Help with /?? stuff

[Sylvain Petreolle]

I dont think all the jeys you have in RunOnce are from IE6 only.
Does IE6 really uses MSI ? I never have seen it.
Not that the "InstMsi1" and "InstMsi2" show that you made TWO tries to
install the MSI service.

Dont forget to clean your RunOnce Entries between installations.


And the 
> "OE_QDVDReg"="regsvr32 /s C:\\WINDOWS\\SYSTEM\\qdvd.dll"
> "InnoSetupRegFile.0000000001"="C:\\WINDOWS\\is-K6KCV.exe /REG"
dont come with IE6

> 
> The installation of IE6 makes an heavy use of the RunOnce and
> RunOnceEx 
> registry keys (when in "nt40" mode; I don't know how it behaves in
> win9x mode).
> The RunOnce entries are just command lines that need to be sent to 
> CreateProcess, e.g.
> 
> [Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce] 1042410063
> "BrandClearStubs"="RUNDLL32 
> IEDKCS32.DLL,BrandCleanInstallStubs
> >{60B49E34-C7CC-11D0-8953-00A0C90347FF}M 
> ICROS"
> "DelIE4SetupDir"="rundll32.exe advpack.dll,DelNodeRunDLL32 
> C:\\WINDOWS\\SYSTEM\\ie4setup,1"
> "GrpConv"="grpconv.exe -o"
> "InstMsi1"="rundll32.exe
> C:\\WINDOWS\\SYSTEM\\advpack.dll,DelNodeRunDLL32 
> \"C:\\WINDOWS\\Installer\\InstMsi0\""
> "InstMsi2"="rundll32.exe
> C:\\WINDOWS\\SYSTEM\\advpack.dll,DelNodeRunDLL32 
> \"C:\\WINDOWS\\Installer\\InstMsi1\""
> "MPlayer2_FixUp"="C:\\WINDOWS\\inf\\unregmp2.exe /FixUps"
> "Regsister WScript"="wscript -regserver"
> "RegTLib"="C:\\WINDOWS\\RegTLib.exe C:\\WINDOWS\\SYSTEM\\StdOle2.Tlb"
> "RunOnceEx"="rundll32.exe
> C:\\WINDOWS\\SYSTEM\\iernonce.dll,RunOnceExProcess"
> 
We only need to check if the first filename given is a readable
EXE/DLL.
Then do the appropriate. And you can see that the only executable that
seems to be called is rundll32.exe.
The only thing that we know nothing about is the "Flags" key.

> The RunOnceEx entries are trickier, as it seems they can both be
> command 
> lines and entries in the format "DLLName|Method|Argument", e.g.
> 
> [Software\\Microsoft\\Windows\\CurrentVersion\\RunOnceEx] 1042410240
> "Flags"=dword:00000a30
> 
> [Software\\Microsoft\\Windows\\CurrentVersion\\RunOnceEx\\090]
> 1038264583
> "050"="rundll32.exe advpack.dll,DelNodeRunDLL32
> C:\\WINDOWS\\SYSTEM\\dacui.dll"
> "054"="rundll32.exe advpack.dll,DelNodeRunDLL32 
> C:\\WINDOWS\\Catroot\\icatalog.mdb"
> 
> [Software\\Microsoft\\Windows\\CurrentVersion\\RunOnceEx\\100]
> 1038264583
> "000"="C:\\WINDOWS\\SYSTEM\\wininet.dll|DeleteIE3Cache|"


=====
Sylvain Petreolle
spetreolle at users.sourceforge.net 
Fight against Spam ! http://www.euro.cauce.org/en/index.html
ICQ #170597259

"Don't think you are. Know you are." Morpheus, in "Matrix".

___________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com