Documente Academic
Documente Profesional
Documente Cultură
The Options
===========
Note: This option is absolutely not necessary for the patch to work.
==================================================
F A Q - Frequently Asked Questions
=
==================================================
??????????????????????????????????????????????????????????????????????????????????
I want to change my CD-Key - but msoobe.exe also says
'Already Activated and don't show the Activation Dialog
??????????????????????????????????????????????????????????????????????????????????
PREVIOUS VERSIONS:
Start regedit and go to
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WPAEvents\[OOBETimer]
Edit this and set Last Byte to FF.
Start this -if the Activation are delete- to show the Activation dialog:
%SYSTEMROOT%\system32\oobe\msoobe.exe /A
%
??????????????????????????????????????????????????????????????????????????????????
Is it possible to integrate WPA_KILL.EXE in the WinXP setup-routine?
I have a WinXP pro setup CD (sp2 integrated).
??????????????????????????????????????????????????????????????????????????????????
makecab winlogon.exe
PREVIOUS VERSIONS:
In previous versions the PE Checksum of the file wasn't updated by the patch.
This caused setup to reject winlogon.exe during installation.
But this has been fixed in this version.
B
??????????????????????????????????????????????????????????????????????????????????
What changes does this patch to my System and how to undo it?
??????????????????????????????????????????????????????????????????????????????????
2.The RegistryValue
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WPAEvents\[OOBETimer]
is set to a fixed value as it is activated.
UNDO: Edit this with Regedit and set Last Byte to FF.
This will 'DeActivate' Windows
??????????????????????????????????????????????????????????????????????????????????
How to set another path to Winlogon.exe?
??????????????????????????????????????????????????????????????????????????????????
Note: You can also use the Windows Anti WPA Patch to de-protect
(Remove SelfCheckBlock SCB) from other protected
Microsoft exe and dll's:
For ex: licdll.dll, DPCDLL.dll or Windows PLUS! Pack Executables
Of course the WPA-Patch is skipped in this case.
??????????????????????????????????????????????????????????????????????????????????
The Patch doesn't work after I rebooted, the WPA Reminder pops up again.
Also during the Patch the Windows Systemfile Protection Dialogbox didn't
come up.
??????????????????????????????????????????????????????????????????????????????????
??????????????????????????????????????????????????????????????????????????????????
How to disable this damn Windows File Protection(WFP)?
??????????????????????????????????????????????????????????????????????????????????
SFCDisable (REG_DWORD)
0 = enabled (default - WinXP Professional)
1 = disabled, prompt at boot to re-enable - Require a kernel debugger to be hooked
up or this will be ignored!
2 = disabled at next boot only, no prompt to re-enable - Require a kernel debugger
to be hooked up or this will be ignored!
4 = enabled, with popups disabled (default - for all Server Windows)
More about this and how to re-enable the 'SFCDisable=0xffffff9d-setting'
-> http://www.collakesoftware.com/aboutwfp.htm
To make this more flexible here is a search'n'replace patch:
(Rename sfc_os.dll to sfc_os.OUT; copy sfc_os.OUT to sfc_os.dll)
Open sfc_os.dll in a hexeditor
Search for : 83 f8 9D 75 08 33 C0 40
Replace with: 83 f8 9D EB 08 33 C0 40
R
??????????????????????????????????????????????????????????????????????????????????
???????????
How you access/modify the winlogon.exe file while the winlogon process is
running ?
I only saw you are using standart API calls but I must have missed
something...
??????????????????????????????????????????????????????????????????????????????????
?
???????????
3.Now you can edit winlogon.exe. Of course you can't delete (or
modify) winlogon.bak as long as it is in use.
But you surely want to keep an backup of it, don't you?
Well the WPA-Patch doesn't rename your Windows installation path it deletes
temporary the path to this in you registry and restores it after the patch
(actually after you clicked on the OK button of the messagebox).
These Registry paths are:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup
"SourcePath"= "D:\installs\WinXP_CD"
"ServicePackSourcePath" ="D:\installs\WinXP_SP2"
"
----------------------------------------------------------
Just a hint to see if the patch worked without to Reboot:
J
(4.If you logoff the first user now 'winlogo.bak' is no long in use
and you can delete/modify it)
a
Ah and to get an better overview about the processes which are running on your
machine use this: http://www.sysinternals.com/ntw2k/freeware/procexp.shtml
And next time you can't delete a files use 'search handle' and enter the filename
then close the handle(=file) or kill the process...
t
??????????????????????????????????????????????????????????????????????????????????
PREVIOUS VERSIONS:
I got 'ERROR: Unknown Version of winlogon.exe'.
Can you include this version in your WPA-Patcher ?
??????????????????????????????????????????????????????????????????????????????????
Well please try the offset locator button to patch this new Version. Since Version
1.4 I added a heuristic search for offset locator which should find the right
offset by default and highlight it.
So -after you read the warning- just double click on the highlight Offset on the
List to set this as new patch-Offset.
L
??????????????????????????????????????????????????????????????????????????????????
PREVIOUS VERSIONS:
The patch don't work - if i click on the 'Activate Windows' link in the
start menu, it says Windows isn't activated and that there are only xx days
left.
??????????????????????????????????????????????????????????????????????????????????
This patch didn't stop the trial counter nor will it 'Activate' your Windows.
T
The WPA-Patch fixes the condition jump which decides whether windows was started
in safe mode
and the activation check should be skipped or if it was started in normal mode and
it should be done.
So in short it will make winlogon.exe to skip the is-Windows-activated check when
you logon.
y
To see if the patch work wait about one minute after you logon -
if the Activation reminder balloon in the tray bar DON'T pop up - the patch IS
working.
Some other things to see that it works
The messagebox that reminders you to active if there are only 5 days left and
The messagebox that says you're not allowed to logon until you active will be
a
away.
-------------------------------------------------
H
History
2.0.0 Oct'04
Patcher is now able to scan the crypt code parts
and to finds the right patch offset automatically
(no Version and offsetlocator hassle anymore)
PE Checksum of patched file is updated
Added Restore Backup Function
Added menu bar with Options
1.7.x Oct'04
*Internal Beta Versions*
1.6.2 Sep'04
Added MSOOBE Activation Fix
Added Readme.txt
1.6 Aug'04
Added support for WinXP SP2 2180
1.5 Jul'04
BugFix: Changes set by offsetlocator were not written to disk
1.4 Jun'04
Added support for WinXP SP2 RC1 2142
Added heuristic search for offset locator
1.3 Jun'04
Added support for WinXP SP2 RC1 2120
smaller changes
1.2 Apr'04
Patch recoded in Visual Basic 6
Added generic check block disabler
Added offset locator to support unknown versions
Added support for WinXP SP2 Beta and Win2K3
Improved Windows File Protection support
1.1 Nov'03
BugFix: SP1 crashed when returning from standby
Improved Windows File Protection support
1.0 Sep'03
First release using the apatch-engine
<http:\\Antiwpa.cjb.net> crackware2k@freenet.de