warning ! microsoft last update replacing tcpip.sys

[bengalsdorf]

microsoft last update for winxp sp2 changing "tcpip.sys" file. even you patched tcpip.sys with no limitation version , last update replacing it with limited version(10 tcp/ip connection limit). this is very bad for ed2k network users. you must eliminate it with a new version patch from lvllord's tcpip.sys patcher. othervise your emule performance will decrease dramatically. dont miss that.


.download tcpip.sys patcher
filename is "EvID4226Patch.exe" . you can find in ed2k network , use search. first , apply all microsoft updates from official microsoft website, then use "EvID4226Patch.exe". all limitations is gone :angry:

[Afronaut]

Why on earth do I need to hack my system files to make eMule work?

I would think they would make the eMule to work with the system files.

[Wallace_Askew]

What is the name of this update?

[erRor67]

u can just redownload the file from lvllord.de

[Wallace_Askew]

no...what is the name of the update from microsoft?

[Afronaut]

Yes, im also interested to know what update causes the tcpip.sys to be overwritten.

Can you back this up or what?
Some links could be usefull.


For folks who dont know what that system file:


The file TCPIP.SYS in Service Pack 2 for Windows XP is responsible for the limiting of concurrent connections. This usually affects programs such as online multiplayer games (where the number of users is massive) or download programs. In any case, other people just don't like having such a small limit. The current limit is 10 Concurrent Connections within a second.

[Afronaut]

What I found:

KB884020 (http://support.microsoft.com/default.aspx?kbid=884020) change the TCPIP.SYS file as does KB893066 (http://www.microsoft.com/technet/security/Bulletin/MS05-019.mspx) .

I get my info from MSFN (http://www.msfn.org/board/index.php?showtopic=31886) , RyanVM (http://ryanvm.msfn.org/) and teh Mikro$soft.

[{I}{K}{E}]

does anyone has a patch for version 2685 ?
because ALL patches I found replaces the original with an older version :frusty:

patch mentioned in the first post is also outdated

[shanu]

seems a bit like the tcp.sys will be reset with every update release by M$
the last 2 update releases have reset mine
i use the patch from the first post each time i update windows (manually update) and it seems to work ok, i did use a patch by falcon technologies a while ago and when i ran it i was getting a message saying something along the lines of "the tcp.sys file you are trying to install is older than the file currently installed"
i just ignored it, i think it was just windows detecting the removal of a "latest update" for an older version

[Afronaut]

There's a way to check your updates, ie. Hotfixes.

Go to Start, Run, type CMD and hit enter. That will open up the command prompt.

Type:

qfecheck /v
And hit enter.
You'll see what files Windows thinks are sort of "not-so-original"
:lol:

If you really want to have "clean" files, check the hotfix number, for example:
KB889940 <--- I made that up
Then all you need to do is go to Microsoft site and search for the patch and install it.
Bear in mind that its not that simple really, some hotfixes overwrites/replaces other.
To know which one does what you need to dig deeper and read a lot about them.

Personally, my Windows files are pretty much hacked allright.
I dont care about it really.
And, it does not mean that the files dont work or you've been hacked etc.
I use questionable files because I use different themes and whatnot...

Also, the Windows Update site wont list the same as this command as it dont check the files,
it just looks for the registry entries.
The command actually reads the files, headers or some such.

That MSFN site is pretty good place to look info about hotfixes btw.
They tend to update their topics rather often.

[shanu]

" 'qfecheck' is not recognised as an internal or external command, operable program or batch file"
is all i get

[Afronaut]

" 'qfecheck' is not recognised as an internal or external command, operable program or batch file"
is all i get

k, here's what I get:

http://img98.echo.cx/img98/9648/qfecheck2to.th.jpg (http://img98.echo.cx/my.php?image=qfecheck2to.jpg)

I used black to brush over some personal info, but the yellow is where the command was written.
Also, the switch /v , I think its for verbal, ie. show info on the cmd prompt.


I got XP Pro SP2, I wonder if its exclusive for that only, or naybe is one of those little things I've added byt time.
Little DOS tools.
:)

[Afronaut]

Ok, here's the deal:

Clicky Clicky this (http://www.microsoft.com/downloads/details.aspx?FamilyID=155c7c58-102e-47b0-a12a-bfab8cfccc03&DisplayLang=en)

More info here (http://www.theeldergeek.com/using_qfecheck.htm)

It's kinda funneh what GOOGLE (http://www.google.com./search?biw=1024&hl=fi&q=qfecheck&btnG=Google-haku&lr=) can do.

:lol:

[shanu]

:lol: yeah i know, i just couldn't be bothered searching & wasn't worried about it, i don't care if my system files aren't what m$ says they should be :P , i disabled quite a few services in xp-pro sp2, was thinking it was either something i disabled or something i didn't have, thanks anyway :)

[lynx]

You can get the latest patcher here (http://mitglied.lycos.de/lvllord/download-mirror.htm). Sounds like it works with all versions of tcpip.sys, even 64-bit version. :cool:

[Afronaut]

Thanks.

Gotta try this some day.

Right now im using nLite and that does the patching for me.
Alltho, im losing the patch whilst updating.
Well, then I gotta try how this lvl patcher works.

:)

[RealitY]

You can get the latest patcher here (http://mitglied.lycos.de/lvllord/download-mirror.htm). Sounds like it works with all versions of tcpip.sys, even 64-bit version. :cool:
I have this but thought it was oudated based on what IKE mention and Ive yet to try it as its dated over a month ago...

[Afronaut]

You can get the latest patcher here (http://mitglied.lycos.de/lvllord/download-mirror.htm). Sounds like it works with all versions of tcpip.sys, even 64-bit version. :cool:
I have this but thought it was oudated based on what IKE mention and Ive yet to try it as its dated over a month ago...

I was thinking the same.

It could work if the lvl-patcher dont change the file,
if it patches it so that Windows Update dont notice it.



Gotta test it some day, im too lazy today, hehe.
:)

(i hear there's windows.update.v6 on the beta testing,
how much that will change the situation remains to be seen also)

[Virtualbody1234]

Has anyone tried encrypting the tcpip.sys to prevent it from being overwritten?

Find the file in C:\WINDOWS\system32\drivers then right click the tcpip.sys, Select Properties>Advanced>Add a checkmark to: Encrypt contents to secure data. Click ok and apply.

I think that will stop the file from being overwrtten but I haven't tested it yet.


Edit: Hmmm Windows wont let me encrypt that file. Maybe some atributes need to changed...

[shanu]

Maybe some atributes need to changed...
thanks for the idea Virtualbody1234, i just had a play with some things and it appears the system can be denied permission to change it :)
what i did was - turned off simple file sharing(brings up security tab on file properties), found the tcp.sys, properties, security, advanced, under permission entries select system, edit, Create Files / Write Data & Create Folders / Append Data set both to deny, ok, apply.
then i ran the update that resets the tcp.sys back to default, restarted, ran the lvllord patch and when it opened it said - current maximum concurrent half-open connections: 50
do you really want to change this limit to 10

[Virtualbody1234]

Nice one, shanu.

For those who don't know how to turn off simple file sharing...

Open an explorer window, Tools>Folder Options...>View --- In the Advanced settings, scroll down to the bottom and remove the checkmark [ ] Use simple file sharing (Recommended) and click ok.

Note: Remember to re enable simple file sharing after setting the advanced attributes if you share files on a network.

[shanu]

i only update windows manually, auto is disabled, with auto updates on windows may see that update as needed everytime it checks, so it could be an issue for some people, with a bit of luck it won't be though :)

[shanu]

had a bit of negative feedback on this idea, reason is security.
apparently the tcp patch only overwrites a very small amount of data, by denying the system the ability to update the file it may cause critical updating for that file that is not effected by the patch not to happen, so it appears that even though windows can be stopped from updating this file it may be a better option to let it update and re-run the patch after updating - sorry for any hassles caused

[kazaaliteforever]

use this patch exe, is working fine and simple

ed2k://|file|xpsp2-fosi.zip|270518|B8FA109F0578B17B5B8538A5BD758D74|/

[Supernode]

Is i better to use windows server 2003 for p2p, to avoid this problem, and get better download?

[danieln]

i'd like to know too

[rnichilo]

thanks for the info ya i noticed that emule wasnt workin today! thx