the vbs files.

| >Look for the specific errors.

| >

| >--

| >MEB http://peoplescounsel.orgfree.com

|

| Unfortunately Filemon doesn't allow me to save the output, but these

| are the files that are accessed up until the error box:

|

| wshext.dll --- 5.6.0.6626

| comdlg32.dll --- 4.72.3510.2300

| wshena.dll --- does not exist

| wshen.dll --- does not exist

| wshenu.dll --- does not exist

| gdi32.dll --- 4.10.1998

| ole32.dll --- 4.71.2900

| start.vbs

| d:\fzwork

| c:\fzwork

| wscript.exe --- 5.6.0.6626

| oleaut32.dll --- 2.40.4518

| imm32.dll --- 4.10.1998

| msvcrt.dll --- 6.10.8924.0

| win.ini

| wscript.exe.local

| c:\program files\wmfpatch\gdihook.dll

| kernel32.dll --- 4.10.2222

| c:\win98se\sysbckup\ver.dll --- 4.10.1998

| d:\temp

| c:\win98se\recent\start.vbs.lnk

| vbscript.dll --- 5.6.0.7426

| c:\win98se\media\chord.wav

|

| I tried replacing vbscript.dll with the earlier version that ships

| with Gary's scr56en.exe but the error remained.

|

| I also disabled the gdihook.dll security patch without effect.

|

| I don't know if the missing wshen?.dll files are of any consequence.

| From the Filemon log it looks as if the system is looking for the

| first file of this type that is available, and it searches for it in

| the root, windir, windir\system32, windir\command, and windir\system

| directories.

|

| The following discussion suggests that searching for nonexistent

| wshen?.dll files is a known issue that has no negative impact:

|

| http://forum.sysinternals.com/forum_posts.asp?TID=5696

|

| - Franc Zabkar

| --

| Please remove one 'i' from my address when replying by email.

April 22, 2008

Re: Bootup - Shutdown logger

Franc Zabkar wrote:

| On Sun, 20 Apr 2008 00:13:31 -0400, "PCR" <pcrrcp@netzero.net> put

| finger to keyboard and composed:

|

|>Franc Zabkar wrote:

|

|>| BTW, I get a VBScript runtime error in line 3 of StartTime.vbs:

|>

|>It worked for me & produced "Start 4/19/08 11:39:16 PM" in UpTime.txt.

|>

|>| ActiveX component can't create object 'Scripting.FileSystemObject'

|>| Code: 800A01AD

|>|

|>| Does this mean that I am missing some component or that my

|>| permissions are set incorrectly?

|>

|>Can it be you need to update your scripting engine?

|

| It was already up to date.

Yet, you are reporting a lower version to your script files...!...

You Me

WScript.exe 5.6.0.6626 5.6.0.8825

VBScript.dll 5.6.0.7426 5.6.0.8825

MSVCRT.dll 6.10.8924.0 6.00.8797.0

You do have a later MSVCRT.DLL. All the other file versions you posted

to MEB seem to be about the same as mine.

Here is the last of 3 mentionings in my SFCLog.txt about those files...

Microsoft System File Checker

Log file generated on 5/8/06 at 04:46 PM

Started verify scan using verification data file:

"C:\WINDOWS\Default.sfc"

Previous Previous New New

CRC

File Change Version Date Version Date

Match

---------------- ----------- ----------- --------- ----------- ---------

------

[C:\WINDOWS]

wscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

[c:\windows\COMMAND]

cscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

[C:\WINDOWS\SYSTEM]

jscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

scrobj.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

vbscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

wshext.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

scrrun.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

wshom.ocx Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

....snip

Are you sure you are fully updated at Windows Update? I'm pretty sure

there was one of two criticals dealing with scripting!

|>(But I have failed to remember or discover how to do that. All I have

|>are these three URLs...

|>http://msdn2.microsoft.com/en-us/library/t0aew7h6.aspx

|>VBScript User Manual

|>http://msdn2.microsoft.com/en-us/library/9bbdkx3k.aspx

|>More VBScript User Manual

|>http://www.billsway.com/vbspage/

|>Windows VBScript Tools

|

| Last week I bought "MS VBscript - Step by Step", Microsoft Press.

|

| - Franc Zabkar

| --

| Please remove one 'i' from my address when replying by email.

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

April 22, 2008

Re: Bootup - Shutdown logger

What are you sending me? And no, that address no longer works. Use

gryst_at_grystmill.com

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

"MEB" <meb@not here@hotmail.com> wrote in message

news:OE6QvpBpIHA.1736@TK2MSFTNGP04.phx.gbl...

> AS A WORK-AROUND - In filemon, try highlighting the target entries you

> want,

> go to EDIT, select Copy, paste into your favorite text editor.

> It really is a shame that the newer versions of these sysinternals tools

> will not work properly in Win9X. I still haven't figured out how to get

> them

> to save the output other than via this technique, though I suppose that

> was

> basically what I was doing in the older versions any way {don't need ALL

> the

> output, just whatever you're specifically monitoring for}.

>

> I sent you and Gary, my output for comparison of the target areas, via the

> site email address, in case the two of you wish to review potential

> errors/fixes using a fairly *base installation* for reference.

>

> Franc, Did you install any updates/mods to: shell; OLE; JAVA, or other

> which might be affecting the scripting?

>

> Gary, I sent it to the old mvps.org address {your *news}, lost my old

> personal

> contacts during the last clean install [yep, dumb thing to do, "thought"

> I'd

> backed them up]...

>

> --

> MEB http://peoplescounsel.orgfree.com

> --

> _________

>

> "Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message

> news:e1sp04p5bo9j3btltc8pctg5v3qlsnvtpm@4ax.com...

> | On Mon, 21 Apr 2008 13:48:52 -0400, "MEB" <meb@not here@hotmail.com>

> | put finger to keyboard and composed:

> |

> | >Try using filemon and/or regmon [sysinternals/now Microsoft-TechNet]

> during

> | >the test of the vbs files.

> | >Look for the specific errors.

> | >

> | >--

> | >MEB http://peoplescounsel.orgfree.com

> |

> | Unfortunately Filemon doesn't allow me to save the output, but these

> | are the files that are accessed up until the error box:

> |

> | wshext.dll --- 5.6.0.6626

> | comdlg32.dll --- 4.72.3510.2300

> | wshena.dll --- does not exist

> | wshen.dll --- does not exist

> | wshenu.dll --- does not exist

> | gdi32.dll --- 4.10.1998

> | ole32.dll --- 4.71.2900

> | start.vbs

> | d:\fzwork

> | c:\fzwork

> | wscript.exe --- 5.6.0.6626

> | oleaut32.dll --- 2.40.4518

> | imm32.dll --- 4.10.1998

> | msvcrt.dll --- 6.10.8924.0

> | win.ini

> | wscript.exe.local

> | c:\program files\wmfpatch\gdihook.dll

> | kernel32.dll --- 4.10.2222

> | c:\win98se\sysbckup\ver.dll --- 4.10.1998

> | d:\temp

> | c:\win98se\recent\start.vbs.lnk

> | vbscript.dll --- 5.6.0.7426

> | c:\win98se\media\chord.wav

> |

> | I tried replacing vbscript.dll with the earlier version that ships

> | with Gary's scr56en.exe but the error remained.

> |

> | I also disabled the gdihook.dll security patch without effect.

> |

> | I don't know if the missing wshen?.dll files are of any consequence.

> | From the Filemon log it looks as if the system is looking for the

> | first file of this type that is available, and it searches for it in

> | the root, windir, windir\system32, windir\command, and windir\system

> | directories.

> |

> | The following discussion suggests that searching for nonexistent

> | wshen?.dll files is a known issue that has no negative impact:

> |

> | http://forum.sysinternals.com/forum_posts.asp?TID=5696

> |

> | - Franc Zabkar

> | --

> | Please remove one 'i' from my address when replying by email.

>

April 22, 2008

Re: Bootup - Shutdown logger

Another thing: what about your settings at...?...

"Control Panel, Internet Options, Security tab, Select Internet (& maybe

Local Intranet)"

Are you at Default or Custom? If Custom, are the 3 Scripting options

enabled? Mine are, (but not all the ActiveX options are enabled).

PCR wrote:

| Franc Zabkar wrote:

|| On Sun, 20 Apr 2008 00:13:31 -0400, "PCR" <pcrrcp@netzero.net> put

|| finger to keyboard and composed:

||

||>Franc Zabkar wrote:

||

||>| BTW, I get a VBScript runtime error in line 3 of StartTime.vbs:

||>

||>It worked for me & produced "Start 4/19/08 11:39:16 PM" in

||>UpTime.txt.

||>

||>| ActiveX component can't create object 'Scripting.FileSystemObject'

||>| Code: 800A01AD

||>|

||>| Does this mean that I am missing some component or that my

||>| permissions are set incorrectly?

||>

||>Can it be you need to update your scripting engine?

||

|| It was already up to date.

|

| Yet, you are reporting a lower version to your script files...!...

|

| You Me

| WScript.exe 5.6.0.6626 5.6.0.8825

| VBScript.dll 5.6.0.7426 5.6.0.8825

| MSVCRT.dll 6.10.8924.0 6.00.8797.0

|

| You do have a later MSVCRT.DLL. All the other file versions you posted

| to MEB seem to be about the same as mine.

|

| Here is the last of 3 mentionings in my SFCLog.txt about those

| files...

|

| Microsoft System File Checker

| Log file generated on 5/8/06 at 04:46 PM

| Started verify scan using verification data file:

| "C:\WINDOWS\Default.sfc"

|

| Previous Previous New New

| CRC

| File Change Version Date Version Date

| Match

| ---------------- ----------- ----------- --------- -----------

| ---------

| ------

| [C:\WINDOWS]

| wscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| [c:\windows\COMMAND]

| cscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| [C:\WINDOWS\SYSTEM]

| jscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| scrobj.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| vbscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| wshext.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| scrrun.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| wshom.ocx Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| ...snip

|

| Are you sure you are fully updated at Windows Update? I'm pretty sure

| there was one of two criticals dealing with scripting!

|

||>(But I have failed to remember or discover how to do that. All I have

||>are these three URLs...

||>http://msdn2.microsoft.com/en-us/library/t0aew7h6.aspx

||>VBScript User Manual

||>http://msdn2.microsoft.com/en-us/library/9bbdkx3k.aspx

||>More VBScript User Manual

||>http://www.billsway.com/vbspage/

||>Windows VBScript Tools

||

|| Last week I bought "MS VBscript - Step by Step", Microsoft Press.

||

|| - Franc Zabkar

|| --

|| Please remove one 'i' from my address when replying by email.

|

| --

| Thanks or Good Luck,

| There may be humor in this post, and,

| Naturally, you will not sue,

| Should things get worse after this,

| PCR

| pcrrcp@netzero.net

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

April 22, 2008

Re: Bootup - Shutdown logger

Welllllll it went SOMEWHERE... anyway it was the portion of the system

activities when running the startup.vbs monitored by filemon for a

comparison, thinking it might help you and Franc.

Its small so I'll send it to you from the other private address, just so

you know its from me and don't whack it as spam.

--

MEB http://peoplescounsel.orgfree.com

--

_________

"Gary S. Terhune" <none> wrote in message

news:%23yBKnFCpIHA.4736@TK2MSFTNGP06.phx.gbl...

| What are you sending me? And no, that address no longer works. Use

| gryst_at_grystmill.com

|

| --

| Gary S. Terhune

| MS-MVP Shell/User

| http://www.grystmill.com

|

| "MEB" <meb@not here@hotmail.com> wrote in message

| news:OE6QvpBpIHA.1736@TK2MSFTNGP04.phx.gbl...

| > AS A WORK-AROUND - In filemon, try highlighting the target entries you

| > want,

| > go to EDIT, select Copy, paste into your favorite text editor.

| > It really is a shame that the newer versions of these sysinternals tools

| > will not work properly in Win9X. I still haven't figured out how to get

| > them

| > to save the output other than via this technique, though I suppose that

| > was

| > basically what I was doing in the older versions any way {don't need ALL

| > the

| > output, just whatever you're specifically monitoring for}.

| >

| > I sent you and Gary, my output for comparison of the target areas, via

the

| > site email address, in case the two of you wish to review potential

| > errors/fixes using a fairly *base installation* for reference.

| >

| > Franc, Did you install any updates/mods to: shell; OLE; JAVA, or other

| > which might be affecting the scripting?

| >

| > Gary, I sent it to the old mvps.org address {your *news}, lost my old

| > personal

| > contacts during the last clean install [yep, dumb thing to do, "thought"

| > I'd

| > backed them up]...

| >

| > --

| > MEB http://peoplescounsel.orgfree.com

| > --

| > _________

| >

| > "Franc Zabkar" <fzabkar@iinternode.on.net> wrote in message

| > news:e1sp04p5bo9j3btltc8pctg5v3qlsnvtpm@4ax.com...

| > | On Mon, 21 Apr 2008 13:48:52 -0400, "MEB" <meb@not here@hotmail.com>

| > | put finger to keyboard and composed:

| > |

| > | >Try using filemon and/or regmon [sysinternals/now Microsoft-TechNet]

| > during

| > | >the test of the vbs files.

| > | >Look for the specific errors.

| > | >

| > | >--

| > | >MEB http://peoplescounsel.orgfree.com

| > |

| > | Unfortunately Filemon doesn't allow me to save the output, but these

| > | are the files that are accessed up until the error box:

| > |

| > | wshext.dll --- 5.6.0.6626

| > | comdlg32.dll --- 4.72.3510.2300

| > | wshena.dll --- does not exist

| > | wshen.dll --- does not exist

| > | wshenu.dll --- does not exist

| > | gdi32.dll --- 4.10.1998

| > | ole32.dll --- 4.71.2900

| > | start.vbs

| > | d:\fzwork

| > | c:\fzwork

| > | wscript.exe --- 5.6.0.6626

| > | oleaut32.dll --- 2.40.4518

| > | imm32.dll --- 4.10.1998

| > | msvcrt.dll --- 6.10.8924.0

| > | win.ini

| > | wscript.exe.local

| > | c:\program files\wmfpatch\gdihook.dll

| > | kernel32.dll --- 4.10.2222

| > | c:\win98se\sysbckup\ver.dll --- 4.10.1998

| > | d:\temp

| > | c:\win98se\recent\start.vbs.lnk

| > | vbscript.dll --- 5.6.0.7426

| > | c:\win98se\media\chord.wav

| > |

| > | I tried replacing vbscript.dll with the earlier version that ships

| > | with Gary's scr56en.exe but the error remained.

| > |

| > | I also disabled the gdihook.dll security patch without effect.

| > |

| > | I don't know if the missing wshen?.dll files are of any consequence.

| > | From the Filemon log it looks as if the system is looking for the

| > | first file of this type that is available, and it searches for it in

| > | the root, windir, windir\system32, windir\command, and windir\system

| > | directories.

| > |

| > | The following discussion suggests that searching for nonexistent

| > | wshen?.dll files is a known issue that has no negative impact:

| > |

| > | http://forum.sysinternals.com/forum_posts.asp?TID=5696

| > |

| > | - Franc Zabkar

| > | --

| > | Please remove one 'i' from my address when replying by email.

| >

|

April 22, 2008

Re: Bootup - Shutdown logger

On Mon, 21 Apr 2008 22:42:49 -0400, "PCR" <pcrrcp@netzero.net> put

finger to keyboard and composed:

>Another thing: what about your settings at...?...

>

>"Control Panel, Internet Options, Security tab, Select Internet (& maybe

>Local Intranet)"

>

>Are you at Default or Custom? If Custom, are the 3 Scripting options

>enabled? Mine are, (but not all the ActiveX options are enabled).

I'll try to answer everyone's questions here.

These are my security settings:

Local intranet Medium-low

Trusted sites Low

Internet Medium

Restricted sites High

I've tried setting Local intranet to Low but the error remained.

I've been able to successfully run Gary's .vbs script on my other

Win98SE box. Now I'm trying to find what is different about them.

According to msinfo32.exe, the two boxes are both using IE6SP1 with

the same build version and same updates. The above security settings

are also identical.

These are the IE data for the good box:

http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

These are the IE data for the bad box:

http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

This is the difference between the two data sets:

http://www.users.on.net/~fzabkar/VBS_problem/diff_ie.txt

I can find only one real difference and that is that the good box has

a later version of vbscript.dll. However using this version on the bad

box doesn't make the error go away.

The good box also has Opera installed on it, although it is a much

earlier version.

The same versions of wscript.exe are installed on both boxes.

This a Filemon record up until the error box appears:

http://www.users.on.net/~fzabkar/VBS_problem/vbs_filemon.txt

The Filemon output screen isn't mousable, but holding down the

Ctrl-Shift key plus Home/End/PgUp/PgDown and then selecting Edit >

Copy enables one to copy and paste the output into Notepad. Thanks to

MEB.

As for TweakUI's IE settings, all but the following boxes are checked:

Clear document, run, typed-URL history on exit

Show Favorites on Start Menu

If I use Opera to open a .vbs file, it merely displays its contents.

Under Tools > Preferences > Advanced > Downloads there is no VBS file

type.

===============================================================

While writing the above and trying things as I went, I finally got the

script to work. Unfortunately I lost track of what I did. :-(

However, if I now rename scrrun.dll in the Windows\System directory to

scrrun.dl_, then the VB script breaks as before. Renaming other files

in the scr56en.exe package either has no effect, or produces other

errors. I notice that scrrun.dll appears in MEB's Filemon output

screen (thank you MEB) soon after mine errors out. Maybe that was the

problem all along.

The following URL may offer an explanation for what happened:

http://www.auditmypc.com/process/scrrun.asp

"The file, scrrun.dll, is used by windows when running scripts such as

those written with JScript or VBScript. If scrrun.dll is unavailable,

windows will not be able to execute scripts. If you do not use any

scripting on your computer you may be able to remove this file."

Anyway I suspect that something broke my IE6 or WSH installation. I

hate installing updates and patches because this sort of thing seems

to happen to me a lot.

Thanks to all for your help.

- Franc Zabkar

--

Please remove one 'i' from my address when replying by email.

April 24, 2008

Re: Bootup - Shutdown logger

Franc Zabkar wrote:

| On Mon, 21 Apr 2008 22:42:49 -0400, "PCR" <pcrrcp@netzero.net> put

| finger to keyboard and composed:

|

|>Another thing: what about your settings at...?...

|>

|>"Control Panel, Internet Options, Security tab, Select Internet (&

|>maybe Local Intranet)"

|>

|>Are you at Default or Custom? If Custom, are the 3 Scripting options

|>enabled? Mine are, (but not all the ActiveX options are enabled).

|

| I'll try to answer everyone's questions here.

|

| These are my security settings:

|

| Local intranet Medium-low

| Trusted sites Low

| Internet Medium

| Restricted sites High

|

| I've tried setting Local intranet to Low but the error remained.

Those settings were good, then. And I see you have solved the problem &

possibly could stop now. Probably, some 3rd-party software renamed your

Scrrun.dll as a security measure to prevent scripts from running, & you

will be fine now that you renamed it back.

| I've been able to successfully run Gary's .vbs script on my other

| Win98SE box. Now I'm trying to find what is different about them.

|

| According to msinfo32.exe, the two boxes are both using IE6SP1 with

| the same build version and same updates.

I'm not seeing that you have taken all the updates, at "IE, Help,

About"...!...

Yours... ;SP1;q240308;q313829;Q330994;Q828750

Mine....

SP1, Q313829, Q328970, Q328389, Q324929, Q810847, Q813951, Q816506,

Q813489, Q330994, Q818529, Q822925, Q828750, Q824145, Q832894,

Q837009, Q831167, Q823353, Q867801, Q833989, Q834707, Q889293,

Q867282, Q891781, Q890923, Q883939, Q896688, Q905915, Q912812,

Q916281 & Q918439.

Although mine is misleading (because the registry key the data comes

from is not cleared of superceded updates, but the later ones are just

added)... you need to go to Windows Update & get at least Q916281 &

Q918439...

http://www.microsoft.com/technet/security/Bulletin/MS06-021.mspx

Microsoft Security Bulletin MS06-021

Cumulative Security Update for Internet Explorer (916281)

http://www.microsoft.com/technet/security/Bulletin/MS06-022.mspx

Microsoft Security Bulletin MS06-022

Vulnerability in ART Image Rendering Could Allow Remote Code Execution

(918439)

REMEMBER... To see the Win98 updates at Windows Update, you must go

there from a Win98 machine. And that MSVCRT.dll you reported earlier

looks suspiciously XP/Vista-irradiated to me...!...

You Me

MSVCRT.dll 6.10.8924.0 6.00.8797.0

Also, your script files...

jscript.dll 5.6.0.8513

vbscript.dll 5.6.0.8515

....are STILL lower than my versions. Jugding from this SFCLog.txt of

mine, you need at least one more update...

[C:\WINDOWS]

wscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

[c:\windows\COMMAND]

cscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

[C:\WINDOWS\SYSTEM]

jscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

scrobj.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

vbscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

wshext.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

scrrun.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

wshom.ocx Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

I'm not sure Windows Update will get that done for you. If not, I'll try

harder to recall what it was that I ran (back in '06 says the date in

SFCLog.txt) that got me updated to that.

Well... wait a minute... I am seeing those files with those dates in my

version of that file you mentioned... Scr56en.exe. Its Properties says

my version is 5.50.4134.600. (Not sure where I got it from.)

| The above security settings

| are also identical.

|

| These are the IE data for the good box:

| http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

|

| These are the IE data for the bad box:

| http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

|

| This is the difference between the two data sets:

| http://www.users.on.net/~fzabkar/VBS_problem/diff_ie.txt

|

| I can find only one real difference and that is that the good box has

| a later version of vbscript.dll. However using this version on the bad

| box doesn't make the error go away.

|

| The good box also has Opera installed on it, although it is a much

| earlier version.

|

| The same versions of wscript.exe are installed on both boxes.

|

| This a Filemon record up until the error box appears:

| http://www.users.on.net/~fzabkar/VBS_problem/vbs_filemon.txt

|

| The Filemon output screen isn't mousable, but holding down the

| Ctrl-Shift key plus Home/End/PgUp/PgDown and then selecting Edit >

| Copy enables one to copy and paste the output into Notepad. Thanks to

| MEB.

|

| As for TweakUI's IE settings, all but the following boxes are checked:

|

| Clear document, run, typed-URL history on exit

| Show Favorites on Start Menu

|

| If I use Opera to open a .vbs file, it merely displays its contents.

| Under Tools > Preferences > Advanced > Downloads there is no VBS file

| type.

|

| ===============================================================

|

| While writing the above and trying things as I went, I finally got the

| script to work. Unfortunately I lost track of what I did. :-(

|

| However, if I now rename scrrun.dll in the Windows\System directory to

| scrrun.dl_, then the VB script breaks as before. Renaming other files

| in the scr56en.exe package either has no effect, or produces other

| errors. I notice that scrrun.dll appears in MEB's Filemon output

| screen (thank you MEB) soon after mine errors out. Maybe that was the

| problem all along.

|

| The following URL may offer an explanation for what happened:

| http://www.auditmypc.com/process/scrrun.asp

|

| "The file, scrrun.dll, is used by windows when running scripts such as

| those written with JScript or VBScript. If scrrun.dll is unavailable,

| windows will not be able to execute scripts. If you do not use any

| scripting on your computer you may be able to remove this file."

|

| Anyway I suspect that something broke my IE6 or WSH installation. I

| hate installing updates and patches because this sort of thing seems

| to happen to me a lot.

|

| Thanks to all for your help.

|

| - Franc Zabkar

| --

| Please remove one 'i' from my address when replying by email.

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

April 24, 2008

Re: Bootup - Shutdown logger

On Wed, 23 Apr 2008 21:15:32 -0400, "PCR" <pcrrcp@netzero.net> put

finger to keyboard and composed:

>Franc Zabkar wrote:

>I'm not seeing that you have taken all the updates, at "IE, Help,

>About"...!...

>

>Yours... ;SP1;q240308;q313829;Q330994;Q828750

>Mine....

>SP1, Q313829, Q328970, Q328389, Q324929, Q810847, Q813951, Q816506,

>Q813489, Q330994, Q818529, Q822925, Q828750, Q824145, Q832894,

>Q837009, Q831167, Q823353, Q867801, Q833989, Q834707, Q889293,

>Q867282, Q891781, Q890923, Q883939, Q896688, Q905915, Q912812,

>Q916281 & Q918439.

>Although mine is misleading (because the registry key the data comes

>from is not cleared of superceded updates, but the later ones are just

>added)... you need to go to Windows Update & get at least Q916281 &

>Q918439...

>http://www.microsoft.com/technet/security/Bulletin/MS06-021.mspx

>Microsoft Security Bulletin MS06-021

>Cumulative Security Update for Internet Explorer (916281)

>

>http://www.microsoft.com/technet/security/Bulletin/MS06-022.mspx

>Microsoft Security Bulletin MS06-022

>Vulnerability in ART Image Rendering Could Allow Remote Code Execution

>(918439)

OK, after updating I now have ...

Update Versions

;SP1;q240308;q313829;Q330994;Q828750;Q918439;Q916281;Q837009;Q833989;Q891781;

Java VM Version 5.0.3810.0

>REMEMBER... To see the Win98 updates at Windows Update, you must go

>there from a Win98 machine. And that MSVCRT.dll you reported earlier

>looks suspiciously XP/Vista-irradiated to me...!...

>

> You Me

>MSVCRT.dll 6.10.8924.0 6.00.8797.0

I have no idea where this version came from.

>Also, your script files...

>

>jscript.dll 5.6.0.8513

>vbscript.dll 5.6.0.8515

After Windows Update I have ...

jscript.dll 5.6.0.8831

vbscript.dll 5.6.0.7426

>...are STILL lower than my versions. Jugding from this SFCLog.txt of

>mine, you need at least one more update...

>

>[C:\WINDOWS]

>wscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>[c:\windows\COMMAND]

>cscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>[C:\WINDOWS\SYSTEM]

>jscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>scrobj.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>vbscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>wshext.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>scrrun.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>wshom.ocx Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>

>I'm not sure Windows Update will get that done for you. If not, I'll try

>harder to recall what it was that I ran (back in '06 says the date in

>SFCLog.txt) that got me updated to that.

>

>Well... wait a minute... I am seeing those files with those dates in my

>version of that file you mentioned... Scr56en.exe. Its Properties says

>my version is 5.50.4134.600. (Not sure where I got it from.)

That's the one Gary is offering.

BTW, start.vbs still works, but I wouldn't be surprised if the updates

broke something else.

Thanks for your interest.

- Franc Zabkar

--

Please remove one 'i' from my address when replying by email.

April 26, 2008

Re: Bootup - Shutdown logger

Franc Zabkar wrote:

| On Wed, 23 Apr 2008 21:15:32 -0400, "PCR" <pcrrcp@netzero.net> put

| finger to keyboard and composed:

|

|>Franc Zabkar wrote:

|

|>I'm not seeing that you have taken all the updates, at "IE, Help,

|>About"...!...

|>

|>Yours... ;SP1;q240308;q313829;Q330994;Q828750

|>Mine....

|>SP1, Q313829, Q328970, Q328389, Q324929, Q810847, Q813951, Q816506,

|>Q813489, Q330994, Q818529, Q822925, Q828750, Q824145, Q832894,

|>Q837009, Q831167, Q823353, Q867801, Q833989, Q834707, Q889293,

|>Q867282, Q891781, Q890923, Q883939, Q896688, Q905915, Q912812,

|>Q916281 & Q918439.

|

|>Although mine is misleading (because the registry key the data comes

|>from is not cleared of superceded updates, but the later ones are just

|>added)... you need to go to Windows Update & get at least Q916281 &

|>Q918439...

|

|>http://www.microsoft.com/technet/security/Bulletin/MS06-021.mspx

|>Microsoft Security Bulletin MS06-021

|>Cumulative Security Update for Internet Explorer (916281)

|>

|>http://www.microsoft.com/technet/security/Bulletin/MS06-022.mspx

|>Microsoft Security Bulletin MS06-022

|>Vulnerability in ART Image Rendering Could Allow Remote Code Execution

|>(918439)

|

| OK, after updating I now have ...

|

| Update Versions

|

;SP1;q240308;q313829;Q330994;Q828750;Q918439;Q916281;Q837009;Q833989;Q89

1781;

| Java VM Version 5.0.3810.0

That looks a lot, lot better! Try Windows Update once more to see

whether it is through with you. Sometimes you need to take one in order

to be eligible for another. If no more are offered, the rest of what I

have shown (of my IE, About) is presumably either superceded or not

applicable to your machine.

(I should be more definitive like Terhune & Chauvin have been in the

past about these updates, but...) here (anyway) is a clue to the

superceded ones. At "Control Panel, Add/Remove Programs,

Install/Uninstall tab", I do know that...

(a) Internet Explorer Q918439 replaced...

Q912812, Q905915, Q896688, Q883939, Q890923, Q891781,

Q889293, Q834707, Q867801, Q831167, Q832894, Q824145,

Q828750, Q822925, Q818529)

(b) Outlook Express Q823353 replaced...

Q837009, Q330994. (That's right, it replaced a higher number.)

Microsoft Data Access Components KB870669

Microsoft VGX Q833989

Windows 98 KB891711 Update

Windows 98 KB896358 Update

Windows 98 KB908519 Update

Windows 98 KB918547 Update

Windows 98 Q823559 Update

Windows 98 Q840315 Update

Windows 98 Q888113 Update

Windows 98 Q890175 Update

|>REMEMBER... To see the Win98 updates at Windows Update, you must go

|>there from a Win98 machine. And that MSVCRT.dll you reported earlier

|>looks suspiciously XP/Vista-irradiated to me...!...

|>

|> You Me

|>MSVCRT.dll 6.10.8924.0 6.00.8797.0

|

| I have no idea where this version came from.

http://www.google.com/search?hl=en&q=MSVCRT.dll++6.10.8924.0&btnG=Google+Search

Google finds about 402 for "MSVCRT.dll 6.10.8924.0", but I haven't come

up with a definitive answer yet.

http://support.microsoft.com/dllhelp/Default.aspx?dlltype=file&l=55&alpha=msvcrt.dll&S=1&x=12&y=13&start=50

MS's DLL Database doesn't mention yours, but that too is not quite

definitive.

|>Also, your script files...

|>

|>jscript.dll 5.6.0.8513

|>vbscript.dll 5.6.0.8515

|

| After Windows Update I have ...

|

| jscript.dll 5.6.0.8831

| vbscript.dll 5.6.0.7426

OOOPS... that is right about about JScript.dll! I have a later entry in

SFCLog.txt showing...

jscript.dll Updated 5.6.0.8825 8/9/04 5.6.0.8831 5/17/06 No

...., after the last bundle of critical updates!

But VBScript.dll definitely was last updated by Scr56en.exe

v.5.50.4134.600. It is v.5.6.0.8825. The JScript.dll in that .exe also

is that older version; (I've just extracted it). It might have been best

to run Scr56en.exe before going to Windows Update. But there's a chance

it won't wreck your new JScript.dll if you run it now. It might ask

first before over-writing a newer version. (I don't know for sure.)

|>...are STILL lower than my versions. Jugding from this SFCLog.txt of

|>mine, you need at least one more update...

|>

|>[C:\WINDOWS]

|>wscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|>[c:\windows\COMMAND]

|>cscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|>[C:\WINDOWS\SYSTEM]

|>jscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|>scrobj.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|>vbscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|>wshext.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|>scrrun.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|>wshom.ocx Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|>

|>I'm not sure Windows Update will get that done for you. If not, I'll

|>try harder to recall what it was that I ran (back in '06 says the

|>date in SFCLog.txt) that got me updated to that.

|>

|>Well... wait a minute... I am seeing those files with those dates in

|>my version of that file you mentioned... Scr56en.exe. Its Properties

|>says my version is 5.50.4134.600. (Not sure where I got it from.)

|

| That's the one Gary is offering.

It will give you a newer VBScript.dll-- but will it revert your

JScript.dll?

| BTW, start.vbs still works, but I wouldn't be surprised if the updates

| broke something else.

I can't recall any script crashes.

| Thanks for your interest.

|

| - Franc Zabkar

| --

| Please remove one 'i' from my address when replying by email.

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

April 29, 2008

Re: Bootup - Shutdown logger

On Fri, 25 Apr 2008 23:55:09 -0400, "PCR" <pcrrcp@netzero.net> put

finger to keyboard and composed:

>Franc Zabkar wrote:

>| OK, after updating I now have ...

>|

>| Update Versions

>|

>;SP1;q240308;q313829;Q330994;Q828750;Q918439;Q916281;Q837009;Q833989;Q89

>1781;

>| Java VM Version 5.0.3810.0

>

>That looks a lot, lot better! Try Windows Update once more to see

>whether it is through with you. Sometimes you need to take one in order

>to be eligible for another. If no more are offered, the rest of what I

>have shown (of my IE, About) is presumably either superceded or not

>applicable to your machine.

The only useful items that were offered were ...

Security Update for Flash Player (KB913433)

Windows IDE Hard Drive Cache Package

>(I should be more definitive like Terhune & Chauvin have been in the

>past about these updates, but...) here (anyway) is a clue to the

>superceded ones. At "Control Panel, Add/Remove Programs,

>Install/Uninstall tab", I do know that...

>

>(a) Internet Explorer Q918439 replaced...

> Q912812, Q905915, Q896688, Q883939, Q890923, Q891781,

> Q889293, Q834707, Q867801, Q831167, Q832894, Q824145,

> Q828750, Q822925, Q818529)

>

>(b) Outlook Express Q823353 replaced...

> Q837009, Q330994. (That's right, it replaced a higher number.)

>

>© All of these also show up in Add/Remove...

This is what I have:

N=no, Y=yes

N Microsoft Data Access Components KB870669

Y Microsoft VGX Q833989

Y Windows 98 KB891711 Update

Y Windows 98 KB896358 Update

Y Windows 98 KB908519 Update

Y Windows 98 KB918547 Update

Y Windows 98 Q823559 Update

Y Windows 98 Q840315 Update

Y Windows 98 Q888113 Update

N Windows 98 Q890175 Update

I think I'll just leave it as it is.

Thanks for your input.

BTW, this is what msinfo32.exe reports:

[software Updates]

Windows 98 Second Edition = 4,10,0,2222

Updates = Year 2000 Update for Windows 98

[W98]

[Windows 98 KB891711 Update]

[Windows 98 KB896358 Update]

[Windows 98 KB908519 Update]

[Windows 98 KB918547 Update]

[Windows 98 Q245729 Update]

[Windows 98 Q274548 Update]

[Windows 98 Q314147 Update]

[Windows 98 Q323172 Update]

[Windows 98 Q323255 Update]

[Windows 98 Q329115 Update]

[Windows 98 Q811630 Update]

[Windows 98 Q888113 Update]

[W98.SE]

[Windows 98 Q273727 Update]

[Windows 98 Q823559 Update]

[Windows 98 Second Edition Q242975 Update]

[Windows 98 Second Edition Q256015 Update]

[Windows 98 Second Edition Q259728 Update]

[Windows 98 Second Edition Q263044 Update]

[Windows 98 Second Edition Q273017 Update]

[Windows 98 Second Edition Q273991 Update]

[W98.TELNET]

[Windows 98 TELNET Update]

[Win98.SE]

[Windows 98 Second Edition Q238453 Update]

[Windows 98 Second Edition Q239887 Update]

- Franc Zabkar

--

Please remove one 'i' from my address when replying by email.

April 30, 2008

Re: Bootup - Shutdown logger

Franc Zabkar wrote:

| On Fri, 25 Apr 2008 23:55:09 -0400, "PCR" <pcrrcp@netzero.net> put

| finger to keyboard and composed:

|

|>Franc Zabkar wrote:

|

|>| OK, after updating I now have ...

|>|

|>| Update Versions

|>|

|>;SP1;q240308;q313829;Q330994;Q828750;Q918439;Q916281;Q837009;Q833989;Q

89

|>1781;

|>| Java VM Version 5.0.3810.0

|>

|>That looks a lot, lot better! Try Windows Update once more to see

|>whether it is through with you. Sometimes you need to take one in

|>order to be eligible for another. If no more are offered, the rest of

|>what I have shown (of my IE, About) is presumably either superceded

|>or not applicable to your machine.

|

| The only useful items that were offered were ...

|

| Security Update for Flash Player (KB913433)

| Windows IDE Hard Drive Cache Package

Interesting! I don't have that one, & Windows Update doesn't offer it...

http://support.microsoft.com/kb/913433

MS06-020: Vulnerabilities in Macromedia Flash Player from Adobe could

allow remote code execution

However, that article speaks of older versions of Flash Player than I

have, & I think it was mentioned at this site that an alternative to

that fix was to get the the newer version...

http://www.adobe.com/go/getflash

Adobe Flash Player version 9.0.124.0

That update goes quick & well. After it is done, at...

(a) C:\WINDOWS\Downloaded Program Files

(b) R-Clk "Shockwave Flash Object", Properties, Version tab,

should show v.9.0.124.0.

NOTE: I had to click the URL for the update. It did not work to R-Clk,

Update, the earlier version I started with!

|>(I should be more definitive like Terhune & Chauvin have been in the

|>past about these updates, but...) here (anyway) is a clue to the

|>superceded ones. At "Control Panel, Add/Remove Programs,

|>Install/Uninstall tab", I do know that...

|>

|>(a) Internet Explorer Q918439 replaced...

|> Q912812, Q905915, Q896688, Q883939, Q890923, Q891781,

|> Q889293, Q834707, Q867801, Q831167, Q832894, Q824145,

|> Q828750, Q822925, Q818529)

|>

|>(b) Outlook Express Q823353 replaced...

|> Q837009, Q330994. (That's right, it replaced a higher number.)

|>

|>© All of these also show up in Add/Remove...

|

| This is what I have:

|

| N=no, Y=yes

|

| N Microsoft Data Access Components KB870669

http://support.microsoft.com/?id=870669

How to disable the ADODB.Stream object from Internet Explorer

I didn't do it manually (that I reall), but true to the articles word,

my Registry does contain this key...

REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX

Compatibility\{00000566-0000-0010-8000-00AA006D2EA4}]

"Compatibility Flags"=dword:00000400

That's one of the kill-bits so famous here a while ago!

| Y Microsoft VGX Q833989

| Y Windows 98 KB891711 Update

| Y Windows 98 KB896358 Update

| Y Windows 98 KB908519 Update

| Y Windows 98 KB918547 Update

| Y Windows 98 Q823559 Update

| Y Windows 98 Q840315 Update

| Y Windows 98 Q888113 Update

| N Windows 98 Q890175 Update

http://www.microsoft.com/technet/security/Bulletin/MS05-001.mspx

Microsoft Security Bulletin MS05-001

Vulnerability in HTML Help Could Allow Code Execution (890175)

That seems to deal with ActiveX & security zones! It hasn't hurt me to

take it that I can see!

|

| I think I'll just leave it as it is.

|

| Thanks for your input.

|

| BTW, this is what msinfo32.exe reports:

|

| [software Updates]

|

| Windows 98 Second Edition = 4,10,0,2222

| Updates = Year 2000 Update for Windows 98

|

| [W98]

| [Windows 98 KB891711 Update]

| [Windows 98 KB896358 Update]

| [Windows 98 KB908519 Update]

| [Windows 98 KB918547 Update]

| [Windows 98 Q245729 Update]

| [Windows 98 Q274548 Update]

| [Windows 98 Q314147 Update]

| [Windows 98 Q323172 Update]

| [Windows 98 Q323255 Update]

| [Windows 98 Q329115 Update]

| [Windows 98 Q811630 Update]

| [Windows 98 Q888113 Update]

|

| [W98.SE]

| [Windows 98 Q273727 Update]

| [Windows 98 Q823559 Update]

| [Windows 98 Second Edition Q242975 Update]

| [Windows 98 Second Edition Q256015 Update]

| [Windows 98 Second Edition Q259728 Update]

| [Windows 98 Second Edition Q263044 Update]

| [Windows 98 Second Edition Q273017 Update]

| [Windows 98 Second Edition Q273991 Update]

|

| [W98.TELNET]

| [Windows 98 TELNET Update]

|

| [Win98.SE]

| [Windows 98 Second Edition Q238453 Update]

| [Windows 98 Second Edition Q239887 Update]

Here is mine from MSInfo32...

Windows 98 Second Edition=4,10,0,2222

Updates=Year 2000 Update for Windows 98b

SP2: Windows 98 Second Edition USBHUB

W98: KB891711, KB896358, KB908519, KB918547, Q245729, Q274113,

Q314147, Q323172, Q323255, Q329115, Q811630, Q840315,

Q888113, & Q890175.

W98SE: Q823559, Q245272, Q256015, Q259728, Q260067, Q263044,

Q273017 & Q273991.

Win98SE: Q249973, Q238453, Q239887, UHCD

Windows 98 Second Edition Digital Video

Windows 98 TELNET

But this machine was set up by Compaq (a 7470 Presario). So, it may

necessarily be different from yours. I see you have some that I don't.

But I'm not overly worried, presuming Windows Update would have offered

them if applicable.

I see the 1st one you've got that I don't is...

http://support.microsoft.com/kb/274548

Patch for "HyperTerminal Buffer Overflow" Vulnerability in Windows 98,

Windows Me

Now, I've taken the download. It's been my policy not to take stuff that

wasn't offered at Windows Update. This is more of a "hotfix". But I'm

considering it!

| - Franc Zabkar

| --

| Please remove one 'i' from my address when replying by email.

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

April 30, 2008

Re: Bootup - Shutdown logger

On Apr 23, 7:15 pm, "PCR" <pcr...@netzero.net> wrote:

> Franc Zabkar wrote:

>

> | On Mon, 21 Apr 2008 22:42:49 -0400, "PCR" <pcr...@netzero.net> put

> | finger to keyboard and composed:

> |

> |>Another thing: what about your settings at...?...

> |>

> |>"Control Panel, Internet Options, Security tab, Select Internet (&

> |>maybe Local Intranet)"

> |>

> |>Are you at Default or Custom? If Custom, are the 3 Scripting options

> |>enabled? Mine are, (but not all the ActiveX options are enabled).

> |

> | I'll try to answer everyone's questions here.

> |

> | These are my security settings:

> |

> | Local intranet Medium-low

> | Trusted sites Low

> | Internet Medium

> | Restricted sites High

> |

> | I've tried setting Local intranet to Low but the error remained.

>

> Those settings were good, then. And I see you have solved the problem &

> possibly could stop now. Probably, some 3rd-party software renamed your

> Scrrun.dll as a security measure to prevent scripts from running, & you

> will be fine now that you renamed it back.

>

> | I've been able to successfully run Gary's .vbs script on my other

> | Win98SE box. Now I'm trying to find what is different about them.

> |

> | According to msinfo32.exe, the two boxes are both using IE6SP1 with

> | the same build version and same updates.

>

> I'm not seeing that you have taken all the updates, at "IE, Help,

> About"...!...

>

> Yours... ;SP1;q240308;q313829;Q330994;Q828750

> Mine....

> SP1, Q313829, Q328970, Q328389, Q324929, Q810847, Q813951, Q816506,

> Q813489, Q330994, Q818529, Q822925, Q828750, Q824145, Q832894,

> Q837009, Q831167, Q823353, Q867801, Q833989, Q834707, Q889293,

> Q867282, Q891781, Q890923, Q883939, Q896688, Q905915, Q912812,

> Q916281 & Q918439.

>

> Although mine is misleading (because the registry key the data comes

> from is not cleared of superceded updates, but the later ones are just

> added)... you need to go to Windows Update & get at least Q916281 &

> Q918439...

>

> http://www.microsoft.com/technet/security/Bulletin/MS06-021.mspx

> Microsoft Security Bulletin MS06-021

> Cumulative Security Update for Internet Explorer (916281)

>

> http://www.microsoft.com/technet/security/Bulletin/MS06-022.mspx

> Microsoft Security Bulletin MS06-022

> Vulnerability in ART Image Rendering Could Allow Remote Code Execution

> (918439)

>

> REMEMBER... To see the Win98 updates at Windows Update, you must go

> there from a Win98 machine. And that MSVCRT.dll you reported earlier

> looks suspiciously XP/Vista-irradiated to me...!...

>

> You Me

> MSVCRT.dll 6.10.8924.0 6.00.8797.0

>

> Also, your script files...

>

> jscript.dll 5.6.0.8513

> vbscript.dll 5.6.0.8515

>

> ...are STILL lower than my versions. Jugding from this SFCLog.txt of

> mine, you need at least one more update...

>

> [C:\WINDOWS]

> wscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> [c:\windows\COMMAND]

> cscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> [C:\WINDOWS\SYSTEM]

> jscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> scrobj.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> vbscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> wshext.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> scrrun.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> wshom.ocx Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>

> I'm not sure Windows Update will get that done for you. If not, I'll try

> harder to recall what it was that I ran (back in '06 says the date in

> SFCLog.txt) that got me updated to that.

>

> Well... wait a minute... I am seeing those files with those dates in my

> version of that file you mentioned... Scr56en.exe. Its Properties says

> my version is 5.50.4134.600. (Not sure where I got it from.)

Hi,PCR. Check again and you will notice that the version you quote is

for Wextract.exe which is the package itself and NOT the update files

it contains. Your vbs version of 5.6.0.8825 is the latest MS offered

from this now dead URL:

http://msdn.microsoft.com/library/default.asp?url=/downloads/list/webdev.asp

Begining with Gary's Scr56en.exe of 6626 version, MS would silently

update the version available from the above website such that one

always got the latest version. I have archived versions

6626

8515

8825

The only one I think I might be missing was 8513. You could only have

gotten your version 8825 from that source as it was never available

from the WinUP site for reasons I can't fathom at all. Update 917344

does update just Jscript.dll to 8831 version, and once again NONE of

these updates will retrograde any version of files backwards. Files

are only replaced if the incoming files are the same or higher

version. So when Franc re-applys his 6626 version update all his

script files should be getting refreshed provided they ARE the same

version.

I'll be emailing Gary (from lee_454 AT Yahoo) the latest version for

all to enjoy the latest scripting host package - it is NOT available

anywhere else that I know of, so thanks a lot Gary, we need it hosted

somewhere. To view the version of files inside, open it with WinZip

and double click on the inf file to read, close to the bottom of it,

the version number. WinZip extracts just the inf file as a temporary

file in your TEMP folder and launches your default text file reader to

view it with, in such double click situations. To ensure trust, do

check the Digital Signature to see that it is a valid MS file that has

not been tampered with.

I once had a problem with script errors and found it was Norton's

scripting guard causing it because when I removed Norton my vbs spell

checker started working again with out the errors. Perhaps Franc has

Norton? The "Can't create ActiveX Object" error report is a common

one and more of a generic output than something specifically wrong

with the script itself although the script CAN be wrong and generate

the valid error - when the same script works for several other people

it is NOT an ActiveX error after all. Something else is going on with

Franc's machine. Getting him the latest Scripting Host package would

be number one on my list of things to do.

>

> | The above security settings

> | are also identical.

> |

> | These are the IE data for the good box:

> |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

> |

> | These are the IE data for the bad box:

> |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

> |

> | This is the difference between the two data sets:

> |http://www.users.on.net/~fzabkar/VBS_problem/diff_ie.txt

> |

> | I can find only one real difference and that is that the good box has

> | a later version of vbscript.dll. However using this version on the bad

> | box doesn't make the error go away.

> |

> | The good box also has Opera installed on it, although it is a much

> | earlier version.

> |

> | The same versions of wscript.exe are installed on both boxes.

> |

> | This a Filemon record up until the error box appears:

> |http://www.users.on.net/~fzabkar/VBS_problem/vbs_filemon.txt

> |

> | The Filemon output screen isn't mousable, but holding down the

> | Ctrl-Shift key plus Home/End/PgUp/PgDown and then selecting Edit >

> | Copy enables one to copy and paste the output into Notepad. Thanks to

> | MEB.

> |

> | As for TweakUI's IE settings, all but the following boxes are checked:

> |

> | Clear document, run, typed-URL history on exit

> | Show Favorites on Start Menu

> |

> | If I use Opera to open a .vbs file, it merely displays its contents.

> | Under Tools > Preferences > Advanced > Downloads there is no VBS file

> | type.

> |

> | ===============================================================

> |

> | While writing the above and trying things as I went, I finally got the

> | script to work. Unfortunately I lost track of what I did. :-(

> |

> | However, if I now rename scrrun.dll in the Windows\System directory to

> | scrrun.dl_, then the VB script breaks as before. Renaming other files

> | in the scr56en.exe package either has no effect, or produces other

> | errors. I notice that scrrun.dll appears in MEB's Filemon output

> | screen (thank you MEB) soon after mine errors out. Maybe that was the

> | problem all along.

> |

> | The following URL may offer an explanation for what happened:

> | http://www.auditmypc.com/process/scrrun.asp

> |

> | "The file, scrrun.dll, is used by windows when running scripts such as

> | those written with JScript or VBScript. If scrrun.dll is unavailable,

> | windows will not be able to execute scripts. If you do not use any

> | scripting on your computer you may be able to remove this file."

> |

> | Anyway I suspect that something broke my IE6 or WSH installation. I

> | hate installing updates and patches because this sort of thing seems

> | to happen to me a lot.

> |

> | Thanks to all for your help.

> |

> | - Franc Zabkar

> | --

> | Please remove one 'i' from my address when replying by email.

>

> --

> Thanks or Good Luck,

> There may be humor in this post, and,

> Naturally, you will not sue,

> Should things get worse after this,

> PCR

> pcr...@netzero.net

April 30, 2008

Re: Bootup - Shutdown logger

Whoa, now. Don't bother to email me anything, and I did no such thing as

agree to host anything. I only host files that I write myself or that I

downloaded from known legitimate sources and which are left untouched.

Lastly, I only do it when I can find no other legitimate source to refer

others to.

Anyway, anything you email me is automatically disqualified. Unless I

get/got it directly from MS, it doesn't go up. You want it hosted, you gotta

do it yourself.

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

"Lee" <melee5@my-deja.com> wrote in message

news:234891b6-c92a-42dc-810e-18295566059a@k37g2000hsf.googlegroups.com...

<SNIP>