IR5 - The Official Windows 7 Rearm Solution

Discussion in 'MDL Projects and Applications' started by timesurfer, May 10, 2010.

Thread Status:
Not open for further replies.
  1. MasterDisaster

    MasterDisaster MDL Expert

    Aug 29, 2009
    1,255
    675
    60
    I have changed it. Try again.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,507
    458
    90
    I have had an idea.

    It seems that winlogon.exe locks the WPA registry key.

    Would it be possible to add some code to say, winload.exe to delete that key on every boot so that the system can be rearmed before the user logs on?
     
  3. timesurfer

    timesurfer MDL Developer

    Nov 22, 2009
    8,524
    4,112
    270
    Do you mean fully 4 rearms? If so then if they always had comp on then every 30 days they'd have to reboot just like now though.

    @MasterDisaster

    Perfect!
     
  4. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,507
    458
    90
    The only reason a reboot is required is because it modifies locked registry keys and files which sppsvc.exe is using.

    If we can somehow do what a rearm does BEFORE windows loads all those components...
     
  5. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,507
    458
    90
    It seems the reason a reboot is needed is to modify the WPA key and as its locked by winlogon it queues it to be one on next boot.
     
  6. timesurfer

    timesurfer MDL Developer

    Nov 22, 2009
    8,524
    4,112
    270
    True there is no reboot necessary for task importing or default key install or but is the reboot necessary for the nag "turn off" or can that be avoided before the the componets are loaded as well?
     
  7. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,507
    458
    90
    My idea is to have it in grace before windows boots.

    In theory its possible:
    We get a machine in its grace period and take all the license stores and back up the WPA key, and restore it using something like winload before sppsvc and winlogon.exe even load every boot

    Like a grace loader.
     
  8. MasterDisaster

    MasterDisaster MDL Expert

    Aug 29, 2009
    1,255
    675
    60
    After the deleting WPA key in RE mode, the sub keys are again generated after the logon process. If you open Registry Editor after a reset or a rearm, you will notice that new sub keys are generated. Each of these subkey has a time assigned to it that differs in milliseconds. From my observation about four new sub keys are generated on each rearm.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. timesurfer

    timesurfer MDL Developer

    Nov 22, 2009
    8,524
    4,112
    270
    What is the main thing that locks registry inside windows?
     
  10. MasterDisaster

    MasterDisaster MDL Expert

    Aug 29, 2009
    1,255
    675
    60
    I think "System Idle Process" with PID 0.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,507
    458
    90
    The system idle process just shows what CPU you aren't using lol, its so theres always one thread executing.

    What locks WPA is winlogon.exe
     
  12. MasterDisaster

    MasterDisaster MDL Expert

    Aug 29, 2009
    1,255
    675
    60
    When you terminate Winlogon.exe, winint.exe, csrss.exe, System Idle Process it results in a bluescreen.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,507
    458
    90
    Yep, that's correct. ntoskrnl.exe issues a bugcheck if any of them terminate, for safety reasons, because it can lead to instabilities.
     
  14. G00GLE_ME

    G00GLE_ME MDL Novice

    May 28, 2010
    7
    1
    0
    thats why when i terminate winlogon.exe i just get logged off????
     
  15. Super_User

    Super_User MDL Junior Member

    Apr 14, 2010
    92
    55
    0
    A good solution would be to increase the trial period to 365 days. Is this even possible? Does anyone know what "tells" the Windows that trial must last 30 days?
     
  16. timesurfer

    timesurfer MDL Developer

    Nov 22, 2009
    8,524
    4,112
    270
    Now why would, if we could set the trial to more days would we only set it to 365...lol Why not set it to <--- Inserts infinity sign...lol :p
     
  17. Super_User

    Super_User MDL Junior Member

    Apr 14, 2010
    92
    55
    0
    Why 365 days? Just to not have to reset the rearms for the entire year. But hey... sure why not do it for more. I've seen some keygens that would activate subscriptions of programs for hundreds of days. I got one for ZA (back when I was using it) that would activate it for 36,524 days.

    I was just wondering if it was possible to increase the days just so you don't have to rearm every 30 days (even if it is automated).

    But even if it's not possible your little app is still freaking genious.
     
  18. timesurfer

    timesurfer MDL Developer

    Nov 22, 2009
    8,524
    4,112
    270
  19. timesurfer

    timesurfer MDL Developer

    Nov 22, 2009
    8,524
    4,112
    270
    #339 timesurfer, Jun 5, 2010
    Last edited by a moderator: Apr 20, 2017
    (OP)
  20. timesurfer

    timesurfer MDL Developer

    Nov 22, 2009
    8,524
    4,112
    270
    #340 timesurfer, Jun 6, 2010
    Last edited: Jun 6, 2010
    (OP)
    (Updated 6/5/2010)

    Does automatic advanced settings for task that is imported to task scheduler

    Also added confirmation boxes for install, uninstall, and manually rearm buttons

    Enjoy everyone

    Special thanks to everyone that helped with this project from the very beginning to this version.

    Your work is much appreciated and honored ;)