TCP-Z, Best TCP/IP Patch

Universal Theme Patcher Open Source Now!

2009-05-30T00:46:00.002+08:00

Because I have no free time to update these patch for a few months, so I plan to open the source code of the "Universal Theme Patcher".

The source code includes a console program for demo the patch engine.
You can migrate it to your own project freely.
In your final tool, add a link to deepxw is recommended.

Source code link: http://universalthemepatcher.googlecode.com

XPize and Vize are well-known 3rd party theme of Windows. It will try to use this patch engine.

My blog will be frozen in next few months

2009-05-30T00:25:00.004+08:00

I can not reply all comments, I would like to say sorry to those friends who have written a message here.

Because:
1) Blogger has been blocked by FW. I am very difficult to open the site, even if I use a proxy.

2) I am preparing for a exam, so I do not have much free time.

Sign PE file with certificate by programing

2009-05-30T00:15:00.002+08:00

Someone needs this function, so I post it.

First, you need to creat a *.cer and *.pvk by makecert.exe.


#include 
#pragma comment (lib, "Cryptui.lib")

//////////////////////////////////////////////////////////////////////////////////////////////////
//
// Function:  SignFile
//
// Purpose:   Sign PE file with certificate. (*.pvk and *.cer)
//
// Arguments:
//    pszExeFile    [in] The PE file name.
//    pszPvkFile    [in] The private key file name. (*.pvk)
//    pszCertFile   [in] The certificate file name. (*.cer, *.spc)
//
// Returns:  
//    If success, return TURE.
//
// Notes:
//
// Last modified: 2009.01.20

BOOL SignFile(LPTSTR pszExeFile, LPTSTR pszPvkFile, LPTSTR pszCertFile)
{
 CRYPTUI_WIZ_DIGITAL_SIGN_INFO          signInfo;
 CRYPTUI_WIZ_DIGITAL_SIGN_CERT_PVK_INFO pvkInfo;
 CRYPTUI_WIZ_DIGITAL_SIGN_PVK_FILE_INFO pvkFileInfo;
 BOOL                                   bResult;

 pvkFileInfo.dwSize              = sizeof(CRYPTUI_WIZ_DIGITAL_SIGN_PVK_FILE_INFO);
 pvkFileInfo.pwszPvkFileName     = pszPvkFile;
 pvkFileInfo.pwszProvName        = NULL;
 pvkFileInfo.dwProvType          = PROV_RSA_FULL;

 pvkInfo.dwSize                  = sizeof(CRYPTUI_WIZ_DIGITAL_SIGN_CERT_PVK_INFO);
 pvkInfo.pwszSigningCertFileName = pszCertFile;
 pvkInfo.dwPvkChoice             = CRYPTUI_WIZ_DIGITAL_SIGN_PVK_FILE;
 pvkInfo.pPvkFileInfo            = &pvkFileInfo;
 
 signInfo.dwSize                 = sizeof(CRYPTUI_WIZ_DIGITAL_SIGN_INFO);
 signInfo.dwSubjectChoice        = CRYPTUI_WIZ_DIGITAL_SIGN_SUBJECT_FILE;
 signInfo.pwszFileName           = pszExeFile;
 signInfo.dwSigningCertChoice    = CRYPTUI_WIZ_DIGITAL_SIGN_PVK;
 signInfo.pSigningCertPvkInfo    = &pvkInfo;
 signInfo.pwszTimestampURL       = NULL;
 signInfo.dwAdditionalCertChoice = CRYPTUI_WIZ_DIGITAL_SIGN_ADD_CHAIN;
 signInfo.pSignExtInfo           = NULL;

 bResult = CryptUIWizDigitalSign(CRYPTUI_WIZ_NO_UI, NULL, NULL, &signInfo, NULL);

 return bResult;

} // SignFile()

How To Remove Watermark By Programing

2009-05-10T00:10:00.004+08:00

Some friends asked me how to remove the watermark by programming, now, I have post a demo to google code. You can found the source code at http://code.google.com/p/removewatermark/

Main steps:
Load the user32.dll.mui into memory by API LoadLibraryEx().
Find the string table by FindResourceEx(), and load it by LoadResource(), LockResource().

Look up the watermark string in string table, we can get the string virtual address and length, then calculate the string offset base the module address, and we get the file offset.
Map the file to memory, just simple zero the watermark string.
In order to make the procedure simple, so use the simplest method.

Finally, re-check sum the file.
OK, all done.

Code snippet:


// Load string from resource with special langID
//
BOOL LoadStringExx(
      HINSTANCE hInst,   // Hinstance of lib
      WORD wLangID,    // Language ID of resource
      PRES_STRING_INFO pInfo  // Pointer to the string info
      )

{
 HRSRC   hFindRes;  // Handle of the resources has been found
 HGLOBAL   hLoadRes;  // Handle of the resources has been loaded
 LPVOID   pRes;   // Pointer to the resources
 UINT   nBlockID;  // String block ID

 pInfo->dwFileOffset = 0;  // String offset in the file
 pInfo->dwBytes  = 0;  // String length, in bytes
 pInfo->pszText  = NULL;

 nBlockID = pInfo->uStringID / 16 + 1;

 __try
 {
  // find the string block
  hFindRes = FindResourceEx(hInst, RT_STRING, MAKEINTRESOURCE(nBlockID), wLangID);
  if(!hFindRes )
  {
   __leave;
  } 

  hLoadRes = LoadResource(hInst, hFindRes);
  if(!hLoadRes )
  {
   __leave;
  }

  pRes = LockResource(hLoadRes);
  if(!pRes )
  {
   __leave;
  }

  WCHAR*  pParse  = (WCHAR *)pRes;    // Pointer to the String block
  UINT  nIndex  = pInfo->uStringID % 16;  // Calculate the string index
  int   nLen;
  UINT  i;

  // 16 strings per block
  for( i = 0; i < (nIndex & 15); i++ )
  {
   pParse += 1 + (int)*pParse;
  }

  // OK, we get it
  nLen = (UINT)*pParse;  // The length of the target string.
  pParse += 1;    // Pointer to the target string

  // Main point, calculate the string offset
  pInfo->dwFileOffset = (DWORD) ( (DWORD_PTR)pParse - (DWORD_PTR)hInst ) + 1;
  pInfo->dwBytes  = nLen * sizeof(WCHAR);

  // allocate memory
  pInfo->pszText = (LPWSTR)MALLOC((nLen + 1) * sizeof(WCHAR));
  if (!pInfo->pszText)
   __leave;

  // copy string for return
  CopyMemory((LPVOID)pInfo->pszText, (LPVOID)pParse, pInfo->dwBytes);
  *(PWCHAR)((DWORD_PTR)pInfo->pszText + pInfo->dwBytes) = 0;

 }
 __finally
 {
  // Clean up, free memory

  if (pRes)
   UnlockResource(pRes);

  if (hFindRes)
   FreeResource(hFindRes);
 }

 // if pointer is null, we return a NULL string
 if (!pInfo->pszText)
 {
  pInfo->pszText  = (LPWSTR)MALLOC(sizeof(WCHAR));
  pInfo->pszText[0] = 0;
 }

 return TRUE;

} // LoadStringExx()

Say Bye To Half-open TCP Connections Limit In Vista/2008 SP2

2009-05-07T20:48:00.007+08:00

Good news from Microsoft!

At May 6, 2009, In this article, Microsoft confirm that:
By default, the half-open TCP connections limit is disabled in Windows Server 2008 with Service Pack 2 (SP2) and in Windows Vista with Service Pack 2 (SP2).

Thank for this, my doubts about RateLimit long time ago has been solved by Microsoft's answer.

Last year, I found a case. In Vista, I can simply modify the value "TcpCreateAndConnectTcbRateLimitDepth" from 1 to 0 in the kernel memory, and then the Half-open TCP connections limit has been removed immediately!
But I am not sure whether this is a safe method. so, in tcp-z, this function never be active. TCP-Z only show this value.

After Vista 16670 and Windows 7 6956, Microsoft strangely set TcpCreateAndConnectTcbRateLimitDepth to 0 in default.
In latterly version of TCP-Z, it will show a lock icon to distinguish these difference.

Now, Microsoft answer: It's safe! and provide a simple modification method by registry.
When you add a registry entry "EnableConnectionRateLimiting", and set to 1 or 0, it will switch TcpCreateAndConnectTcbRateLimitDepth between 1/0 synchronously.
You can see the changes in the graph of TCP-Z.
After TcpCreateAndConnectTcbRateLimitDepth change to 1, Windows will calculate the create rate and do the limitation. In testing you can see the value is limited to 11.

This registry entry only works in Windows Server 2008 with SP2 / Windows Vista with SP2 / Window 7.

It is time to retire for me!

Full article in Microsoft.com

How to enable the half-open TCP connections limit in Windows Vista with Service Pack 2 and in Windows Server 2008 with Service Pack 2

INTRODUCTION

By default, the half-open TCP connections limit is disabled in Windows Server 2008 with Service Pack 2 (SP2) and in Windows Vista with Service Pack 2 (SP2). This article describes how to impose the half-open TCP connections limit in Windows Server 2008 with SP2 and in Windows Vista with SP2. The limit is ten connections.

Note In Windows Server 2008 and in Windows Vista with Service Pack 1 (SP1), the system allows for a maximum of ten half-open TCP connections at any time.

MORE INFORMATION

How to enable the half-open TCP connections limit

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 How to back up and restore the registry in Windows

To enable the half-open TCP connections limit in Windows Server 2008 with SP2 or in Windows Vista with SP2, set the value of the EnableConnectionRateLimiting DWORD registry entry to 1 (0x00000001).

To do this, follow these steps:

1) Click Start, type regedit in the Start Search box, and then click regedit.exe in the Programs list.

If you are prompted for an administrator password or for confirmation, type your password, or click Continue.

2) Locate and then double-click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip
\Parameters\EnableConnectionRateLimiting

3) In the Value data box, type 1, and then click OK.

4) Exit Registry Editor.
5) Restart the computer.

Comment by deepxw: In fact, It's no need to restart computer.

Remote Desktop Test In Windows 2008 STD

2009-05-05T21:44:00.004+08:00

OS: Windows Server 2008 standard edition, with SP1.

In default, 2k8 std only allow allow 2 users in active.
Administrator log in console, and user t2 log in by RDP.
When user t1 try to log in to 2k8, Windows will prompt you need to disconnect one of t2/administrator. After t1 log in, and t2 has been kick away.

Fortunately, the "Universal Termsrv.dll Patch" can still works under Windows 2008.
After patch the file Termsrv.dll, it can allow 7 users log in and active at the same time.

Thanks for the help of Elias Hantzakos, so I was able to complete this test.

Patches for Vista SP2 RTM build 18005

2009-04-30T12:32:00.005+08:00

File version: 6.0.6002.18005 (lh_sp2rtm.090410-1830), 32bit(x86) & 64bit(x64).

Universal Theme Patcher, V1.5, works;
Universal Tcpip.sys Patch, V1.2.0.12 works;
Universal Termsrv.dll Patch V1.0b, works;
TCP-Z, V2.6.2.75, works.

Go to download page ...

Notice:

All the patches I wrote is universal!

This patch is not a normal patch, it has a little intelligence, able to find the correct offset by signature. So this patch can works for so many version of system files, even the file in the future.

In most cases, this type of patch does not need to upgrade with the update of Microsoft.

If the patch show the Patched Status of file is No/Yes, it means the patch can works!
On the other hand, "Unknown" means it can't works.

Patches for Windows 7 build 7100

2009-04-25T02:05:00.004+08:00

File version: 6.1.7100.0 (winmain_win7rc.090421-1700), 32bit(x86) & 64bit(x64).

Remove Watermark, V0.6, works;
Universal Theme Patcher, V1.5, works;
Universal Tcpip.sys Patch, V1.2.0.12 works;
Universal Termsrv.dll Patch V1.0b, works;
TCP-Z, V2.6.2.75, works.

Go to download page ...

Universal Termsrv.dll Patch V1.0b Build 20090425 Release

2009-04-17T04:38:00.008+08:00

Screen capture: 3 client and 1 local console connect to Widnows 7 RC 6.1.7100.0.

Project: Universal Termsrv.dll Patch
Support: Windows XP SP2 SP3; Vista SP1 SP2/Windows 7, 32bit(x86)/64bit(x64)

Download Link 1: UniversalTermsrvPatch_20090425.zip (zip File, 66 KB)
Download Link 2: UniversalTermsrvPatch_20090425.zip (zip File, 66 KB)
Download Link 3: UniversalTermsrvPatch_20090425.zip (zip File, 66 KB) (Click to download)

Crack termsrv.dll, remove the Concurrent Remote Desktop sessions limit, allow multi-user login in XP/Vista at the same time.

This is only a file patch for termsrv.dll.
More setting for RDP, please google it.

The meaning of the last number of checksum:
1 - Original file, without any modification.
9 - The file has been modified.

Notes:
1, Can oprate in normal mode. Do not need to enter safe mode.

2, Choose the corresponding patcher based on you Windows:
For 32bit(x86): UniversalTermsrvPatch-x86.exe
For 64bit(amd64): UniversalTermsrvPatch-x64.exe

3, Require administrator rights. Right-click the exe file, select Run as Administrator.

4, After patch, Restart computer to take effect.

5, Backup file: \windows\system32\termsrv.dll.backup.

History:

2009.04.16 V1.0
+ First release.

2009.04.25 V1.0b
* Fix a bug in xp.reg. Thanks godolphinaim!

Patches for Windows 7 build 7106

2009-04-12T13:37:00.003+08:00

File version: 6.1.7106.0 (winmain.090408-1623), 32bit(x86) & 64bit(x64).

Remove Watermark, V0.6, works;
Universal Theme Patcher, V1.5, works;
Universal Tcpip.sys Patch, V1.2.0.12 works;
TCP-Z, V2.6.2.75, works.

Go to download page ...

Patches for Windows 7 build 7077

2009-04-09T10:55:00.005+08:00

File version: 6.1.7077.0 (winmain_win7rc.090404-1255)

Remove Watermark, V0.6, works;
Universal Theme Patcher, V1.5, works;
Universal Tcpip.sys Patch, V1.2.0.12 works;
TCP-Z, V2.6.2.75, works.

2009.04.09 V2.6.2.75
* Hide the tunnel type of Adapter in Vista/Windows 7.
* Increase the range of searcher, supports Windows 7 6.1.7077.0 (winmain_win7rc.090404-1255), x86.

TCP-Z, V2.6.1.72, Build 20090406 Release

2009-04-06T21:33:00.004+08:00

2009.04.06 V2.6.1.72
+ Support more language. Russian by Serhii Hlodin, Mixa, Qui Sum; Korean by deuxdoom; French by jacklours; Portugese by Anubis. Thank them!
+ Add options in tcpz.ini to customize the upper value of the graph.
* Fixed: Y-axis label display not correct in big font. Error range of incoming connection graph.
* Fixed: Transparence percentage display not correct.
* Fixed: Can't display speed in some computer.
* Fixed: Network traffic turn to zero when more than 4GB.
* Fixed: Can't receive the shutdown message.
* Build with WDK 6001.18002.

Setting in tcpz.ini
MaxSpeedGraph=200, Upper value in graph.

NotAdjustSpeedGraph=0
0 - Auto increase the upper of range in graph.
1 - Fixed upper of range in graph.

MD5:
6100ef25993317cc9129434d419d675a tcpz.exe
bf974a732f08491b22090b9f0efa94ab tcpz64.exe
9d62ff0d6809dfcfda34940fda3e3e68 RemoveWatermarkX64.exe

Go to download page ...

Kaspersky 2009 Setting For TCPZ

2009-04-05T20:35:00.002+08:00

This experience is shared by Trebuin, very grateful to him!

I had a hard time figuring out how to fix this correctly but finally got it working.
This is for Kaspersky 2009:

Settings, Threats and exclusions, trusted zone, add
Configure as follows:
Deselect Object
Select Threats type

Then, for Threats type: name should be:
Suspicious driver installation
Check advanced settings
add C:\USERS\***Your User Name***\APPDATA\LOCAL\TEMP\TCPZ-X64.SYS
For Protection components: Select Proactive Defense.

Universal Theme Patcher Supports Windows 7 7068

2009-03-30T19:10:00.005+08:00

Windows 7 Build 7068, x86 & x64 (32bit &64bit).
File Version: 6.1.7068.0 (winmain.090321-1322)
(uxtheme.dll, themeui.dll, themeservice.dll)

Universal Theme Patcher V1.4, Build 20090330 supports this version of Windows 7.

Go to download page ...

TCP-Z, V2.6, Build 20090316 Release

2009-03-16T13:09:00.004+08:00

2009.03.16 V2.6.0.66
+ Support more language. German by http://Mods.sub.cc; Italian by FSoft; Polish by PrEzi; Romanian by Misaki-kun & StelistCristi; Bulgarian by ExaFlop; Swedish by Marshall Mathers; Thai by Pruthisith; Turkish by Yekta Kayman; Ukraine by ShriEkeR. Thank them.
+ Statistics of incoming and outgoging attempts...
+ Statistics of connections by each program.
+ Mini bar;
+ function of change the alignment of peak label.
+ Save setting at exit.

Note: V2.6 does not contain the Virtual Drive.
For patch automatically, use the command line, or download the old version V2.5.
tcpz.exe -limit:200
tcpz.exe -limit:200 -autoexit

Download Link 1: tcpz_20090316.7z (7Z File, 579 KB)

Go to download page ...

TCP-Z supports Windows 7 Build 7048

2009-03-08T22:52:00.003+08:00

Windows 7 Build 7048, x86 & x64 is no problem, the old version of TCP-Z also support it.
File version: 6.1.7048.0 (winmain.090219-1845)

Welcome join TCP-Z translation

2009-03-08T07:28:00.016+08:00

Now, TCP-Z support a external language ini file.
You can simply use Notepad to edit it:

1) Open TCP-Z, right click the icon of TCP-Z, click "select UI language".
In the bottom of window, you can found the language ID and name of your language.

2) Make a copy of tcpz_ENU.ini, rename the file as your language name.

3) Open the ini file by notepad.exe, edit the language ID as your language, and begin translation.

4) Save the file. Restart TCPZ, you can preview it immediately.

The new version 2.6 beta can download at here.

Thanks!

Supports list:

German by Mods.sub.cc;

Italian by FSoft;

Polish by PrEzi;

Romanian by Misaki-kun & StelistCristi;

Bulgarian by ExaFlop;

Swedish by Marshall Mathers;

Thai by Pruthisith;

Turkish by Yekta Kayman;

Ukraine by ShriEkeR;

Russian by Serhii Hlodin, Mixa, Qui Sum;

Korean by deuxdoom;

French by jacklours;

Portugese by Anubis;

Spanish by XaviForce;

Greek by Elias Hantzakos.

Thank them!

TCP-Z v2.6 preview version download

2009-02-26T03:00:00.003+08:00

Some friends want to try the new version, now, I upload it to skydriver.
Download link: tcpz_20090226_preview.7z

For full function support, please download older version V2.5.

I will try to make TCP-Z use external language file, To make it easier to support multiple languages.

Patch for Vista SP2 v.286

2009-02-26T02:52:00.002+08:00

Windows Vista SP2 v.286, file version 6.0.6002.16670 .
To 32bit(x86) and 64bit(x64), all old version of TCP-Z / Universal Theme Patcher can patch it.

Download link.

TCP-Z will support Polish language

2009-02-24T23:46:00.002+08:00

Thanks PrEzi!
TCP-Z has been translated into Polish language by PrEzi, it will appear in the next version.

Preview of next version TCP-Z

2009-02-22T23:35:00.004+08:00

First of all, I would like to thank FSoft, he Translate TCP-Z to Italian language.
TCP-Z interface will built in support Italian.

In V2.6, the addition functions is mini bar & statistics of TCP connection.
V2.6 is in development.

The false positive has been fixed

2009-02-20T01:22:00.002+08:00

I have received several e-mails from antivirus company, the false positives of TCP-Z has been fixed.
Includes: Vba32 / drweb / fortinet / Panda antivirus.

Patch for Windows 7 Build 7022

2009-02-10T00:25:00.009+08:00

OS: Windows 7 Build 7022
Platform: 32bit, x86
File version: 6.1.7022.0 (winmain.090115-1850)

32bit, x86:

TCP-Z V2.0 ~ V2.5 can patch this version of tcpip.sys. (Patch In Memory)

Universal Tcpip.sys Patch V1.0 ~ V1.1 can patch this version of tcpip.sys. (Patch File)

Universal Theme Patcher V1.3, Build 20090101 also supports this version of Uxtheme.dll.

Get the list of all downloads ...

How to check half open limit in Windows [Video]

2009-02-09T00:07:00.012+08:00

After Windows XP SP2, TCP half-open connections limit exists in Windows Workstation Edition.
You can use TCP-Z to modify this limit value in runtime, TCP half-open connections number will follow it to change.

This is a demo video, using a port scanning tool to initiate a large number of TCP connections, so you can easily check the limit.

Windows_XP_x64_TCP_Connection_Limited_Test_Movie_20090208.avi
AVI File
4.0 MB

Windows Server and Workstation based on the same framework, so the limit values also exist in the tcpip.sys of Server.
But Windows will never compare this value. There is no limit in the Windows Server Edition.

Windows_2003_TCP_Connection_Limit_Test_Movie_20090208.avi
AVI File
1.1 MB

TCP-Z Support Vista SP2 RC 16659 v.275

2009-02-06T03:56:00.011+08:00

OS: Windows Vista, Build 16659
Platform: 32bit, x86; 64bit, x64
Tcpip.sys version: 6.0.6002.16659
TCP/IP Half Open Connection Limited Default Value: 10

x86: All version of TCP-Z after 20080816 can patch this version of Vista. Includes: V1.x; V2.0 ~ V2.5
x64: TCP-Z V2.5

TCP-Z is Patch In Memory, not modify the original Tcpip.sys file.

If you want to direct patch file Tcpip.sys, please try another tool "Universal Tcpip.sys Patch".

Universal Theme Patcher Supports Vista SP2 16659

2009-02-04T23:35:00.003+08:00

Windows Vista SP2 RC 6002.16659 v.275 comes.
File Version: 6.0.6002.16659

Universal Theme Patcher V1.3, Build 20090101 also supports this version of Vista SP2.

Universal Tcpip.sys Patch, V1.2 Build 20090409

2009-01-22T22:16:00.024+08:00

Support OS: Windows XP/2003/2008/Vista/Windows 7, All SP*, All 32bit (x86) / 64bit (x64)

Notice: The newest Windows Vista/2008 SP2, Windows 7 is unlimited in default, please read this article:
Say Bye To Half-open TCP Connections Limit In Vista/2008 SP2

2009.04.09 V1.2.0.12
Download Link 1: UniversalTcpipPatch_20090409.zip
Download Link 2: UniversalTcpipPatch_20090409.zip

Additional language files:
Russian by MikeChirkov: utp_RUS.zip
Spanish by XaviForce: utp_ESP.zip

Increase the limited value of half-open (incomplete outbound) TCP connection.

"Universal Tcpip.sys Patch" is a File Patch. It direct modifies the file tcpip.sys on hard disk.

"Universal Tcpip.sys Patch" will sign tcpip.sys with a Test Certificate, so it is a patch without press F8 key.

If you want to modify Tcpip.sys in memory, you can choose another tool "TCP-Z".

More information about tcpip.sys File Patch, you can visit:
TCP/IP Patcher Compare Technical Features
How to make a tcpip.sys patch without press F8

The meaning of the last number of checksum:
1 - Original file, without any modification.
3 - The file has been modified, but with a test certificate.
9 - The file has been modified, but not repair signing.
Windows XP does not compare the signing, don't worry.

Notes:
1) In 32-bits and 64-bits Vista / Windows 7, testsigning must set to on, don't try to disable it.
If "Test Mode" exists on the desktop, you can run "mcbuilder.exe" again to rebuild MUI cache. Or apply the patch once again.

2) In the Windows Server Edition, you can also find the limited value. However, this value is not active; the server will not compare this number.

History:
2009.01.22 V1.0.0.5
+ First release.
Download Link 1: UniversalTcpipPatch_20090122.zip

2009.01.22 V1.1.0.6
* supports Windows Vista SP2 RC v.275, 6.0.6002.16659.

2009.04.09 V1.2.0.12
+ UI support Multil language. Polish by PrEzi, thanks!
* Remove last space in user32.dll.mui.
* Increase the range of searcher, supports Windows 7 6.1.7077.0 (winmain_win7rc.090404-1255), x86.

Support new OS:
Vista SP2 6.0.6002.18003 (lh_sp2rtm.090403-1730)
Vista SP2 RTM 6.0.6002.18005 (lh_sp2rtm.090410-1830)

A Tcpip.sys File Patch is being developed

2009-01-21T11:06:00.003+08:00

Some times, it needs a tcpip.sys File Patch, because:
Some people can't use TCP-Z caused by antivirus software;
And some people like to File Patch.

Now I have to create a tcpip.sys File Patch, it will be available at some time later.

How to make a tcpip.sys patch without press F8

2009-01-14T18:00:00.006+08:00

A friend of mine asked me, how to make a Vista tcpip.sys File Patch not needing press F8 key.
This is not difficult, just sign tcpip.sys with a test signature.

More information about tcpip.sys File Patch, you can visit: TCP/IP Patcher Compare Technical Features.
http://deepxw.blogspot.com/2008/12/on-internet-there-are-all-kinds-of-tcp.html

Here is detail of patch tcpip.sys with test signature, perhaps these will help you.

1) All operation needs "Run as Administrator".

2) Set testsigning to on:
Bcdedit -set TESTSIGNING ON
All tcpip.sys File Patch must do this; otherwise, BSOD will occur after tcpip.sys has been modified.
After Testsigning on, "Test Mode" will dispaly in the 4 corners of desktop.
You can get rid of it through modify "user32.dll.mui". The string ID is 738 & 723.

3) Reboot, check if testsigning is on correctly. (This step is optional.)
You can check it by bcdedit, or check it in the registry.

4) Modify half open connection limited value in file "tcpip.sys".
First, make a temporary copy of tcpip.sys for modify.
You can disassemble tcpip.sys and get the limited offset.
In tcpip.sys, asm code like this:
NT5: mov _ActiveOpenProgressThreshold, 0Ah
NT6: cmp edx, 0Ah

NT5, you can set new value up to 0xFFFFFFFF.
NT6, new value is up to 0xFF! Only 1 byte available for use!

If you are a lazy guy, you can get these offset by the TCP-Z tool. In "patch" tab, you can get the limited offset.
Default, TCP-Z does not show the file offset.But you can run tcpz.exe with argument: tcpz.exe -showoffset.

5) Re-Checksum tcpip.sys.
You can use setcsum.exe.
Or do it in your program by API CheckSumMappedFile().

6) Create a test certificate by the makecert.exe tool.
Makecert -r -pe -ss PrivateCertStore -n "CN=TcpipCert" tcpipcert.cer

7) Sign tcpip.sys with the signtool.exe.
signtool sign /a /s PrivateCertStore /n "TcpipCert" tcpip.sys

You can verify the signature of tcpip.sys:
signtool verify tcpip.sys

Because our signature is not a valid signature, so signtool will report "File not valid".
If returns "A certificate chain processed", it means the Test Signature is OK.

8) Now copy the temporary tcpip.sys to driver folder, overwrite the original tcpip.sys.
Before copy, takeown and icacls tcpip.sys is required.

9) All done, restart your computer to take effect!

Incorrect Tcpip.sys will cause TCP-Z not work properly

2009-01-09T11:39:00.003+08:00

Sometimes, the file Tcpip.sys incorrectly modified by another patch, this will cause tcp-z not start correctly.
Suggestion: Restore the original file Tcpip.sys, restart computer, then try TCP-Z again.

TCP-Z Support Windows 7 x64 Build 7000

2009-01-08T23:34:00.001+08:00

OS: Windows 7, Build 7000
Platform: 64bit, x64
Tcpip.sys version: 6.1.7000.0 (winmain_win7beta.081212-1400)
TCP/IP Half Open Connection Limited Default Value: 10

TCP-Z V2.4 Build 20090108 can patch this version of Windows 7.

TCP-Z, V2.5, Build 20090205 Release, beautiful UI

2009-01-08T23:30:00.006+08:00

Update: 2.5.1.50, Build 20090205

Download Link 1: TCPZ_20090205.zip
Download Link 2: TCPZ_20090205.zip

The arrow in the Chart of TCP-Z needs font "Wingdings 3". If you can not see it, please install this font.

TCP-Z User Guide (With Picture)

Project Name: TCP-Z (TCP-Z Network Monitor)
Support OS： Windows XP SP2 SP3/2003/2008/Vista SP1 SP2/Windows 7, All 32bit (x86) / 64bit (x64)

Event ID 4226 Patcher, EvID4226 fix, TCP/IP Patch, TCP Half Open Connection Limited Patcher.

Raise the limited of half-open (incomplete outbound) TCP connection, Release the power of your network, download faster, and more task can be run at the same time.

Features:
1) Safe And Easy: Modifies Tcpip.sys in memory. The changes take effect immediately; do not need to restart the computer.

2) Wide Compatibility: It searches limited offset through signature, no longer focused on the MS upgrade and update.
Support all version of Windows, Which with half-open limited.

3) Professional Chart: TCP-Z shows number of estabilished connection, half open connection, Create depth, download/upload speed in real-time.
And software will show the number of warnings events in per-minute, which TCP half open connection overload.

************
* Usages *
************
1) Manually: Use GUI application tcpz.exe / tcpz64.exe to modify limited value.

2) Automatically: Install TCP-Z Virtual Device. It modify limited value automatically without human intervention. Use Device Manager property page to customize the maximum value.

Two version TCP-Z can run an independent, you can choose one of them.

If you want to direct patch file tcpip.sys, please try another tool "Universal Tcpip.sys Patch".

More information about tcpip.sys File Patch, you can visit: TCP/IP Patcher Compare Technical Features

History:

2008.12.27 V2.3.0.42
　* Change digital signature of program files.
　+ GUI program, modify UI, add a beautiful skin.
　+ GUI program, display limited address in kernel memory, and file “Tcpip.sys”.　 For compatibility, only display low part in 64bit OS.
　* Fixed: unknown file limited value in Windows 7 Build 6.1.6936.0, and Windows 2003 5.2.3790.4331.
　* Fixed: file patch Fail in windows XP SP3, because unable disable WFP.
　# Drivers has no changes.

2008.12.29 V2.3.1.43
* GUI program, Remove the function of disable WFP, because Compatibility of this code is not so good.
And because there is no disabled SFC, patch file will not to a 100% success, because Windows will automatically resume tcpip.sys.
Another way, use Memory patch method.
Old Version: TCPZ_20081229.zip

2009.01.08 V2.4.0.46
+ Windows 7 x64 6.1.7000.0 Memory Patch.
+ GUI program, support keyboard control. Thank Aldares.
Ctrl + Tab = switch tab; Tab = switch control.
* GUI program, File Patch, improve compatibility of disable WFP in Windows XP. Thank BRD-IlLusioN-CCCP.
* GUI program, fixed, user interface in non-standard DPI can not correctly display.
Old Version:: TCPZ_20090108.zip

2009.02.05, V2.5.1.50
* GUI program, identify whether tcpip.sys is the original file without modification.
* GUI program, supports Windows XP x64 SP1 early version.
* GUI program & Drivers, supports Windows Vista SP2 RC v.275, x64, 6.0.6002.16659.

Why TCP-Z prompt "Fail to load driver"

2009-01-02T13:07:00.005+08:00

Some times, KIS 2009 will block TCP-Z to load driver. You can change the right of TCP-Z in KIS applicaton rules, and allow TCP-Z to load driver.

If can't solved, you can try to use File Patch. File Patch in Windows XP is enable in TCP-Z.
If you want to patch in Vista, you can choose another File Patch.

TCP-Z Center

2009-01-01T10:53:00.006+08:00

Project Name: TCP-Z (TCP-Z Network Monitor)
Support OS： Windows XP SP2 SP3/2003/2008/Vista SP1 SP2/Windows 7, All 32bit (x86) / 64bit (x64)

(Event ID 4226 Patcher, EvID4226 fix, TCP/IP Patch, TCP Half Open Connection Limit Patch.)

Remove / increase the limit of half-open (incomplete outbound) TCP connections, Release the power of your network, download faster, and more task can be run at the same time.

Notice: The newest Windows Vista/2008 SP2, Windows 7 is unlimited in default, please read this article:
Say Bye To Half-open TCP Connections Limit In Vista/2008 SP2

Read more detail information about TCP-Z V2.5 ...
Read more detail information about TCP-Z V2.6.0.66 ...
Read more detail information about TCP-Z V2.6.1.42 ...

Download the TCP-Z now!

TCP-Z User Guide (With Picture)
TCP/IP Patcher Compare Technical Features

All article / post about the TCP-Z...

Welcome join TCP-Z translation (The new V2.6)...

Download Latest Version

2009-01-01T09:19:00.045+08:00

TCP-Z | Universal Tcpip.sys Patch | Universal Theme Patcher | Remove Watermark |
Universal Termsrv.dll Patch

TCP-Z

Latest Update: 2009.04.09 V2.6.2.75
* Hide the tunnel type of Adapter in Vista/Windows 7.
* Increase the range of searcher, supports Windows 7 6.1.7077.0 (winmain_win7rc.090404-1255), x86.

Note: V2.6 does not contain the Virtual Drive.
For patch automatically, use the command line, or download the old version V2.5.

Switch UI language between Russian, it will take effect at next start.

V2.6.2.75, Build 20090409 (without Virtual Drive)
Download Link 1: tcpz_20090409.7z (7Z File, 438 KB)
Download Link 2: tcpz_20090409.7z (7Z File, 438 KB)
Download Link 3: tcpz_20090409.7z (7Z File, 438 KB) (Click to download from SkyDrive)
Download Link 4: tcpz_20090409.7z (7Z File, 438 KB) (Click to download from FileKeeper)

Additional Language pack:
(Open the link in new window, click "Download" or the left big icon to download the file.)

Click here to browse all files.

Spanish by XaviForce: tcpz_ESP.zip
Greek by Elias Hantzakos: tcpz_ELL.zip

V2.5.1.50, Build 20090205 (with Virtual Drive)
Download Link 1: TCPZ_20090205.zip (ZIP, 657 KB)
Download Link 2: TCPZ_20090205.zip (ZIP, 657 KB)

Download at www.Softpedia.com Download at www.BrotherSoft.com

TCP-Z is Patch In Memory, not modify the original Tcpip.sys file.

If you want to direct patch file Tcpip.sys, please try "Universal Tcpip.sys Patch".

UI language supports list:

German by Mods.sub.cc;

Italian by FSoft;

Polish by PrEzi;

Romanian by Misaki-kun & StelistCristi;

Bulgarian by ExaFlop;

Swedish by Marshall Mathers;

Thai by Pruthisith;

Turkish by Yekta Kayman;

Ukraine by ShriEkeR;

Russian by Serhii Hlodin, Mixa, Qui Sum;

Korean by deuxdoom;

French by jacklours;

Portugese by Anubis;

Spanish by XaviForce;

Greek by Elias Hantzakos.

Thank them!

Universal Tcpip.sys Patch

Latest Update: V1.2.0.12 Build 20090409
2009.04.09 V1.2.0.12
+ UI support Multil language. Polish by PrEzi, thanks!
* Remove last space in user32.dll.mui.
* Increase the range of searcher, supports Windows 7 6.1.7077.0 (winmain_win7rc.090404-1255), x86.

Download Link 1: UniversalTcpipPatch_20090409.zip (ZIP, 89 KB)
Download Link 2: UniversalTcpipPatch_20090409.zip (ZIP, 89 KB)
Download Link 3: UniversalTcpipPatch_20090409.zip (ZIP, 89 KB) (Click to download)

Additional language files:
Russian by MikeChirkov: utp_RUS.zip
Spanish by XaviForce: utp_ESP.zip

Universal Theme Patcher

Latest Update: V1.5.0.22, Build 20090409
+ Support external language file.
+ Indentify the file has been cracked by other patch. (nLite)
* Allow UniversalThemePatcher-x86.exe to patch the 32bit files in \windows\syswow64.

Download Link 1: UniversalThemePatcher_20090409.zip (ZIP, 81 KB)
Download Link 2: UniversalThemePatcher_20090409.zip (ZIP, 81 KB)
Download Link 3: UniversalThemePatcher_20090409.zip (ZIP, 81 KB) (Click to download)

Additional language files:
Russian by MikeChirkov: ThemePatcher_RUS.zip

Remove Watermark

V0.8, Build 20090509
+ In Windows 7 beta version, remove the string "This copy of Windows is not genuine".

Test in Windows 7 6.1.7100.0, OK.

Go to this page to download, please read the construction carefully!

Universal Termsrv.dll Patch

V1.0b, Build 20090425
* Fix a bug in xp.reg. Thanks godolphinaim!

Download Link 1: UniversalTermsrvPatch_20090425.zip (zip File, 66 KB)
Download Link 2: UniversalTermsrvPatch_20090425.zip (zip File, 66 KB)
Download Link 3: UniversalTermsrvPatch_20090425.zip (zip File, 66 KB) (Click to download)

TCP-Z Support Windows 7 Build 7000

2008-12-28T12:31:00.003+08:00

ISO: 7000.0.081212-1400_client_en-us_Ultimate-GB1CULFRE_EN_DVD.iso
OS: Windows 7, Build 7000
Platform: 32bit, x86
Tcpip.sys version: 6.1.7000.0
TCP/IP Half Open Connection Limited Default Value: 10

All version of TCP-Z after 20081107 can patch this version of Windows 7.
Includes: V2.0 / V2.1 /V2.2 / V2.3

Merry Christmas!

2008-12-25T00:21:00.002+08:00

Merry Christmas to everybody!
I wish you have a happy new year!

Btw, I bring a message about next version of TCP-Z. It's in development.

Tcpz-x86d.sys has been removed from virus list of NOD32

2008-12-18T19:17:00.004+08:00

Today, I recevied reply from ESET, tcpz-x86d.sys has been removed from virus list of NOD32. NOD32 will not report tcpz-x86d.sys as a rootkit in new database.

TCP-Z is not a rootkit!
It is just a tool for adjust half open connection limited in runtime.

TCP-Z Support Windows 7 6936

2008-12-17T13:28:00.004+08:00

OS: Windows 7, Build 6936
Platform: 64bit, x64
Tcpip.sys version: 6.1.6936.0
TCP/IP Half Open Connection Limited Default Value: 10

TCP-Z V2.2 can patch this version of Windows 7.
Memory Patch: Working perfectly.
Known issue: GUI program show File Limited as "Unknown". This issue will be fixed in the next version.

TCP-Z, V2.2.1, Build 20081216 Release

2008-12-16T20:43:00.005+08:00

Update: V2.2.1, Build 20081216

Download Link 1: TCPZ_20081216.zip
Download Link 2: TCPZ_20081216.zip

2008.12.16 V2.2.1.36
* Modify TcpzQueryRegParameters(), Add a null parameter iNullAction, Avoid NOD32 report as virus.
This version has not other function update.

Project Name: TCP-Z (TCP-Z Network Monitor)
Support OS： Windows XP SP2 SP3/2003/2008/Vista SP1 SP2/Windows 7, All 32bit (x86) / 64bit (x64)

Event ID 4226 Patcher, EvID4226 fix, TCP/IP Patche, TCP Half Open Limited Patcher.

Raise the limited of half-open connection, Release the power of your network, download faster, and more task can be run at the same time.

Features:
1) Safe And Easy: Modifies Tcpip.sys in memory. The changes take effect immediately; do not need to restart the computer.

2) Wide Compatibility: It searches limited offset through signature, no longer focused on the MS upgrade and update.
Support all version of Windows, Which with half-open limited.

3) Professional Chart: TCP-Z shows number of estabilished connection, half open connection, Create depth, download/upload speed in real-time.
And software will show the number of warnings events in per-minute, which TCP half open connection overload.

************
* Usages *
************
1) Manually: Use GUI application tcpz.exe / tcpz64.exe to modify limited value.

2) Automatically: Install TCP-Z Virtual Device. It modify limited value automatically without human intervention. Use Device Manager property page to customize the maximum value.

Two version TCP-Z can run an independent, you can choose one of them.

History:

2008.11.07 V2.0.0.30 beta
* Modified all search function. Improve success rate.

2008.11.12 V2.1.0.33
+ Add tcpz64.exe, a native x64 program.
* Modify search function.
* Memory Limited of XP up to 1000.
* Fix: compatibility of multi-core CPU.
* Fix: fail to load driver in Windows 7 x64.

2008.11.29 V2.2.0.35
+ Virtual drive, add a option to custom limited value. Add a UnLimited option for Vista / Windows 7.
+ GUI program, capture screen by hot-key F5 / F6. It needs gdi+ support.
* GUI program, add Vista UAC manifest. May not be compatible with XP SP2, you can upgrade Sevice Pack, or continue to use the V2.1 version of TCP-Z.
* GUI program be changed to a single file, portable version.

2008.12.16 V2.2.1.36
* Modify TcpzQueryRegParameters(), Add a null parameter iNullAction, Avoid NOD32 report as virus.

NOD32 wrong report tcpz-x86d.sys as virus

2008-12-16T14:03:00.005+08:00

When you update NOD32 to "v.3693 (20081215)", It will report the file tcpz-x86d.sys as virus, which named as "Win32/Rootkit.Agent.NHN".

tcpz-x86d.sys MD5: 0E219B74E2C68A34CA09D8FE114F6D11

This is wrong! My software is not a rootkit!

I will contact ESET to solve.

Update: DEC 18, 2008, tcpz-x86d.sys has been removed from virus list of NOD32.

TCP-Z User Guide (With Picture)

2008-12-12T12:27:00.012+08:00

[newest, Event ID 4226 Patch, EvID4226 fix, TCP/IP Patch, Tcpip.sys Patch, remove half open limit, tcpip.sys patch, TCP Half Open Connection Limited Patcher, Windows XP SP2 SP3, Vista SP1 SP2, Windows 7, X86, X64,32-bit,64-bit, Edition.]

Usages:

1) Manually:

Use GUI application tcpz.exe / tcpz64.exe to modify limited value.

Although you exit the TCP-Z, the modified values will remain in the kernel memory.
The modified values will remain in effect, until shutdown computer.

This is a temporary modification, restart the system will revert to the initial value.
You need to modify the limit value in each boot.

2) Automatically:

Install TCP-Z Virtual Device to patch in silent mode.

Virtual Device also patch kernel memory. But it is more automated, takes effect as a File Patch.

It modify limited value automatically without human intervention. Use Device Manager property page to customize the maximum value.

Driver only need to install once, the half-open limit number will be locked as your settings.
The modified values will in effect at each system boot, until you unistall the driver.

Although you update Windows Service Pack, but no need to re-install the driver again.

Install, or Uninstall.
32bit, run the program as administrator: "TCPZ_Setup-x86.exe".
64bit, run the program as administrator: "TCPZ_Setup-x64.exe"

Two version TCP-Z can run an independent, you can choose one of them.

TCP-Z Overview

TCP Window

1) File version.

2) TCP/IP half-open connection limit value, read from the file tcpip.sys in hard disk.

3) TCP/IP half-open connection limit value, read from the kernel memory.

4) Indicating the tcpip.sys whether or not a original file.
"Yes", meaning that the file has not been modified.

5) Count of system event, which ID equal to 4226.

6) Record of peak. Left-click the icon, it will display the highest values and the time of that event.

7) Change the align of real time counter label.

8) Number of established connections.

9) Number of half-open connections.
Half-open connection, it's incomplete outgoing/outbound TCP connection, in SYN-SENT state.

10) Create depth, create rate depth. This value is read from kernel memory of tcpip.sys.
In fact, Windows control this value not exceeds the memory limit(3).
TCP half-open connection limitation is popular statement.

11) Number of incoming/inbound TCP connections, in SYN-RCVD state.
A program open a port to listening. When a remote client trying to connect to this port, will result in this case.

12) Real time number, peak number. xx/yy, xx is real time value, yy is peak/higest value.
Connection graph and speed graph has the same format.

13) Download speed, in Kilobytes/second.

14) Upload speed, in Kilobytes/second.

15) Elapsed time of statistics.
It will be reset to 0 when you change the net adapter in (16).

16) Connection name and the network adapter name.

17) Statistics of download data and upload data.
It will be reset to 0 when you change the net adapter in (16).

* Windows Server 2003 / 2008 / 7 is unlimited. so that Limit value will grayed out.

Statistics Window

1) Reset the counter to 0, and start a new statistics.

2) Total number of upload data in this connection/adapter.
Statistics since the system boot up.

3) Total number of download data in this connection/adapter.
Statistics since the system boot up.

* If your are using BT/e-mule, and the incoming connection attempts is 0. It means the listening port has been blocked by firewall, or your are in the LAN without port mapping/forward.

You will missed more remote clients, resulting in lower download speeds.

Detail Window

1) Command line of the process.

2) Creation time of the process.

3) Physical memory usage of the process, the current working set of the process.

4) Virtual memory usage of the process.

5) I/O Read bytes.
In Task Manager, the number of bytes read in input/output operations generated by a process, including file, network, and device I/Os. I/O Read Bytes directed to CONSOLE (console input object) handles are not counted.

6) I/O Write bytes.
In Task Manager, the number of bytes written in input/output operations generated by a process, including file, network, and device I/Os. I/O Write Bytes directed to CONSOLE (console input object) handles are not counted.

Patch Window

1) Modify limit value in kernel memory.

Although you exit the TCP-Z, the modified values will remain in the kernel memory.
The modified values will remain in effect, until shutdown computer.

This is a temporary modification, restart the system will revert to the initial value.
You need to modify the limit value in each boot.

2) Press this button to apply new limit value.

You can using command line to modify the limit value:
tcpz.exe -limit:200
tcpz.exe -limit:200 -autoexit

3) Direct modify the limit value in file tcpip.sys.

This function only enabled in the Windows XP.
If you want to patch Vista, please try another tool "Universal Tcpip.sys Patch".

* Tcpip.sys of Windows XP have 4 bytes for comparing, the limit can be achieved 0xFFFFFFFF.

* Tcpip.sys of Vista/Windows 7, there are only 1 byte, so the upper limit is 0xFF (255).

Keyboard Control

Switch Tab Ctrl + Tab
Switch Control Tab
Confirm Space
Capture TCP-Z Window to image file F5
Capture full screen to image file F6

Command Line

tcpz.exe -limit:200
tcpz.exe -limit:200 -autoexit
tcpz.exe -minimize

If antivirus software block tcp-z loading driver and cause tcp-z fail to startup, you can bypass driver in command line:
tcpz.exe -nodriver

But, without driver support, it will lost the memory patch feature.

Remove Watermark, V0.8, Build 20090509

2008-12-10T21:16:00.032+08:00

Note: Don't use V0.1 / 0.2 / 0.3 in Windows 7 6956 /7000 /7022 /7048 /7057 /7068 /7077 /7100 /7106 or later version!
Only V0.4/v0.5/0.6/0.8 is support these Windows 7.
Read following text for detail.

Sometimes, the watermark still exists on the desktop after reboot, you need to manually rebuild the MUI cache by:
Press key "R" in removeWatermark;
Or run "mcbuilder.exe".

Remove all Watermark on desktop.
Such as "Evaluation Copy", "For testing purpose only", "Test Mode", "Safe Mode".

Support: Windows Vista /Server 2008 /Windows 7, 64bit(x64) / 32bit(x86), All Service Pack & all language of Windows.

2009.05.09 V0.8
Download Link 1: RemoveWatermark_20090509.zip
Download Link 2: RemoveWatermark_20090509.zip
Download Link 3: RemoveWatermark_20090509.zip (Click the link to download)

It is a universal patch!
Without language limited, Supports all language of windows!
And without limited of Service Pack.

This tool provides two ways to remove the watermark.

* The default method, modify user32.dll.mui. This method is safe for all Windows.
In 64-bit Vista / Windows 7, It needs Re-Build MUI cache, this will take a few minutes, please wait.

* Method 2: modifies user32.dll. 100% remove all watermark. (Run program with argument "-enforce")

But don't use Method 2 in Windows 7 6956 / 7000 or later version.
It likes a unknown bug in these version of Windows.
Any modification with user32.dll in Windows 7 6956 will cause application fail to run in compatibility mode.

V0.1 / V0.2 / V0.3 is patch user32.dll in default, so these version is not compatible with Windows 6956 / 7000!

Windows 7 server / Vista is no problem.

Notes:
1, Can operate in normal mode. Do not need to enter safe mode.
2, Choose the corresponding patch based on you Windows:
For 32bit(x86): RemoveWatermarkX86.exe
For 64bit(x64): RemoveWatermarkX64.exe

3, If "Test Mode" still exists on the desktop after reboot, you can run RemoveWatermark and Press key "R" to rebuild MUI cache.
Or open command prompt as administrator, run mcbuilder.exe again, then restart computer.

4, Command line / argument usages:
-silent Patch in silent mode.
-view View the string of user32.dll.mui, don't patch file.

History:
2008.11.04 V0.2
Test in Windows Vista SP2 16497 / Windows 7 M3 6801, OK.
2008.12.10 V0.3
+ Add support argument "-silent" to patch in silent mode.
Test in Windows 7 6956, OK.

2009.01.17 V0.4
+ Support modifies user32.dll.mui to remove watermark string.
* The default method, from modify user32.dll, change to modify user32.dll.mui.
Test in Windows 7 7000, OK.

2009.03.14 V0.5
* Remove the last space of string.
Test in Windows 7 Build 7057, OK.
RemoveWatermark_20090314.zip

2009.03.31 V0.6
+ Add a option to rebuild MUI cache.
* Modify message table.
Test in Windows 7 6.1.7068.0, OK.
RemoveWatermark_20090331.zip

2009.05.09 V0.8
+ In Windows 7 beta version, remove the string "This copy of Windows is not genuine".

Test in Windows 7 6.1.7100.0, OK.

New OS support:
Windows 7 RC, 6.1.7077.0 (winmain_win7rc.090404-1255)
Windows 7 6.1.7106.0 (winmain.090408-1623)
Windows 7 RC, 6.1.7100.0 (winmain_win7rc.090421-1700)
Vista SP2 RTM 6.0.6002.18005 (lh_sp2rtm.090410-1830)

TCP-Z Support Windows 7 6956

2008-12-04T22:59:00.003+08:00

OS: Windows 7, Build 6956
Platform: 32bit, x86
Tcpip.sys version: 6.1.6956.0
TCP/IP Half Open Connection Limited Default Value: 10
TCP-Z V2.2 can patch this version of Windows 7.

TCP/IP Patcher Compare Technical Features

2008-12-02T14:36:00.024+08:00

On Internet there are all kinds of TCP/IP half-open Limited Patchers, according to the modified target, can be divided into two types: File Patcher and Memory Patcher.

File Patcher, patch the file Tcpip.sys on harddisk.
This action will break out the digital signature, system will not to boot at normal mode.
You must press key F8 at boot menu, and select 'disable digital signature enforcement'. Otherwise, a BSOD will come to your screen.
You can install ReadyDriver Plus to press F8 automatically.
Another method is sign tcpip.sys with a test signature, then system can boot in test mode normally without press F8. System must enable test mode, otherwise, BSOD comes.

Memory Patcher, patch tcpip.sys in system memory.
This is the best way to patch limited of half-open connection.

It does not direct modify the file tcpip.sys itself, so there is no damage to tcpip.sys.
There is also a advantage of Memory Patch is flexible control and modify the limited value of immediate effect, do not need to restart the computer.

Ordinary File Patcher (Not repair digital signature), the representative: Patcher within Thunder and Bitspirit, VistaTcpipUacPatch, and so on, many fall into this type of patcher.

File Patcher (With Test digital signature), the representative: Universal Tcpip.sys Patch, Half-open limit fix。

Memory Patcher, the representative: UnlimitTcpip，TCP-Z。

In all patchers, the quantity of OS that TCP-Z supports is the most. The chart that TCP-Z provides can be used as reference data for the needing to crack or not, whether or not to modified successfully.

32bits & 64bits, NT5(Windows XP)

32bits, NT6(Windows Vista / Windows 7)

64bits, NT6(Windows Vista / Windows 7)

Note:
X --- It means that does not require the setting.

Command for setup status of TestSigning.
Set to On: bcdedit.exe -set TESTSIGNING ON
Set to Off: bcdedit.exe -set TESTSIGNING OFF

TCP-Z, V2.2, Build20081129 Release

2008-12-01T19:48:00.009+08:00

Update: V2.2, Build 20081129

Download link 1: TCPZ_20081129.zip
Download link 2: TCPZ_20081129.zip

Project Name: TCP-Z (TCP-Z Network Monitor)
Support OS： Windows XP SP2 SP3/2003/2008/Vista SP1 SP2/Windows 7, All 32bit (x86) / 64bit (x64)

Event ID 4226 Patcher, EvID4226 fix, TCP/IP Patcher, TCP Half Open Limited Patcher.

Raise the limited of half-open connection, Release the power of your network, download faster, and more task can be run at the same time.

Features:
1) Safe And Easy: Modifies Tcpip.sys in memory. The changes take effect immediately; do not need to restart the computer.

2) Wide Compatibility: It searches limited offset through signature, no longer focused on the MS upgrade and update.
Support all version of Windows, Which with half-open limited.

3) Professional Chart: TCP-Z shows number of estabilished connection, half open connection, Create depth, download/upload speed in real-time.
And software will show the number of warnings events in per-minute, which TCP half open connection overload.

************
* Usages *
************
1) Manually: Use GUI application tcpz.exe / tcpz64.exe to modify limited value.

2) Automatically: Install TCP-Z Virtual Device. It modify limited value automatically without human intervention. Use Device Manager property page to customize the maximum value.

Two version TCP-Z can run an independent, you can choose one of them.

History:

2008.11.07 V2.0.0.30 beta
* Modified all search function. Improve success rate.

2008.11.12 V2.1.0.33
+ Add tcpz64.exe, a native x64 program.
* Modify search function.
* Memory Limited of XP up to 1000.
* Fix: compatibility of multi-core CPU.
* Fix: fail to load driver in Windows 7 x64.

2008.11.29 V2.2.0.35
+ Virtual drive, add a option to custom limited value. Add a UnLimited option for Vista / Windows 7.
+ GUI program, capture screen by hot-key F5 / F6. It needs gdi+ support.
* GUI program, add Vista UAC manifest. May not be compatible with XP SP2, you can upgrade Sevice Pack, or continue to use the V2.1 version of TCP-Z.
* GUI program be changed to a single file, portable version.

Universal Theme Patcher (v1.5, Build 20090409)

2008-11-04T00:03:00.030+08:00

Update: V1.5.0.22, Build 20090409

Download link 1: UniversalThemePatcher_20090409.zip
Download link 2: UniversalThemePatcher_20090409.zip
Download link 3: UniversalThemePatcher_20090409.zip (Click to download)

Additional language files:
ThemePatcher_RUS.zip

Project: Universal Theme Patcher
E-mail: deepxw#126.com
Blog: http://deepxw.blogspot.com (English), http://deepxw.lingd.net
Support: Windows XP SP2 SP3/2003/2008/Vista SP1 SP2/Windows 7, All 32bit(x86)/64bit(x64)

Crack uxtheme, free your Windows supports 3rd party desktop msstyle themes.

It is a universal theme patcher. Without language limited, Supports all language of windows!

The meaning of the last number of checksum:
1 - Original file, without any modification.
9 - The file has been modified.

Notes:
1, Can oprate in normal mode. Do not need to enter safe mode.

2, Choose the corresponding patcher based on you Windows:
For 32bit(x86): UniversalThemePatcher-x86.exe
For 64bit(amd64): UniversalThemePatcher-x64.exe

3, Require administrator rights, UAC turn off. Right-click the exe file, select Run as Administrator.

4, XP/2003 only need to patch one file: uxtheme.dll
2008/Vista/Windows 7 6519 need to patch 3 files: uxtheme.dll, themeui.dll, shsvcs.dll
Windows 7 6801 need to patch 3 files: uxtheme.dll, themeui.dll, themeservice.dll

Sometimes, in x64 Windows, you need to patch 2 copies of files:
using UniversalThemePatcher-x64.exe to patch the 64bit files in \windows\system32;
and using UniversalThemePatcher-x86.exe to patch the 32bit files in \windows\syswow64.

5, After patch, Restart computer to take effect.

6, You can run program with argument "-silent" to patch in silent mode.

History:

2008.10.30, v1.1
+ supports x64: Windows XP/Server 2003/Server 2008/Vista/Windows 7

2008.11.01, v1.2
+ Windows 7 M3. (Not yet been completed.)
* Vista SP2 v6.0.6002.16497

2008.11.02, v1.2.5
+ show checksum of file.
* Change method of reading version information.
Download link 1: UniversalThemePatcher_20081102.zip

2009.01.01, v1.3
+ Display status of system file at program startup.
* Improvements compatibility of disable WFP function in Windows XP.
Download link 1: UniversalThemePatcher_20090101.zip

2009.03.30, v1.4
+ Add support argument "-silent" to patch in silent mode.
+ Check whether the file is original.
* Support themeui.dll of Windows 7 x64 Build 7068, 6.1.7068.0.
UniversalThemePatcher_20090330.zip

2009.04.09, v1.5
+ Support external language file.
+ Indentify the file has been cracked by other patch. (nLite)
* Allow UniversalThemePatcher-x86.exe to patch the 32bit files in \windows\syswow64.

Note:
It also supports:
Windows 7 Build 6801, 7000, 7022, 7048, 7057, 7068.
6.1.7077.0 (winmain_win7rc.090404-1255)
6.1.7106.0 (winmain.090408-1623)
6.1.7100.0 (winmain_win7rc.090421-1700)

Windows Vista SP2 6.0.6002.16670, 6.0.6002.17506.
6.0.6002.18003 (lh_sp2rtm.090403-1730)
SP2 RTM 6.0.6002.18005 (lh_sp2rtm.090410-1830)

The 32bit (x86) themes/Visual Styles should not be used in 64bit (x64) Windows.