13,824
edits
m (Mallory moved page Talk:CrustyWindows to Talk:Main Page over redirect) |
Undefishin (talk | contribs) No edit summary |
||
To confirm if a bootleg uses any boot selectors or not, look in:
* The bootleg's bootloader code itself, obviously
* Any folders named "EZBOOT" with any files with a EZB extension (''EasyBoot'', most common), "AIRBOOT" (''Aero
To confirm the program used to make a bootleg's autorun:
* Look for any files pertaining to the autorun maker itself, such as:
: Any files with the extension of "CDD" (''AutoPlay Media Studio'', most common)
: A file named "SETUP.INI"
: A file named "AUTORUN.ARU" (''Longtion Autorun Pro/Enterprise/II'', usually seen in Vietnamese bootlegs)
: A file named "AUTORUN.APM" (''AutoPlay Menu Builder'')
: A file named "AUTORUN.EXE" which is packed with ASPack, the Visual Basic 6 runtimes and OCX files in the root, along with any "Data" folders with files with "pic" and "esr" extensions (''Power AutoPlay Menu Creator'')
* ''For autoruns made with StartCD:'' Click the program's icon at the top left of the program window, or right click the program in the tasklist, and click "About"
* Check the file's version information
* Search for strings in the binary itself. It may lead you to extra clues such as version information which you may not be obvious otherwise
* You may use any binary checking tool, such as Detect It Easy, to help you
===== The methods used to integrate various objects in a bootleg =====
To confirm if a program was integrated via an nLite addon:
* Your first stop is the <code>SYSOC.INF</code> file in the I386 folder. Look for an nLite entry, and check both directions of the entry for any entries pertaining to certain INF files. Some examples:
: Most software programs. Usually repacked by ricktendo64
: DirectX, Microsoft .NET Framework, any other updates
: "WGAV", "OUE/OGA". Addons usually by xable
: Any entries starting with "RVM". This is a reference to "RyanVM", a person well-known for making nLite addons and update packs
: Any entries starting with a "Z" letter. This is a reference to "Zab". Mostly seen in Russian bootlegs
To confirm if a program was integrated via the setup hotfix feature:
* Usually, they will be in the SVCPACK folder, but be sure to check <code>SVCPACK.INF</code>. It may be especially important if it's in a different folder (CatalogSubDir entry), the specific order of installing programs (SetupHotfixesToRun section), product catalogs (ProductCatalogsToInstall section) etc.
== Linux articles ==
|