Jump to content

Bootup - Shutdown logger


Recommended Posts

Guest PCR
Posted

Re: Bootup - Shutdown logger

 

Gary S. Terhune wrote:

| I have discovered that I also have version 8825 of SCR56EN. I'll put

| that on my site instead of v. 6626. Have you guys decided if there

| are any problems with 8825?

 

There's no problem with it on my machine. It provides both a JScript.dll

& a VBScript.dll of v.5.6.0.8825. Zabcar's currently has...

 

jscript.dll 5.6.0.8831

vbscript.dll 5.6.0.7426

 

We think he should run Scr56en.exe v.5.50.4134.600, which contains files

of v...8825. It will lift his VBScript.dll & leave the other alone.

(However, the actual problem he reported already is solved, i.e., he can

run the .vbs files you posted now.)

 

| --

| Gary S. Terhune

| MS-MVP Shell/User

| http://www.grystmill.com

|

| "Lee" <melee5@my-deja.com> wrote in message

|

news:234891b6-c92a-42dc-810e-18295566059a@k37g2000hsf.googlegroups.com...

| On Apr 23, 7:15 pm, "PCR" <pcr...@netzero.net> wrote:

|> Franc Zabkar wrote:

|>

|> | On Mon, 21 Apr 2008 22:42:49 -0400, "PCR" <pcr...@netzero.net> put

|> | finger to keyboard and composed:

|> |

|> |>Another thing: what about your settings at...?...

|> |>

|> |>"Control Panel, Internet Options, Security tab, Select Internet (&

|> |>maybe Local Intranet)"

|> |>

|> |>Are you at Default or Custom? If Custom, are the 3 Scripting

|> |>options enabled? Mine are, (but not all the ActiveX options are

|> |>enabled).

|> |

|> | I'll try to answer everyone's questions here.

|> |

|> | These are my security settings:

|> |

|> | Local intranet Medium-low

|> | Trusted sites Low

|> | Internet Medium

|> | Restricted sites High

|> |

|> | I've tried setting Local intranet to Low but the error remained.

|>

|> Those settings were good, then. And I see you have solved the

|> problem & possibly could stop now. Probably, some 3rd-party software

|> renamed your Scrrun.dll as a security measure to prevent scripts

|> from running, & you will be fine now that you renamed it back.

|>

|> | I've been able to successfully run Gary's .vbs script on my other

|> | Win98SE box. Now I'm trying to find what is different about them.

|> |

|> | According to msinfo32.exe, the two boxes are both using IE6SP1 with

|> | the same build version and same updates.

|>

|> I'm not seeing that you have taken all the updates, at "IE, Help,

|> About"...!...

|>

|> Yours... ;SP1;q240308;q313829;Q330994;Q828750

|> Mine....

|> SP1, Q313829, Q328970, Q328389, Q324929, Q810847, Q813951, Q816506,

|> Q813489, Q330994, Q818529, Q822925, Q828750, Q824145, Q832894,

|> Q837009, Q831167, Q823353, Q867801, Q833989, Q834707, Q889293,

|> Q867282, Q891781, Q890923, Q883939, Q896688, Q905915, Q912812,

|> Q916281 & Q918439.

|>

|> Although mine is misleading (because the registry key the data comes

|> from is not cleared of superceded updates, but the later ones are

|> just added)... you need to go to Windows Update & get at least

|> Q916281 & Q918439...

|>

|> http://www.microsoft.com/technet/security/Bulletin/MS06-021.mspx

|> Microsoft Security Bulletin MS06-021

|> Cumulative Security Update for Internet Explorer (916281)

|>

|> http://www.microsoft.com/technet/security/Bulletin/MS06-022.mspx

|> Microsoft Security Bulletin MS06-022

|> Vulnerability in ART Image Rendering Could Allow Remote Code

|> Execution (918439)

|>

|> REMEMBER... To see the Win98 updates at Windows Update, you must go

|> there from a Win98 machine. And that MSVCRT.dll you reported earlier

|> looks suspiciously XP/Vista-irradiated to me...!...

|>

|> You Me

|> MSVCRT.dll 6.10.8924.0 6.00.8797.0

|>

|> Also, your script files...

|>

|> jscript.dll 5.6.0.8513

|> vbscript.dll 5.6.0.8515

|>

|> ...are STILL lower than my versions. Jugding from this SFCLog.txt of

|> mine, you need at least one more update...

|>

|> [C:\WINDOWS]

|> wscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|> [c:\windows\COMMAND]

|> cscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|> [C:\WINDOWS\SYSTEM]

|> jscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|> scrobj.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|> vbscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|> wshext.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|> scrrun.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|> wshom.ocx Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

|>

|> I'm not sure Windows Update will get that done for you. If not, I'll

|> try harder to recall what it was that I ran (back in '06 says the

|> date in SFCLog.txt) that got me updated to that.

|>

|> Well... wait a minute... I am seeing those files with those dates in

|> my version of that file you mentioned... Scr56en.exe. Its Properties

|> says my version is 5.50.4134.600. (Not sure where I got it from.)

|

|

| Hi,PCR. Check again and you will notice that the version you quote is

| for Wextract.exe which is the package itself and NOT the update files

| it contains. Your vbs version of 5.6.0.8825 is the latest MS offered

| from this now dead URL:

|

http://msdn.microsoft.com/library/default.asp?url=/downloads/list/webdev.asp

|

| Begining with Gary's Scr56en.exe of 6626 version, MS would silently

| update the version available from the above website such that one

| always got the latest version. I have archived versions

| 6626

| 8515

| 8825

|

| The only one I think I might be missing was 8513. You could only have

| gotten your version 8825 from that source as it was never available

| from the WinUP site for reasons I can't fathom at all. Update 917344

| does update just Jscript.dll to 8831 version, and once again NONE of

| these updates will retrograde any version of files backwards. Files

| are only replaced if the incoming files are the same or higher

| version. So when Franc re-applys his 6626 version update all his

| script files should be getting refreshed provided they ARE the same

| version.

|

| I'll be emailing Gary (from lee_454 AT Yahoo) the latest version for

| all to enjoy the latest scripting host package - it is NOT available

| anywhere else that I know of, so thanks a lot Gary, we need it hosted

| somewhere. To view the version of files inside, open it with WinZip

| and double click on the inf file to read, close to the bottom of it,

| the version number. WinZip extracts just the inf file as a temporary

| file in your TEMP folder and launches your default text file reader to

| view it with, in such double click situations. To ensure trust, do

| check the Digital Signature to see that it is a valid MS file that has

| not been tampered with.

|

| I once had a problem with script errors and found it was Norton's

| scripting guard causing it because when I removed Norton my vbs spell

| checker started working again with out the errors. Perhaps Franc has

| Norton? The "Can't create ActiveX Object" error report is a common

| one and more of a generic output than something specifically wrong

| with the script itself although the script CAN be wrong and generate

| the valid error - when the same script works for several other people

| it is NOT an ActiveX error after all. Something else is going on with

| Franc's machine. Getting him the latest Scripting Host package would

| be number one on my list of things to do.

|

|>

|> | The above security settings

|> | are also identical.

|> |

|> | These are the IE data for the good box:

|> |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

|> |

|> | These are the IE data for the bad box:

|> |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

|> |

|> | This is the difference between the two data sets:

|> |http://www.users.on.net/~fzabkar/VBS_problem/diff_ie.txt

|> |

|> | I can find only one real difference and that is that the good box

|> | has a later version of vbscript.dll. However using this version on

|> | the bad box doesn't make the error go away.

|> |

|> | The good box also has Opera installed on it, although it is a much

|> | earlier version.

|> |

|> | The same versions of wscript.exe are installed on both boxes.

|> |

|> | This a Filemon record up until the error box appears:

|> |http://www.users.on.net/~fzabkar/VBS_problem/vbs_filemon.txt

|> |

|> | The Filemon output screen isn't mousable, but holding down the

|> | Ctrl-Shift key plus Home/End/PgUp/PgDown and then selecting Edit >

|> | Copy enables one to copy and paste the output into Notepad. Thanks

|> | to MEB.

|> |

|> | As for TweakUI's IE settings, all but the following boxes are

|> | checked:

|> |

|> | Clear document, run, typed-URL history on exit

|> | Show Favorites on Start Menu

|> |

|> | If I use Opera to open a .vbs file, it merely displays its

|> | contents. Under Tools > Preferences > Advanced > Downloads there

|> | is no VBS file type.

|> |

|> | ===============================================================

|> |

|> | While writing the above and trying things as I went, I finally got

|> | the script to work. Unfortunately I lost track of what I did. :-(

|> |

|> | However, if I now rename scrrun.dll in the Windows\System

|> | directory to scrrun.dl_, then the VB script breaks as before.

|> | Renaming other files in the scr56en.exe package either has no

|> | effect, or produces other errors. I notice that scrrun.dll appears

|> | in MEB's Filemon output screen (thank you MEB) soon after mine

|> | errors out. Maybe that was the problem all along.

|> |

|> | The following URL may offer an explanation for what happened:

|> | http://www.auditmypc.com/process/scrrun.asp

|> |

|> | "The file, scrrun.dll, is used by windows when running scripts

|> | such as those written with JScript or VBScript. If scrrun.dll is

|> | unavailable, windows will not be able to execute scripts. If you

|> | do not use any scripting on your computer you may be able to

|> | remove this file."

|> |

|> | Anyway I suspect that something broke my IE6 or WSH installation. I

|> | hate installing updates and patches because this sort of thing

|> | seems to happen to me a lot.

|> |

|> | Thanks to all for your help.

|> |

|> | - Franc Zabkar

|> | --

|> | Please remove one 'i' from my address when replying by email.

|>

|> --

|> Thanks or Good Luck,

|> There may be humor in this post, and,

|> Naturally, you will not sue,

|> Should things get worse after this,

|> PCR

|> pcr...@netzero.net

 

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

Guest Lee
Posted

Re: Bootup - Shutdown logger

 

Thanks Gary, I can report not a single problem with version 8825

Scripting Host on my machine.

 

MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x scripting host

packages, I was holding out for the official version for the very

reasons you mention.

 

PCR - Wextract is the engine of the update executable package itself,

it's version numbers vary a lot so it's not much use by itself. But

the digital signature of it both shows you the Signatory of the

package and that it has not been tampered with since by the word and

standing of the Signatory which in this case is MS - which is good

enough for me to trust it.

 

On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

> I have discovered that I also have version 8825 of SCR56EN. I'll put that on

> my site instead of v. 6626. Have you guys decided if there are any problems

> with 8825?

>

> --

> Gary S. Terhune

> MS-MVP Shell/Userwww.grystmill.com

>

> "Lee" <mel...@my-deja.com> wrote in message

>

> news:234891b6-c92a-42dc-810e-18295566059a@k37g2000hsf.googlegroups.com...

> On Apr 23, 7:15 pm, "PCR" <pcr...@netzero.net> wrote:

>

>

>

>

>

> > Franc Zabkar wrote:

>

> > | On Mon, 21 Apr 2008 22:42:49 -0400, "PCR" <pcr...@netzero.net> put

> > | finger to keyboard and composed:

> > |

> > |>Another thing: what about your settings at...?...

> > |>

> > |>"Control Panel, Internet Options, Security tab, Select Internet (&

> > |>maybe Local Intranet)"

> > |>

> > |>Are you at Default or Custom? If Custom, are the 3 Scripting options

> > |>enabled? Mine are, (but not all the ActiveX options are enabled).

> > |

> > | I'll try to answer everyone's questions here.

> > |

> > | These are my security settings:

> > |

> > | Local intranet Medium-low

> > | Trusted sites Low

> > | Internet Medium

> > | Restricted sites High

> > |

> > | I've tried setting Local intranet to Low but the error remained.

>

> > Those settings were good, then. And I see you have solved the problem &

> > possibly could stop now. Probably, some 3rd-party software renamed your

> > Scrrun.dll as a security measure to prevent scripts from running, & you

> > will be fine now that you renamed it back.

>

> > | I've been able to successfully run Gary's .vbs script on my other

> > | Win98SE box. Now I'm trying to find what is different about them.

> > |

> > | According to msinfo32.exe, the two boxes are both using IE6SP1 with

> > | the same build version and same updates.

>

> > I'm not seeing that you have taken all the updates, at "IE, Help,

> > About"...!...

>

> > Yours... ;SP1;q240308;q313829;Q330994;Q828750

> > Mine....

> > SP1, Q313829, Q328970, Q328389, Q324929, Q810847, Q813951, Q816506,

> > Q813489, Q330994, Q818529, Q822925, Q828750, Q824145, Q832894,

> > Q837009, Q831167, Q823353, Q867801, Q833989, Q834707, Q889293,

> > Q867282, Q891781, Q890923, Q883939, Q896688, Q905915, Q912812,

> > Q916281 & Q918439.

>

> > Although mine is misleading (because the registry key the data comes

> > from is not cleared of superceded updates, but the later ones are just

> > added)... you need to go to Windows Update & get at least Q916281 &

> > Q918439...

>

> >http://www.microsoft.com/technet/security/Bulletin/MS06-021.mspx

> > Microsoft Security Bulletin MS06-021

> > Cumulative Security Update for Internet Explorer (916281)

>

> >http://www.microsoft.com/technet/security/Bulletin/MS06-022.mspx

> > Microsoft Security Bulletin MS06-022

> > Vulnerability in ART Image Rendering Could Allow Remote Code Execution

> > (918439)

>

> > REMEMBER... To see the Win98 updates at Windows Update, you must go

> > there from a Win98 machine. And that MSVCRT.dll you reported earlier

> > looks suspiciously XP/Vista-irradiated to me...!...

>

> > You Me

> > MSVCRT.dll 6.10.8924.0 6.00.8797.0

>

> > Also, your script files...

>

> > jscript.dll 5.6.0.8513

> > vbscript.dll 5.6.0.8515

>

> > ...are STILL lower than my versions. Jugding from this SFCLog.txt of

> > mine, you need at least one more update...

>

> > [C:\WINDOWS]

> > wscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > [c:\windows\COMMAND]

> > cscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > [C:\WINDOWS\SYSTEM]

> > jscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > scrobj.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > vbscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > wshext.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > scrrun.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > wshom.ocx Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>

> > I'm not sure Windows Update will get that done for you. If not, I'll try

> > harder to recall what it was that I ran (back in '06 says the date in

> > SFCLog.txt) that got me updated to that.

>

> > Well... wait a minute... I am seeing those files with those dates in my

> > version of that file you mentioned... Scr56en.exe. Its Properties says

> > my version is 5.50.4134.600. (Not sure where I got it from.)

>

> Hi,PCR.  Check again and you will notice that the version you quote is

> for Wextract.exe which is the package itself and NOT the update files

> it contains.  Your vbs version of 5.6.0.8825 is the latest MS offered

> from this now dead URL:http://msdn.microsoft.com/library/default.asp?url=/downloads/list/web...

>

> Begining with Gary's Scr56en.exe of 6626 version, MS would silently

> update the version available from the above website such that one

> always got the latest version.  I have archived versions

> 6626

> 8515

> 8825

>

> The only one I think I might be missing was 8513.  You could only have

> gotten your version 8825 from that source as it was never available

> from the WinUP site for reasons I can't fathom at all.  Update 917344

> does update just Jscript.dll to 8831 version, and once again NONE of

> these updates will retrograde any version of files backwards.  Files

> are only replaced if the incoming files are the same or higher

> version.  So when Franc re-applys his 6626 version update all his

> script files should be getting refreshed provided they ARE the same

> version.

>

> I'll be emailing Gary (from lee_454 AT Yahoo) the latest version for

> all to enjoy the latest scripting host package - it is NOT available

> anywhere else that I know of, so thanks a lot Gary, we need it hosted

> somewhere.  To view the version of files inside, open it with WinZip

> and double click on the inf file to read, close to the bottom of it,

> the version number.  WinZip extracts just the inf file as a temporary

> file in your TEMP folder and launches your default text file reader to

> view it with, in such double click situations.  To ensure trust, do

> check the Digital Signature to see that it is a valid MS file that has

> not been tampered with.

>

> I once had a problem with script errors and found it was Norton's

> scripting guard causing it because when I removed Norton my vbs spell

> checker started working again with out the errors.  Perhaps Franc has

> Norton?  The "Can't create ActiveX Object" error report is a common

> one and more of a generic output than something specifically wrong

> with the script itself although the script CAN be wrong and generate

> the valid error - when the same script works for several other people

> it is NOT an ActiveX error after all.  Something else is going on with

> Franc's machine.  Getting him the latest Scripting Host package would

> be number one on my list of things to do.

>

>

>

>

>

> > | The above security settings

> > | are also identical.

> > |

> > | These are the IE data for the good box:

> > |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

> > |

> > | These are the IE data for the bad box:

> > |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

> > |

> > | This is the difference between the two data sets:

> > |http://www.users.on.net/~fzabkar/VBS_problem/diff_ie.txt

> > |

> > | I can find only one real difference and that is that the good box has

> > | a later version of vbscript.dll. However using this version on the bad

> > | box doesn't make the error go away.

> > |

> > | The good box also has Opera installed on it, although it is a much

> > | earlier version.

> > |

> > | The same versions of wscript.exe are installed on both boxes.

> > |

> > | This a Filemon record up until the error box appears:

> > |http://www.users.on.net/~fzabkar/VBS_problem/vbs_filemon.txt

> > |

> > | The Filemon output screen isn't mousable, but holding down the

> > | Ctrl-Shift key plus Home/End/PgUp/PgDown and then selecting Edit >

> > | Copy enables one to copy and paste the output into Notepad. Thanks to

> > | MEB.

> > |

> > | As for TweakUI's IE settings, all but the following boxes are checked:

> > |

> > | Clear document, run, typed-URL history on exit

> > | Show Favorites on Start Menu

> > |

> > | If I use Opera to open a .vbs file, it merely displays its contents.

> > | Under Tools > Preferences > Advanced > Downloads there is no VBS file

> > | type.

> > |

> > | ===============================================================

> > |

> > | While writing the above and trying things as I went, I finally got the

> > | script to work. Unfortunately I lost track of what I did. :-(

> > |

> > | However, if I now rename scrrun.dll in the Windows\System directory to

> > | scrrun.dl_, then the VB script breaks as before. Renaming other files

> > | in the scr56en.exe package either has no effect, or produces other

> > | errors. I notice that scrrun.dll appears in MEB's Filemon output

> > | screen (thank you MEB) soon after mine errors out. Maybe that was the

> > | problem all along.

> > |

> > | The following URL may offer an explanation for what happened:

> > |http://www.auditmypc.com/process/scrrun.asp

> > |

> > | "The file, scrrun.dll, is used by windows when running scripts such as

> > | those written with JScript or VBScript. If scrrun.dll is unavailable,

> > | windows will not be able to execute scripts. If you do not use any

> > | scripting on your computer you may be able to remove this file."

> > |

> > | Anyway I suspect that something broke my IE6 or WSH installation. I

> > | hate installing updates and patches because this sort of thing seems

> > | to happen to me a lot.

> > |

> > | Thanks to all for your help.

> > |

> > | - Franc Zabkar

> > | --

> > | Please remove one 'i' from my address when replying by email.

>

> > --

> > Thanks or Good Luck,

> > There may be humor in this post, and,

> > Naturally, you will not sue,

> > Should things get worse after this,

> > PCR

> > pcr...@netzero.net- Hide quoted text -

>

> - Show quoted text -- Hide quoted text -

>

> - Show quoted text -

Guest PCR
Posted

Re: Bootup - Shutdown logger

 

Lee wrote:

| Thanks Gary, I can report not a single problem with version 8825

| Scripting Host on my machine.

|

| MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x scripting host

| packages, I was holding out for the official version for the very

| reasons you mention.

|

| PCR - Wextract is the engine of the update executable package itself,

| it's version numbers vary a lot so it's not much use by itself. But

| the digital signature of it both shows you the Signatory of the

| package and that it has not been tampered with since by the word and

| standing of the Signatory which in this case is MS - which is good

| enough for me to trust it.

 

OK. There certainly are a lot version numbers associated with the

various Scr56en.exe. But why not just R-Clk it, Properties, Version tab?

Mine says v.5.50.4134.600 there. And inside are files of v...8825. Won't

that always be true?

 

| On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

|> I have discovered that I also have version 8825 of SCR56EN. I'll put

|> that on

|> my site instead of v. 6626. Have you guys decided if there are any

|> problems

|> with 8825?

|>

|> --

|> Gary S. Terhune

|> MS-MVP Shell/Userwww.grystmill.com

|>

 

....snip

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

Guest MEB
Posted

Re: Bootup - Shutdown logger

 

Interesting.

 

I have:

5.6.0.6626 wscript.exe

5.6.0.6626 cscript.exe

 

And those were provided by Windows Update in this last clean install...

 

So where did the updated files come from....

 

--

MEB http://peoplescounsel.orgfree.com

--

_________

 

"Lee" <melee5@my-deja.com> wrote in message

news:f6690c5f-3fe5-4b3f-8ee6-27a6257c2837@x35g2000hsb.googlegroups.com...

Thanks Gary, I can report not a single problem with version 8825

Scripting Host on my machine.

 

MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x scripting host

packages, I was holding out for the official version for the very

reasons you mention.

 

PCR - Wextract is the engine of the update executable package itself,

it's version numbers vary a lot so it's not much use by itself. But

the digital signature of it both shows you the Signatory of the

package and that it has not been tampered with since by the word and

standing of the Signatory which in this case is MS - which is good

enough for me to trust it.

 

On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

> I have discovered that I also have version 8825 of SCR56EN. I'll put that

on

> my site instead of v. 6626. Have you guys decided if there are any

problems

> with 8825?

>

> --

> Gary S. Terhune

> MS-MVP Shell/Userwww.grystmill.com

>

> "Lee" <mel...@my-deja.com> wrote in message

>

> news:234891b6-c92a-42dc-810e-18295566059a@k37g2000hsf.googlegroups.com...

> On Apr 23, 7:15 pm, "PCR" <pcr...@netzero.net> wrote:

>

>

>

>

>

> > Franc Zabkar wrote:

>

> > | On Mon, 21 Apr 2008 22:42:49 -0400, "PCR" <pcr...@netzero.net> put

> > | finger to keyboard and composed:

> > |

> > |>Another thing: what about your settings at...?...

> > |>

> > |>"Control Panel, Internet Options, Security tab, Select Internet (&

> > |>maybe Local Intranet)"

> > |>

> > |>Are you at Default or Custom? If Custom, are the 3 Scripting options

> > |>enabled? Mine are, (but not all the ActiveX options are enabled).

> > |

> > | I'll try to answer everyone's questions here.

> > |

> > | These are my security settings:

> > |

> > | Local intranet Medium-low

> > | Trusted sites Low

> > | Internet Medium

> > | Restricted sites High

> > |

> > | I've tried setting Local intranet to Low but the error remained.

>

> > Those settings were good, then. And I see you have solved the problem &

> > possibly could stop now. Probably, some 3rd-party software renamed your

> > Scrrun.dll as a security measure to prevent scripts from running, & you

> > will be fine now that you renamed it back.

>

> > | I've been able to successfully run Gary's .vbs script on my other

> > | Win98SE box. Now I'm trying to find what is different about them.

> > |

> > | According to msinfo32.exe, the two boxes are both using IE6SP1 with

> > | the same build version and same updates.

>

> > I'm not seeing that you have taken all the updates, at "IE, Help,

> > About"...!...

>

> > Yours... ;SP1;q240308;q313829;Q330994;Q828750

> > Mine....

> > SP1, Q313829, Q328970, Q328389, Q324929, Q810847, Q813951, Q816506,

> > Q813489, Q330994, Q818529, Q822925, Q828750, Q824145, Q832894,

> > Q837009, Q831167, Q823353, Q867801, Q833989, Q834707, Q889293,

> > Q867282, Q891781, Q890923, Q883939, Q896688, Q905915, Q912812,

> > Q916281 & Q918439.

>

> > Although mine is misleading (because the registry key the data comes

> > from is not cleared of superceded updates, but the later ones are just

> > added)... you need to go to Windows Update & get at least Q916281 &

> > Q918439...

>

> >http://www.microsoft.com/technet/security/Bulletin/MS06-021.mspx

> > Microsoft Security Bulletin MS06-021

> > Cumulative Security Update for Internet Explorer (916281)

>

> >http://www.microsoft.com/technet/security/Bulletin/MS06-022.mspx

> > Microsoft Security Bulletin MS06-022

> > Vulnerability in ART Image Rendering Could Allow Remote Code Execution

> > (918439)

>

> > REMEMBER... To see the Win98 updates at Windows Update, you must go

> > there from a Win98 machine. And that MSVCRT.dll you reported earlier

> > looks suspiciously XP/Vista-irradiated to me...!...

>

> > You Me

> > MSVCRT.dll 6.10.8924.0 6.00.8797.0

>

> > Also, your script files...

>

> > jscript.dll 5.6.0.8513

> > vbscript.dll 5.6.0.8515

>

> > ...are STILL lower than my versions. Jugding from this SFCLog.txt of

> > mine, you need at least one more update...

>

> > [C:\WINDOWS]

> > wscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > [c:\windows\COMMAND]

> > cscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > [C:\WINDOWS\SYSTEM]

> > jscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > scrobj.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > vbscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > wshext.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > scrrun.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> > wshom.ocx Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>

> > I'm not sure Windows Update will get that done for you. If not, I'll try

> > harder to recall what it was that I ran (back in '06 says the date in

> > SFCLog.txt) that got me updated to that.

>

> > Well... wait a minute... I am seeing those files with those dates in my

> > version of that file you mentioned... Scr56en.exe. Its Properties says

> > my version is 5.50.4134.600. (Not sure where I got it from.)

>

> Hi,PCR. Check again and you will notice that the version you quote is

> for Wextract.exe which is the package itself and NOT the update files

> it contains. Your vbs version of 5.6.0.8825 is the latest MS offered

> from this now dead

URL:http://msdn.microsoft.com/library/default.asp?url=/downloads/list/web...

>

> Begining with Gary's Scr56en.exe of 6626 version, MS would silently

> update the version available from the above website such that one

> always got the latest version. I have archived versions

> 6626

> 8515

> 8825

>

> The only one I think I might be missing was 8513. You could only have

> gotten your version 8825 from that source as it was never available

> from the WinUP site for reasons I can't fathom at all. Update 917344

> does update just Jscript.dll to 8831 version, and once again NONE of

> these updates will retrograde any version of files backwards. Files

> are only replaced if the incoming files are the same or higher

> version. So when Franc re-applys his 6626 version update all his

> script files should be getting refreshed provided they ARE the same

> version.

>

> I'll be emailing Gary (from lee_454 AT Yahoo) the latest version for

> all to enjoy the latest scripting host package - it is NOT available

> anywhere else that I know of, so thanks a lot Gary, we need it hosted

> somewhere. To view the version of files inside, open it with WinZip

> and double click on the inf file to read, close to the bottom of it,

> the version number. WinZip extracts just the inf file as a temporary

> file in your TEMP folder and launches your default text file reader to

> view it with, in such double click situations. To ensure trust, do

> check the Digital Signature to see that it is a valid MS file that has

> not been tampered with.

>

> I once had a problem with script errors and found it was Norton's

> scripting guard causing it because when I removed Norton my vbs spell

> checker started working again with out the errors. Perhaps Franc has

> Norton? The "Can't create ActiveX Object" error report is a common

> one and more of a generic output than something specifically wrong

> with the script itself although the script CAN be wrong and generate

> the valid error - when the same script works for several other people

> it is NOT an ActiveX error after all. Something else is going on with

> Franc's machine. Getting him the latest Scripting Host package would

> be number one on my list of things to do.

>

>

>

>

>

> > | The above security settings

> > | are also identical.

> > |

> > | These are the IE data for the good box:

> > |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

> > |

> > | These are the IE data for the bad box:

> > |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

> > |

> > | This is the difference between the two data sets:

> > |http://www.users.on.net/~fzabkar/VBS_problem/diff_ie.txt

> > |

> > | I can find only one real difference and that is that the good box has

> > | a later version of vbscript.dll. However using this version on the bad

> > | box doesn't make the error go away.

> > |

> > | The good box also has Opera installed on it, although it is a much

> > | earlier version.

> > |

> > | The same versions of wscript.exe are installed on both boxes.

> > |

> > | This a Filemon record up until the error box appears:

> > |http://www.users.on.net/~fzabkar/VBS_problem/vbs_filemon.txt

> > |

> > | The Filemon output screen isn't mousable, but holding down the

> > | Ctrl-Shift key plus Home/End/PgUp/PgDown and then selecting Edit >

> > | Copy enables one to copy and paste the output into Notepad. Thanks to

> > | MEB.

> > |

> > | As for TweakUI's IE settings, all but the following boxes are checked:

> > |

> > | Clear document, run, typed-URL history on exit

> > | Show Favorites on Start Menu

> > |

> > | If I use Opera to open a .vbs file, it merely displays its contents.

> > | Under Tools > Preferences > Advanced > Downloads there is no VBS file

> > | type.

> > |

> > | ===============================================================

> > |

> > | While writing the above and trying things as I went, I finally got the

> > | script to work. Unfortunately I lost track of what I did. :-(

> > |

> > | However, if I now rename scrrun.dll in the Windows\System directory to

> > | scrrun.dl_, then the VB script breaks as before. Renaming other files

> > | in the scr56en.exe package either has no effect, or produces other

> > | errors. I notice that scrrun.dll appears in MEB's Filemon output

> > | screen (thank you MEB) soon after mine errors out. Maybe that was the

> > | problem all along.

> > |

> > | The following URL may offer an explanation for what happened:

> > |http://www.auditmypc.com/process/scrrun.asp

> > |

> > | "The file, scrrun.dll, is used by windows when running scripts such as

> > | those written with JScript or VBScript. If scrrun.dll is unavailable,

> > | windows will not be able to execute scripts. If you do not use any

> > | scripting on your computer you may be able to remove this file."

> > |

> > | Anyway I suspect that something broke my IE6 or WSH installation. I

> > | hate installing updates and patches because this sort of thing seems

> > | to happen to me a lot.

> > |

> > | Thanks to all for your help.

> > |

> > | - Franc Zabkar

> > | --

> > | Please remove one 'i' from my address when replying by email.

>

> > --

> > Thanks or Good Luck,

> > There may be humor in this post, and,

> > Naturally, you will not sue,

> > Should things get worse after this,

> > PCR

> > pcr...@netzero.net- Hide quoted text -

>

> - Show quoted text -- Hide quoted text -

>

> - Show quoted text -

Guest Gary S. Terhune
Posted

Re: Bootup - Shutdown logger

 

They were provided via separate download associated with TechNet or MSDN, I

forget which. Your version is the highest version distributed via Windows 9x

installers, WU(9x) and packages like IE6SP1. Since WSH was never considered

a Critical Update, and later versions, while backwards compatible

(apparently) were never added to the 9x update stream.

 

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

 

"MEB" <meb@not here@hotmail.com> wrote in message

news:eG4cl3CrIHA.2520@TK2MSFTNGP02.phx.gbl...

> Interesting.

>

> I have:

> 5.6.0.6626 wscript.exe

> 5.6.0.6626 cscript.exe

>

> And those were provided by Windows Update in this last clean install...

>

> So where did the updated files come from....

>

> --

> MEB http://peoplescounsel.orgfree.com

> --

> _________

>

> "Lee" <melee5@my-deja.com> wrote in message

> news:f6690c5f-3fe5-4b3f-8ee6-27a6257c2837@x35g2000hsb.googlegroups.com...

> Thanks Gary, I can report not a single problem with version 8825

> Scripting Host on my machine.

>

> MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x scripting host

> packages, I was holding out for the official version for the very

> reasons you mention.

>

> PCR - Wextract is the engine of the update executable package itself,

> it's version numbers vary a lot so it's not much use by itself. But

> the digital signature of it both shows you the Signatory of the

> package and that it has not been tampered with since by the word and

> standing of the Signatory which in this case is MS - which is good

> enough for me to trust it.

>

> On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

>> I have discovered that I also have version 8825 of SCR56EN. I'll put that

> on

>> my site instead of v. 6626. Have you guys decided if there are any

> problems

>> with 8825?

>>

>> --

>> Gary S. Terhune

>> MS-MVP Shell/Userwww.grystmill.com

>>

>> "Lee" <mel...@my-deja.com> wrote in message

>>

>> news:234891b6-c92a-42dc-810e-18295566059a@k37g2000hsf.googlegroups.com...

>> On Apr 23, 7:15 pm, "PCR" <pcr...@netzero.net> wrote:

>>

>>

>>

>>

>>

>> > Franc Zabkar wrote:

>>

>> > | On Mon, 21 Apr 2008 22:42:49 -0400, "PCR" <pcr...@netzero.net> put

>> > | finger to keyboard and composed:

>> > |

>> > |>Another thing: what about your settings at...?...

>> > |>

>> > |>"Control Panel, Internet Options, Security tab, Select Internet (&

>> > |>maybe Local Intranet)"

>> > |>

>> > |>Are you at Default or Custom? If Custom, are the 3 Scripting options

>> > |>enabled? Mine are, (but not all the ActiveX options are enabled).

>> > |

>> > | I'll try to answer everyone's questions here.

>> > |

>> > | These are my security settings:

>> > |

>> > | Local intranet Medium-low

>> > | Trusted sites Low

>> > | Internet Medium

>> > | Restricted sites High

>> > |

>> > | I've tried setting Local intranet to Low but the error remained.

>>

>> > Those settings were good, then. And I see you have solved the problem &

>> > possibly could stop now. Probably, some 3rd-party software renamed your

>> > Scrrun.dll as a security measure to prevent scripts from running, & you

>> > will be fine now that you renamed it back.

>>

>> > | I've been able to successfully run Gary's .vbs script on my other

>> > | Win98SE box. Now I'm trying to find what is different about them.

>> > |

>> > | According to msinfo32.exe, the two boxes are both using IE6SP1 with

>> > | the same build version and same updates.

>>

>> > I'm not seeing that you have taken all the updates, at "IE, Help,

>> > About"...!...

>>

>> > Yours... ;SP1;q240308;q313829;Q330994;Q828750

>> > Mine....

>> > SP1, Q313829, Q328970, Q328389, Q324929, Q810847, Q813951, Q816506,

>> > Q813489, Q330994, Q818529, Q822925, Q828750, Q824145, Q832894,

>> > Q837009, Q831167, Q823353, Q867801, Q833989, Q834707, Q889293,

>> > Q867282, Q891781, Q890923, Q883939, Q896688, Q905915, Q912812,

>> > Q916281 & Q918439.

>>

>> > Although mine is misleading (because the registry key the data comes

>> > from is not cleared of superceded updates, but the later ones are just

>> > added)... you need to go to Windows Update & get at least Q916281 &

>> > Q918439...

>>

>> >http://www.microsoft.com/technet/security/Bulletin/MS06-021.mspx

>> > Microsoft Security Bulletin MS06-021

>> > Cumulative Security Update for Internet Explorer (916281)

>>

>> >http://www.microsoft.com/technet/security/Bulletin/MS06-022.mspx

>> > Microsoft Security Bulletin MS06-022

>> > Vulnerability in ART Image Rendering Could Allow Remote Code Execution

>> > (918439)

>>

>> > REMEMBER... To see the Win98 updates at Windows Update, you must go

>> > there from a Win98 machine. And that MSVCRT.dll you reported earlier

>> > looks suspiciously XP/Vista-irradiated to me...!...

>>

>> > You Me

>> > MSVCRT.dll 6.10.8924.0 6.00.8797.0

>>

>> > Also, your script files...

>>

>> > jscript.dll 5.6.0.8513

>> > vbscript.dll 5.6.0.8515

>>

>> > ...are STILL lower than my versions. Jugding from this SFCLog.txt of

>> > mine, you need at least one more update...

>>

>> > [C:\WINDOWS]

>> > wscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>> > [c:\windows\COMMAND]

>> > cscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>> > [C:\WINDOWS\SYSTEM]

>> > jscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>> > scrobj.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>> > vbscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>> > wshext.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>> > scrrun.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>> > wshom.ocx Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

>>

>> > I'm not sure Windows Update will get that done for you. If not, I'll

>> > try

>> > harder to recall what it was that I ran (back in '06 says the date in

>> > SFCLog.txt) that got me updated to that.

>>

>> > Well... wait a minute... I am seeing those files with those dates in my

>> > version of that file you mentioned... Scr56en.exe. Its Properties says

>> > my version is 5.50.4134.600. (Not sure where I got it from.)

>>

>> Hi,PCR. Check again and you will notice that the version you quote is

>> for Wextract.exe which is the package itself and NOT the update files

>> it contains. Your vbs version of 5.6.0.8825 is the latest MS offered

>> from this now dead

> URL:http://msdn.microsoft.com/library/default.asp?url=/downloads/list/web...

>>

>> Begining with Gary's Scr56en.exe of 6626 version, MS would silently

>> update the version available from the above website such that one

>> always got the latest version. I have archived versions

>> 6626

>> 8515

>> 8825

>>

>> The only one I think I might be missing was 8513. You could only have

>> gotten your version 8825 from that source as it was never available

>> from the WinUP site for reasons I can't fathom at all. Update 917344

>> does update just Jscript.dll to 8831 version, and once again NONE of

>> these updates will retrograde any version of files backwards. Files

>> are only replaced if the incoming files are the same or higher

>> version. So when Franc re-applys his 6626 version update all his

>> script files should be getting refreshed provided they ARE the same

>> version.

>>

>> I'll be emailing Gary (from lee_454 AT Yahoo) the latest version for

>> all to enjoy the latest scripting host package - it is NOT available

>> anywhere else that I know of, so thanks a lot Gary, we need it hosted

>> somewhere. To view the version of files inside, open it with WinZip

>> and double click on the inf file to read, close to the bottom of it,

>> the version number. WinZip extracts just the inf file as a temporary

>> file in your TEMP folder and launches your default text file reader to

>> view it with, in such double click situations. To ensure trust, do

>> check the Digital Signature to see that it is a valid MS file that has

>> not been tampered with.

>>

>> I once had a problem with script errors and found it was Norton's

>> scripting guard causing it because when I removed Norton my vbs spell

>> checker started working again with out the errors. Perhaps Franc has

>> Norton? The "Can't create ActiveX Object" error report is a common

>> one and more of a generic output than something specifically wrong

>> with the script itself although the script CAN be wrong and generate

>> the valid error - when the same script works for several other people

>> it is NOT an ActiveX error after all. Something else is going on with

>> Franc's machine. Getting him the latest Scripting Host package would

>> be number one on my list of things to do.

>>

>>

>>

>>

>>

>> > | The above security settings

>> > | are also identical.

>> > |

>> > | These are the IE data for the good box:

>> > |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

>> > |

>> > | These are the IE data for the bad box:

>> > |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

>> > |

>> > | This is the difference between the two data sets:

>> > |http://www.users.on.net/~fzabkar/VBS_problem/diff_ie.txt

>> > |

>> > | I can find only one real difference and that is that the good box has

>> > | a later version of vbscript.dll. However using this version on the

>> > bad

>> > | box doesn't make the error go away.

>> > |

>> > | The good box also has Opera installed on it, although it is a much

>> > | earlier version.

>> > |

>> > | The same versions of wscript.exe are installed on both boxes.

>> > |

>> > | This a Filemon record up until the error box appears:

>> > |http://www.users.on.net/~fzabkar/VBS_problem/vbs_filemon.txt

>> > |

>> > | The Filemon output screen isn't mousable, but holding down the

>> > | Ctrl-Shift key plus Home/End/PgUp/PgDown and then selecting Edit >

>> > | Copy enables one to copy and paste the output into Notepad. Thanks to

>> > | MEB.

>> > |

>> > | As for TweakUI's IE settings, all but the following boxes are

>> > checked:

>> > |

>> > | Clear document, run, typed-URL history on exit

>> > | Show Favorites on Start Menu

>> > |

>> > | If I use Opera to open a .vbs file, it merely displays its contents.

>> > | Under Tools > Preferences > Advanced > Downloads there is no VBS file

>> > | type.

>> > |

>> > | ===============================================================

>> > |

>> > | While writing the above and trying things as I went, I finally got

>> > the

>> > | script to work. Unfortunately I lost track of what I did. :-(

>> > |

>> > | However, if I now rename scrrun.dll in the Windows\System directory

>> > to

>> > | scrrun.dl_, then the VB script breaks as before. Renaming other files

>> > | in the scr56en.exe package either has no effect, or produces other

>> > | errors. I notice that scrrun.dll appears in MEB's Filemon output

>> > | screen (thank you MEB) soon after mine errors out. Maybe that was the

>> > | problem all along.

>> > |

>> > | The following URL may offer an explanation for what happened:

>> > |http://www.auditmypc.com/process/scrrun.asp

>> > |

>> > | "The file, scrrun.dll, is used by windows when running scripts such

>> > as

>> > | those written with JScript or VBScript. If scrrun.dll is unavailable,

>> > | windows will not be able to execute scripts. If you do not use any

>> > | scripting on your computer you may be able to remove this file."

>> > |

>> > | Anyway I suspect that something broke my IE6 or WSH installation. I

>> > | hate installing updates and patches because this sort of thing seems

>> > | to happen to me a lot.

>> > |

>> > | Thanks to all for your help.

>> > |

>> > | - Franc Zabkar

>> > | --

>> > | Please remove one 'i' from my address when replying by email.

>>

>> > --

>> > Thanks or Good Luck,

>> > There may be humor in this post, and,

>> > Naturally, you will not sue,

>> > Should things get worse after this,

>> > PCR

>> > pcr...@netzero.net- Hide quoted text -

>>

>> - Show quoted text -- Hide quoted text -

>>

>> - Show quoted text -

>

>

Guest MEB
Posted

Re: Bootup - Shutdown logger

 

Got it, literally. Have that version here as well as dozens of other

not-offered-by WU files, though offered by Microsoft elsewhere. Just one of

those annoying reference points/re-directions. I even made a point to note

this on the web page for updating WIN9X. Don't take offense, just an FYI for

those that might be following this thread, or find it during a search..

 

--

MEB

--

_________

 

"Gary S. Terhune" <none> wrote in message

news:uaL8xyGrIHA.4788@TK2MSFTNGP03.phx.gbl...

| They were provided via separate download associated with TechNet or MSDN,

I

| forget which. Your version is the highest version distributed via Windows

9x

| installers, WU(9x) and packages like IE6SP1. Since WSH was never

considered

| a Critical Update, and later versions, while backwards compatible

| (apparently) were never added to the 9x update stream.

|

| --

| Gary S. Terhune

| MS-MVP Shell/User

| http://www.grystmill.com

|

| "MEB" <meb@not here@hotmail.com> wrote in message

| news:eG4cl3CrIHA.2520@TK2MSFTNGP02.phx.gbl...

| > Interesting.

| >

| > I have:

| > 5.6.0.6626 wscript.exe

| > 5.6.0.6626 cscript.exe

| >

| > And those were provided by Windows Update in this last clean install...

| >

| > So where did the updated files come from....

| >

| > --

| > MEB http://peoplescounsel.orgfree.com

| > --

| > _________

| >

| > "Lee" <melee5@my-deja.com> wrote in message

| >

news:f6690c5f-3fe5-4b3f-8ee6-27a6257c2837@x35g2000hsb.googlegroups.com...

| > Thanks Gary, I can report not a single problem with version 8825

| > Scripting Host on my machine.

| >

| > MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x scripting host

| > packages, I was holding out for the official version for the very

| > reasons you mention.

| >

| > PCR - Wextract is the engine of the update executable package itself,

| > it's version numbers vary a lot so it's not much use by itself. But

| > the digital signature of it both shows you the Signatory of the

| > package and that it has not been tampered with since by the word and

| > standing of the Signatory which in this case is MS - which is good

| > enough for me to trust it.

| >

| > On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

| >> I have discovered that I also have version 8825 of SCR56EN. I'll put

that

| > on

| >> my site instead of v. 6626. Have you guys decided if there are any

| > problems

| >> with 8825?

| >>

| >> --

| >> Gary S. Terhune

| >> MS-MVP Shell/Userwww.grystmill.com

| >>

| >> "Lee" <mel...@my-deja.com> wrote in message

| >>

| >>

news:234891b6-c92a-42dc-810e-18295566059a@k37g2000hsf.googlegroups.com...

| >> On Apr 23, 7:15 pm, "PCR" <pcr...@netzero.net> wrote:

| >>

| >>

| >>

| >>

| >>

| >> > Franc Zabkar wrote:

| >>

| >> > | On Mon, 21 Apr 2008 22:42:49 -0400, "PCR" <pcr...@netzero.net> put

| >> > | finger to keyboard and composed:

| >> > |

| >> > |>Another thing: what about your settings at...?...

| >> > |>

| >> > |>"Control Panel, Internet Options, Security tab, Select Internet (&

| >> > |>maybe Local Intranet)"

| >> > |>

| >> > |>Are you at Default or Custom? If Custom, are the 3 Scripting

options

| >> > |>enabled? Mine are, (but not all the ActiveX options are enabled).

| >> > |

| >> > | I'll try to answer everyone's questions here.

| >> > |

| >> > | These are my security settings:

| >> > |

| >> > | Local intranet Medium-low

| >> > | Trusted sites Low

| >> > | Internet Medium

| >> > | Restricted sites High

| >> > |

| >> > | I've tried setting Local intranet to Low but the error remained.

| >>

| >> > Those settings were good, then. And I see you have solved the problem

&

| >> > possibly could stop now. Probably, some 3rd-party software renamed

your

| >> > Scrrun.dll as a security measure to prevent scripts from running, &

you

| >> > will be fine now that you renamed it back.

| >>

| >> > | I've been able to successfully run Gary's .vbs script on my other

| >> > | Win98SE box. Now I'm trying to find what is different about them.

| >> > |

| >> > | According to msinfo32.exe, the two boxes are both using IE6SP1 with

| >> > | the same build version and same updates.

| >>

| >> > I'm not seeing that you have taken all the updates, at "IE, Help,

| >> > About"...!...

| >>

| >> > Yours... ;SP1;q240308;q313829;Q330994;Q828750

| >> > Mine....

| >> > SP1, Q313829, Q328970, Q328389, Q324929, Q810847, Q813951, Q816506,

| >> > Q813489, Q330994, Q818529, Q822925, Q828750, Q824145, Q832894,

| >> > Q837009, Q831167, Q823353, Q867801, Q833989, Q834707, Q889293,

| >> > Q867282, Q891781, Q890923, Q883939, Q896688, Q905915, Q912812,

| >> > Q916281 & Q918439.

| >>

| >> > Although mine is misleading (because the registry key the data comes

| >> > from is not cleared of superceded updates, but the later ones are

just

| >> > added)... you need to go to Windows Update & get at least Q916281 &

| >> > Q918439...

| >>

| >> >http://www.microsoft.com/technet/security/Bulletin/MS06-021.mspx

| >> > Microsoft Security Bulletin MS06-021

| >> > Cumulative Security Update for Internet Explorer (916281)

| >>

| >> >http://www.microsoft.com/technet/security/Bulletin/MS06-022.mspx

| >> > Microsoft Security Bulletin MS06-022

| >> > Vulnerability in ART Image Rendering Could Allow Remote Code

Execution

| >> > (918439)

| >>

| >> > REMEMBER... To see the Win98 updates at Windows Update, you must go

| >> > there from a Win98 machine. And that MSVCRT.dll you reported earlier

| >> > looks suspiciously XP/Vista-irradiated to me...!...

| >>

| >> > You Me

| >> > MSVCRT.dll 6.10.8924.0 6.00.8797.0

| >>

| >> > Also, your script files...

| >>

| >> > jscript.dll 5.6.0.8513

| >> > vbscript.dll 5.6.0.8515

| >>

| >> > ...are STILL lower than my versions. Jugding from this SFCLog.txt of

| >> > mine, you need at least one more update...

| >>

| >> > [C:\WINDOWS]

| >> > wscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| >> > [c:\windows\COMMAND]

| >> > cscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| >> > [C:\WINDOWS\SYSTEM]

| >> > jscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| >> > scrobj.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| >> > vbscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| >> > wshext.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| >> > scrrun.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| >> > wshom.ocx Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| >>

| >> > I'm not sure Windows Update will get that done for you. If not, I'll

| >> > try

| >> > harder to recall what it was that I ran (back in '06 says the date in

| >> > SFCLog.txt) that got me updated to that.

| >>

| >> > Well... wait a minute... I am seeing those files with those dates in

my

| >> > version of that file you mentioned... Scr56en.exe. Its Properties

says

| >> > my version is 5.50.4134.600. (Not sure where I got it from.)

| >>

| >> Hi,PCR. Check again and you will notice that the version you quote is

| >> for Wextract.exe which is the package itself and NOT the update files

| >> it contains. Your vbs version of 5.6.0.8825 is the latest MS offered

| >> from this now dead

| >

URL:http://msdn.microsoft.com/library/default.asp?url=/downloads/list/web...

| >>

| >> Begining with Gary's Scr56en.exe of 6626 version, MS would silently

| >> update the version available from the above website such that one

| >> always got the latest version. I have archived versions

| >> 6626

| >> 8515

| >> 8825

| >>

| >> The only one I think I might be missing was 8513. You could only have

| >> gotten your version 8825 from that source as it was never available

| >> from the WinUP site for reasons I can't fathom at all. Update 917344

| >> does update just Jscript.dll to 8831 version, and once again NONE of

| >> these updates will retrograde any version of files backwards. Files

| >> are only replaced if the incoming files are the same or higher

| >> version. So when Franc re-applys his 6626 version update all his

| >> script files should be getting refreshed provided they ARE the same

| >> version.

| >>

| >> I'll be emailing Gary (from lee_454 AT Yahoo) the latest version for

| >> all to enjoy the latest scripting host package - it is NOT available

| >> anywhere else that I know of, so thanks a lot Gary, we need it hosted

| >> somewhere. To view the version of files inside, open it with WinZip

| >> and double click on the inf file to read, close to the bottom of it,

| >> the version number. WinZip extracts just the inf file as a temporary

| >> file in your TEMP folder and launches your default text file reader to

| >> view it with, in such double click situations. To ensure trust, do

| >> check the Digital Signature to see that it is a valid MS file that has

| >> not been tampered with.

| >>

| >> I once had a problem with script errors and found it was Norton's

| >> scripting guard causing it because when I removed Norton my vbs spell

| >> checker started working again with out the errors. Perhaps Franc has

| >> Norton? The "Can't create ActiveX Object" error report is a common

| >> one and more of a generic output than something specifically wrong

| >> with the script itself although the script CAN be wrong and generate

| >> the valid error - when the same script works for several other people

| >> it is NOT an ActiveX error after all. Something else is going on with

| >> Franc's machine. Getting him the latest Scripting Host package would

| >> be number one on my list of things to do.

| >>

| >>

| >>

| >>

| >>

| >> > | The above security settings

| >> > | are also identical.

| >> > |

| >> > | These are the IE data for the good box:

| >> > |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

| >> > |

| >> > | These are the IE data for the bad box:

| >> > |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

| >> > |

| >> > | This is the difference between the two data sets:

| >> > |http://www.users.on.net/~fzabkar/VBS_problem/diff_ie.txt

| >> > |

| >> > | I can find only one real difference and that is that the good box

has

| >> > | a later version of vbscript.dll. However using this version on the

| >> > bad

| >> > | box doesn't make the error go away.

| >> > |

| >> > | The good box also has Opera installed on it, although it is a much

| >> > | earlier version.

| >> > |

| >> > | The same versions of wscript.exe are installed on both boxes.

| >> > |

| >> > | This a Filemon record up until the error box appears:

| >> > |http://www.users.on.net/~fzabkar/VBS_problem/vbs_filemon.txt

| >> > |

| >> > | The Filemon output screen isn't mousable, but holding down the

| >> > | Ctrl-Shift key plus Home/End/PgUp/PgDown and then selecting Edit >

| >> > | Copy enables one to copy and paste the output into Notepad. Thanks

to

| >> > | MEB.

| >> > |

| >> > | As for TweakUI's IE settings, all but the following boxes are

| >> > checked:

| >> > |

| >> > | Clear document, run, typed-URL history on exit

| >> > | Show Favorites on Start Menu

| >> > |

| >> > | If I use Opera to open a .vbs file, it merely displays its

contents.

| >> > | Under Tools > Preferences > Advanced > Downloads there is no VBS

file

| >> > | type.

| >> > |

| >> > | ===============================================================

| >> > |

| >> > | While writing the above and trying things as I went, I finally got

| >> > the

| >> > | script to work. Unfortunately I lost track of what I did. :-(

| >> > |

| >> > | However, if I now rename scrrun.dll in the Windows\System directory

| >> > to

| >> > | scrrun.dl_, then the VB script breaks as before. Renaming other

files

| >> > | in the scr56en.exe package either has no effect, or produces other

| >> > | errors. I notice that scrrun.dll appears in MEB's Filemon output

| >> > | screen (thank you MEB) soon after mine errors out. Maybe that was

the

| >> > | problem all along.

| >> > |

| >> > | The following URL may offer an explanation for what happened:

| >> > |http://www.auditmypc.com/process/scrrun.asp

| >> > |

| >> > | "The file, scrrun.dll, is used by windows when running scripts such

| >> > as

| >> > | those written with JScript or VBScript. If scrrun.dll is

unavailable,

| >> > | windows will not be able to execute scripts. If you do not use any

| >> > | scripting on your computer you may be able to remove this file."

| >> > |

| >> > | Anyway I suspect that something broke my IE6 or WSH installation. I

| >> > | hate installing updates and patches because this sort of thing

seems

| >> > | to happen to me a lot.

| >> > |

| >> > | Thanks to all for your help.

| >> > |

| >> > | - Franc Zabkar

| >> > | --

| >> > | Please remove one 'i' from my address when replying by email.

| >>

| >> > --

| >> > Thanks or Good Luck,

| >> > There may be humor in this post, and,

| >> > Naturally, you will not sue,

| >> > Should things get worse after this,

| >> > PCR

| >> > pcr...@netzero.net- Hide quoted text -

| >>

| >> - Show quoted text -- Hide quoted text -

| >>

| >> - Show quoted text -

| >

| >

|

Guest Gary S. Terhune
Posted

Re: Bootup - Shutdown logger

 

Talk about losing data, relatively recent changes at Microsoft.com have

apparently removed a TON of downloads from availability.

 

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

 

"MEB" <meb@not here@hotmail.com> wrote in message

news:e87ohEIrIHA.4912@TK2MSFTNGP03.phx.gbl...

> Got it, literally. Have that version here as well as dozens of other

> not-offered-by WU files, though offered by Microsoft elsewhere. Just one

> of

> those annoying reference points/re-directions. I even made a point to note

> this on the web page for updating WIN9X. Don't take offense, just an FYI

> for

> those that might be following this thread, or find it during a search..

>

> --

> MEB

> --

> _________

>

> "Gary S. Terhune" <none> wrote in message

> news:uaL8xyGrIHA.4788@TK2MSFTNGP03.phx.gbl...

> | They were provided via separate download associated with TechNet or

> MSDN,

> I

> | forget which. Your version is the highest version distributed via

> Windows

> 9x

> | installers, WU(9x) and packages like IE6SP1. Since WSH was never

> considered

> | a Critical Update, and later versions, while backwards compatible

> | (apparently) were never added to the 9x update stream.

> |

> | --

> | Gary S. Terhune

> | MS-MVP Shell/User

> | http://www.grystmill.com

> |

> | "MEB" <meb@not here@hotmail.com> wrote in message

> | news:eG4cl3CrIHA.2520@TK2MSFTNGP02.phx.gbl...

> | > Interesting.

> | >

> | > I have:

> | > 5.6.0.6626 wscript.exe

> | > 5.6.0.6626 cscript.exe

> | >

> | > And those were provided by Windows Update in this last clean

> install...

> | >

> | > So where did the updated files come from....

> | >

> | > --

> | > MEB http://peoplescounsel.orgfree.com

> | > --

> | > _________

> | >

> | > "Lee" <melee5@my-deja.com> wrote in message

> | >

> news:f6690c5f-3fe5-4b3f-8ee6-27a6257c2837@x35g2000hsb.googlegroups.com...

> | > Thanks Gary, I can report not a single problem with version 8825

> | > Scripting Host on my machine.

> | >

> | > MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x scripting host

> | > packages, I was holding out for the official version for the very

> | > reasons you mention.

> | >

> | > PCR - Wextract is the engine of the update executable package itself,

> | > it's version numbers vary a lot so it's not much use by itself. But

> | > the digital signature of it both shows you the Signatory of the

> | > package and that it has not been tampered with since by the word and

> | > standing of the Signatory which in this case is MS - which is good

> | > enough for me to trust it.

> | >

> | > On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

> | >> I have discovered that I also have version 8825 of SCR56EN. I'll put

> that

> | > on

> | >> my site instead of v. 6626. Have you guys decided if there are any

> | > problems

> | >> with 8825?

> | >>

> | >> --

> | >> Gary S. Terhune

> | >> MS-MVP Shell/Userwww.grystmill.com

> | >>

> | >> "Lee" <mel...@my-deja.com> wrote in message

> | >>

> | >>

> news:234891b6-c92a-42dc-810e-18295566059a@k37g2000hsf.googlegroups.com...

> | >> On Apr 23, 7:15 pm, "PCR" <pcr...@netzero.net> wrote:

> | >>

> | >>

> | >>

> | >>

> | >>

> | >> > Franc Zabkar wrote:

> | >>

> | >> > | On Mon, 21 Apr 2008 22:42:49 -0400, "PCR" <pcr...@netzero.net>

> put

> | >> > | finger to keyboard and composed:

> | >> > |

> | >> > |>Another thing: what about your settings at...?...

> | >> > |>

> | >> > |>"Control Panel, Internet Options, Security tab, Select Internet

> (&

> | >> > |>maybe Local Intranet)"

> | >> > |>

> | >> > |>Are you at Default or Custom? If Custom, are the 3 Scripting

> options

> | >> > |>enabled? Mine are, (but not all the ActiveX options are enabled).

> | >> > |

> | >> > | I'll try to answer everyone's questions here.

> | >> > |

> | >> > | These are my security settings:

> | >> > |

> | >> > | Local intranet Medium-low

> | >> > | Trusted sites Low

> | >> > | Internet Medium

> | >> > | Restricted sites High

> | >> > |

> | >> > | I've tried setting Local intranet to Low but the error remained.

> | >>

> | >> > Those settings were good, then. And I see you have solved the

> problem

> &

> | >> > possibly could stop now. Probably, some 3rd-party software renamed

> your

> | >> > Scrrun.dll as a security measure to prevent scripts from running, &

> you

> | >> > will be fine now that you renamed it back.

> | >>

> | >> > | I've been able to successfully run Gary's .vbs script on my other

> | >> > | Win98SE box. Now I'm trying to find what is different about them.

> | >> > |

> | >> > | According to msinfo32.exe, the two boxes are both using IE6SP1

> with

> | >> > | the same build version and same updates.

> | >>

> | >> > I'm not seeing that you have taken all the updates, at "IE, Help,

> | >> > About"...!...

> | >>

> | >> > Yours... ;SP1;q240308;q313829;Q330994;Q828750

> | >> > Mine....

> | >> > SP1, Q313829, Q328970, Q328389, Q324929, Q810847, Q813951, Q816506,

> | >> > Q813489, Q330994, Q818529, Q822925, Q828750, Q824145, Q832894,

> | >> > Q837009, Q831167, Q823353, Q867801, Q833989, Q834707, Q889293,

> | >> > Q867282, Q891781, Q890923, Q883939, Q896688, Q905915, Q912812,

> | >> > Q916281 & Q918439.

> | >>

> | >> > Although mine is misleading (because the registry key the data

> comes

> | >> > from is not cleared of superceded updates, but the later ones are

> just

> | >> > added)... you need to go to Windows Update & get at least Q916281 &

> | >> > Q918439...

> | >>

> | >> >http://www.microsoft.com/technet/security/Bulletin/MS06-021.mspx

> | >> > Microsoft Security Bulletin MS06-021

> | >> > Cumulative Security Update for Internet Explorer (916281)

> | >>

> | >> >http://www.microsoft.com/technet/security/Bulletin/MS06-022.mspx

> | >> > Microsoft Security Bulletin MS06-022

> | >> > Vulnerability in ART Image Rendering Could Allow Remote Code

> Execution

> | >> > (918439)

> | >>

> | >> > REMEMBER... To see the Win98 updates at Windows Update, you must go

> | >> > there from a Win98 machine. And that MSVCRT.dll you reported

> earlier

> | >> > looks suspiciously XP/Vista-irradiated to me...!...

> | >>

> | >> > You Me

> | >> > MSVCRT.dll 6.10.8924.0 6.00.8797.0

> | >>

> | >> > Also, your script files...

> | >>

> | >> > jscript.dll 5.6.0.8513

> | >> > vbscript.dll 5.6.0.8515

> | >>

> | >> > ...are STILL lower than my versions. Jugding from this SFCLog.txt

> of

> | >> > mine, you need at least one more update...

> | >>

> | >> > [C:\WINDOWS]

> | >> > wscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> | >> > [c:\windows\COMMAND]

> | >> > cscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> | >> > [C:\WINDOWS\SYSTEM]

> | >> > jscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> | >> > scrobj.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> | >> > vbscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> | >> > wshext.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> | >> > scrrun.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> | >> > wshom.ocx Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

> | >>

> | >> > I'm not sure Windows Update will get that done for you. If not,

> I'll

> | >> > try

> | >> > harder to recall what it was that I ran (back in '06 says the date

> in

> | >> > SFCLog.txt) that got me updated to that.

> | >>

> | >> > Well... wait a minute... I am seeing those files with those dates

> in

> my

> | >> > version of that file you mentioned... Scr56en.exe. Its Properties

> says

> | >> > my version is 5.50.4134.600. (Not sure where I got it from.)

> | >>

> | >> Hi,PCR. Check again and you will notice that the version you quote is

> | >> for Wextract.exe which is the package itself and NOT the update files

> | >> it contains. Your vbs version of 5.6.0.8825 is the latest MS offered

> | >> from this now dead

> | >

> URL:http://msdn.microsoft.com/library/default.asp?url=/downloads/list/web...

> | >>

> | >> Begining with Gary's Scr56en.exe of 6626 version, MS would silently

> | >> update the version available from the above website such that one

> | >> always got the latest version. I have archived versions

> | >> 6626

> | >> 8515

> | >> 8825

> | >>

> | >> The only one I think I might be missing was 8513. You could only have

> | >> gotten your version 8825 from that source as it was never available

> | >> from the WinUP site for reasons I can't fathom at all. Update 917344

> | >> does update just Jscript.dll to 8831 version, and once again NONE of

> | >> these updates will retrograde any version of files backwards. Files

> | >> are only replaced if the incoming files are the same or higher

> | >> version. So when Franc re-applys his 6626 version update all his

> | >> script files should be getting refreshed provided they ARE the same

> | >> version.

> | >>

> | >> I'll be emailing Gary (from lee_454 AT Yahoo) the latest version for

> | >> all to enjoy the latest scripting host package - it is NOT available

> | >> anywhere else that I know of, so thanks a lot Gary, we need it hosted

> | >> somewhere. To view the version of files inside, open it with WinZip

> | >> and double click on the inf file to read, close to the bottom of it,

> | >> the version number. WinZip extracts just the inf file as a temporary

> | >> file in your TEMP folder and launches your default text file reader

> to

> | >> view it with, in such double click situations. To ensure trust, do

> | >> check the Digital Signature to see that it is a valid MS file that

> has

> | >> not been tampered with.

> | >>

> | >> I once had a problem with script errors and found it was Norton's

> | >> scripting guard causing it because when I removed Norton my vbs spell

> | >> checker started working again with out the errors. Perhaps Franc has

> | >> Norton? The "Can't create ActiveX Object" error report is a common

> | >> one and more of a generic output than something specifically wrong

> | >> with the script itself although the script CAN be wrong and generate

> | >> the valid error - when the same script works for several other people

> | >> it is NOT an ActiveX error after all. Something else is going on with

> | >> Franc's machine. Getting him the latest Scripting Host package would

> | >> be number one on my list of things to do.

> | >>

> | >>

> | >>

> | >>

> | >>

> | >> > | The above security settings

> | >> > | are also identical.

> | >> > |

> | >> > | These are the IE data for the good box:

> | >> > |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

> | >> > |

> | >> > | These are the IE data for the bad box:

> | >> > |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

> | >> > |

> | >> > | This is the difference between the two data sets:

> | >> > |http://www.users.on.net/~fzabkar/VBS_problem/diff_ie.txt

> | >> > |

> | >> > | I can find only one real difference and that is that the good box

> has

> | >> > | a later version of vbscript.dll. However using this version on

> the

> | >> > bad

> | >> > | box doesn't make the error go away.

> | >> > |

> | >> > | The good box also has Opera installed on it, although it is a

> much

> | >> > | earlier version.

> | >> > |

> | >> > | The same versions of wscript.exe are installed on both boxes.

> | >> > |

> | >> > | This a Filemon record up until the error box appears:

> | >> > |http://www.users.on.net/~fzabkar/VBS_problem/vbs_filemon.txt

> | >> > |

> | >> > | The Filemon output screen isn't mousable, but holding down the

> | >> > | Ctrl-Shift key plus Home/End/PgUp/PgDown and then selecting Edit

> >

> | >> > | Copy enables one to copy and paste the output into Notepad.

> Thanks

> to

> | >> > | MEB.

> | >> > |

> | >> > | As for TweakUI's IE settings, all but the following boxes are

> | >> > checked:

> | >> > |

> | >> > | Clear document, run, typed-URL history on exit

> | >> > | Show Favorites on Start Menu

> | >> > |

> | >> > | If I use Opera to open a .vbs file, it merely displays its

> contents.

> | >> > | Under Tools > Preferences > Advanced > Downloads there is no VBS

> file

> | >> > | type.

> | >> > |

> | >> > | ===============================================================

> | >> > |

> | >> > | While writing the above and trying things as I went, I finally

> got

> | >> > the

> | >> > | script to work. Unfortunately I lost track of what I did. :-(

> | >> > |

> | >> > | However, if I now rename scrrun.dll in the Windows\System

> directory

> | >> > to

> | >> > | scrrun.dl_, then the VB script breaks as before. Renaming other

> files

> | >> > | in the scr56en.exe package either has no effect, or produces

> other

> | >> > | errors. I notice that scrrun.dll appears in MEB's Filemon output

> | >> > | screen (thank you MEB) soon after mine errors out. Maybe that was

> the

> | >> > | problem all along.

> | >> > |

> | >> > | The following URL may offer an explanation for what happened:

> | >> > |http://www.auditmypc.com/process/scrrun.asp

> | >> > |

> | >> > | "The file, scrrun.dll, is used by windows when running scripts

> such

> | >> > as

> | >> > | those written with JScript or VBScript. If scrrun.dll is

> unavailable,

> | >> > | windows will not be able to execute scripts. If you do not use

> any

> | >> > | scripting on your computer you may be able to remove this file."

> | >> > |

> | >> > | Anyway I suspect that something broke my IE6 or WSH installation.

> I

> | >> > | hate installing updates and patches because this sort of thing

> seems

> | >> > | to happen to me a lot.

> | >> > |

> | >> > | Thanks to all for your help.

> | >> > |

> | >> > | - Franc Zabkar

> | >> > | --

> | >> > | Please remove one 'i' from my address when replying by email.

> | >>

> | >> > --

> | >> > Thanks or Good Luck,

> | >> > There may be humor in this post, and,

> | >> > Naturally, you will not sue,

> | >> > Should things get worse after this,

> | >> > PCR

> | >> > pcr...@netzero.net- Hide quoted text -

> | >>

> | >> - Show quoted text -- Hide quoted text -

> | >>

> | >> - Show quoted text -

> | >

> | >

> |

>

>

Guest MEB
Posted

Re: Bootup - Shutdown logger

 

Right, you noticed that too, huh. Here's a good one, search the Knowledge

Base, dang near everything of relevance to OSs other than XP and VISTA is

gone.

 

--

MEB http://peoplescounsel.orgfree.com

--

_________

 

"Gary S. Terhune" <none> wrote in message

news:udZwaMIrIHA.2064@TK2MSFTNGP05.phx.gbl...

| Talk about losing data, relatively recent changes at Microsoft.com have

| apparently removed a TON of downloads from availability.

|

| --

| Gary S. Terhune

| MS-MVP Shell/User

| http://www.grystmill.com

|

| "MEB" <meb@not here@hotmail.com> wrote in message

| news:e87ohEIrIHA.4912@TK2MSFTNGP03.phx.gbl...

| > Got it, literally. Have that version here as well as dozens of other

| > not-offered-by WU files, though offered by Microsoft elsewhere. Just one

| > of

| > those annoying reference points/re-directions. I even made a point to

note

| > this on the web page for updating WIN9X. Don't take offense, just an FYI

| > for

| > those that might be following this thread, or find it during a search..

| >

| > --

| > MEB

| > --

| > _________

| >

| > "Gary S. Terhune" <none> wrote in message

| > news:uaL8xyGrIHA.4788@TK2MSFTNGP03.phx.gbl...

| > | They were provided via separate download associated with TechNet or

| > MSDN,

| > I

| > | forget which. Your version is the highest version distributed via

| > Windows

| > 9x

| > | installers, WU(9x) and packages like IE6SP1. Since WSH was never

| > considered

| > | a Critical Update, and later versions, while backwards compatible

| > | (apparently) were never added to the 9x update stream.

| > |

| > | --

| > | Gary S. Terhune

| > | MS-MVP Shell/User

| > | http://www.grystmill.com

| > |

| > | "MEB" <meb@not here@hotmail.com> wrote in message

| > | news:eG4cl3CrIHA.2520@TK2MSFTNGP02.phx.gbl...

| > | > Interesting.

| > | >

| > | > I have:

| > | > 5.6.0.6626 wscript.exe

| > | > 5.6.0.6626 cscript.exe

| > | >

| > | > And those were provided by Windows Update in this last clean

| > install...

| > | >

| > | > So where did the updated files come from....

| > | >

| > | > --

| > | > MEB http://peoplescounsel.orgfree.com

| > | > --

| > | > _________

| > | >

| > | > "Lee" <melee5@my-deja.com> wrote in message

| > | >

| >

news:f6690c5f-3fe5-4b3f-8ee6-27a6257c2837@x35g2000hsb.googlegroups.com...

| > | > Thanks Gary, I can report not a single problem with version 8825

| > | > Scripting Host on my machine.

| > | >

| > | > MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x scripting

host

| > | > packages, I was holding out for the official version for the very

| > | > reasons you mention.

| > | >

| > | > PCR - Wextract is the engine of the update executable package

itself,

| > | > it's version numbers vary a lot so it's not much use by itself. But

| > | > the digital signature of it both shows you the Signatory of the

| > | > package and that it has not been tampered with since by the word and

| > | > standing of the Signatory which in this case is MS - which is good

| > | > enough for me to trust it.

| > | >

| > | > On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

| > | >> I have discovered that I also have version 8825 of SCR56EN. I'll

put

| > that

| > | > on

| > | >> my site instead of v. 6626. Have you guys decided if there are any

| > | > problems

| > | >> with 8825?

| > | >>

| > | >> --

| > | >> Gary S. Terhune

| > | >> MS-MVP Shell/Userwww.grystmill.com

| > | >>

| > | >> "Lee" <mel...@my-deja.com> wrote in message

| > | >>

| > | >>

| >

news:234891b6-c92a-42dc-810e-18295566059a@k37g2000hsf.googlegroups.com...

| > | >> On Apr 23, 7:15 pm, "PCR" <pcr...@netzero.net> wrote:

| > | >>

| > | >>

| > | >>

| > | >>

| > | >>

| > | >> > Franc Zabkar wrote:

| > | >>

| > | >> > | On Mon, 21 Apr 2008 22:42:49 -0400, "PCR" <pcr...@netzero.net>

| > put

| > | >> > | finger to keyboard and composed:

| > | >> > |

| > | >> > |>Another thing: what about your settings at...?...

| > | >> > |>

| > | >> > |>"Control Panel, Internet Options, Security tab, Select Internet

| > (&

| > | >> > |>maybe Local Intranet)"

| > | >> > |>

| > | >> > |>Are you at Default or Custom? If Custom, are the 3 Scripting

| > options

| > | >> > |>enabled? Mine are, (but not all the ActiveX options are

enabled).

| > | >> > |

| > | >> > | I'll try to answer everyone's questions here.

| > | >> > |

| > | >> > | These are my security settings:

| > | >> > |

| > | >> > | Local intranet Medium-low

| > | >> > | Trusted sites Low

| > | >> > | Internet Medium

| > | >> > | Restricted sites High

| > | >> > |

| > | >> > | I've tried setting Local intranet to Low but the error

remained.

| > | >>

| > | >> > Those settings were good, then. And I see you have solved the

| > problem

| > &

| > | >> > possibly could stop now. Probably, some 3rd-party software

renamed

| > your

| > | >> > Scrrun.dll as a security measure to prevent scripts from running,

&

| > you

| > | >> > will be fine now that you renamed it back.

| > | >>

| > | >> > | I've been able to successfully run Gary's .vbs script on my

other

| > | >> > | Win98SE box. Now I'm trying to find what is different about

them.

| > | >> > |

| > | >> > | According to msinfo32.exe, the two boxes are both using IE6SP1

| > with

| > | >> > | the same build version and same updates.

| > | >>

| > | >> > I'm not seeing that you have taken all the updates, at "IE, Help,

| > | >> > About"...!...

| > | >>

| > | >> > Yours... ;SP1;q240308;q313829;Q330994;Q828750

| > | >> > Mine....

| > | >> > SP1, Q313829, Q328970, Q328389, Q324929, Q810847, Q813951,

Q816506,

| > | >> > Q813489, Q330994, Q818529, Q822925, Q828750, Q824145, Q832894,

| > | >> > Q837009, Q831167, Q823353, Q867801, Q833989, Q834707, Q889293,

| > | >> > Q867282, Q891781, Q890923, Q883939, Q896688, Q905915, Q912812,

| > | >> > Q916281 & Q918439.

| > | >>

| > | >> > Although mine is misleading (because the registry key the data

| > comes

| > | >> > from is not cleared of superceded updates, but the later ones are

| > just

| > | >> > added)... you need to go to Windows Update & get at least Q916281

&

| > | >> > Q918439...

| > | >>

| > | >> >http://www.microsoft.com/technet/security/Bulletin/MS06-021.mspx

| > | >> > Microsoft Security Bulletin MS06-021

| > | >> > Cumulative Security Update for Internet Explorer (916281)

| > | >>

| > | >> >http://www.microsoft.com/technet/security/Bulletin/MS06-022.mspx

| > | >> > Microsoft Security Bulletin MS06-022

| > | >> > Vulnerability in ART Image Rendering Could Allow Remote Code

| > Execution

| > | >> > (918439)

| > | >>

| > | >> > REMEMBER... To see the Win98 updates at Windows Update, you must

go

| > | >> > there from a Win98 machine. And that MSVCRT.dll you reported

| > earlier

| > | >> > looks suspiciously XP/Vista-irradiated to me...!...

| > | >>

| > | >> > You Me

| > | >> > MSVCRT.dll 6.10.8924.0 6.00.8797.0

| > | >>

| > | >> > Also, your script files...

| > | >>

| > | >> > jscript.dll 5.6.0.8513

| > | >> > vbscript.dll 5.6.0.8515

| > | >>

| > | >> > ...are STILL lower than my versions. Jugding from this SFCLog.txt

| > of

| > | >> > mine, you need at least one more update...

| > | >>

| > | >> > [C:\WINDOWS]

| > | >> > wscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| > | >> > [c:\windows\COMMAND]

| > | >> > cscript.exe Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| > | >> > [C:\WINDOWS\SYSTEM]

| > | >> > jscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| > | >> > scrobj.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| > | >> > vbscript.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| > | >> > wshext.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| > | >> > scrrun.dll Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| > | >> > wshom.ocx Updated 5.6.0.8515 1/14/03 5.6.0.8825 8/9/04 No

| > | >>

| > | >> > I'm not sure Windows Update will get that done for you. If not,

| > I'll

| > | >> > try

| > | >> > harder to recall what it was that I ran (back in '06 says the

date

| > in

| > | >> > SFCLog.txt) that got me updated to that.

| > | >>

| > | >> > Well... wait a minute... I am seeing those files with those dates

| > in

| > my

| > | >> > version of that file you mentioned... Scr56en.exe. Its Properties

| > says

| > | >> > my version is 5.50.4134.600. (Not sure where I got it from.)

| > | >>

| > | >> Hi,PCR. Check again and you will notice that the version you quote

is

| > | >> for Wextract.exe which is the package itself and NOT the update

files

| > | >> it contains. Your vbs version of 5.6.0.8825 is the latest MS

offered

| > | >> from this now dead

| > | >

| >

URL:http://msdn.microsoft.com/library/default.asp?url=/downloads/list/web...

| > | >>

| > | >> Begining with Gary's Scr56en.exe of 6626 version, MS would silently

| > | >> update the version available from the above website such that one

| > | >> always got the latest version. I have archived versions

| > | >> 6626

| > | >> 8515

| > | >> 8825

| > | >>

| > | >> The only one I think I might be missing was 8513. You could only

have

| > | >> gotten your version 8825 from that source as it was never available

| > | >> from the WinUP site for reasons I can't fathom at all. Update

917344

| > | >> does update just Jscript.dll to 8831 version, and once again NONE

of

| > | >> these updates will retrograde any version of files backwards. Files

| > | >> are only replaced if the incoming files are the same or higher

| > | >> version. So when Franc re-applys his 6626 version update all his

| > | >> script files should be getting refreshed provided they ARE the same

| > | >> version.

| > | >>

| > | >> I'll be emailing Gary (from lee_454 AT Yahoo) the latest version

for

| > | >> all to enjoy the latest scripting host package - it is NOT

available

| > | >> anywhere else that I know of, so thanks a lot Gary, we need it

hosted

| > | >> somewhere. To view the version of files inside, open it with WinZip

| > | >> and double click on the inf file to read, close to the bottom of

it,

| > | >> the version number. WinZip extracts just the inf file as a

temporary

| > | >> file in your TEMP folder and launches your default text file reader

| > to

| > | >> view it with, in such double click situations. To ensure trust, do

| > | >> check the Digital Signature to see that it is a valid MS file that

| > has

| > | >> not been tampered with.

| > | >>

| > | >> I once had a problem with script errors and found it was Norton's

| > | >> scripting guard causing it because when I removed Norton my vbs

spell

| > | >> checker started working again with out the errors. Perhaps Franc

has

| > | >> Norton? The "Can't create ActiveX Object" error report is a common

| > | >> one and more of a generic output than something specifically wrong

| > | >> with the script itself although the script CAN be wrong and

generate

| > | >> the valid error - when the same script works for several other

people

| > | >> it is NOT an ActiveX error after all. Something else is going on

with

| > | >> Franc's machine. Getting him the latest Scripting Host package

would

| > | >> be number one on my list of things to do.

| > | >>

| > | >>

| > | >>

| > | >>

| > | >>

| > | >> > | The above security settings

| > | >> > | are also identical.

| > | >> > |

| > | >> > | These are the IE data for the good box:

| > | >> > |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

| > | >> > |

| > | >> > | These are the IE data for the bad box:

| > | >> > |http://www.users.on.net/~fzabkar/VBS_problem/xp2500IE.txt

| > | >> > |

| > | >> > | This is the difference between the two data sets:

| > | >> > |http://www.users.on.net/~fzabkar/VBS_problem/diff_ie.txt

| > | >> > |

| > | >> > | I can find only one real difference and that is that the good

box

| > has

| > | >> > | a later version of vbscript.dll. However using this version on

| > the

| > | >> > bad

| > | >> > | box doesn't make the error go away.

| > | >> > |

| > | >> > | The good box also has Opera installed on it, although it is a

| > much

| > | >> > | earlier version.

| > | >> > |

| > | >> > | The same versions of wscript.exe are installed on both boxes.

| > | >> > |

| > | >> > | This a Filemon record up until the error box appears:

| > | >> > |http://www.users.on.net/~fzabkar/VBS_problem/vbs_filemon.txt

| > | >> > |

| > | >> > | The Filemon output screen isn't mousable, but holding down the

| > | >> > | Ctrl-Shift key plus Home/End/PgUp/PgDown and then selecting

Edit

| > >

| > | >> > | Copy enables one to copy and paste the output into Notepad.

| > Thanks

| > to

| > | >> > | MEB.

| > | >> > |

| > | >> > | As for TweakUI's IE settings, all but the following boxes are

| > | >> > checked:

| > | >> > |

| > | >> > | Clear document, run, typed-URL history on exit

| > | >> > | Show Favorites on Start Menu

| > | >> > |

| > | >> > | If I use Opera to open a .vbs file, it merely displays its

| > contents.

| > | >> > | Under Tools > Preferences > Advanced > Downloads there is no

VBS

| > file

| > | >> > | type.

| > | >> > |

| > | >> > | ===============================================================

| > | >> > |

| > | >> > | While writing the above and trying things as I went, I finally

| > got

| > | >> > the

| > | >> > | script to work. Unfortunately I lost track of what I did. :-(

| > | >> > |

| > | >> > | However, if I now rename scrrun.dll in the Windows\System

| > directory

| > | >> > to

| > | >> > | scrrun.dl_, then the VB script breaks as before. Renaming other

| > files

| > | >> > | in the scr56en.exe package either has no effect, or produces

| > other

| > | >> > | errors. I notice that scrrun.dll appears in MEB's Filemon

output

| > | >> > | screen (thank you MEB) soon after mine errors out. Maybe that

was

| > the

| > | >> > | problem all along.

| > | >> > |

| > | >> > | The following URL may offer an explanation for what happened:

| > | >> > |http://www.auditmypc.com/process/scrrun.asp

| > | >> > |

| > | >> > | "The file, scrrun.dll, is used by windows when running scripts

| > such

| > | >> > as

| > | >> > | those written with JScript or VBScript. If scrrun.dll is

| > unavailable,

| > | >> > | windows will not be able to execute scripts. If you do not use

| > any

| > | >> > | scripting on your computer you may be able to remove this

file."

| > | >> > |

| > | >> > | Anyway I suspect that something broke my IE6 or WSH

installation.

| > I

| > | >> > | hate installing updates and patches because this sort of thing

| > seems

| > | >> > | to happen to me a lot.

| > | >> > |

| > | >> > | Thanks to all for your help.

| > | >> > |

| > | >> > | - Franc Zabkar

| > | >> > | --

| > | >> > | Please remove one 'i' from my address when replying by email.

| > | >>

| > | >> > --

| > | >> > Thanks or Good Luck,

| > | >> > There may be humor in this post, and,

| > | >> > Naturally, you will not sue,

| > | >> > Should things get worse after this,

| > | >> > PCR

| > | >> > pcr...@netzero.net- Hide quoted text -

| > | >>

| > | >> - Show quoted text -- Hide quoted text -

| > | >>

| > | >> - Show quoted text -

| > | >

| > | >

| > |

| >

| >

|

Guest Lee
Posted

Re: Bootup - Shutdown logger

 

On May 2, 1:57 am, "PCR" <pcr...@netzero.net> wrote:

> Lee wrote:

>

> | Thanks Gary, I can report not a single problem with version 8825

> | Scripting Host on my machine.

> |

> | MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x scripting host

> | packages, I was holding out for the official version for the very

> | reasons you mention.

> |

> | PCR - Wextract is the engine of the update executable package itself,

> | it's version numbers vary a lot so it's not much use by itself.  But

> | the digital signature of it both shows you the Signatory of the

> | package and that it has not been tampered with since by the word and

> | standing of the Signatory which in this case is MS - which is good

> | enough for me to trust it.

>

> OK. There certainly are a lot version numbers associated with the

> various Scr56en.exe. But why not just R-Clk it, Properties, Version tab?

> Mine says v.5.50.4134.600 there. And inside are files of v...8825. Won't

> that always be true?

>

 

While it will always be true just as you say, the version number

5.50.4134.600 is forever linked to IE 5.50 as per http://support.microsoft.com/?kbid=164539.

So what happens when someone overthinks this part and wrongly assumes

the package can't/shouldn't be applied to IE 6.00 SP1? I'd rather

avoid the issue of the version of Wextract file and just tell them how

to view the insides to get the real version numbers. BTW the default

action for inf files is to OPEN them in the default text editor, never

to install them - unlike .reg files which merge with prompt as the

default action . So it's OK to double click inf files in the WinZip

window to read them.

 

As part of every IE version release, MS would also release an

Administrator's Kit to go with it, it was called IEAK and inside the

package there was the iexpress.exe file which would make these update

packages just so an admininistrator could roll his own installation

packages for delivery to the Network he was in charge of. Since

Win2000, the iexpress files have been a default install option such

that the general public is slowly being exposed to the Wextract engine

but some of us 98 users missed that boat entirely. The above simply a

means to explain away the many different version numbers of the MS

updates themselves.

> | On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

> |> I have discovered that I also have version 8825 of SCR56EN. I'll put

> |> that on

> |> my site instead of v. 6626. Have you guys decided if there are any

> |> problems

> |> with 8825?

> |>

> |> --

> |> Gary S. Terhune

> |> MS-MVP Shell/Userwww.grystmill.com

> |>

>

> ...snip

> --

> Thanks or Good Luck,

> There may be humor in this post, and,

> Naturally, you will not sue,

> Should things get worse after this,

> PCR

> pcr...@netzero.net

Guest PCR
Posted

Re: Bootup - Shutdown logger

 

Lee wrote:

| On May 2, 1:57 am, "PCR" <pcr...@netzero.net> wrote:

|> Lee wrote:

|>

|> | Thanks Gary, I can report not a single problem with version 8825

|> | Scripting Host on my machine.

|> |

|> | MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x scripting

|> | host packages, I was holding out for the official version for the

|> | very reasons you mention.

|> |

|> | PCR - Wextract is the engine of the update executable package

|> | itself, it's version numbers vary a lot so it's not much use by

|> | itself. But the digital signature of it both shows you the

|> | Signatory of the package and that it has not been tampered with

|> | since by the word and standing of the Signatory which in this case

|> | is MS - which is good enough for me to trust it.

|>

|> OK. There certainly are a lot version numbers associated with the

|> various Scr56en.exe. But why not just R-Clk it, Properties, Version

|> tab? Mine says v.5.50.4134.600 there. And inside are files of

|> v...8825. Won't that always be true?

|>

|

| While it will always be true just as you say, the version number

| 5.50.4134.600 is forever linked to IE 5.50 as per

| http://support.microsoft.com/?kbid=164539.

 

Yikes! According to that list...

 

6.00.2800.1106 Internet Explorer 6 Service Pack 1 (Windows XP SP1)

 

....my own version is XP-irradiated! But I am Win98SE & never did defect

to XP!!!

 

| So what happens when someone overthinks this part and wrongly assumes

| the package can't/shouldn't be applied to IE 6.00 SP1? I'd rather

| avoid the issue of the version of Wextract file and just tell them how

| to view the insides to get the real version numbers.

 

I wouldn't, myself, suspect the version of Scr56en.exe (or WExtract, as

you call it) necessarily must match the version of IE. But I guess I see

what you are saying, especially if folk can create their own Scr56en.exe

using IExpress.exe.

 

| BTW the default

| action for inf files is to OPEN them in the default text editor, never

| to install them - unlike .reg files which merge with prompt as the

| default action . So it's OK to double click inf files in the WinZip

| window to read them.

 

It may be the default to open .inf files as you say in Notepad, instead

of running them-- and indeed mine do default to that. To get mine to

run, I must R-Clk, & select "Run". HOWEVER, WinZip puts up the scary

caution...

 

This file has a potentially unsafe file type of .INF:

SCR56EN.INF

You should not open this file if you received it from an untrusted

source, or in an attachment to an unexpected or suspicious

e-mail message.

Do you still want to open this file?

 

I'm just uncertain what WinZip intends to do, despite Windows's default.

You have only sworn twice that WinZip will have the same default. If you

swear it once more-- I will try it! Also, you must swear thrice that

WinZip v.9.0 SR-1 gives you the same scary warning!

 

| As part of every IE version release, MS would also release an

| Administrator's Kit to go with it, it was called IEAK and inside the

| package there was the iexpress.exe file which would make these update

| packages just so an admininistrator could roll his own installation

| packages for delivery to the Network he was in charge of. Since

| Win2000, the iexpress files have been a default install option such

| that the general public is slowly being exposed to the Wextract engine

| but some of us 98 users missed that boat entirely. The above simply a

| means to explain away the many different version numbers of the MS

| updates themselves.

 

I have no IExpress.exe that I can find, not even in my Win98SE .cabs.

 

|> | On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

|> |> I have discovered that I also have version 8825 of SCR56EN. I'll

|> |> put that on

|> |> my site instead of v. 6626. Have you guys decided if there are any

|> |> problems

|> |> with 8825?

|> |>

|> |> --

|> |> Gary S. Terhune

|> |> MS-MVP Shell/Userwww.grystmill.com

|> |>

|>

|> ...snip

|> --

|> Thanks or Good Luck,

|> There may be humor in this post, and,

|> Naturally, you will not sue,

|> Should things get worse after this,

|> PCR

|> pcr...@netzero.net

 

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

Guest Gary S. Terhune
Posted

Re: Bootup - Shutdown logger

 

Windows XP doesn't run IE6SP1. It runs IE6SP2.

 

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

 

"PCR" <pcrrcp@netzero.net> wrote in message

news:eqFxVlwrIHA.1200@TK2MSFTNGP03.phx.gbl...

> Lee wrote:

> | On May 2, 1:57 am, "PCR" <pcr...@netzero.net> wrote:

> |> Lee wrote:

> |>

> |> | Thanks Gary, I can report not a single problem with version 8825

> |> | Scripting Host on my machine.

> |> |

> |> | MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x scripting

> |> | host packages, I was holding out for the official version for the

> |> | very reasons you mention.

> |> |

> |> | PCR - Wextract is the engine of the update executable package

> |> | itself, it's version numbers vary a lot so it's not much use by

> |> | itself. But the digital signature of it both shows you the

> |> | Signatory of the package and that it has not been tampered with

> |> | since by the word and standing of the Signatory which in this case

> |> | is MS - which is good enough for me to trust it.

> |>

> |> OK. There certainly are a lot version numbers associated with the

> |> various Scr56en.exe. But why not just R-Clk it, Properties, Version

> |> tab? Mine says v.5.50.4134.600 there. And inside are files of

> |> v...8825. Won't that always be true?

> |>

> |

> | While it will always be true just as you say, the version number

> | 5.50.4134.600 is forever linked to IE 5.50 as per

> | http://support.microsoft.com/?kbid=164539.

>

> Yikes! According to that list...

>

> 6.00.2800.1106 Internet Explorer 6 Service Pack 1 (Windows XP SP1)

>

> ...my own version is XP-irradiated! But I am Win98SE & never did defect

> to XP!!!

>

> | So what happens when someone overthinks this part and wrongly assumes

> | the package can't/shouldn't be applied to IE 6.00 SP1? I'd rather

> | avoid the issue of the version of Wextract file and just tell them how

> | to view the insides to get the real version numbers.

>

> I wouldn't, myself, suspect the version of Scr56en.exe (or WExtract, as

> you call it) necessarily must match the version of IE. But I guess I see

> what you are saying, especially if folk can create their own Scr56en.exe

> using IExpress.exe.

>

> | BTW the default

> | action for inf files is to OPEN them in the default text editor, never

> | to install them - unlike .reg files which merge with prompt as the

> | default action . So it's OK to double click inf files in the WinZip

> | window to read them.

>

> It may be the default to open .inf files as you say in Notepad, instead

> of running them-- and indeed mine do default to that. To get mine to

> run, I must R-Clk, & select "Run". HOWEVER, WinZip puts up the scary

> caution...

>

> This file has a potentially unsafe file type of .INF:

> SCR56EN.INF

> You should not open this file if you received it from an untrusted

> source, or in an attachment to an unexpected or suspicious

> e-mail message.

> Do you still want to open this file?

>

> I'm just uncertain what WinZip intends to do, despite Windows's default.

> You have only sworn twice that WinZip will have the same default. If you

> swear it once more-- I will try it! Also, you must swear thrice that

> WinZip v.9.0 SR-1 gives you the same scary warning!

>

> | As part of every IE version release, MS would also release an

> | Administrator's Kit to go with it, it was called IEAK and inside the

> | package there was the iexpress.exe file which would make these update

> | packages just so an admininistrator could roll his own installation

> | packages for delivery to the Network he was in charge of. Since

> | Win2000, the iexpress files have been a default install option such

> | that the general public is slowly being exposed to the Wextract engine

> | but some of us 98 users missed that boat entirely. The above simply a

> | means to explain away the many different version numbers of the MS

> | updates themselves.

>

> I have no IExpress.exe that I can find, not even in my Win98SE .cabs.

>

> |> | On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

> |> |> I have discovered that I also have version 8825 of SCR56EN. I'll

> |> |> put that on

> |> |> my site instead of v. 6626. Have you guys decided if there are any

> |> |> problems

> |> |> with 8825?

> |> |>

> |> |> --

> |> |> Gary S. Terhune

> |> |> MS-MVP Shell/Userwww.grystmill.com

> |> |>

> |>

> |> ...snip

> |> --

> |> Thanks or Good Luck,

> |> There may be humor in this post, and,

> |> Naturally, you will not sue,

> |> Should things get worse after this,

> |> PCR

> |> pcr...@netzero.net

>

> --

> Thanks or Good Luck,

> There may be humor in this post, and,

> Naturally, you will not sue,

> Should things get worse after this,

> PCR

> pcrrcp@netzero.net

>

>

Guest PCR
Posted

Re: Bootup - Shutdown logger

 

Gary S. Terhune wrote:

| Windows XP doesn't run IE6SP1. It runs IE6SP2.

 

Thanks, Gary-- that is a relief! I guess, in putting out that article

Lee posted, MS just got sloppy to hint it was (at least at one time)

otherwise!

 

| --

| Gary S. Terhune

| MS-MVP Shell/User

| http://www.grystmill.com

|

| "PCR" <pcrrcp@netzero.net> wrote in message

| news:eqFxVlwrIHA.1200@TK2MSFTNGP03.phx.gbl...

|> Lee wrote:

|> | On May 2, 1:57 am, "PCR" <pcr...@netzero.net> wrote:

|> |> Lee wrote:

|> |>

|> |> | Thanks Gary, I can report not a single problem with version 8825

|> |> | Scripting Host on my machine.

|> |> |

|> |> | MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x

|> |> | scripting host packages, I was holding out for the official

|> |> | version for the very reasons you mention.

|> |> |

|> |> | PCR - Wextract is the engine of the update executable package

|> |> | itself, it's version numbers vary a lot so it's not much use by

|> |> | itself. But the digital signature of it both shows you the

|> |> | Signatory of the package and that it has not been tampered with

|> |> | since by the word and standing of the Signatory which in this

|> |> | case is MS - which is good enough for me to trust it.

|> |>

|> |> OK. There certainly are a lot version numbers associated with the

|> |> various Scr56en.exe. But why not just R-Clk it, Properties,

|> |> Version tab? Mine says v.5.50.4134.600 there. And inside are

|> |> files of v...8825. Won't that always be true?

|> |>

|> |

|> | While it will always be true just as you say, the version number

|> | 5.50.4134.600 is forever linked to IE 5.50 as per

|> | http://support.microsoft.com/?kbid=164539.

|>

|> Yikes! According to that list...

|>

|> 6.00.2800.1106 Internet Explorer 6 Service Pack 1 (Windows XP SP1)

|>

|> ...my own version is XP-irradiated! But I am Win98SE & never did

|> defect to XP!!!

|>

|> | So what happens when someone overthinks this part and wrongly

|> | assumes the package can't/shouldn't be applied to IE 6.00 SP1?

|> | I'd rather avoid the issue of the version of Wextract file and

|> | just tell them how to view the insides to get the real version

|> | numbers.

|>

|> I wouldn't, myself, suspect the version of Scr56en.exe (or WExtract,

|> as you call it) necessarily must match the version of IE. But I

|> guess I see what you are saying, especially if folk can create their

|> own Scr56en.exe using IExpress.exe.

|>

|> | BTW the default

|> | action for inf files is to OPEN them in the default text editor,

|> | never to install them - unlike .reg files which merge with prompt

|> | as the default action . So it's OK to double click inf files in

|> | the WinZip window to read them.

|>

|> It may be the default to open .inf files as you say in Notepad,

|> instead of running them-- and indeed mine do default to that. To get

|> mine to run, I must R-Clk, & select "Run". HOWEVER, WinZip puts up

|> the scary caution...

|>

|> This file has a potentially unsafe file type of .INF:

|> SCR56EN.INF

|> You should not open this file if you received it from an untrusted

|> source, or in an attachment to an unexpected or suspicious

|> e-mail message.

|> Do you still want to open this file?

|>

|> I'm just uncertain what WinZip intends to do, despite Windows's

|> default. You have only sworn twice that WinZip will have the same

|> default. If you swear it once more-- I will try it! Also, you must

|> swear thrice that WinZip v.9.0 SR-1 gives you the same scary warning!

|>

|> | As part of every IE version release, MS would also release an

|> | Administrator's Kit to go with it, it was called IEAK and inside

|> | the package there was the iexpress.exe file which would make these

|> | update packages just so an admininistrator could roll his own

|> | installation packages for delivery to the Network he was in charge

|> | of. Since Win2000, the iexpress files have been a default install

|> | option such that the general public is slowly being exposed to the

|> | Wextract engine but some of us 98 users missed that boat entirely.

|> | The above simply a means to explain away the many different

|> | version numbers of the MS updates themselves.

|>

|> I have no IExpress.exe that I can find, not even in my Win98SE .cabs.

|>

|> |> | On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

|> |> |> I have discovered that I also have version 8825 of SCR56EN.

|> |> |> I'll put that on

|> |> |> my site instead of v. 6626. Have you guys decided if there are

|> |> |> any problems

|> |> |> with 8825?

|> |> |>

|> |> |> --

|> |> |> Gary S. Terhune

|> |> |> MS-MVP Shell/Userwww.grystmill.com

|> |> |>

|> |>

|> |> ...snip

|> |> --

|> |> Thanks or Good Luck,

|> |> There may be humor in this post, and,

|> |> Naturally, you will not sue,

|> |> Should things get worse after this,

|> |> PCR

|> |> pcr...@netzero.net

|>

|> --

|> Thanks or Good Luck,

|> There may be humor in this post, and,

|> Naturally, you will not sue,

|> Should things get worse after this,

|> PCR

|> pcrrcp@netzero.net

 

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

Guest Gary S. Terhune
Posted

Re: Bootup - Shutdown logger

 

I overstepped there. I should limit myself to say that any fully updated

Windows XP SP2 has IE6 SP2. Sloppy, old, decrepit XP systems might actually

be running IE6 SP1, I don't know.

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

 

"PCR" <pcrrcp@netzero.net> wrote in message

news:ewfAZLxrIHA.2188@TK2MSFTNGP04.phx.gbl...

> Gary S. Terhune wrote:

> | Windows XP doesn't run IE6SP1. It runs IE6SP2.

>

> Thanks, Gary-- that is a relief! I guess, in putting out that article

> Lee posted, MS just got sloppy to hint it was (at least at one time)

> otherwise!

>

> | --

> | Gary S. Terhune

> | MS-MVP Shell/User

> | http://www.grystmill.com

> |

> | "PCR" <pcrrcp@netzero.net> wrote in message

> | news:eqFxVlwrIHA.1200@TK2MSFTNGP03.phx.gbl...

> |> Lee wrote:

> |> | On May 2, 1:57 am, "PCR" <pcr...@netzero.net> wrote:

> |> |> Lee wrote:

> |> |>

> |> |> | Thanks Gary, I can report not a single problem with version 8825

> |> |> | Scripting Host on my machine.

> |> |> |

> |> |> | MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x

> |> |> | scripting host packages, I was holding out for the official

> |> |> | version for the very reasons you mention.

> |> |> |

> |> |> | PCR - Wextract is the engine of the update executable package

> |> |> | itself, it's version numbers vary a lot so it's not much use by

> |> |> | itself. But the digital signature of it both shows you the

> |> |> | Signatory of the package and that it has not been tampered with

> |> |> | since by the word and standing of the Signatory which in this

> |> |> | case is MS - which is good enough for me to trust it.

> |> |>

> |> |> OK. There certainly are a lot version numbers associated with the

> |> |> various Scr56en.exe. But why not just R-Clk it, Properties,

> |> |> Version tab? Mine says v.5.50.4134.600 there. And inside are

> |> |> files of v...8825. Won't that always be true?

> |> |>

> |> |

> |> | While it will always be true just as you say, the version number

> |> | 5.50.4134.600 is forever linked to IE 5.50 as per

> |> | http://support.microsoft.com/?kbid=164539.

> |>

> |> Yikes! According to that list...

> |>

> |> 6.00.2800.1106 Internet Explorer 6 Service Pack 1 (Windows XP SP1)

> |>

> |> ...my own version is XP-irradiated! But I am Win98SE & never did

> |> defect to XP!!!

> |>

> |> | So what happens when someone overthinks this part and wrongly

> |> | assumes the package can't/shouldn't be applied to IE 6.00 SP1?

> |> | I'd rather avoid the issue of the version of Wextract file and

> |> | just tell them how to view the insides to get the real version

> |> | numbers.

> |>

> |> I wouldn't, myself, suspect the version of Scr56en.exe (or WExtract,

> |> as you call it) necessarily must match the version of IE. But I

> |> guess I see what you are saying, especially if folk can create their

> |> own Scr56en.exe using IExpress.exe.

> |>

> |> | BTW the default

> |> | action for inf files is to OPEN them in the default text editor,

> |> | never to install them - unlike .reg files which merge with prompt

> |> | as the default action . So it's OK to double click inf files in

> |> | the WinZip window to read them.

> |>

> |> It may be the default to open .inf files as you say in Notepad,

> |> instead of running them-- and indeed mine do default to that. To get

> |> mine to run, I must R-Clk, & select "Run". HOWEVER, WinZip puts up

> |> the scary caution...

> |>

> |> This file has a potentially unsafe file type of .INF:

> |> SCR56EN.INF

> |> You should not open this file if you received it from an untrusted

> |> source, or in an attachment to an unexpected or suspicious

> |> e-mail message.

> |> Do you still want to open this file?

> |>

> |> I'm just uncertain what WinZip intends to do, despite Windows's

> |> default. You have only sworn twice that WinZip will have the same

> |> default. If you swear it once more-- I will try it! Also, you must

> |> swear thrice that WinZip v.9.0 SR-1 gives you the same scary warning!

> |>

> |> | As part of every IE version release, MS would also release an

> |> | Administrator's Kit to go with it, it was called IEAK and inside

> |> | the package there was the iexpress.exe file which would make these

> |> | update packages just so an admininistrator could roll his own

> |> | installation packages for delivery to the Network he was in charge

> |> | of. Since Win2000, the iexpress files have been a default install

> |> | option such that the general public is slowly being exposed to the

> |> | Wextract engine but some of us 98 users missed that boat entirely.

> |> | The above simply a means to explain away the many different

> |> | version numbers of the MS updates themselves.

> |>

> |> I have no IExpress.exe that I can find, not even in my Win98SE .cabs.

> |>

> |> |> | On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

> |> |> |> I have discovered that I also have version 8825 of SCR56EN.

> |> |> |> I'll put that on

> |> |> |> my site instead of v. 6626. Have you guys decided if there are

> |> |> |> any problems

> |> |> |> with 8825?

> |> |> |>

> |> |> |> --

> |> |> |> Gary S. Terhune

> |> |> |> MS-MVP Shell/Userwww.grystmill.com

> |> |> |>

> |> |>

> |> |> ...snip

> |> |> --

> |> |> Thanks or Good Luck,

> |> |> There may be humor in this post, and,

> |> |> Naturally, you will not sue,

> |> |> Should things get worse after this,

> |> |> PCR

> |> |> pcr...@netzero.net

> |>

> |> --

> |> Thanks or Good Luck,

> |> There may be humor in this post, and,

> |> Naturally, you will not sue,

> |> Should things get worse after this,

> |> PCR

> |> pcrrcp@netzero.net

>

> --

> Thanks or Good Luck,

> There may be humor in this post, and,

> Naturally, you will not sue,

> Should things get worse after this,

> PCR

> pcrrcp@netzero.net

>

>

Guest Lee
Posted

Re: Bootup - Shutdown logger

 

On May 5, 5:40 pm, "PCR" <pcr...@netzero.net> wrote:

> Lee wrote:

>

> | On May 2, 1:57 am, "PCR" <pcr...@netzero.net> wrote:|> Lee wrote:

>

> |>

> |> | Thanks Gary, I can report not a single problem with version 8825

> |> | Scripting Host on my machine.

> |> |

> |> | MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x scripting

> |> | host packages, I was holding out for the official version for the

> |> | very reasons you mention.

> |> |

> |> | PCR - Wextract is the engine of the update executable package

> |> | itself, it's version numbers vary a lot so it's not much use by

> |> | itself. But the digital signature of it both shows you the

> |> | Signatory of the package and that it has not been tampered with

> |> | since by the word and standing of the Signatory which in this case

> |> | is MS - which is good enough for me to trust it.

> |>

> |> OK. There certainly are a lot version numbers associated with the

> |> various Scr56en.exe. But why not just R-Clk it, Properties, Version

> |> tab? Mine says v.5.50.4134.600 there. And inside are files of

> |> v...8825. Won't that always be true?

> |>

> |

> | While it will always be true just as you say, the version number

> | 5.50.4134.600 is forever linked to IE 5.50 as per

> |http://support.microsoft.com/?kbid=164539.

>

> Yikes! According to that list...

>

> 6.00.2800.1106   Internet Explorer 6 Service Pack 1 (Windows XP SP1)

>

> ...my own version is XP-irradiated! But I am Win98SE & never did defect

> to XP!!!

>

> | So what happens when someone overthinks this part and wrongly assumes

> | the package can't/shouldn't be applied to IE 6.00 SP1?  I'd rather

> | avoid the issue of the version of Wextract file and just tell them how

> | to view the insides to get the real version numbers.

>

> I wouldn't, myself, suspect the version of Scr56en.exe (or WExtract, as

> you call it) necessarily must match the version of IE. But I guess I see

> what you are saying, especially if folk can create their own Scr56en.exe

> using IExpress.exe.

>

> |  BTW the default

> | action for inf files is to OPEN them in the default text editor, never

> | to install them - unlike .reg files which merge with prompt as the

> | default action .  So it's OK to double click inf files in the WinZip

> | window to read them.

>

> It may be the default to open .inf files as you say in Notepad, instead

> of running them-- and indeed mine do default to that. To get mine to

> run, I must R-Clk, & select "Run". HOWEVER, WinZip puts up the scary

> caution...

>

> This file has a potentially unsafe file type of .INF:

> SCR56EN.INF

> You should not open this file if you received it from an untrusted

> source, or in an attachment to an unexpected or suspicious

> e-mail message.

> Do you still want to open this file?

>

> I'm just uncertain what WinZip intends to do, despite Windows's default.

> You have only sworn twice that WinZip will have the same default. If you

> swear it once more-- I will try it! Also, you must swear thrice that

> WinZip v.9.0 SR-1 gives you the same scary warning!

 

But I can't since I run version 8 of WinZip which has no such

warning. I would be uncertain too with that dialog coming at me, but

find it hard to believe that WinZip would alter an inf file's default

action which is still set up with this registry entry:

[HKEY_CLASSES_ROOT\inffile\shell\open\command]

@="C:\\WINDOWS\\NOTEPAD.EXE %1"

 

It clearly says Notepad.

 

You are excused from the exercise, PCR.

>

> | As part of every IE version release, MS would also release an

> | Administrator's Kit to go with it, it was called IEAK and inside the

> | package there was the iexpress.exe file which would make these update

> | packages just so an admininistrator could roll his own installation

> | packages for delivery to the Network he was in charge of.  Since

> | Win2000, the iexpress files have been a default install option such

> | that the general public is slowly being exposed to the Wextract engine

> | but some of us 98 users missed that boat entirely.  The above simply a

> | means to explain away the many different version numbers of the MS

> | updates themselves.

>

> I have no IExpress.exe that I can find, not even in my Win98SE .cabs.

>

 

Home page for the IEAK package used to be:

http://www.microsoft.com/windows/ieak/

 

which now goes to msdn but still has ieak7 info and a download link.

or get YOUR version here:

http://download.microsoft.com/download/ie6sp1/finrel/6_sp1/W98NT42KMeXP/EN-US/ieak6.exe

 

There is also this earlier version of iexpress package which you could

install and then update with the newer files available from above.

http://support.microsoft.com/?kbid=237803

 

Or read about and install here.

http://www.mdgx.com/INF_web/

http://www.mdgx.com/INF_web/ieinstal.htm

 

> |> | On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

> |> |> I have discovered that I also have version 8825 of SCR56EN. I'll

> |> |> put that on

> |> |> my site instead of v. 6626. Have you guys decided if there are any

> |> |> problems

> |> |> with 8825?

> |> |>

> |> |> --

> |> |> Gary S. Terhune

> |> |> MS-MVP Shell/Userwww.grystmill.com

> |> |>

> |>

> |> ...snip

> |> --

> |> Thanks or Good Luck,

> |> There may be humor in this post, and,

> |> Naturally, you will not sue,

> |> Should things get worse after this,

> |> PCR

> |> pcr...@netzero.net

>

> --

> Thanks or Good Luck,

> There may be humor in this post, and,

> Naturally, you will not sue,

> Should things get worse after this,

> PCR

> pcr...@netzero.net

Guest Gary S. Terhune
Posted

Re: Bootup - Shutdown logger

 

WinZip (I'm testing versions 8 and 11) does NOT change file associations.

Double-clicking a file inside a WinZip file does the same thing as

double-clicking it outside the WinZip file. Nor does WinZip put up that

warning you quote, I am 99.9999% sure that that warning comes from

elsewhere, though I can't recall where. I've seen it often, that exact same

warning, and not in conjunction with WinZip. Try an INF file that isn't in a

WinZip file. Do you get the warning?

 

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

 

"PCR" <pcrrcp@netzero.net> wrote in message

news:eqFxVlwrIHA.1200@TK2MSFTNGP03.phx.gbl...

 

<SNIP>

>

> | BTW the default

> | action for inf files is to OPEN them in the default text editor, never

> | to install them - unlike .reg files which merge with prompt as the

> | default action . So it's OK to double click inf files in the WinZip

> | window to read them.

>

> It may be the default to open .inf files as you say in Notepad, instead

> of running them-- and indeed mine do default to that. To get mine to

> run, I must R-Clk, & select "Run". HOWEVER, WinZip puts up the scary

> caution...

>

> This file has a potentially unsafe file type of .INF:

> SCR56EN.INF

> You should not open this file if you received it from an untrusted

> source, or in an attachment to an unexpected or suspicious

> e-mail message.

> Do you still want to open this file?

>

> I'm just uncertain what WinZip intends to do, despite Windows's default.

> You have only sworn twice that WinZip will have the same default. If you

> swear it once more-- I will try it! Also, you must swear thrice that

> WinZip v.9.0 SR-1 gives you the same scary warning!

>

> | As part of every IE version release, MS would also release an

> | Administrator's Kit to go with it, it was called IEAK and inside the

> | package there was the iexpress.exe file which would make these update

> | packages just so an admininistrator could roll his own installation

> | packages for delivery to the Network he was in charge of. Since

> | Win2000, the iexpress files have been a default install option such

> | that the general public is slowly being exposed to the Wextract engine

> | but some of us 98 users missed that boat entirely. The above simply a

> | means to explain away the many different version numbers of the MS

> | updates themselves.

>

> I have no IExpress.exe that I can find, not even in my Win98SE .cabs.

>

> |> | On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

> |> |> I have discovered that I also have version 8825 of SCR56EN. I'll

> |> |> put that on

> |> |> my site instead of v. 6626. Have you guys decided if there are any

> |> |> problems

> |> |> with 8825?

> |> |>

> |> |> --

> |> |> Gary S. Terhune

> |> |> MS-MVP Shell/Userwww.grystmill.com

> |> |>

> |>

> |> ...snip

> |> --

> |> Thanks or Good Luck,

> |> There may be humor in this post, and,

> |> Naturally, you will not sue,

> |> Should things get worse after this,

> |> PCR

> |> pcr...@netzero.net

>

> --

> Thanks or Good Luck,

> There may be humor in this post, and,

> Naturally, you will not sue,

> Should things get worse after this,

> PCR

> pcrrcp@netzero.net

>

>

Guest PCR
Posted

Re: Bootup - Shutdown logger

 

Gary S. Terhune wrote:

| I overstepped there. I should limit myself to say that any fully

| updated Windows XP SP2 has IE6 SP2. Sloppy, old, decrepit XP systems

| might actually be running IE6 SP1, I don't know.

 

OK, thanks for the correction, Gary. Lucky I didn't remove my tinfoil

hat too soon! I always had my suspicions MS upgraded my IE to a

low-level XP-irradiated version-- it says so in certain Properties

screens!

 

| --

| Gary S. Terhune

| MS-MVP Shell/User

| http://www.grystmill.com

|

| "PCR" <pcrrcp@netzero.net> wrote in message

| news:ewfAZLxrIHA.2188@TK2MSFTNGP04.phx.gbl...

|> Gary S. Terhune wrote:

|> | Windows XP doesn't run IE6SP1. It runs IE6SP2.

|>

|> Thanks, Gary-- that is a relief! I guess, in putting out that article

|> Lee posted, MS just got sloppy to hint it was (at least at one time)

|> otherwise!

|>

|> | --

|> | Gary S. Terhune

|> | MS-MVP Shell/User

|> | http://www.grystmill.com

|> |

|> | "PCR" <pcrrcp@netzero.net> wrote in message

|> | news:eqFxVlwrIHA.1200@TK2MSFTNGP03.phx.gbl...

|> |> Lee wrote:

|> |> | On May 2, 1:57 am, "PCR" <pcr...@netzero.net> wrote:

|> |> |> Lee wrote:

|> |> |>

|> |> |> | Thanks Gary, I can report not a single problem with version

|> |> |> | 8825 Scripting Host on my machine.

|> |> |> |

|> |> |> | MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x

|> |> |> | scripting host packages, I was holding out for the official

|> |> |> | version for the very reasons you mention.

|> |> |> |

|> |> |> | PCR - Wextract is the engine of the update executable package

|> |> |> | itself, it's version numbers vary a lot so it's not much use

|> |> |> | by itself. But the digital signature of it both shows you the

|> |> |> | Signatory of the package and that it has not been tampered

|> |> |> | with since by the word and standing of the Signatory which

|> |> |> | in this case is MS - which is good enough for me to trust it.

|> |> |>

|> |> |> OK. There certainly are a lot version numbers associated with

|> |> |> the various Scr56en.exe. But why not just R-Clk it, Properties,

|> |> |> Version tab? Mine says v.5.50.4134.600 there. And inside are

|> |> |> files of v...8825. Won't that always be true?

|> |> |>

|> |> |

|> |> | While it will always be true just as you say, the version number

|> |> | 5.50.4134.600 is forever linked to IE 5.50 as per

|> |> | http://support.microsoft.com/?kbid=164539.

|> |>

|> |> Yikes! According to that list...

|> |>

|> |> 6.00.2800.1106 Internet Explorer 6 Service Pack 1 (Windows XP

|> |> SP1)

|> |>

|> |> ...my own version is XP-irradiated! But I am Win98SE & never did

|> |> defect to XP!!!

|> |>

|> |> | So what happens when someone overthinks this part and wrongly

|> |> | assumes the package can't/shouldn't be applied to IE 6.00 SP1?

|> |> | I'd rather avoid the issue of the version of Wextract file and

|> |> | just tell them how to view the insides to get the real version

|> |> | numbers.

|> |>

|> |> I wouldn't, myself, suspect the version of Scr56en.exe (or

|> |> WExtract, as you call it) necessarily must match the version of

|> |> IE. But I guess I see what you are saying, especially if folk can

|> |> create their own Scr56en.exe using IExpress.exe.

|> |>

|> |> | BTW the default

|> |> | action for inf files is to OPEN them in the default text editor,

|> |> | never to install them - unlike .reg files which merge with

|> |> | prompt as the default action . So it's OK to double click inf

|> |> | files in the WinZip window to read them.

|> |>

|> |> It may be the default to open .inf files as you say in Notepad,

|> |> instead of running them-- and indeed mine do default to that. To

|> |> get mine to run, I must R-Clk, & select "Run". HOWEVER, WinZip

|> |> puts up the scary caution...

|> |>

|> |> This file has a potentially unsafe file type of .INF:

|> |> SCR56EN.INF

|> |> You should not open this file if you received it from an untrusted

|> |> source, or in an attachment to an unexpected or suspicious

|> |> e-mail message.

|> |> Do you still want to open this file?

|> |>

|> |> I'm just uncertain what WinZip intends to do, despite Windows's

|> |> default. You have only sworn twice that WinZip will have the same

|> |> default. If you swear it once more-- I will try it! Also, you must

|> |> swear thrice that WinZip v.9.0 SR-1 gives you the same scary

|> |> warning!

|> |>

|> |> | As part of every IE version release, MS would also release an

|> |> | Administrator's Kit to go with it, it was called IEAK and inside

|> |> | the package there was the iexpress.exe file which would make

|> |> | these update packages just so an admininistrator could roll his

|> |> | own installation packages for delivery to the Network he was in

|> |> | charge of. Since Win2000, the iexpress files have been a

|> |> | default install option such that the general public is slowly

|> |> | being exposed to the Wextract engine but some of us 98 users

|> |> | missed that boat entirely. The above simply a means to explain

|> |> | away the many different version numbers of the MS updates

|> |> | themselves.

|> |>

|> |> I have no IExpress.exe that I can find, not even in my Win98SE

|> |> .cabs.

|> |>

|> |> |> | On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

|> |> |> |> I have discovered that I also have version 8825 of SCR56EN.

|> |> |> |> I'll put that on

|> |> |> |> my site instead of v. 6626. Have you guys decided if there

|> |> |> |> are any problems

|> |> |> |> with 8825?

|> |> |> |>

|> |> |> |> --

|> |> |> |> Gary S. Terhune

|> |> |> |> MS-MVP Shell/Userwww.grystmill.com

|> |> |> |>

|> |> |>

|> |> |> ...snip

|> |> |> --

|> |> |> Thanks or Good Luck,

|> |> |> There may be humor in this post, and,

|> |> |> Naturally, you will not sue,

|> |> |> Should things get worse after this,

|> |> |> PCR

|> |> |> pcr...@netzero.net

|> |>

|> |> --

|> |> Thanks or Good Luck,

|> |> There may be humor in this post, and,

|> |> Naturally, you will not sue,

|> |> Should things get worse after this,

|> |> PCR

|> |> pcrrcp@netzero.net

|>

|> --

|> Thanks or Good Luck,

|> There may be humor in this post, and,

|> Naturally, you will not sue,

|> Should things get worse after this,

|> PCR

|> pcrrcp@netzero.net

 

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

Guest PCR
Posted

Re: Bootup - Shutdown logger

 

Gary S. Terhune wrote:

| WinZip (I'm testing versions 8 and 11) does NOT change file

| associations. Double-clicking a file inside a WinZip file does the

| same thing as double-clicking it outside the WinZip file. Nor does

| WinZip put up that warning you quote, I am 99.9999% sure that that

| warning comes from elsewhere, though I can't recall where. I've seen

| it often, that exact same warning, and not in conjunction with

| WinZip. Try an INF file that isn't in a WinZip file. Do you get the

| warning?

 

Any .inf I click outside WinZip opens in Notepad-- no warning. If I

R-Clk, Install-- I get no warning either. It just does its work, (but I

tested with a do-nothing .inf).

 

I guess v.9.0 SR-1 shouldn't be an exception. But I definitely see that

warning in it. Did you open Scr56en.exe in WinZip, & click SCR56EN.INF

in its window? What happens when you click an .exe file in a WinZip

window? You should definitely get the warning for that! Does your

version of WinZip have the this in its Help screens...

 

........Quote a WinZip help screen.............

WinZip's Handling of Potentially Unsafe File Types

 

This version of WinZip has been enhanced to warn you about some of the

most common situations in which you could become infected by a virus

compressed inside a Zip file.

 

This enhancement involves several small changes to WinZip that we

believe will, in these specific situations, make it less likely for you

to be affected by a virus that has been placed inside a Zip file.

 

If you are using the WinZip Classic interface and you double-click a

file with a potentially unsafe file type, such as .EXE, WinZip will

display a dialog warning you about the potentially unsafe file type. You

can then decide whether you really want to open it.

 

Note that this warning is only displayed when you double-click a file

within a Zip file to open that file from within WinZip. You can still

extract files from a Zip file to a folder on your disk without a

warning, regardless of the file types involved.

 

If you are using the WinZip Wizard interface, the Wizard will display a

dialog to notify you when you begin to work with a Zip file that

contains any files on WinZip's list of potentially unsafe file types.

You can then decide whether you want to continue working with that Zip

file.

 

WinZip also displays warning text when you try to install software

contained within a Zip file. For example, when you use the Install

button in the WinZip Classic interface to install software from a Zip

file that contains a Setup program, WinZip will display a dialog

reminding you not to install untrusted software.

 

Some WinZip users, especially "power users" who frequently work with

some of the file types that WinZip considers potentially unsafe, will

prefer not to see these warnings repeatedly. Therefore, all of the new

warning dialogs have check boxes that you can use to stop them from

displaying again.

...........EOQ.................................

 

| --

| Gary S. Terhune

| MS-MVP Shell/User

| http://www.grystmill.com

|

| "PCR" <pcrrcp@netzero.net> wrote in message

| news:eqFxVlwrIHA.1200@TK2MSFTNGP03.phx.gbl...

|

| <SNIP>

|>

|> | BTW the default

|> | action for inf files is to OPEN them in the default text editor,

|> | never to install them - unlike .reg files which merge with prompt

|> | as the default action . So it's OK to double click inf files in

|> | the WinZip window to read them.

|>

|> It may be the default to open .inf files as you say in Notepad,

|> instead of running them-- and indeed mine do default to that. To get

|> mine to run, I must R-Clk, & select "Run".

 

I meant-- R-Clk, & select "Install".

 

|> HOWEVER, WinZip puts up

|> the scary caution...

|>

|> This file has a potentially unsafe file type of .INF:

|> SCR56EN.INF

|> You should not open this file if you received it from an untrusted

|> source, or in an attachment to an unexpected or suspicious

|> e-mail message.

|> Do you still want to open this file?

|>

|> I'm just uncertain what WinZip intends to do, despite Windows's

|> default. You have only sworn twice that WinZip will have the same

|> default. If you swear it once more-- I will try it! Also, you must

|> swear thrice that WinZip v.9.0 SR-1 gives you the same scary warning!

|>

 

....snip

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

Guest PCR
Posted

Re: Bootup - Shutdown logger

 

Lee wrote:

| On May 5, 5:40 pm, "PCR" <pcr...@netzero.net> wrote:

|> Lee wrote:

|>

|> | On May 2, 1:57 am, "PCR" <pcr...@netzero.net> wrote:|> Lee wrote:

|>

|> |>

|> |> | Thanks Gary, I can report not a single problem with version 8825

|> |> | Scripting Host on my machine.

|> |> |

|> |> | MEB - MDGx.com already has an unofficial 5.6 and 5.7 9x

|> |> | scripting host packages, I was holding out for the official

|> |> | version for the very reasons you mention.

|> |> |

|> |> | PCR - Wextract is the engine of the update executable package

|> |> | itself, it's version numbers vary a lot so it's not much use by

|> |> | itself. But the digital signature of it both shows you the

|> |> | Signatory of the package and that it has not been tampered with

|> |> | since by the word and standing of the Signatory which in this

|> |> | case is MS - which is good enough for me to trust it.

|> |>

|> |> OK. There certainly are a lot version numbers associated with the

|> |> various Scr56en.exe. But why not just R-Clk it, Properties,

|> |> Version tab? Mine says v.5.50.4134.600 there. And inside are

|> |> files of v...8825. Won't that always be true?

|> |>

|> |

|> | While it will always be true just as you say, the version number

|> | 5.50.4134.600 is forever linked to IE 5.50 as per

|> |http://support.microsoft.com/?kbid=164539.

|>

|> Yikes! According to that list...

|>

|> 6.00.2800.1106 Internet Explorer 6 Service Pack 1 (Windows XP SP1)

|>

|> ...my own version is XP-irradiated! But I am Win98SE & never did

|> defect to XP!!!

|>

|> | So what happens when someone overthinks this part and wrongly

|> | assumes the package can't/shouldn't be applied to IE 6.00 SP1? I'd

|> | rather avoid the issue of the version of Wextract file and just

|> | tell them how to view the insides to get the real version numbers.

|>

|> I wouldn't, myself, suspect the version of Scr56en.exe (or WExtract,

|> as you call it) necessarily must match the version of IE. But I

|> guess I see what you are saying, especially if folk can create their

|> own Scr56en.exe using IExpress.exe.

|>

|> | BTW the default

|> | action for inf files is to OPEN them in the default text editor,

|> | never to install them - unlike .reg files which merge with prompt

|> | as the default action . So it's OK to double click inf files in

|> | the WinZip window to read them.

|>

|> It may be the default to open .inf files as you say in Notepad,

|> instead of running them-- and indeed mine do default to that. To get

|> mine to run, I must R-Clk, & select "Run". HOWEVER, WinZip puts up

|> the scary caution...

|>

|> This file has a potentially unsafe file type of .INF:

|> SCR56EN.INF

|> You should not open this file if you received it from an untrusted

|> source, or in an attachment to an unexpected or suspicious

|> e-mail message.

|> Do you still want to open this file?

|>

|> I'm just uncertain what WinZip intends to do, despite Windows's

|> default. You have only sworn twice that WinZip will have the same

|> default. If you swear it once more-- I will try it! Also, you must

|> swear thrice that WinZip v.9.0 SR-1 gives you the same scary warning!

|

| But I can't since I run version 8 of WinZip which has no such

| warning. I would be uncertain too with that dialog coming at me, but

| find it hard to believe that WinZip would alter an inf file's default

| action which is still set up with this registry entry:

| [HKEY_CLASSES_ROOT\inffile\shell\open\command]

| @="C:\\WINDOWS\\NOTEPAD.EXE %1"

|

| It clearly says Notepad.

 

Mine says the same. Also, there is...

 

[HKEY_CLASSES_ROOT\inffile\shell\install]

@="&Install"

 

[HKEY_CLASSES_ROOT\inffile\shell\install\command]

@="c:\\windows\\rundll.exe setupx.dll,InstallHinfSection DefaultInstall

132 %1"

 

| You are excused from the exercise, PCR.

 

Yea. I just don't know whether WinZip will honor Windows's default, or

actually install the .inf. It isn't so hard to simply extract the .inf &

then click it, after all. So far, I've found nothing terribly specific

about .inf in WinZip's voluminous .docs-- nothing to distinguish it from

..exe, for instance.

 

|>

|> | As part of every IE version release, MS would also release an

|> | Administrator's Kit to go with it, it was called IEAK and inside

|> | the package there was the iexpress.exe file which would make these

|> | update packages just so an admininistrator could roll his own

|> | installation packages for delivery to the Network he was in charge

|> | of. Since Win2000, the iexpress files have been a default install

|> | option such that the general public is slowly being exposed to the

|> | Wextract engine but some of us 98 users missed that boat entirely.

|> | The above simply a means to explain away the many different

|> | version numbers of the MS updates themselves.

|>

|> I have no IExpress.exe that I can find, not even in my Win98SE .cabs.

|>

|

| Home page for the IEAK package used to be:

| http://www.microsoft.com/windows/ieak/

|

| which now goes to msdn but still has ieak7 info and a download link.

| or get YOUR version here:

|

http://download.microsoft.com/download/ie6sp1/finrel/6_sp1/W98NT42KMeXP/EN-US/ieak6.exe

|

| There is also this earlier version of iexpress package which you could

| install and then update with the newer files available from above.

| http://support.microsoft.com/?kbid=237803

|

| Or read about and install here.

| http://www.mdgx.com/INF_web/

| http://www.mdgx.com/INF_web/ieinstal.htm

 

Alright. Thanks, Lee. That will take some study.

 

|> |> | On May 1, 7:48 am, "Gary S. Terhune" <none> wrote:

|> |> |> I have discovered that I also have version 8825 of SCR56EN.

|> |> |> I'll put that on

|> |> |> my site instead of v. 6626. Have you guys decided if there are

|> |> |> any problems

|> |> |> with 8825?

|> |> |>

|> |> |> --

|> |> |> Gary S. Terhune

|> |> |> MS-MVP Shell/Userwww.grystmill.com

|> |> |>

|> |>

|> |> ...snip

|> |> --

|> |> Thanks or Good Luck,

|> |> There may be humor in this post, and,

|> |> Naturally, you will not sue,

|> |> Should things get worse after this,

|> |> PCR

|> |> pcr...@netzero.net

|>

|> --

|> Thanks or Good Luck,

|> There may be humor in this post, and,

|> Naturally, you will not sue,

|> Should things get worse after this,

|> PCR

|> pcr...@netzero.net

 

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

Guest Gary S. Terhune
Posted

Re: Bootup - Shutdown logger

 

My mistake. Not sure what happened. Yes, I get that same message with v. 11,

no I don't get it with v. 8. Note that the message has one of those "Don't

ask me again" check boxes, so...

 

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

 

"PCR" <pcrrcp@netzero.net> wrote in message

news:u1OriT%23rIHA.3420@TK2MSFTNGP04.phx.gbl...

> Gary S. Terhune wrote:

> | WinZip (I'm testing versions 8 and 11) does NOT change file

> | associations. Double-clicking a file inside a WinZip file does the

> | same thing as double-clicking it outside the WinZip file. Nor does

> | WinZip put up that warning you quote, I am 99.9999% sure that that

> | warning comes from elsewhere, though I can't recall where. I've seen

> | it often, that exact same warning, and not in conjunction with

> | WinZip. Try an INF file that isn't in a WinZip file. Do you get the

> | warning?

>

> Any .inf I click outside WinZip opens in Notepad-- no warning. If I

> R-Clk, Install-- I get no warning either. It just does its work, (but I

> tested with a do-nothing .inf).

>

> I guess v.9.0 SR-1 shouldn't be an exception. But I definitely see that

> warning in it. Did you open Scr56en.exe in WinZip, & click SCR56EN.INF

> in its window? What happens when you click an .exe file in a WinZip

> window? You should definitely get the warning for that! Does your

> version of WinZip have the this in its Help screens...

>

> .......Quote a WinZip help screen.............

> WinZip's Handling of Potentially Unsafe File Types

>

> This version of WinZip has been enhanced to warn you about some of the

> most common situations in which you could become infected by a virus

> compressed inside a Zip file.

>

> This enhancement involves several small changes to WinZip that we

> believe will, in these specific situations, make it less likely for you

> to be affected by a virus that has been placed inside a Zip file.

>

> If you are using the WinZip Classic interface and you double-click a

> file with a potentially unsafe file type, such as .EXE, WinZip will

> display a dialog warning you about the potentially unsafe file type. You

> can then decide whether you really want to open it.

>

> Note that this warning is only displayed when you double-click a file

> within a Zip file to open that file from within WinZip. You can still

> extract files from a Zip file to a folder on your disk without a

> warning, regardless of the file types involved.

>

> If you are using the WinZip Wizard interface, the Wizard will display a

> dialog to notify you when you begin to work with a Zip file that

> contains any files on WinZip's list of potentially unsafe file types.

> You can then decide whether you want to continue working with that Zip

> file.

>

> WinZip also displays warning text when you try to install software

> contained within a Zip file. For example, when you use the Install

> button in the WinZip Classic interface to install software from a Zip

> file that contains a Setup program, WinZip will display a dialog

> reminding you not to install untrusted software.

>

> Some WinZip users, especially "power users" who frequently work with

> some of the file types that WinZip considers potentially unsafe, will

> prefer not to see these warnings repeatedly. Therefore, all of the new

> warning dialogs have check boxes that you can use to stop them from

> displaying again.

> ..........EOQ.................................

>

> | --

> | Gary S. Terhune

> | MS-MVP Shell/User

> | http://www.grystmill.com

> |

> | "PCR" <pcrrcp@netzero.net> wrote in message

> | news:eqFxVlwrIHA.1200@TK2MSFTNGP03.phx.gbl...

> |

> | <SNIP>

> |>

> |> | BTW the default

> |> | action for inf files is to OPEN them in the default text editor,

> |> | never to install them - unlike .reg files which merge with prompt

> |> | as the default action . So it's OK to double click inf files in

> |> | the WinZip window to read them.

> |>

> |> It may be the default to open .inf files as you say in Notepad,

> |> instead of running them-- and indeed mine do default to that. To get

> |> mine to run, I must R-Clk, & select "Run".

>

> I meant-- R-Clk, & select "Install".

>

> |> HOWEVER, WinZip puts up

> |> the scary caution...

> |>

> |> This file has a potentially unsafe file type of .INF:

> |> SCR56EN.INF

> |> You should not open this file if you received it from an untrusted

> |> source, or in an attachment to an unexpected or suspicious

> |> e-mail message.

> |> Do you still want to open this file?

> |>

> |> I'm just uncertain what WinZip intends to do, despite Windows's

> |> default. You have only sworn twice that WinZip will have the same

> |> default. If you swear it once more-- I will try it! Also, you must

> |> swear thrice that WinZip v.9.0 SR-1 gives you the same scary warning!

> |>

>

> ...snip

> --

> Thanks or Good Luck,

> There may be humor in this post, and,

> Naturally, you will not sue,

> Should things get worse after this,

> PCR

> pcrrcp@netzero.net

>

>

Guest PCR
Posted

Re: Bootup - Shutdown logger

 

"Gary S. Terhune" <none> wrote in message

news:eP6f$q$rIHA.6096@TK2MSFTNGP06.phx.gbl...

| My mistake. Not sure what happened. Yes, I get that same message with

v. 11,

| no I don't get it with v. 8. Note that the message has one of those

"Don't

| ask me again" check boxes, so...

 

Yep. It may be you unchecked it in a "power user" fit of impatience, as

the WinZip help screen suggests. After that, XP-irradiation may have

poked the memory of having done so out of you. Some day shortly I may

well go ahead & ignore WinZip's warning about it & click an

innocuous-looking .inf just to see what happens! Will it honor Windows's

default to just open it in Notepad despite the warning-- or will it

attempt to install?

 

| --

| Gary S. Terhune

| MS-MVP Shell/User

| http://www.grystmill.com

|

| "PCR" <pcrrcp@netzero.net> wrote in message

| news:u1OriT%23rIHA.3420@TK2MSFTNGP04.phx.gbl...

| > Gary S. Terhune wrote:

| > | WinZip (I'm testing versions 8 and 11) does NOT change file

| > | associations. Double-clicking a file inside a WinZip file does the

| > | same thing as double-clicking it outside the WinZip file. Nor does

| > | WinZip put up that warning you quote, I am 99.9999% sure that that

| > | warning comes from elsewhere, though I can't recall where. I've

seen

| > | it often, that exact same warning, and not in conjunction with

| > | WinZip. Try an INF file that isn't in a WinZip file. Do you get

the

| > | warning?

| >

| > Any .inf I click outside WinZip opens in Notepad-- no warning. If I

| > R-Clk, Install-- I get no warning either. It just does its work,

(but I

| > tested with a do-nothing .inf).

| >

| > I guess v.9.0 SR-1 shouldn't be an exception. But I definitely see

that

| > warning in it. Did you open Scr56en.exe in WinZip, & click

SCR56EN.INF

| > in its window? What happens when you click an .exe file in a WinZip

| > window? You should definitely get the warning for that! Does your

| > version of WinZip have the this in its Help screens...

| >

| > .......Quote a WinZip help screen.............

| > WinZip's Handling of Potentially Unsafe File Types

| >

| > This version of WinZip has been enhanced to warn you about some of

the

| > most common situations in which you could become infected by a virus

| > compressed inside a Zip file.

| >

| > This enhancement involves several small changes to WinZip that we

| > believe will, in these specific situations, make it less likely for

you

| > to be affected by a virus that has been placed inside a Zip file.

| >

| > If you are using the WinZip Classic interface and you double-click a

| > file with a potentially unsafe file type, such as .EXE, WinZip will

| > display a dialog warning you about the potentially unsafe file type.

You

| > can then decide whether you really want to open it.

| >

| > Note that this warning is only displayed when you double-click a

file

| > within a Zip file to open that file from within WinZip. You can

still

| > extract files from a Zip file to a folder on your disk without a

| > warning, regardless of the file types involved.

| >

| > If you are using the WinZip Wizard interface, the Wizard will

display a

| > dialog to notify you when you begin to work with a Zip file that

| > contains any files on WinZip's list of potentially unsafe file

types.

| > You can then decide whether you want to continue working with that

Zip

| > file.

| >

| > WinZip also displays warning text when you try to install software

| > contained within a Zip file. For example, when you use the Install

| > button in the WinZip Classic interface to install software from a

Zip

| > file that contains a Setup program, WinZip will display a dialog

| > reminding you not to install untrusted software.

| >

| > Some WinZip users, especially "power users" who frequently work with

| > some of the file types that WinZip considers potentially unsafe,

will

| > prefer not to see these warnings repeatedly. Therefore, all of the

new

| > warning dialogs have check boxes that you can use to stop them from

| > displaying again.

| > ..........EOQ.................................

| >

| > | --

| > | Gary S. Terhune

| > | MS-MVP Shell/User

| > | http://www.grystmill.com

| > |

| > | "PCR" <pcrrcp@netzero.net> wrote in message

| > | news:eqFxVlwrIHA.1200@TK2MSFTNGP03.phx.gbl...

| > |

| > | <SNIP>

| > |>

| > |> | BTW the default

| > |> | action for inf files is to OPEN them in the default text

editor,

| > |> | never to install them - unlike .reg files which merge with

prompt

| > |> | as the default action . So it's OK to double click inf files

in

| > |> | the WinZip window to read them.

| > |>

| > |> It may be the default to open .inf files as you say in Notepad,

| > |> instead of running them-- and indeed mine do default to that. To

get

| > |> mine to run, I must R-Clk, & select "Run".

| >

| > I meant-- R-Clk, & select "Install".

| >

| > |> HOWEVER, WinZip puts up

| > |> the scary caution...

| > |>

| > |> This file has a potentially unsafe file type of .INF:

| > |> SCR56EN.INF

| > |> You should not open this file if you received it from an

untrusted

| > |> source, or in an attachment to an unexpected or suspicious

| > |> e-mail message.

| > |> Do you still want to open this file?

| > |>

| > |> I'm just uncertain what WinZip intends to do, despite Windows's

| > |> default. You have only sworn twice that WinZip will have the same

| > |> default. If you swear it once more-- I will try it! Also, you

must

| > |> swear thrice that WinZip v.9.0 SR-1 gives you the same scary

warning!

| > |>

| >

| > ...snip

| > --

| > Thanks or Good Luck,

| > There may be humor in this post, and,

| > Naturally, you will not sue,

| > Should things get worse after this,

| > PCR

| > pcrrcp@netzero.net

| >

| >

|

Guest Gary S. Terhune
Posted

Re: Bootup - Shutdown logger

 

It's just as if you'd d-clicked it in a normal folder. Just think of WinZip

as a folder.

 

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

 

"PCR" <pcrrcp@netzero.net> wrote in message

news:ut5eJUKsIHA.4492@TK2MSFTNGP02.phx.gbl...

> "Gary S. Terhune" <none> wrote in message

> news:eP6f$q$rIHA.6096@TK2MSFTNGP06.phx.gbl...

> | My mistake. Not sure what happened. Yes, I get that same message with

> v. 11,

> | no I don't get it with v. 8. Note that the message has one of those

> "Don't

> | ask me again" check boxes, so...

>

> Yep. It may be you unchecked it in a "power user" fit of impatience, as

> the WinZip help screen suggests. After that, XP-irradiation may have

> poked the memory of having done so out of you. Some day shortly I may

> well go ahead & ignore WinZip's warning about it & click an

> innocuous-looking .inf just to see what happens! Will it honor Windows's

> default to just open it in Notepad despite the warning-- or will it

> attempt to install?

>

> | --

> | Gary S. Terhune

> | MS-MVP Shell/User

> | http://www.grystmill.com

> |

> | "PCR" <pcrrcp@netzero.net> wrote in message

> | news:u1OriT%23rIHA.3420@TK2MSFTNGP04.phx.gbl...

> | > Gary S. Terhune wrote:

> | > | WinZip (I'm testing versions 8 and 11) does NOT change file

> | > | associations. Double-clicking a file inside a WinZip file does the

> | > | same thing as double-clicking it outside the WinZip file. Nor does

> | > | WinZip put up that warning you quote, I am 99.9999% sure that that

> | > | warning comes from elsewhere, though I can't recall where. I've

> seen

> | > | it often, that exact same warning, and not in conjunction with

> | > | WinZip. Try an INF file that isn't in a WinZip file. Do you get

> the

> | > | warning?

> | >

> | > Any .inf I click outside WinZip opens in Notepad-- no warning. If I

> | > R-Clk, Install-- I get no warning either. It just does its work,

> (but I

> | > tested with a do-nothing .inf).

> | >

> | > I guess v.9.0 SR-1 shouldn't be an exception. But I definitely see

> that

> | > warning in it. Did you open Scr56en.exe in WinZip, & click

> SCR56EN.INF

> | > in its window? What happens when you click an .exe file in a WinZip

> | > window? You should definitely get the warning for that! Does your

> | > version of WinZip have the this in its Help screens...

> | >

> | > .......Quote a WinZip help screen.............

> | > WinZip's Handling of Potentially Unsafe File Types

> | >

> | > This version of WinZip has been enhanced to warn you about some of

> the

> | > most common situations in which you could become infected by a virus

> | > compressed inside a Zip file.

> | >

> | > This enhancement involves several small changes to WinZip that we

> | > believe will, in these specific situations, make it less likely for

> you

> | > to be affected by a virus that has been placed inside a Zip file.

> | >

> | > If you are using the WinZip Classic interface and you double-click a

> | > file with a potentially unsafe file type, such as .EXE, WinZip will

> | > display a dialog warning you about the potentially unsafe file type.

> You

> | > can then decide whether you really want to open it.

> | >

> | > Note that this warning is only displayed when you double-click a

> file

> | > within a Zip file to open that file from within WinZip. You can

> still

> | > extract files from a Zip file to a folder on your disk without a

> | > warning, regardless of the file types involved.

> | >

> | > If you are using the WinZip Wizard interface, the Wizard will

> display a

> | > dialog to notify you when you begin to work with a Zip file that

> | > contains any files on WinZip's list of potentially unsafe file

> types.

> | > You can then decide whether you want to continue working with that

> Zip

> | > file.

> | >

> | > WinZip also displays warning text when you try to install software

> | > contained within a Zip file. For example, when you use the Install

> | > button in the WinZip Classic interface to install software from a

> Zip

> | > file that contains a Setup program, WinZip will display a dialog

> | > reminding you not to install untrusted software.

> | >

> | > Some WinZip users, especially "power users" who frequently work with

> | > some of the file types that WinZip considers potentially unsafe,

> will

> | > prefer not to see these warnings repeatedly. Therefore, all of the

> new

> | > warning dialogs have check boxes that you can use to stop them from

> | > displaying again.

> | > ..........EOQ.................................

> | >

> | > | --

> | > | Gary S. Terhune

> | > | MS-MVP Shell/User

> | > | http://www.grystmill.com

> | > |

> | > | "PCR" <pcrrcp@netzero.net> wrote in message

> | > | news:eqFxVlwrIHA.1200@TK2MSFTNGP03.phx.gbl...

> | > |

> | > | <SNIP>

> | > |>

> | > |> | BTW the default

> | > |> | action for inf files is to OPEN them in the default text

> editor,

> | > |> | never to install them - unlike .reg files which merge with

> prompt

> | > |> | as the default action . So it's OK to double click inf files

> in

> | > |> | the WinZip window to read them.

> | > |>

> | > |> It may be the default to open .inf files as you say in Notepad,

> | > |> instead of running them-- and indeed mine do default to that. To

> get

> | > |> mine to run, I must R-Clk, & select "Run".

> | >

> | > I meant-- R-Clk, & select "Install".

> | >

> | > |> HOWEVER, WinZip puts up

> | > |> the scary caution...

> | > |>

> | > |> This file has a potentially unsafe file type of .INF:

> | > |> SCR56EN.INF

> | > |> You should not open this file if you received it from an

> untrusted

> | > |> source, or in an attachment to an unexpected or suspicious

> | > |> e-mail message.

> | > |> Do you still want to open this file?

> | > |>

> | > |> I'm just uncertain what WinZip intends to do, despite Windows's

> | > |> default. You have only sworn twice that WinZip will have the same

> | > |> default. If you swear it once more-- I will try it! Also, you

> must

> | > |> swear thrice that WinZip v.9.0 SR-1 gives you the same scary

> warning!

> | > |>

> | >

> | > ...snip

> | > --

> | > Thanks or Good Luck,

> | > There may be humor in this post, and,

> | > Naturally, you will not sue,

> | > Should things get worse after this,

> | > PCR

> | > pcrrcp@netzero.net

> | >

> | >

> |

>

>

Guest PCR
Posted

Re: Bootup - Shutdown logger

 

Gary S. Terhune wrote:

| It's just as if you'd d-clicked it in a normal folder. Just think of

| WinZip as a folder.

 

Alright. Despite the horrible warning, in a requestor titled "WinZip

Caution"...

 

This file has a potentially unsafe file type of .INF:

SCR56EN.INF

You should not open this file if you received it from an

untrusted source, or in an attachment to an unexpected or

suspicious e-mail message.

Do you still want to open this file?

 

....WinZip v.9.0 SR-1 just opened the clicked .inf file in Notepad. And

thanks to Lee, too. I took your assurance on top his two to be the three

swearings I needed!

 

| --

| Gary S. Terhune

| MS-MVP Shell/User

| http://www.grystmill.com

|

| "PCR" <pcrrcp@netzero.net> wrote in message

| news:ut5eJUKsIHA.4492@TK2MSFTNGP02.phx.gbl...

|> "Gary S. Terhune" <none> wrote in message

|> news:eP6f$q$rIHA.6096@TK2MSFTNGP06.phx.gbl...

|> | My mistake. Not sure what happened. Yes, I get that same message

|> | with v. 11, no I don't get it with v. 8. Note that the message has

|> | one of those "Don't ask me again" check boxes, so...

|>

|> Yep. It may be you unchecked it in a "power user" fit of impatience,

|> as the WinZip help screen suggests. After that, XP-irradiation may

|> have poked the memory of having done so out of you. Some day shortly

|> I may well go ahead & ignore WinZip's warning about it & click an

|> innocuous-looking .inf just to see what happens! Will it honor

|> Windows's default to just open it in Notepad despite the warning--

|> or will it attempt to install?

|>

|> | --

|> | Gary S. Terhune

|> | MS-MVP Shell/User

|> | http://www.grystmill.com

|> |

|> | "PCR" <pcrrcp@netzero.net> wrote in message

|> | news:u1OriT%23rIHA.3420@TK2MSFTNGP04.phx.gbl...

|> | > Gary S. Terhune wrote:

|> | > | WinZip (I'm testing versions 8 and 11) does NOT change file

|> | > | associations. Double-clicking a file inside a WinZip file does

|> | > | the same thing as double-clicking it outside the WinZip file.

|> | > | Nor does WinZip put up that warning you quote, I am 99.9999%

|> | > | sure that that warning comes from elsewhere, though I can't

|> | > | recall where. I've seen it often, that exact same warning, and

|> | > | not in conjunction with WinZip. Try an INF file that isn't in

|> | > | a WinZip file. Do you get the warning?

|> | >

|> | > Any .inf I click outside WinZip opens in Notepad-- no warning.

|> | > If I R-Clk, Install-- I get no warning either. It just does its

|> | > work, (but I tested with a do-nothing .inf).

|> | >

|> | > I guess v.9.0 SR-1 shouldn't be an exception. But I definitely

|> | > see that warning in it. Did you open Scr56en.exe in WinZip, &

|> | > click SCR56EN.INF in its window? What happens when you click an

|> | > .exe file in a WinZip window? You should definitely get the

|> | > warning for that! Does your version of WinZip have the this in

|> | > its Help screens...

|> | >

|> | > .......Quote a WinZip help screen.............

|> | > WinZip's Handling of Potentially Unsafe File Types

|> | >

|> | > This version of WinZip has been enhanced to warn you about some

|> | > of the most common situations in which you could become infected

|> | > by a virus compressed inside a Zip file.

|> | >

|> | > This enhancement involves several small changes to WinZip that we

|> | > believe will, in these specific situations, make it less likely

|> | > for you to be affected by a virus that has been placed inside a

|> | > Zip file.

|> | >

|> | > If you are using the WinZip Classic interface and you

|> | > double-click a file with a potentially unsafe file type, such as

|> | > .EXE, WinZip will display a dialog warning you about the

|> | > potentially unsafe file type. You can then decide whether you

|> | > really want to open it.

|> | >

|> | > Note that this warning is only displayed when you double-click a

|> | > file within a Zip file to open that file from within WinZip. You

|> | > can still extract files from a Zip file to a folder on your disk

|> | > without a warning, regardless of the file types involved.

|> | >

|> | > If you are using the WinZip Wizard interface, the Wizard will

|> | > display a dialog to notify you when you begin to work with a Zip

|> | > file that contains any files on WinZip's list of potentially

|> | > unsafe file types. You can then decide whether you want to

|> | > continue working with that Zip file.

|> | >

|> | > WinZip also displays warning text when you try to install

|> | > software contained within a Zip file. For example, when you use

|> | > the Install button in the WinZip Classic interface to install

|> | > software from a Zip file that contains a Setup program, WinZip

|> | > will display a dialog reminding you not to install untrusted

|> | > software.

|> | >

|> | > Some WinZip users, especially "power users" who frequently work

|> | > with some of the file types that WinZip considers potentially

|> | > unsafe, will prefer not to see these warnings repeatedly.

|> | > Therefore, all of the new warning dialogs have check boxes that

|> | > you can use to stop them from displaying again.

|> | > ..........EOQ.................................

|> | >

|> | > | --

|> | > | Gary S. Terhune

|> | > | MS-MVP Shell/User

|> | > | http://www.grystmill.com

|> | > |

|> | > | "PCR" <pcrrcp@netzero.net> wrote in message

|> | > | news:eqFxVlwrIHA.1200@TK2MSFTNGP03.phx.gbl...

|> | > |

|> | > | <SNIP>

|> | > |>

|> | > |> | BTW the default

|> | > |> | action for inf files is to OPEN them in the default text

|> | > |> | editor, never to install them - unlike .reg files which

|> | > |> | merge with prompt as the default action . So it's OK to

|> | > |> | double click inf files in the WinZip window to read them.

|> | > |>

|> | > |> It may be the default to open .inf files as you say in

|> | > |> Notepad, instead of running them-- and indeed mine do default

|> | > |> to that. To get mine to run, I must R-Clk, & select "Run".

|> | >

|> | > I meant-- R-Clk, & select "Install".

|> | >

|> | > |> HOWEVER, WinZip puts up

|> | > |> the scary caution...

|> | > |>

|> | > |> This file has a potentially unsafe file type of .INF:

|> | > |> SCR56EN.INF

|> | > |> You should not open this file if you received it from an

|> | > |> untrusted source, or in an attachment to an unexpected or

|> | > |> suspicious e-mail message.

|> | > |> Do you still want to open this file?

|> | > |>

|> | > |> I'm just uncertain what WinZip intends to do, despite

|> | > |> Windows's default. You have only sworn twice that WinZip will

|> | > |> have the same default. If you swear it once more-- I will try

|> | > |> it! Also, you must swear thrice that WinZip v.9.0 SR-1 gives

|> | > |> you the same scary warning!

|> | > |>

|> | >

|> | > ...snip

|> | > --

|> | > Thanks or Good Luck,

|> | > There may be humor in this post, and,

|> | > Naturally, you will not sue,

|> | > Should things get worse after this,

|> | > PCR

|> | > pcrrcp@netzero.net

 

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

Guest PCR
Posted

Re: Bootup - Shutdown logger

 

PCR wrote:

| Lee wrote:

|| On May 5, 5:40 pm, "PCR" <pcr...@netzero.net> wrote:

||> Lee wrote:

||>

||> | On May 2, 1:57 am, "PCR" <pcr...@netzero.net> wrote:|> Lee wrote:

||>

||> |>

 

....snip

||> | BTW the default

||> | action for inf files is to OPEN them in the default text editor,

||> | never to install them - unlike .reg files which merge with prompt

||> | as the default action . So it's OK to double click inf files in

||> | the WinZip window to read them.

||>

||> It may be the default to open .inf files as you say in Notepad,

||> instead of running them-- and indeed mine do default to that. To get

||> mine to run, I must R-Clk, & select "Run". HOWEVER, WinZip puts up

||> the scary caution...

||>

||> This file has a potentially unsafe file type of .INF:

||> SCR56EN.INF

||> You should not open this file if you received it from an untrusted

||> source, or in an attachment to an unexpected or suspicious

||> e-mail message.

||> Do you still want to open this file?

||>

||> I'm just uncertain what WinZip intends to do, despite Windows's

||> default. You have only sworn twice that WinZip will have the same

||> default. If you swear it once more-- I will try it! Also, you must

||> swear thrice that WinZip v.9.0 SR-1 gives you the same scary

||> warning!

||

|| But I can't since I run version 8 of WinZip which has no such

|| warning. I would be uncertain too with that dialog coming at me, but

|| find it hard to believe that WinZip would alter an inf file's default

|| action which is still set up with this registry entry:

|| [HKEY_CLASSES_ROOT\inffile\shell\open\command]

|| @="C:\\WINDOWS\\NOTEPAD.EXE %1"

||

|| It clearly says Notepad.

|

| Mine says the same. Also, there is...

|

| [HKEY_CLASSES_ROOT\inffile\shell\install]

| @="&Install"

|

| [HKEY_CLASSES_ROOT\inffile\shell\install\command]

| @="c:\\windows\\rundll.exe setupx.dll,InstallHinfSection

| DefaultInstall 132 %1"

|

|| You are excused from the exercise, PCR.

|

| Yea. I just don't know whether WinZip will honor Windows's default, or

| actually install the .inf. It isn't so hard to simply extract the

| .inf & then click it, after all. So far, I've found nothing terribly

| specific about .inf in WinZip's voluminous .docs-- nothing to

| distinguish it from .exe, for instance.

 

UPDATE... OK, fine!, I clicked it. It was as you originally said, that

WinZip too opens it in Notepad, despite the dread warning. OK, thanks.

 

 

....snip

--

Thanks or Good Luck,

There may be humor in this post, and,

Naturally, you will not sue,

Should things get worse after this,

PCR

pcrrcp@netzero.net

  • 2 weeks later...
Guest Rick Chauvin
Posted

Re: Bootup - Shutdown logger

 

---- Original Message ----

> From: "Rick Chauvin" Newsgroups: microsoft.public.win98.gen_discussion

> Sent: Monday, September 01, 2008 7:27 PM

> Subject: Re: Bootup - Shutdown logger

>

> "PCR" <pcrrcp@netzero.net> wrote in message

> news:%23TLnMgyqIHA.1736@TK2MSFTNGP04.phx.gbl...

> [....]

>

>> Subsequently (as I posted elsewhere) I did discover a later entry in

>> my SFCLog.txt showing...

>>

>> jscript.dll Updated 5.6.0.8825 8/9/04 5.6.0.8831 5/17/06 No

>

> [....]

>

> All of our jscript.dll's were updated to 5.6.0.8831 via:

> Microsoft Security Bulletin MS06-023 (917344)

> Vulnerability in Microsoft JScript Could Allow Remote Code Execution

> Published: June 13, 2006

> ...which the install file for 9x obtained from WU was named:

> Windows9X-KB917344-x86-enu.exe

> Looking back in my software tracking install ecl's shows that the only

> thing that this update (Windows9X-KB917344-x86-enu.exe) install did was

> replace the previous jscript.dll and added a JS9XEN.INF file, there were

> actually no registry entries written with this update to show any

> relevance.

> Rick

Posted

Re: Bootup - Shutdown logger

 

"Rick Chauvin" <justask@nospamz.com> wrote in message

news:eJbRPyDuIHA.5892@TK2MSFTNGP02.phx.gbl...

| ---- Original Message ----

| > From: "Rick Chauvin" Newsgroups:

microsoft.public.win98.gen_discussion

| > Sent: Monday, September 01, 2008 7:27 PM

| > Subject: Re: Bootup - Shutdown logger

| >

| > "PCR" <pcrrcp@netzero.net> wrote in message

| > news:%23TLnMgyqIHA.1736@TK2MSFTNGP04.phx.gbl...

| > [....]

| >

| >> Subsequently (as I posted elsewhere) I did discover a later entry

in

| >> my SFCLog.txt showing...

| >>

| >> jscript.dll Updated 5.6.0.8825 8/9/04 5.6.0.8831 5/17/06 No

| >

| > [....]

| >

| > All of our jscript.dll's were updated to 5.6.0.8831 via:

| > Microsoft Security Bulletin MS06-023 (917344)

| > Vulnerability in Microsoft JScript Could Allow Remote Code

Execution

| > Published: June 13, 2006

| > ...which the install file for 9x obtained from WU was named:

| > Windows9X-KB917344-x86-enu.exe

| > Looking back in my software tracking install ecl's shows that the

only

| > thing that this update (Windows9X-KB917344-x86-enu.exe) install did

was

| > replace the previous jscript.dll and added a JS9XEN.INF file, there

were

| > actually no registry entries written with this update to show any

| > relevance.

| > Rick

 

Thanks, Chauvin. That confirms Lee's statement that it was KB917344 that

did that update. Yes, looking now at JS9XEN.INF (which somehow I didn't

know was involved until now), I can see it does nothing discernibly more

than copy those two files into separate folders & possibly to have

JScript.dll register itself. I know the .dll is mentioned in 3 Registry

keys, but its version is never specified. Here is one...

 

[HKEY_CLASSES_ROOT\CLSID\{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}\InprocSe

rver32]

@="C:\\WINDOWS\\SYSTEM\\JSCRIPT.DLL"

"ThreadingModel"="Both"

 

....Therefore, no tracker would notice the difference, if the .dll had

been registered before. Here is the .inf...

 

[Version]

Signature=$CHICAGO$

AdvancedINF=2.5,%VersionWarning%

 

[DefaultInstall]

CatalogName =js9xen.cat

CopyFiles =Copy.Engines, Copy.Inf

RegisterOCXs=RegOCX

 

[DefaultInstall.NT]

CopyFiles =Copy.Engines, Copy.Inf

RegisterOCXs=RegOCX.NT

 

[DestinationDirs]

Copy.Inf = 17 ; %WinDir%\Inf

Copy.Engines = 11 ; %WinDir%\System32

 

[Copy.Engines]

jscript.dll,,,32

 

[Copy.Inf]

js9xen.inf,,,32

 

[RegOCX]

%11%\jscript.dll

 

[RegOCX.NT]

%11%\jscript.dll

 

[sourceDisksNames]

1=%DiskName%,,1

 

[sourceDisksFiles]

jscript.dll=1

js9xen.inf=1

 

[strings]

VersionWarning= "This setup requires a newer version of the Setup API."

DiskName= "Windows Script Version 5.6"

Product= "Windows Script version 5.6"

 

Lang=EN

×
×
  • Create New...