warning ! microsoft last update replacing tcpip.sys
(Click here to view the original thread with full colors/images)Posted by: bengalsdorf
microsoft last update for winxp sp2 changing "tcpip.sys" file. even you patched tcpip.sys with no limitation version , last update replacing it with limited version(10 tcp/ip connection limit). this is very bad for ed2k network users. you must eliminate it with a new version patch from lvllord's tcpip.sys patcher. othervise your emule performance will decrease dramatically. dont miss that.
.download tcpip.sys patcher
filename is "EvID4226Patch.exe" . you can find in ed2k network , use search. first , apply all microsoft updates from official microsoft website, then use "EvID4226Patch.exe". all limitations is gone :angry:
Posted by: Afronaut
Why on earth do I need to hack my system files to make eMule work?
I would think they would make the eMule to work with the system files.
Posted by: Wallace_Askew
What is the name of this update?
Posted by: erRor67
u can just redownload the file from lvllord.de
Posted by: Wallace_Askew
no...what is the name of the update from microsoft?
Posted by: Afronaut
Yes, im also interested to know what update causes the tcpip.sys to be overwritten.
Can you back this up or what?
Some links could be usefull.
For folks who dont know what that system file:
The file TCPIP.SYS in Service Pack 2 for Windows XP is responsible for the limiting of concurrent connections. This usually affects programs such as online multiplayer games (where the number of users is massive) or download programs. In any case, other people just don't like having such a small limit. The current limit is 10 Concurrent Connections within a second.
Posted by: Afronaut
What I found:
KB884020 (http://support.microsoft.com/default.aspx?kbid=884020) change the TCPIP.SYS file as does KB893066 (http://www.microsoft.com/technet/security/Bulletin/MS05-019.mspx) .
I get my info from MSFN (http://www.msfn.org/board/index.php?showtopic=31886) , RyanVM (http://ryanvm.msfn.org/) and teh Mikro$soft.
Posted by: {I}{K}{E}
does anyone has a patch for version 2685 ?
because ALL patches I found replaces the original with an older version :frusty:
patch mentioned in the first post is also outdated
Posted by: shanu
seems a bit like the tcp.sys will be reset with every update release by M$
the last 2 update releases have reset mine
i use the patch from the first post each time i update windows (manually update) and it seems to work ok, i did use a patch by falcon technologies a while ago and when i ran it i was getting a message saying something along the lines of "the tcp.sys file you are trying to install is older than the file currently installed"
i just ignored it, i think it was just windows detecting the removal of a "latest update" for an older version
Posted by: Afronaut
There's a way to check your updates, ie. Hotfixes.
Go to Start, Run, type CMD and hit enter. That will open up the command prompt.
Type:
qfecheck /v
And hit enter.
You'll see what files Windows thinks are sort of "not-so-original"
:lol:
If you really want to have "clean" files, check the hotfix number, for example:
KB889940 <--- I made that up
Then all you need to do is go to Microsoft site and search for the patch and install it.
Bear in mind that its not that simple really, some hotfixes overwrites/replaces other.
To know which one does what you need to dig deeper and read a lot about them.
Personally, my Windows files are pretty much hacked allright.
I dont care about it really.
And, it does not mean that the files dont work or you've been hacked etc.
I use questionable files because I use different themes and whatnot...
Also, the Windows Update site wont list the same as this command as it dont check the files,
it just looks for the registry entries.
The command actually reads the files, headers or some such.
That MSFN site is pretty good place to look info about hotfixes btw.
They tend to update their topics rather often.
Posted by: shanu
" 'qfecheck' is not recognised as an internal or external command, operable program or batch file"
is all i get
Posted by: Afronaut
" 'qfecheck' is not recognised as an internal or external command, operable program or batch file"
is all i get
k, here's what I get:
http://img98.echo.cx/img98/9648/qfecheck2to.th.jpg (http://img98.echo.cx/my.php?image=qfecheck2to.jpg)
I used black to brush over some personal info, but the yellow is where the command was written.
Also, the switch /v , I think its for verbal, ie. show info on the cmd prompt.
I got XP Pro SP2, I wonder if its exclusive for that only, or naybe is one of those little things I've added byt time.
Little DOS tools.
:)
Posted by: Afronaut
Ok, here's the deal:
Clicky Clicky this (http://www.microsoft.com/downloads/details.aspx?FamilyID=155c7c58-102e-47b0-a12a-bfab8cfccc03&DisplayLang=en)
More info here (http://www.theeldergeek.com/using_qfecheck.htm)
It's kinda funneh what GOOGLE (http://www.google.com./search?biw=1024&hl=fi&q=qfecheck&btnG=Google-haku&lr=) can do.
:lol:
Posted by: shanu
:lol: yeah i know, i just couldn't be bothered searching & wasn't worried about it, i don't care if my system files aren't what m$ says they should be :P , i disabled quite a few services in xp-pro sp2, was thinking it was either something i disabled or something i didn't have, thanks anyway :)
Posted by: lynx
You can get the latest patcher here (http://mitglied.lycos.de/lvllord/download-mirror.htm). Sounds like it works with all versions of tcpip.sys, even 64-bit version. :cool:
Posted by: Afronaut
Thanks.
Gotta try this some day.
Right now im using nLite and that does the patching for me.
Alltho, im losing the patch whilst updating.
Well, then I gotta try how this lvl patcher works.
:)
Posted by: RealitY
You can get the latest patcher here (http://mitglied.lycos.de/lvllord/download-mirror.htm). Sounds like it works with all versions of tcpip.sys, even 64-bit version. :cool:
I have this but thought it was oudated based on what IKE mention and Ive yet to try it as its dated over a month ago...
Posted by: Afronaut
You can get the latest patcher here (http://mitglied.lycos.de/lvllord/download-mirror.htm). Sounds like it works with all versions of tcpip.sys, even 64-bit version. :cool:
I have this but thought it was oudated based on what IKE mention and Ive yet to try it as its dated over a month ago...
I was thinking the same.
It could work if the lvl-patcher dont change the file,
if it patches it so that Windows Update dont notice it.
Gotta test it some day, im too lazy today, hehe.
:)
(i hear there's windows.update.v6 on the beta testing,
how much that will change the situation remains to be seen also)
Posted by: Virtualbody1234
Has anyone tried encrypting the tcpip.sys to prevent it from being overwritten?
Find the file in C:\WINDOWS\system32\drivers then right click the tcpip.sys, Select Properties>Advanced>Add a checkmark to: Encrypt contents to secure data. Click ok and apply.
I think that will stop the file from being overwrtten but I haven't tested it yet.
Edit: Hmmm Windows wont let me encrypt that file. Maybe some atributes need to changed...
Posted by: shanu
Maybe some atributes need to changed...
thanks for the idea Virtualbody1234, i just had a play with some things and it appears the system can be denied permission to change it :)
what i did was - turned off simple file sharing(brings up security tab on file properties), found the tcp.sys, properties, security, advanced, under permission entries select system, edit, Create Files / Write Data & Create Folders / Append Data set both to deny, ok, apply.
then i ran the update that resets the tcp.sys back to default, restarted, ran the lvllord patch and when it opened it said - current maximum concurrent half-open connections: 50
do you really want to change this limit to 10
Posted by: Virtualbody1234
Nice one, shanu.
For those who don't know how to turn off simple file sharing...
Open an explorer window, Tools>Folder Options...>View --- In the Advanced settings, scroll down to the bottom and remove the checkmark [ ] Use simple file sharing (Recommended) and click ok.
Note: Remember to re enable simple file sharing after setting the advanced attributes if you share files on a network.
Posted by: shanu
i only update windows manually, auto is disabled, with auto updates on windows may see that update as needed everytime it checks, so it could be an issue for some people, with a bit of luck it won't be though :)
Posted by: shanu
had a bit of negative feedback on this idea, reason is security.
apparently the tcp patch only overwrites a very small amount of data, by denying the system the ability to update the file it may cause critical updating for that file that is not effected by the patch not to happen, so it appears that even though windows can be stopped from updating this file it may be a better option to let it update and re-run the patch after updating - sorry for any hassles caused
Posted by: kazaaliteforever
use this patch exe, is working fine and simple
ed2k://|file|xpsp2-fosi.zip|270518|B8FA109F0578B17B5B8538A5BD758D74|/
Posted by: Supernode
Is i better to use windows server 2003 for p2p, to avoid this problem, and get better download?
Posted by: danieln
i'd like to know too
Posted by: rnichilo
thanks for the info ya i noticed that emule wasnt workin today! thx