Outlook Express question

[Jim Carlock]

When I click on Help, "About Microsoft Outlook Express",
I get the About dialog box for Outlook Express.

It's unusual though I think. Mine is reporting:

Microsoft
Outlook Express 6
5.00.0000.0000

And I think it should be reporting different numbers. I'm wondering
what others are getting.

I'm not sure if I should report this as a bug or look somewhere else
to find out why.

--
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.

[PA Bear]

In a related, ongoing thread in OE6 NG, Jim gives additional information:

<paste>
javascript:navigator.appMinorVersion returns:

;SP1;3283 [sic; Q328310?];Q824145;Q818529;Q330994;Q832894;

[OE Help>About] says:

Microsoft
Outlook Express 6
5.00.0000.000
Copyright...

Version at the DOS prompt indicates:
Microsoft Windows XP [Version 5.1.2600]

NetDiag at the DOS prompt displays some wierd stuff too (see
first line below):

System info : Windows 2000 Professional (Build 2600)
Processor : x86 Family 6 Model 8 Stepping 1, AuthenticAM
List of installed hotfixes :
KB282010, KB810217, KB810243, KB817778, KB820291,
KB821253, KB821557, KB822603, KB823182, KB823559,
KB823980, KB824105, KB824141, KB824146, KB825119,
KB826939, KB826942, KB828028, KB828035, KB829558,
Q147222, Q322011, Q323255, Q327979, Q328310, Q329048,
Q329115, Q329170, Q329390, Q329441, q329623, Q329834,
Q331953, Q810565, Q810577, Q810833, Q811114, Q811493,
Q811630, Q814033, Q814995, Q815021, Q817287, Q817606,
</paste>

Jim, did you upgrade to WinXP from Win2K? Is this a multi-boot system?
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.mvps.org/

Protect Your PC
http://www.microsoft.com/security/protect

Jim Carlock wrote:
> When I click on Help, "About Microsoft Outlook Express",
> I get the About dialog box for Outlook Express.
>
> It's unusual though I think. Mine is reporting:
>
> Microsoft
> Outlook Express 6
> 5.00.0000.0000
>
> And I think it should be reporting different numbers. I'm wondering
> what others are getting.
>
> I'm not sure if I should report this as a bug or look somewhere else
> to find out why.

[Jim Carlock]

"PA Bear" wrote:
Jim, did you upgrade to WinXP from Win2K? Is this a multi-boot system?

Well, to the tell the truth. I installed Win2k on it at one point and
got Win2k running. I spent about a month reinstalling XP. It was
driving me nuts. WinXP Pro has been reinstalled about a dozen
times. I've never ditched the Program Files at all, but I did kill
the Windows folder that XP was installed into. I had set Win2k
up as a test, because XP just wasn't running right, and it ended
up being faulty memory. The last few installs though was
installing XP over XP. XP is installed into the Windows folder
and Win2K was installed into the WinNT folder. Sorry about
the multiposting, I didn't realize you watched the XP
newsgroups. :-) Was going to post back to the OE group if
someone here popped up with an answer.

Anyways... I think the answer is yes, but I also think the
answer is no. I've moved the WinNT (Win2k) folder to
another drive and haven't quite deleted it yet.

Also, IEAK6 was used to create an IE and OE build setup
to do a corporate installation. The date the IEAK build was
made was May of 2003.

--
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.


In a related, ongoing thread in OE6 NG, Jim gives additional information:

<paste>
javascript:navigator.appMinorVersion returns:

;SP1;3283 [sic; Q328310?];Q824145;Q818529;Q330994;Q832894;

[OE Help>About] says:

Microsoft
Outlook Express 6
5.00.0000.000
Copyright...

Version at the DOS prompt indicates:
Microsoft Windows XP [Version 5.1.2600]

NetDiag at the DOS prompt displays some wierd stuff too (see
first line below):

System info : Windows 2000 Professional (Build 2600)
Processor : x86 Family 6 Model 8 Stepping 1, AuthenticAM
List of installed hotfixes :
KB282010, KB810217, KB810243, KB817778, KB820291,
KB821253, KB821557, KB822603, KB823182, KB823559,
KB823980, KB824105, KB824141, KB824146, KB825119,
KB826939, KB826942, KB828028, KB828035, KB829558,
Q147222, Q322011, Q323255, Q327979, Q328310, Q329048,
Q329115, Q329170, Q329390, Q329441, q329623, Q329834,
Q331953, Q810565, Q810577, Q810833, Q811114, Q811493,
Q811630, Q814033, Q814995, Q815021, Q817287, Q817606,
</paste>


AumHa Forums
http://forum.mvps.org/

Protect Your PC
http://www.microsoft.com/security/protect

Jim Carlock wrote:
> When I click on Help, "About Microsoft Outlook Express",
> I get the About dialog box for Outlook Express.
>
> It's unusual though I think. Mine is reporting:
>
> Microsoft
> Outlook Express 6
> 5.00.0000.0000
>
> And I think it should be reporting different numbers. I'm wondering
> what others are getting.
>
> I'm not sure if I should report this as a bug or look somewhere else
> to find out why.

[Kelly]

Do all of the numbers under Version (File/Version/Full Path) read 5.... as
well? Either way, this is not normal.

--
All the Best,
Kelly

Microsoft-MVP Windows® XP

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm


"Jim Carlock" > wrote in message
...
> When I click on Help, "About Microsoft Outlook Express",
> I get the About dialog box for Outlook Express.
>
> It's unusual though I think. Mine is reporting:
>
> Microsoft
> Outlook Express 6
> 5.00.0000.0000
>
> And I think it should be reporting different numbers. I'm wondering
> what others are getting.
>
> I'm not sure if I should report this as a bug or look somewhere else
> to find out why.
>
> --
> Jim Carlock
> http://www.microcosmotalk.com/
> Post replies to the newsgroup.
>
>
>

[Jim Carlock]

Kelly wrote in a thread a little farther down:
> Do all of the numbers under Version (File/Version/Full Path)
> read 5.... as well? Either way, this is not normal.

Not quite sure but here are the numbers:

acctres.dll <- 6.00.2600.0000 (xpclient.010817-1148)
comctl32.dll <- 6.0 (xpsp1.020828-1920)
csapi3t1.dll <- 1.0.2415
directdb.dll <- 6.00.2800.1123
inetcomm.dll <- 6.00.2800.1165
inetres.dll <- 6.00.2800.1123
mapi32.dll <- 1.0.2536.0 (XPClient.0108170-1148)
mshtml.dll <- 6.00.2800.1400
msident.dll <- 6.00.2800.1123
msoe.dll <- 6.00.2800.1158
msoeacct.dll <- 6.00.2800.1123
msoeres.dll <- 6.00.2800.1123
msoert2.dll <- 6.00.2800.1123
oeimport.dll <- 6.00.2800.1123
ole32.dll <- 5.1.2600.1263 (xpsp2.030819-2129)
riched20.dll <- 5.30.23.1211
riched32.dll <- 5.1.2600.0 (xpclient.010817-1148)
wab32.dll <- 6.00.2800.1123
wab32res.dll <- 6.00.2800.1106 (xpsp1.020828-1920)
wldap32.dll <- 5.1.2600.1106 (xpsp1.020828-1920)

If you copy and paste to notepad, they'll line up nicely.

--
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.


"Jim Carlock" > wrote in message
...
"PA Bear" wrote:
Jim, did you upgrade to WinXP from Win2K? Is this a multi-boot system?

Well, to the tell the truth. I installed Win2k on it at one point and
got Win2k running. I spent about a month reinstalling XP. It was
driving me nuts. WinXP Pro has been reinstalled about a dozen
times. I've never ditched the Program Files at all, but I did kill
the Windows folder that XP was installed into. I had set Win2k
up as a test, because XP just wasn't running right, and it ended
up being faulty memory. The last few installs though was
installing XP over XP. XP is installed into the Windows folder
and Win2K was installed into the WinNT folder. Sorry about
the multiposting, I didn't realize you watched the XP
newsgroups. :-) Was going to post back to the OE group if
someone here popped up with an answer.

Anyways... I think the answer is yes, but I also think the
answer is no. I've moved the WinNT (Win2k) folder to
another drive and haven't quite deleted it yet.

Also, IEAK6 was used to create an IE and OE build setup
to do a corporate installation. The date the IEAK build was
made was May of 2003.

--
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.


In a related, ongoing thread in OE6 NG, Jim gives additional information:

<paste>
javascript:navigator.appMinorVersion returns:

;SP1;3283 [sic; Q328310?];Q824145;Q818529;Q330994;Q832894;

[OE Help>About] says:

Microsoft
Outlook Express 6
5.00.0000.000
Copyright...

Version at the DOS prompt indicates:
Microsoft Windows XP [Version 5.1.2600]

NetDiag at the DOS prompt displays some wierd stuff too (see
first line below):

System info : Windows 2000 Professional (Build 2600)
Processor : x86 Family 6 Model 8 Stepping 1, AuthenticAM
List of installed hotfixes :
KB282010, KB810217, KB810243, KB817778, KB820291,
KB821253, KB821557, KB822603, KB823182, KB823559,
KB823980, KB824105, KB824141, KB824146, KB825119,
KB826939, KB826942, KB828028, KB828035, KB829558,
Q147222, Q322011, Q323255, Q327979, Q328310, Q329048,
Q329115, Q329170, Q329390, Q329441, q329623, Q329834,
Q331953, Q810565, Q810577, Q810833, Q811114, Q811493,
Q811630, Q814033, Q814995, Q815021, Q817287, Q817606,
</paste>


AumHa Forums
http://forum.mvps.org/

Protect Your PC
http://www.microsoft.com/security/protect

Jim Carlock wrote:
> When I click on Help, "About Microsoft Outlook Express",
> I get the About dialog box for Outlook Express.
>
> It's unusual though I think. Mine is reporting:
>
> Microsoft
> Outlook Express 6
> 5.00.0000.0000
>
> And I think it should be reporting different numbers. I'm wondering
> what others are getting.
>
> I'm not sure if I should report this as a bug or look somewhere else
> to find out why.

[Frank Saunders, MS-MVP IE/OE]

This is quite strange.
What's the version number on Msimn.exe?
The other version numbers seem to be correct.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/


"Jim Carlock" > wrote in message

> Kelly wrote in a thread a little farther down:
>> Do all of the numbers under Version (File/Version/Full Path)
>> read 5.... as well? Either way, this is not normal.
>
> Not quite sure but here are the numbers:
>
> acctres.dll <- 6.00.2600.0000 (xpclient.010817-1148)
> comctl32.dll <- 6.0 (xpsp1.020828-1920)
> csapi3t1.dll <- 1.0.2415
> directdb.dll <- 6.00.2800.1123
> inetcomm.dll <- 6.00.2800.1165
> inetres.dll <- 6.00.2800.1123
> mapi32.dll <- 1.0.2536.0 (XPClient.0108170-1148)
> mshtml.dll <- 6.00.2800.1400
> msident.dll <- 6.00.2800.1123
> msoe.dll <- 6.00.2800.1158
> msoeacct.dll <- 6.00.2800.1123
> msoeres.dll <- 6.00.2800.1123
> msoert2.dll <- 6.00.2800.1123
> oeimport.dll <- 6.00.2800.1123
> ole32.dll <- 5.1.2600.1263 (xpsp2.030819-2129)
> riched20.dll <- 5.30.23.1211
> riched32.dll <- 5.1.2600.0 (xpclient.010817-1148)
> wab32.dll <- 6.00.2800.1123
> wab32res.dll <- 6.00.2800.1106 (xpsp1.020828-1920)
> wldap32.dll <- 5.1.2600.1106 (xpsp1.020828-1920)
>
> If you copy and paste to notepad, they'll line up nicely.
>
> --
> Jim Carlock
> http://www.microcosmotalk.com/
> Post replies to the newsgroup.
>
>
> "Jim Carlock" > wrote in message
> ...
> "PA Bear" wrote:
> Jim, did you upgrade to WinXP from Win2K? Is this a multi-boot
> system?
>
> Well, to the tell the truth. I installed Win2k on it at one point and
> got Win2k running. I spent about a month reinstalling XP. It was
> driving me nuts. WinXP Pro has been reinstalled about a dozen
> times. I've never ditched the Program Files at all, but I did kill
> the Windows folder that XP was installed into. I had set Win2k
> up as a test, because XP just wasn't running right, and it ended
> up being faulty memory. The last few installs though was
> installing XP over XP. XP is installed into the Windows folder
> and Win2K was installed into the WinNT folder. Sorry about
> the multiposting, I didn't realize you watched the XP
> newsgroups. :-) Was going to post back to the OE group if
> someone here popped up with an answer.
>
> Anyways... I think the answer is yes, but I also think the
> answer is no. I've moved the WinNT (Win2k) folder to
> another drive and haven't quite deleted it yet.
>
> Also, IEAK6 was used to create an IE and OE build setup
> to do a corporate installation. The date the IEAK build was
> made was May of 2003.
>
>
> Jim Carlock wrote:
>> When I click on Help, "About Microsoft Outlook Express",
>> I get the About dialog box for Outlook Express.
>>
>> It's unusual though I think. Mine is reporting:
>>
>> Microsoft
>> Outlook Express 6
>> 5.00.0000.0000
>>
>> And I think it should be reporting different numbers. I'm wondering
>> what others are getting.
>>
>> I'm not sure if I should report this as a bug or look somewhere else
>> to find out why.

[PA Bear]

Agreed.

The original Win2K (non-SPs) would have install IE 5.01 (v5.00.2920.0000)
(cf. http://support.microsoft.com/?kbid=164539).

Jim may have ended up with a WinXP variety of WinME's infamous "version
soup", due to the (apparently) problematic partitioning and/or installs of
Windows 2K and XP. Throwing the use of IEAK 6 (why, I can't figure out)
into the mix only makes things murkier.
--
~PA Bear

Frank Saunders, MS-MVP IE/OE wrote:
> This is quite strange.
> What's the version number on Msimn.exe?
> The other version numbers seem to be correct.
>
> "Jim Carlock" > wrote in message
>
>> Kelly wrote in a thread a little farther down:
>>> Do all of the numbers under Version (File/Version/Full Path)
>>> read 5.... as well? Either way, this is not normal.
>>
>> Not quite sure but here are the numbers:
>>
>> acctres.dll <- 6.00.2600.0000 (xpclient.010817-1148)
>> comctl32.dll <- 6.0 (xpsp1.020828-1920)
>> csapi3t1.dll <- 1.0.2415
>> directdb.dll <- 6.00.2800.1123
>> inetcomm.dll <- 6.00.2800.1165
>> inetres.dll <- 6.00.2800.1123
>> mapi32.dll <- 1.0.2536.0 (XPClient.0108170-1148)
>> mshtml.dll <- 6.00.2800.1400
>> msident.dll <- 6.00.2800.1123
>> msoe.dll <- 6.00.2800.1158
>> msoeacct.dll <- 6.00.2800.1123
>> msoeres.dll <- 6.00.2800.1123
>> msoert2.dll <- 6.00.2800.1123
>> oeimport.dll <- 6.00.2800.1123
>> ole32.dll <- 5.1.2600.1263 (xpsp2.030819-2129)
>> riched20.dll <- 5.30.23.1211
>> riched32.dll <- 5.1.2600.0 (xpclient.010817-1148)
>> wab32.dll <- 6.00.2800.1123
>> wab32res.dll <- 6.00.2800.1106 (xpsp1.020828-1920)
>> wldap32.dll <- 5.1.2600.1106 (xpsp1.020828-1920)
>>
>> If you copy and paste to notepad, they'll line up nicely.
>>
>> --
>> Jim Carlock
>> http://www.microcosmotalk.com/
>> Post replies to the newsgroup.
>>
>>
>> "Jim Carlock" > wrote in message
>> ...
>> "PA Bear" wrote:
>> Jim, did you upgrade to WinXP from Win2K? Is this a multi-boot
>> system?
>>
>> Well, to the tell the truth. I installed Win2k on it at one point and
>> got Win2k running. I spent about a month reinstalling XP. It was
>> driving me nuts. WinXP Pro has been reinstalled about a dozen
>> times. I've never ditched the Program Files at all, but I did kill
>> the Windows folder that XP was installed into. I had set Win2k
>> up as a test, because XP just wasn't running right, and it ended
>> up being faulty memory. The last few installs though was
>> installing XP over XP. XP is installed into the Windows folder
>> and Win2K was installed into the WinNT folder. Sorry about
>> the multiposting, I didn't realize you watched the XP
>> newsgroups. :-) Was going to post back to the OE group if
>> someone here popped up with an answer.
>>
>> Anyways... I think the answer is yes, but I also think the
>> answer is no. I've moved the WinNT (Win2k) folder to
>> another drive and haven't quite deleted it yet.
>>
>> Also, IEAK6 was used to create an IE and OE build setup
>> to do a corporate installation. The date the IEAK build was
>> made was May of 2003.
>>
>>
>> Jim Carlock wrote:
>>> When I click on Help, "About Microsoft Outlook Express",
>>> I get the About dialog box for Outlook Express.
>>>
>>> It's unusual though I think. Mine is reporting:
>>>
>>> Microsoft
>>> Outlook Express 6
>>> 5.00.0000.0000
>>>
>>> And I think it should be reporting different numbers. I'm wondering
>>> what others are getting.
>>>
>>> I'm not sure if I should report this as a bug or look somewhere else
>>> to find out why.

[Robert Aldwinckle]

> Also, IEAK6 was used to create an IE and OE build setup
> to do a corporate installation.

If IEAK can create a branded name for OE this might be a clue.
For example, you could use RegMon to trace both your IEAK version
and a normal standard version to see if there are any interesting
differences.

There was an icon change between OE5 and OE6 and that icon
is used in the Help, About display. Besides the text which icon
do you see? Actually I'm also wondering if that "text" might not
be part of that graphic. Again, if customization is involved you might
be able to detect a difference between two versions by using FileMon.

Let's also consider the splash screen which might be another source
of customization. What do you see when it comes up? (You have to
look fast. <g>) I suspect that there might be a way of testing it using
rundll32 but I haven't figured out yet where it would be coming from.
So far, it just seems to be coming from msoe.dll. (Using a combination
of RegMon and FileMon, filtering with msimn in each case.
In particular I used the timestamp on RegMon's record of NoSplash
to correlate any assumed .dll activity monitored by FileMon.)
BTW RegMon and FileMon were both helpful in slowing my system
down enough to enable me to capture the splash screen in my Clipboard.
Even so I had to anticipate the appearance of the splash screen
and actually start pressing PrintScreen *before* I was actually seeing it
in order to capture it. The splash screen only appears each time
msimn.exe is loaded, so you must close *all* OE windows and verify
msimn.exe is terminating properly in order to do this testing.


HTH

Robert Aldwinckle
---


"Jim Carlock" > wrote in message
...
> "PA Bear" wrote:
> Jim, did you upgrade to WinXP from Win2K? Is this a multi-boot system?
>
> Well, to the tell the truth. I installed Win2k on it at one point and
> got Win2k running. I spent about a month reinstalling XP. It was
> driving me nuts. WinXP Pro has been reinstalled about a dozen
> times. I've never ditched the Program Files at all, but I did kill
> the Windows folder that XP was installed into. I had set Win2k
> up as a test, because XP just wasn't running right, and it ended
> up being faulty memory. The last few installs though was
> installing XP over XP. XP is installed into the Windows folder
> and Win2K was installed into the WinNT folder. Sorry about
> the multiposting, I didn't realize you watched the XP
> newsgroups. :-) Was going to post back to the OE group if
> someone here popped up with an answer.
>
> Anyways... I think the answer is yes, but I also think the
> answer is no. I've moved the WinNT (Win2k) folder to
> another drive and haven't quite deleted it yet.
>
> Also, IEAK6 was used to create an IE and OE build setup
> to do a corporate installation. The date the IEAK build was
> made was May of 2003.
>
> --
> Jim Carlock
> http://www.microcosmotalk.com/
> Post replies to the newsgroup.
>
>
> In a related, ongoing thread in OE6 NG, Jim gives additional information:
>
> <paste>
> javascript:navigator.appMinorVersion returns:
>
> ;SP1;3283 [sic; Q328310?];Q824145;Q818529;Q330994;Q832894;
>
> [OE Help>About] says:
>
> Microsoft
> Outlook Express 6
> 5.00.0000.000
> Copyright...
>
> Version at the DOS prompt indicates:
> Microsoft Windows XP [Version 5.1.2600]
>
> NetDiag at the DOS prompt displays some wierd stuff too (see
> first line below):
>
> System info : Windows 2000 Professional (Build 2600)
> Processor : x86 Family 6 Model 8 Stepping 1, AuthenticAM
> List of installed hotfixes :
> KB282010, KB810217, KB810243, KB817778, KB820291,
> KB821253, KB821557, KB822603, KB823182, KB823559,
> KB823980, KB824105, KB824141, KB824146, KB825119,
> KB826939, KB826942, KB828028, KB828035, KB829558,
> Q147222, Q322011, Q323255, Q327979, Q328310, Q329048,
> Q329115, Q329170, Q329390, Q329441, q329623, Q329834,
> Q331953, Q810565, Q810577, Q810833, Q811114, Q811493,
> Q811630, Q814033, Q814995, Q815021, Q817287, Q817606,
> </paste>
>
>
> AumHa Forums
> http://forum.mvps.org/
>
> Protect Your PC
> http://www.microsoft.com/security/protect
>
> Jim Carlock wrote:
> > When I click on Help, "About Microsoft Outlook Express",
> > I get the About dialog box for Outlook Express.
> >
> > It's unusual though I think. Mine is reporting:
> >
> > Microsoft
> > Outlook Express 6
> > 5.00.0000.0000
> >
> > And I think it should be reporting different numbers. I'm wondering
> > what others are getting.
> >
> > I'm not sure if I should report this as a bug or look somewhere else
> > to find out why.
>
>

[Jim Carlock]

"Frank Saunders, MS-MVP IE/OE" wrote:
> This is quite strange.
> What's the version number on Msimn.exe?
> The other version numbers seem to be correct.

msimn.exe Properties:
Version: 6.0.2800.1123
Size: 56,832 bytes
Mod and Creation Dates:
Monday, March 03, 2003, 3:57:18 PM

--
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.




"Jim Carlock" wrote:
> Kelly wrote in a thread a little farther down:
>> Do all of the numbers under Version (File/Version/Full Path)
>> read 5.... as well? Either way, this is not normal.
>
> Not quite sure but here are the numbers:
>
> acctres.dll <- 6.00.2600.0000 (xpclient.010817-1148)
> comctl32.dll <- 6.0 (xpsp1.020828-1920)
> csapi3t1.dll <- 1.0.2415
> directdb.dll <- 6.00.2800.1123
> inetcomm.dll <- 6.00.2800.1165
> inetres.dll <- 6.00.2800.1123
> mapi32.dll <- 1.0.2536.0 (XPClient.0108170-1148)
> mshtml.dll <- 6.00.2800.1400
> msident.dll <- 6.00.2800.1123
> msoe.dll <- 6.00.2800.1158
> msoeacct.dll <- 6.00.2800.1123
> msoeres.dll <- 6.00.2800.1123
> msoert2.dll <- 6.00.2800.1123
> oeimport.dll <- 6.00.2800.1123
> ole32.dll <- 5.1.2600.1263 (xpsp2.030819-2129)
> riched20.dll <- 5.30.23.1211
> riched32.dll <- 5.1.2600.0 (xpclient.010817-1148)
> wab32.dll <- 6.00.2800.1123
> wab32res.dll <- 6.00.2800.1106 (xpsp1.020828-1920)
> wldap32.dll <- 5.1.2600.1106 (xpsp1.020828-1920)
>
> If you copy and paste to notepad, they'll line up nicely.
>
> --
> Jim Carlock
> http://www.microcosmotalk.com/
> Post replies to the newsgroup.
>
>
> "Jim Carlock" typed previously:
> "PA Bear" wrote:
> Jim, did you upgrade to WinXP from Win2K? Is this a multi-boot
> system?
>
> Well, to the tell the truth. I installed Win2k on it at one point and
> got Win2k running. I spent about a month reinstalling XP. It was
> driving me nuts. WinXP Pro has been reinstalled about a dozen
> times. I've never ditched the Program Files at all, but I did kill
> the Windows folder that XP was installed into. I had set Win2k
> up as a test, because XP just wasn't running right, and it ended
> up being faulty memory. The last few installs though was
> installing XP over XP. XP is installed into the Windows folder
> and Win2K was installed into the WinNT folder. Sorry about
> the multiposting, I didn't realize you watched the XP
> newsgroups. :-) Was going to post back to the OE group if
> someone here popped up with an answer.
>
> Anyways... I think the answer is yes, but I also think the
> answer is no. I've moved the WinNT (Win2k) folder to
> another drive and haven't quite deleted it yet.
>
> Also, IEAK6 was used to create an IE and OE build setup
> to do a corporate installation. The date the IEAK build was
> made was May of 2003.
>
>
> Jim Carlock wrote:
>> When I click on Help, "About Microsoft Outlook Express",
>> I get the About dialog box for Outlook Express.
>>
>> It's unusual though I think. Mine is reporting:
>>
>> Microsoft
>> Outlook Express 6
>> 5.00.0000.0000
>>
>> And I think it should be reporting different numbers. I'm wondering
>> what others are getting.
>>
>> I'm not sure if I should report this as a bug or look somewhere else
>> to find out why.

[Frank Saunders, MS-MVP IE/OE]

"Jim Carlock" > wrote in message

> "Frank Saunders, MS-MVP IE/OE" wrote:
>> This is quite strange.
>> What's the version number on Msimn.exe?
>> The other version numbers seem to be correct.
>
> msimn.exe Properties:
> Version: 6.0.2800.1123
> Size: 56,832 bytes
> Mod and Creation Dates:
> Monday, March 03, 2003, 3:57:18 PM

I'll admit to being totally sumped.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

[Jim Carlock]

"Robert Aldwinckle" expressed:
> There was an icon change between OE5 and OE6 and that
> icon is used in the Help, About display. Besides the text
> which icon do you see? Actually I'm also wondering if that
> "text" might not be part of that graphic. Again, if customization
> is involved you might be able to detect a difference between
> two versions by using FileMon.

The version number is a class Static label as determined via
Spy++. It is style 50020000, has a Caption: "5.00.0000.0000".

I'm including an image of the caption. I'm going to try to drag
and drop the image here.

I don't think it's going to appear inline, but I guess I'll find out.

> Let's also consider the splash screen which might be another
> source of customization. What do you see when it comes
> up? (You have to look fast. <g>)

I don't see any splash at all. My eyes must be too slow. Ohh,
I found it! LOL I'm going to try an endless loop program to see
if the processor can be pushed to 100% useage so I can get a
glimpse of that little splash. That didn't work. Oh well.

> I suspect that there might be a way of testing it using rundll32
> but I haven't figured out yet where it would be coming from.

I'm looking for a tool that displays the menu systems. I've seen
it and used it in the past, and I've tried to use Spy++ but I can't
seem to click on the menu item. I know I have a tool that can
display the menus of an app somewhere, I just can't find it.

I'm done for the day with messing with this. :-)

--
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.

So far, it just seems to be coming from msoe.dll. (Using a combination
of RegMon and FileMon, filtering with msimn in each case.
In particular I used the timestamp on RegMon's record of NoSplash
to correlate any assumed .dll activity monitored by FileMon.)
BTW RegMon and FileMon were both helpful in slowing my system
down enough to enable me to capture the splash screen in my Clipboard.
Even so I had to anticipate the appearance of the splash screen
and actually start pressing PrintScreen *before* I was actually seeing it
in order to capture it. The splash screen only appears each time
msimn.exe is loaded, so you must close *all* OE windows and verify
msimn.exe is terminating properly in order to do this testing.


HTH

Robert Aldwinckle
---


"Jim Carlock" > wrote in message
...
> "PA Bear" wrote:
> Jim, did you upgrade to WinXP from Win2K? Is this a multi-boot system?
>
> Well, to the tell the truth. I installed Win2k on it at one point and
> got Win2k running. I spent about a month reinstalling XP. It was
> driving me nuts. WinXP Pro has been reinstalled about a dozen
> times. I've never ditched the Program Files at all, but I did kill
> the Windows folder that XP was installed into. I had set Win2k
> up as a test, because XP just wasn't running right, and it ended
> up being faulty memory. The last few installs though was
> installing XP over XP. XP is installed into the Windows folder
> and Win2K was installed into the WinNT folder. Sorry about
> the multiposting, I didn't realize you watched the XP
> newsgroups. :-) Was going to post back to the OE group if
> someone here popped up with an answer.
>
> Anyways... I think the answer is yes, but I also think the
> answer is no. I've moved the WinNT (Win2k) folder to
> another drive and haven't quite deleted it yet.
>
> Also, IEAK6 was used to create an IE and OE build setup
> to do a corporate installation. The date the IEAK build was
> made was May of 2003.
>
> --
> Jim Carlock
> http://www.microcosmotalk.com/
> Post replies to the newsgroup.
>
>
> In a related, ongoing thread in OE6 NG, Jim gives additional information:
>
> <paste>
> javascript:navigator.appMinorVersion returns:
>
> ;SP1;3283 [sic; Q328310?];Q824145;Q818529;Q330994;Q832894;
>
> [OE Help>About] says:
>
> Microsoft
> Outlook Express 6
> 5.00.0000.000
> Copyright...
>
> Version at the DOS prompt indicates:
> Microsoft Windows XP [Version 5.1.2600]
>
> NetDiag at the DOS prompt displays some wierd stuff too (see
> first line below):
>
> System info : Windows 2000 Professional (Build 2600)
> Processor : x86 Family 6 Model 8 Stepping 1, AuthenticAM
> List of installed hotfixes :
> KB282010, KB810217, KB810243, KB817778, KB820291,
> KB821253, KB821557, KB822603, KB823182, KB823559,
> KB823980, KB824105, KB824141, KB824146, KB825119,
> KB826939, KB826942, KB828028, KB828035, KB829558,
> Q147222, Q322011, Q323255, Q327979, Q328310, Q329048,
> Q329115, Q329170, Q329390, Q329441, q329623, Q329834,
> Q331953, Q810565, Q810577, Q810833, Q811114, Q811493,
> Q811630, Q814033, Q814995, Q815021, Q817287, Q817606,
> </paste>
>
>
> AumHa Forums
> http://forum.mvps.org/
>
> Protect Your PC
> http://www.microsoft.com/security/protect
>
> Jim Carlock wrote:
> > When I click on Help, "About Microsoft Outlook Express",
> > I get the About dialog box for Outlook Express.
> >
> > It's unusual though I think. Mine is reporting:
> >
> > Microsoft
> > Outlook Express 6
> > 5.00.0000.0000
> >
> > And I think it should be reporting different numbers. I'm wondering
> > what others are getting.
> >
> > I'm not sure if I should report this as a bug or look somewhere else
> > to find out why.
>
>








begin 666 oe6About.gif
M1TE&.#EAP@&J`?<``````( ```" `(" ````@( `@ " @,# P,#<P*;*\$ @
M`& @`( @`* @`, @`. @``! `"! `$! `&! `(! `*! `,! `.! ``!@`"!@
M`$!@`&!@`(!@`*!@`,!@`.!@``" `"" `$" `&" `(" `*" `," `." ``"@
M`""@`$"@`&"@`("@`*"@`,"@`."@``# `"# `$# `&# `(# `*# `,# `.#
M``#@`"#@`$#@`&#@`(#@`*#@`,#@`.#@````0" `0$ `0& `0( `0* `0, `
M0. `0 `@0" @0$ @0& @0( @0* @0, @0. @0 ! 0"! 0$! 0&! 0(! 0*!
M0,! 0.! 0 !@0"!@0$!@0&!@0(!@0*!@0,!@0.!@0 " 0"" 0$" 0&" 0("
M0*" 0," 0." 0 "@0""@0$"@0&"@0("@0*"@0,"@0."@0 # 0"# 0$# 0&#
M0(# 0*# 0,# 0.# 0 #@0"#@0$#@0&#@0(#@0*#@0,#@0.#@0 ``@" `@$ `
M@& `@( `@* `@, `@. `@ `@@" @@$ @@& @@( @@* @@, @@. @@ ! @"!
M@$! @&! @(! @*! @,! @.! @ !@@"!@@$!@@&!@@(!@@*!@@,!@@.!@@ "
M@"" @$" @&" @(" @*" @," @." @ "@@""@@$"@@&"@@("@@*"@@,"@@."@
M@ # @"# @$# @&# @(# @*# @,# @.# @ #@@"#@@$#@@&#@@(#@@*#@@,#@
M@.#@@ ``P" `P$ `P& `P( `P* `P, `P. `P `@P" @P$ @P& @P( @P* @
MP, @P. @P ! P"! P$! P&! P(! P*! P,! P.! P !@P"!@P$!@P&!@P(!@
MP*!@P,!@P.!@P " P"" P$" P&" P(" P*" P," P." P "@P""@P$"@P&"@
MP("@P*"@P,"@P."@P # P"# P$# P&# P(# P*# P/_[\*"@I(" @/\```#_
M`/__````__\`_P#______RP`````P@&J`4 (_P`/"!Q(L*#!@P@3*ES(L*'#
MAQ C2IQ(L:+%BQ@S:MS(L:-#``?^'2A LL"_DR51EES)LJ5*EB=CKF1$D^;)
MFC=KZMQI\Q_/GC%U+AI*M*C1HTB3*CTZJ:G3IU"C2IU*M:I5J0#^`;A*=9/7
MKV##BAU+%JRVLVC3JEW+MJW;MV?%R9U+MZ[=NWCSZMW+%Z](@0! #@PLD!0`
MN0<,AQS9LK'CQY =_YQ,N;)E1D5/+MW,F3/7SZ!#@\X:L[16KF53JTX-M[7K
MUVS[RIY-N_;>OPL-(U:,VZ/OW\"#"^](6O#PX\B3*[_(>[GSY]"C2Y].O?KR
MYM:S:]_.O;OW[Q&Q@_\?3[Z\^?/HPX/LG;Z]^_?PXQ\7?YP?/W_X\]N7S[^_
M__^^T3<1*002R \!!_)C@((&--@@`05&*.&$%!9HG$**`4!*8AJ"I)AB!&D(
MV& 'B#CBB2:6"."*++8XD( 2;1@3`336:".-IN6H8TSY!."CC__L`Z*+1!9I
MY'0PAA?2CDSFN$]I3T*YXY )&1;8A05=::*6!G&IY9?&<4F0E6"F^&*9@6T8
MXI59LKF0F!A>J2:'A )[T
MY*,GW9??I 0\2B5"?2:DI9IP#N:FG81Z2FBGH@I&*JAA;DJGF9I^RI"?;8;V
MBBJGKJ*J**!I%D0@GH766MBIAVZ4*' ,VF>L@@PZN&"PAP++[+,>#0OMM-16
M^Y^TUF:K[;;@8<OMM^"&>]UZXI9K[KG#>8ONNNRVBRFY[L8K[[QG+C8MEB2.
M&&:().[K;[XGJOBOO@#3:W!VZAZL\,*')LSPPQ!?"R^T^ XL,,$78YQQOOBJ
MR#&*'G\<L*G]!FSRR![OBU#'(*D<,K\`MQQSQ-4Y3//-.)MG<\X\]ZS=SOY5
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`[-)3RISDKF,YAA/^4IHOK(XI&QF
M)!<CDFYR4R"VQ&(X6X1+:9J3C;W\I37/R4Y1MO.=\%3C-[WI35K_BG..OR1F
M'O?(3*WHLY1Z5"4KF7G,,*)2H(XL*#_[&<^&.M2A^O3G0/?93X!*=)U:PN0\
M-VI/%\*GG \-J4A'2M*2FM2-].1H.#WZ'I Z$Y-?`F4KDUE-2*JS2<+D93&;
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M!3>XPQ]N< ,`I_? %%EO2^$K1P0[&(::%:V$)TSA"EOXPAC.L(8WS.$.>_C#
M( [_L846$YD2F]C$ETFQBG_2F1:[6"FBB;&,9TSCIJSFQCC>!&QVS&.WV.;'
M0 ZRD.ERSY3\PR1'1C))4*(2)B?9R2Y)LI)S<I.<,*+*/KFR3ZB\Y:#LQ,I
M^<=0-+,(S9"YS*9!,YE+\^*AU/C-<'X*0$63XSJ7I<=XSO.0]\QGV;"G4[H1
M1Y%/3.A"EV3%B%YQFQ?]XC@[NL9Z;$IQ0&/G2H<ESYC><9\WS>DAW_/!H%:A
M7T--ZG:-NM2H-M>I4\WJ;ZVZU;"VUJL-PB!_&,#6N$:0L1K$C\MQ#HN $U&>
M8FU;EB[J'PE"D*X/A,9\.-O9`3C)9/,J&!!]J-J=4Q.9_S9D)6X;JD1SRA6Q
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MQ_2+YPCH4\]ZY:R>.Z2?O.)F+SCG`DAXEH_:Y$P?N,BK%_(=>?UVX%0\X,E,
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)@Y)"ET9$R])'\X5(-N5#[%(DPF538
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-&WP%S[7!FR#P2D`
MDR$<$VZ)2BV+&BDU\G4$T&S0!B1"(H>=NC>?FDOI9AJ0(JGO@B8D5V];V#CV
M1CD\5RZ#,JL&LZI?)'# &JSJ!JLE5S^W^BH.5ZL:$7L)V"[ `G);EZ8O\F]?
M=&'LAJPF5W36<WU.1W2E,B=+AW'@VG 5QZO<^CS;8R9^<G7AQBOB2G';*BJT
M(BN(ZGQ7QZSHXJN-TJJN6AIMZJ:C^B3$.BN]0CX=YZVL" LLR6>LGP,KN*JL
MW]JL)3>O'2>53*=U%WMSB^,X"7<P^JHCZ1:R,0$I^_"O;CISCC*P4A=R*0)]
MY'JP24>OWQ:N[ZH\,6NNW?HFL(.H';MTIS*HL8*SVT<XQZJP]4HOPD<`"]*G
M!&&GN'9KO28081>&NQJKAO*SQ.<K65>P1HLZ0+NQ4EFO_+8I.G>N\.>P0(>V
M,1MUYH8F-).$!^)U!/>H4:MV^(J69IJJ:_^7MWI[=GS;MV/WMX [;H([N+%6
MN(;;:HB;N*FVN(Q;:H[[N%@HK9+[A9%;N0YVN9A[8)J[N>C5N<11*_\7> =H
/4
M@!?1>\=Z. ('
MO,X#>*C:7-"KF7]JL]Y7?LXC?KHG><7W<.EW>>EK?'&8O.;S@,FGO'CXO)2K

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["<LX%:
M0;+S<_RLQ:)6RDV\MQ(]T7Y;T18=N!B=T82[T61GDE0%TE YTOZXBUEEEL]R
+G0XOFUL@?6\NYGYSPAX
-SLW['(3(.<&3T"?\N4_-//J\O!W(TKF*THJZFF(]UF1=
MUF9]UFB=UFJ]UFS=UFZ-E$T=UFHDT@M9B=PHCFXED3O)B7NM4]C8C"6IC(ZX
MDPRUBA4)4':U3LM(5XH-4]$H3$N5DJWIU)E(B7*E5#\IE,QH1LYHC=3,B(IZ
MK5/.F-@6%5"6C8S6N(_[")$"%8N?V(T)R8RN38MX#==@34-T3=(A78RZ[8KH
MB)+OTLQ8F=N]7=S&+57 7:4+'!]1%8HS>5'^A$UI==DV"=B\S=B5%(H4E8]M
M)=K8&)'9Z(G$S8N:O=IB5935=)0&>=M"=-T`F8Q?)8\/J8FFQ-?B"(Z9%)'E
M/=TTU9,#&=K:--Z[R-U#^=JBV-UVE-R3NMP?)>#'_> 0WE *_H$,OF#F]%6%
M7=<B'5%SE=K/W=@17MP8?E,-69"N_\7>7 2/G'C:FJA0\VW7OJV,,D[@,![B
M;Z79T?W>.OG7`3GA\8609^3@-C[D5R7DC>+C#4;91+[D3"[AZSW9<@U,-OGA
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M[-Z^[N#>[NP>EG#=$.5^2QQ=+?->[ZF'[OBN,"YT`F?06W9Y`7BY[_ZKI/X.
M\, U\,3E77XY7CSP701O'D6-'IZ)R!'Q`6]@$"?@``? !AK \.$U7LI%`Q$O
M\14N>_PG+(<9EPDP#NQP72VO7=$0#0<0F@CA!B5_'A.?R=2K\B9D,]4%\S&?
M7^-P`"W@7Z(98)1Y`RZ0\SI_\HBR\LT,F4D_F:/I]$_/W%(/]5A?\%S?]:BF
M[V"_+KR![&9_]FA?&O_IHFP_$S'Z]C1!HW)?%#=:]XZVHW76HSX@"J1\SVG/
MV?9M#_=P/_>$;_>&/YQXCV-Z+Z)]W_AW49+_0RH2D'&=@/\8E0%FEH'YET'X
M<W_X-AH8B)_XJ['X]^GXIC\7S7D8@K;VUFEDMTGY`/H2#RJ>*J;Y"<H3G"_W
MGL^ADS:?HC_ZI(^<IW_ZO6$_*KKZ+"J@U*G\U;G\L/\2"*J@5M:=TI]EW8GY
MIJ&@$IJ>9A83%-K]F6&A;;;[&WI*,?;[P!_\F3;\IK_36A3YC*$C`ZJ=S5__
M4>;Z#;J@UN^@U:_Y`/'O'R."! 4*7+0(H<)_#!,Z?)CP8$.&"R->Q#A)XT:.
M'3U^!!E2Y,B/`"8*!$"2XR:6+5V^A!E3IDMM-6W>Q)E3YTZ>/6N*`QI4Z%"B
M18T>19I4J=%_!YP>_P``P&G4IZ0``#U@]4#3`@4$=O7Z+^Q!L!/+FAT+MNO)
MLP<-"F0$-Z[;MW+M#BQX<BXCAR<E4OQ[L"+%B1@-7U296/%BQ29/HDP\4_)D
MR3XM7\:L<^EFSIT])VWZ5/1HJUBU<E6;6O5JUJU;%X0=6_9LVK5A1[1X6/=N
MWA$9_P8.W/'$J,5)4D:>?%-FYLUY?H8>73I34M6M7[]^55Q6J:A=?P<?OH!M
M\N7-]T:?OG=P]NU%.HX*6;%R^C.=W\<_7?]^_DBY;QTM0 $')+! `P]$,$$%
M%V2P00<??)"JJ5""L$(++\0P0PTWA/ T#C\$,4011R1QPG^D*C%%%5=D$9I#
M#UN$,4899S00/AIOQ#%'%[O3L4<??P0R2"&';/!%(H]$,DDEEV2202.;A#)*
M*:>D4L4GJ\0R2RVWY/*_T+H$,TPQQ\SQ2C+/1#---3OD<4TWWX0S3C/CI+-.
M.ZF<\TX]]^3SQSS[!#1004O\<U!##T74P4(39;111YU:]%%))^TS4DHOQ?1-
M2S/EM-,P-_4T5%&G!'544T\]_[)45%=EM<PV6>0G5EE;I;76`56%,%9_=N6U
*
ME*HD!%&KJ:!%ET5I!XQUVUB9A1?>;054=MX-K3(77ZG,#?>_J,3M5ZM^IQ*7
M7W'_2S=A$M>%E-MWNS6@6WMW1% K@?^S&,6G!M9XWW^AVIC@D!4FN=Q7'Q3W
MH'9E99F QUZ&^>5]_C'70'X#]EAD@0_&>5RH"D9Q8)!+)EI#AK/:2B!^E%U:
\``A"HYJ*W/O/HE)6NEX"FVXWZL9FEIOKJJ[/6F&NW/SU9
MT:3+IO_[G[.E%DAMM=DN$MQP#WX;3[^K&]7KN>M&'.^9[^8[0;^+@USH"(L+
M$'(5+9\\<LW;WG-SR '/U/#$8V:<<;M/OUOK`C\G#?/,.8>*\A1=;Y#V0Q]O
M_6-.14\<.]]_]WUQU0>T7337B[?<<W*+YXYU`A^7?&/9C9^>^.JM)W<JW2V'
MOG+9KX<>]JS"!QU2\@_$O57>$0^[????5_;TX0-,7T#GD:=<^8ZOUQ_V_D>C
MG?-6=SWL[:]M_<N>\J17G.Y!ZG/5<=[CK"-
M^ !HP5MA#G\))*#KZJ<]W:TP=A@T(0D/A$#O1:Y\D1--_33_ET,97C!H!!QA
M]A3T.?UY2H-T`QYVBH6L9 E/A-3#(/UB*,07'C"%TV/>%,5W/ ;B,$$TE&(/
M6>@_$E*PBO\+W[] E\:_S="+XP*BI(Y(NHF<S72+^\<2D46 L\TO=U1<(,>N
MB$(J<A&06JS@\FS(O$0^,8R#)./V(*D_P/TOD)L;(!!=.*DYENV#'=0C$UTV
M,S\&\8F&C*05"XE%,:;/C#I$)8(8^4C;G5"0JP1DQ=Y(RR=NLGG1XV3<^I9$
M8B:Q6,=BXJX(D)TOMC* F L?%*/W3 RN4(#6Y%\<I2E+21(2AC+,8@\1R<./
MV6YP!7*A+^4HS!'5BUW7.E8\_?$KDP+X8V(+8J,8?TE$\+W1G ,HKWSYM:,H:
M.O*,"GRA*7G6/] Q,I\-I>0E-1=0`>43F)0Z&H,>1BVG6"M>\>*H4^[9-P92
ME#2$$Y%U'(?2)4%3C152*3JQ\[R9*HJEHLJH1CUJ`*9%S*<>#6G@'#1+H?J)
MG242V]A8UK2B6HBH3=513B'D/JA6=4U2M6I6&X55K7;54.1<]6I8*W54L9;U
M4F U:UKAA%:UMC5-;'5K7,4$5[G6=4MTM6M>\416O?9UK7SU:V#?"EC!%G:N
MA#5L8N^*6,4V=J\`<FQDP817R5:V192U;&8)Q5C-=M:HD/5L:).$6=&6UD*D
M-6UJB\19U;9VLZ!U;6QEA%K9UK9UL%W3+A/*PAHNT+>\#>)O=SM<VW*)MCX2
M8<>&MMSE2D6YSQW9N<X%W>E&M[A:.FZ/E!M=YUJ7NB#[[@%#%M[F7M>XK V3
M>*LK7?9V=[W@]>YXY?M>@YJ72=G5KH0,^-O]`G>XWQ,N*_MKWRS_X9? J37P
M@4N;8 6'EL$-[NR#(9Q9"<M(O1KB7(;9.[0+;SA#00.@\2J$Q?F"MY E=J^)
MZ]O5"L=HB_H%L(DYG+_8:4_$S/7N_J3[O1_J&+A426 B;4S4[<*WO:LK;Y%7
MK-46P\A_*.9PE,FK81QON+ON3?&.1Z;D*-_8RUBV;H@K5][V<IF^859KDULD
M7O+66,I0IK)ZY:QEZM8YR1YF\WR+/.8CF]G+?>9N7=7\HR?72)9(;M*2)^Q
MW"[:T>A#[Z,G/&A)"Y;2E?;KI3&M5TUOVJZ=]K1<01UJMXY:1!WF,X043:)5
MBWG$2J+R%UU=Y?<.D7@Z:C6D&YVF%__0U,T`=FXJ_:O?,<K8QL$U=A5'R-]?
M7QG(_0WVL7$I[6G_.,;1[K&SJ=U;-UN9V<&.MK6['.8>?]O'VBXVG\--7%WN
#K/?B979UEYAKP
MRO^6][%G;>1+DGG*:!XWPQ5DZA#E&>& WO/%X2MR>M_9VQ1/>+P3;F00![KE
M#8?SEEN^<I5_&<=SKF[-[7SS$(N<Y2C?]XW;[+A(VRK7@2HTHB^E\6\5G=3%
MY?C3RQIUJ8>5ZE5G_['3L>[:JV]H>1]:\=$))/:7BWG)J-[RH>VW(GS?FD5A
M?[721]1U#&=<B#$<-HUW#&.)\U:1#O>OED>.;NDEFW]"'R^6_RYX-(,8[__U
M<>/+7>/)KYO'XX9XN"O?[9Q#V^(\CN1T9VXSK5/)\4=V.:#OO7!U[QW(B2_X
MR']^\N<&$/$?G_(6*ZAZ+Z+]]LH^_;W[C?F'']S@(O[NZD6?S==_')VEG]*Y
MX^M\H/MZYSBG>= MGO'?ZWOZUE?^[!NO?#N7O>TFSWYXD_[RARL\_.UO/M!3
MOW==?^E08B\:_G.D_T2WV_Y;7S2Z0ZZU8Q#^(\")JSNGBI _2RY:,[0"LO^U
M!PR253- 1OL_3XFUL:N=H5H013/ H\O !LRU!MQ "5RS&2I!F((^*?$Y, L^
M8XLW^1,\#6,_S*,XDTN[GHLY&W3!'%0]B1HS^,.S-T- Y.,]`B0VDMM!(\3!
MDJ-!QMNX%8R2XRN_]^/![R,_L\/!+82X\)M!].,YFPM!D,L\?TNZ^?,S+:PU
M,,Q"ZD.]'ZRUHQ/ #UL\94.];-L^R NR?[LV>\/##+,W)K3#*?I"X+O#T O#
M,GN]FC-$[8LEP.LVG",X9K/#W8+$R:O$'U/#7"(]=[L3*QH[;0+ `\0N*1Q%
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#0\**O-,HQ
M:<LG9,<5:4N4,\<6M*J\9+TLRS?N2Q"F!"RB?#ZQU$&!4Q>S3#4V),A_;"K!
M%+JW7#_#K!AB2DRG'"W(+$G01$71G$*P5,SG,8EB4LW59,W6A"":<<W8E,W9
^Q,
ML(0;YQQ.D[#.XRR.Q\A.E(B/D]C.$^E.\!R.[SR([S3/\"1/E!#.ZZS.\#P1
MXD!/]QQ/R-%.[ZQ/[H0/Q*%/XBC/F&'/X7A/\010`55/Z#1-S^3)`25.!1V=
MZV10_829\0S0";7/`950">U/];S0_L10]5Q/".5/#YW0#151!650"_7._/30
M![7/" W1$5U1# 50%5U1`[U++PE._X11$J71_WQ1!S7._<S0]^S0$-U/$J50
M)&5/(AW2`,U/)672"WW2%H71$L7/%Q51*LW2)35/NF'1*JW2*752(S52&^W$
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M44<UUW4]4H$`UX$55@1-%7P-TBP%U)?QT[*I5$)%3F55V$$MTC6-4T&MT%?-
M5V1ET1D-U!C5_]B075%Q)5EJ15-*9=@\U="1Y=$];==%K9M]!=,VI=B5Y===
M'=E0I5)Z35+RY-,XW5A]A1J,S5D?I=6C!<J2%5=)/5EK/=&=I=F%3=6G75F$
MO=F9G<^;_=F+%5DXS=FK5=BO#=.@+5=%S5-&S5JDQ5*"'5BF)5=91=6BG==6
M_=?X^-2&=5A7C5>Y7=6ZQ5E1M512C9R]G5-/#5Q<)=OE#-B_)=-734^99=NE
M1<UJ/:_$]5:)+53+C5C-Y=QG5=II=5M-L=K.)=W2-=W37=;(!=W);=K*;<Y_
M35ET!5J'9=AUE5>('5S4U5W=A5TU3=DE55UI#5TWN=9CY=0OQ5L0Q3;9G?78
ML-W=Y]W=XQU:BPU>DWU;*W54BX757OW3=(U9-:5:BP73T87>\DV<EN5/3.7>
MCP7>SQ7_7M:]7J#E4R2UV;"%V0^%VCI=U=@UW_[=W/O$T_2UU?MUW]4M(<I=
MK C-5/RT3EWM4JW=U-DU6TU5T=Q=7Y[UWPQNT 4FT,5]X/&-X.&HWH)%X%+\
M7PU&X13N7/(USA$>5]%5X1B6X1E&5A<>WJO"5^^54X1-7OVTW5'53GL%8M_M
MV5FEX7R566#%X.6T8?B%X>F5TXPU6QVF7?YEU/H,8*ZUU84]XLNMU?5USB8^
MX-9-8/!=TP"F4^R5X*%]7)65W[CU6BW&56#MXHU%7E35VRQ66145XXHRV*,,
M7S]-59&]8CAEX8]EWS=M7NV=V8G=XC6N8XZ=8(E%XSWVT#Z6_Z(2+K!*#6$X
MOEV_7=P.AN1<[5%XK=O>_62]=60&1N5(YM90KM] O518M=N<Q>3;(F,3=N5=
MYN73E5G$N64>TF0L*=Y>-N9C3N%@]IE<WF3^#=H>KET3M5=/'N+;95,E9F5D
=Q6[5I_I1#$
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M'&9J1''KTH;MTY;MV([K`];K%W9JF]3MW>9MSYGMWZ9MX!9N:#W)P\3M-9'J
`>U^@S,X
M@0^X``MH`/!^M]YV;X1J:@8Q[^U^@_/^`/5VBA$8@16@`1J@@S[H`QZ@@1%@
M[RHAS?M:RV&I;_+N;O1V@ HX@#70;_ZF`0`7\!4H< /_:U<QJ&$Y@?$^@P9/
M[_4^@ GO;P#O`1Z8`0+/\.C;< A\PQWI<*U+@ 1@AW$8!]&8<!8X\0"G`0QO
M<1?GD#E+2')J;@01AW&H<1L?!VV(AF00C3Z@<#KX<3((<M-[\<A$QJ:;\1+&
M\26_\29/AAPO@1)P@1?X`:?X@S^X`1>X<B'WNMLK\@LZ\@))`'%@!S!O\B>8
M/P`W*',7N($;N ,V;_,WAW.O(S&S5I0$9ZTOK_$;UP9I@/(#^/,7"/0_^(%
M=W-#G\(LGTI&1V E#Q!ID(8#: $S!W1!S_1"Y_1.WZLN]W2G* ,SM_0;P/0V
MOX%6[_3>Y'77!/58UW4P>>]AWZ$;#G;)@NYC%Y1D5W9 8?9FYY-GAW8],4EB
MM_9KQ_9LU_9MY_9N]_9A#P@`(?X74V%V960@8GD@36EC<F]#;W-M;U1A;&L`
!.P``
`
end

[PA Bear]

Frank Saunders, MS-MVP IE/OE wrote:
>>> This is quite strange.
>>> What's the version number on Msimn.exe?
>>> The other version numbers seem to be correct.
>>
>> msimn.exe Properties:
>> Version: 6.0.2800.1123
>> Size: 56,832 bytes
>> Mod and Creation Dates:
>> Monday, March 03, 2003, 3:57:18 PM
>
> I'll admit to being totally sumped.

As in "sump pump" (i.e., all wet)?

<rofl>

[Frank Saunders, MS-MVP IE/OE]

"PA Bear" > wrote in message

> Frank Saunders, MS-MVP IE/OE wrote:
>>>> This is quite strange.
>>>> What's the version number on Msimn.exe?
>>>> The other version numbers seem to be correct.
>>>
>>> msimn.exe Properties:
>>> Version: 6.0.2800.1123
>>> Size: 56,832 bytes
>>> Mod and Creation Dates:
>>> Monday, March 03, 2003, 3:57:18 PM
>>
>> I'll admit to being totally sumped.
>
> As in "sump pump" (i.e., all wet)?
>
> <rofl>

That'll work.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

[Robert Aldwinckle]

"Jim Carlock" > wrote in message

....
> "Robert Aldwinckle" expressed:
> > There was an icon change between OE5 and OE6 and that
> > icon is used in the Help, About display. Besides the text
> > which icon do you see? Actually I'm also wondering if that
> > "text" might not be part of that graphic. Again, if customization
> > is involved you might be able to detect a difference between
> > two versions by using FileMon.
>
> The version number is a class Static label as determined via
> Spy++. It is style 50020000, has a Caption: "5.00.0000.0000".
>
> I'm including an image of the caption. I'm going to try to drag
> and drop the image here.
>

> [attachment oe6about.gif]

Jim,

Ah, I misinterpreted what you were seeing. You are getting the
OE6 graphic and title.

Besides the version number difference that you note
I see the following differences from mine (on XPsp1)

1. Yours appears to be using XP Classic Windows Theme.
(e.g. via Desktop Properties)

<title>KB294309 - HOW TO: Use the Windows Classic Theme in Windows XP</title>

Examples of differences due to such a difference in theme:
- grey raised borders and title bar instead of blue borders and title bar
- grey close button instead of large red close button
- inner scroll buttons are solid triangles instead of V shapes.
- etc.

2. Your Copyright line is completely different.
Yours: Copyright (C) Microsoft Corp. 1981-2001
Mine: © Microsoft Corporation. All Rights Reserved.
Note: first character in mine is Copyright symbol, generated by Alt-0169

The first difference (in theme) will only be unusual if you are *not*
explicitly using XP Classic. OTOH using XP Classic would cause
a different execution path to be taken; so who knows where that would
lead?

As for the second difference, I can imagine the possibility of provision
for customer copyright; that would again similarly tie having a different
copyright format to the fact that you are using an IEAK generated/modified
version.


FWIW

Robert
---

[Jim Carlock]

"Robert Aldwinckle" expressed:
<snip>
1. You appear to be using XP Classic Windows Theme.
(e.g. via Desktop Properties)

<title>KB294309-Use Windows Classic in Windows XP</title>

Examples of differences due to such a difference in theme:
- grey raised borders and title bar instead of blue borders and title bar
- grey close button instead of large red close button
- inner scroll buttons are solid triangles instead of V shapes.
- etc.
</snip>

The XP Classic / XP UNclassic views don't change the copyright
notice at all. The copyright notice displayed in the about box is
very different from the copyright notice displayed elsewhere. They
ARE two separate strings within the file displaying two separate
copyright notices. I can see how this happens.

See the attached UNclassic image to see the string. The string
is actually a label that is filled in with information as determined
elsewhere within the file. Instead of using the normal copyright
notice that a DLL displays when you click on Properties, MS
is using a hardcoded date. It should be a constant within the
file. Thus, we all now know that the file has two very different
copyright notices. Microsoft seems to be using the generic
copyright notice for the Properties and the dated notice in the
About dialog.

When I click on properties the following information exists:
---------------------------------------------------------------
Details about msoeres.dll
---------------------------------------------------------------
Dates: Friday, Oct. 11, 2002, 2:09:02 PM
Version: 6.0.2800.1123
Size: 2,479,616 bytes
Copyright: © Microsoft Corporation. All rights reserved.

---------------------------------------------------------------
Strings found inside
C:\Program Files\Outlook Express\msoeres.dll
(I numbered them to distinguish the separate strings):
---------------------------------------------------------------
(1) About Outlook Express
(2) MS Shell Dlg
(3) 5.00.0000.0000
(4) Copyright (C) Microsoft Corp. 1981-2001
(5) Certain designs and sentiments are copyrights of Hallmark
Licensing, Inc.
(6) No products made with the Outlook Express Stationery which
include any copyrighted material or trademarks of Hallmark
Cards, Incorporated or its affiliates may be sold or
distributed for resale.

<snip>
2. Your Copyright line is completely different.
Yours: Copyright (C) Microsoft Corp. 1981-2001
Mine: © Microsoft Corporation. All Rights Reserved.
Note: first character in mine is Copyright symbol, generated by Alt-0169
</snip>

See ABOVE. I think you're looking at the File Properties there. Is
that the file properties, as found when right clicking on the file? As
opposed to what is displayed in the About Dialog box for Outlook
Express?

<snip>
The first difference (in theme) will only be unusual if you are *not*
explicitly using XP Classic. OTOH using XP Classic would cause
a different execution path to be taken; so who knows where that would
lead?
</snip>

From what I'm seeing, the only thing that is different in the UNclassic
views and the Classic view is that the routines that draw the windows
and the controls are somehow flagged. It only makes sense that there
is a global flag in the OS that is read by all controls when the controls
are drawn and displayed (IE, an API reads this global flag to
determine HOW to display the control -> I'll use the word control to
mean Windows from now on, as a Window is a control).

<snip>
As for the second difference, I can imagine the possibility of provision
for customer copyright; that would again similarly tie having a different
copyright format to the fact that you are using an IEAK generated/modified
version.
</snip>

I looked for another msoeres.dll and I can't find one. Which makes me
wonder. Didn't XP come out at the end of 2001? And the msoeres.dll
is tagged with a 2002 copyright? Something very weird there. I should
have another msoeres.dll on this system somewhere, in the backups or
what not.

Hope that helps you. It's helped me understand some things as well.

--
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.


"Jim Carlock" typed in a message:
....
> "Robert Aldwinckle" expressed:
> > There was an icon change between OE5 and OE6 and that
> > icon is used in the Help, About display. Besides the text
> > which icon do you see? Actually I'm also wondering if that
> > "text" might not be part of that graphic. Again, if customization
> > is involved you might be able to detect a difference between
> > two versions by using FileMon.
>
> The version number is a class Static label as determined via
> Spy++. It is style 50020000, has a Caption: "5.00.0000.0000".
>
> I'm including an image of the caption. I'm going to try to drag
> and drop the image here.
>

> [attachment oe6about.gif]



begin 666 oe6AbXP1.gif
M1TE&.#EAP@&Q`?<``````( ```" `(" ````@( `@ " @,# P,#<P*;*\$ @
M`& @`( @`* @`, @`. @``! `"! `$! `&! `(! `*! `,! `.! ``!@`"!@
M`$!@`&!@`(!@`*!@`,!@`.!@``" `"" `$" `&" `(" `*" `," `." ``"@
M`""@`$"@`&"@`("@`*"@`,"@`."@``# `"# `$# `&# `(# `*# `,# `.#
M``#@`"#@`$#@`&#@`(#@`*#@`,#@`.#@````0" `0$ `0& `0( `0* `0, `
M0. `0 `@0" @0$ @0& @0( @0* @0, @0. @0 ! 0"! 0$! 0&! 0(! 0*!
M0,! 0.! 0 !@0"!@0$!@0&!@0(!@0*!@0,!@0.!@0 " 0"" 0$" 0&" 0("
M0*" 0," 0." 0 "@0""@0$"@0&"@0("@0*"@0,"@0."@0 # 0"# 0$# 0&#
M0(# 0*# 0,# 0.# 0 #@0"#@0$#@0&#@0(#@0*#@0,#@0.#@0 ``@" `@$ `
M@& `@( `@* `@, `@. `@ `@@" @@$ @@& @@( @@* @@, @@. @@ ! @"!
M@$! @&! @(! @*! @,! @.! @ !@@"!@@$!@@&!@@(!@@*!@@,!@@.!@@ "
M@"" @$" @&" @(" @*" @," @." @ "@@""@@$"@@&"@@("@@*"@@,"@@."@
M@ # @"# @$# @&# @(# @*# @,# @.# @ #@@"#@@$#@@&#@@(#@@*#@@,#@
M@.#@@ ``P" `P$ `P& `P( `P* `P, `P. `P `@P" @P$ @P& @P( @P* @
MP, @P. @P ! P"! P$! P&! P(! P*! P,! P.! P !@P"!@P$!@P&!@P(!@
MP*!@P,!@P.!@P " P"" P$" P&" P(" P*" P," P." P "@P""@P$"@P&"@
MP("@P*"@P,"@P."@P # P"# P$# P&# P(# P*# P/_[\*"@I(" @/\```#_
M`/__````__\`_P#______RP`````P@&Q`4 (_P`3"!0(K:#!@M@2*ES(L*'#
MAQ C2IQ(L:+%BQ@S:MS(L:/'CR!#BAP9$5I"DP=3%K3'DB4R@R1CRIQ)LZ;-
MFSASZMP(X)_/?P`T0OMWZI715Z>2*CUSYHO3+U<J_(.&K"J!ER87^B3WSYY"
MGXBP^1SZ#Q%9DV#%EE4;5NO:A&GCKDW+%NQ9NV-]VON7P"Q#L(C:)OC9#NW<
MJ6P+XIWJLQTVQ?\<(]Q)N;+ERY5[`M4<%.,_ITR;?OGIT^F%TQ<L3*6*#!%6
;KU
MZ]BS:]_.O;OW[^##B_\?3[Z\^?/HTZM?KYWJ\^CLX\N?3[^^_?OX\^O?_]T]
M-.C\!2C@@ 06:."!"++G'X )-NC@@Q!&*.&$U2T('X489JCAAAQV:)V%]_'#
MCS\DEF@B/QZFJ.**+#X(XGBD'"#C`2**: `_-^;(#P$S]NCCCT#.2 H`VPUI
MCY%$&JDDD=(!0 I+3-J3) !.2MD2DU5"V>*67'9)WHOBQ4C:F&262>8^I*'Y
M3P!LMNF3D=^1,B25<GIIYXIR4NGDDW<*"&9X8III)@&$%FKHH8@6^@^:<&(W
M)Y77Z9FEI-11*NFE45+:)*::;LHII)Y&*:6>?&+7J:EZ7@DJE)^>VJJJI%[]
MVM*C>]+*IZUYDHHJG2P]6FJ?^_T)7J""EJGFHF>.:**)!"#;Z*ZB3M?IJ:RN
M.JJUU6:JJW2T9OOKD=.&BZUUU%Y':ZJA5KIMN>5R=ZZYLEK7+76^`HN?L/79
M:( !A.+H;XXWVBMP=NT.;'!^^!ZL\,(,-_QA:_]=Z/#$%%<,;,(69ZSQQA1B
MS/''((?,G\<BEVSRR>>1C/+*++?\\'L31WOES)DV2?/-6M8\<\XX6ZFSRT!W
M##&#01=M],HJ'ZWTT@TGW:>H1-:L,ZA86LGSU3M#K6766T>-L]18>VWUSF%;
M_7.E9(L]MLS1@KWUV$P?Z'3<=-?=Y=QVYZTWA_]X>\FVI6\#?K;4FKKM,]?J
M0FIXV[ J_K79.0->=N)BQ_MVX&M#7O7BF4O;\^7:.EYYUZEB*3/<AX>J=M5E
MGXUXZOT-+?'>M-?>8=]=KGIZ>;M[GE[O!%]N,^J1#H\V\=7M#OQZ4Y.[W_+"
M?[<\].;A'K/M]U$OH?9<0F_]EIR[/3KA5W.....LIXZ^\6IWC7;X[MN\^>N9
MMVWYS:.C/O[QSJ>?O^]4J]_C6O<^S WN<^J+7G:^A[T&.O!>LKM>^7BV.LA-
M\'R=PY;YW >V`V+-@)KCX-?^5\'7M<^"">P@V1[8'0:R\(4P3%D$8TC#&M;'
MA2IB1U<\=( =VC!"/9S_$%]8,I B#H0O_V '=G"8(AV:RG,GW$\0G^@ZK<&N
MA#_,SA2=QS[8$4]\*Y0.7XQ(QL'4(XE+G"'#=!BD-KKQC7",HQSG2,<ZVO&.
[-)"F@C$DS/^&,3RXU23)!LB>8
M+)8F'5G)2'KRDI;T9"5!"4I1.I*4GS0E)S?3R5,^\I2-1"5I2KE*6=;RE9.D
M92LE><M5%@N2C$QE)CLI25X2DS37*=->E(A(-2YLD9N,IC2G2<UJ6O.:V,RF
M-K?)S6YZ\YN:3":9EIE&F#4,FKATY2B/*<MAJC.4ZP3F+U6I2UZZ<YCW5.4N
M_WUY2UON,YW^[*4\P4G0:P)SH+WTI3&I]$]?BG-,Y&RF.==84%/BDZ&"RB1"
M?XG16=+3HISIZ$8K2M*2FO2DT6QG1\N$R8<B\Y OBYC#T)G-D:+TICC-J4YW
MZDV;:M.E/XEH3(GVS(SJ"9:YO"1&EWK41CZRJ?R4YD9M.=5^IK*5^D2H/'W*
MTZZ"<Z"T/"@K-Z-4AC(UI#W9BSW*6$2UPK1"SE083;U*U[K:]:YXW6D@!Z*)
MOO:UB/\X(S.'.KN#.3&+B*706ZF3R XMDJ]_)>09V4K9REJVLD@<C&8OR]G.
M4G:QB;7/&,GHUR/6XSN@E4YC.>3$!-2#';"-K6S9<;#:EB"@'KC-K6YWR]O>
M^O:WP VN<(<+7$"&EC^NG:UR:XO:P<)UHL>-KG09&U?NG.$$;\CN"3[P`0LT
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[*)
MIGR8/!]L>I/&-\YR&<H[3CWDYK&0E29D'>M9T/K6O,3#+G39IV#;`7K(=MZK
M;2VMXS&?IIR6SG2F*VM9)"(`FO:!\^09G5Z%\WGCTB4MG[<KZQ,6EY/N1[!6
M3=A6E*,<GR3U+;/+ZERD^A7<Z?0MJU.+Z$<3^'4*91V%,_SO"T<1`1X>)K?7
M?>YX?U>VIC-W7C&^56W7^N*A9?9J==WQ;L_2Y+'^J5\9OG&<JGMU&N]XINF=
M<#N(:KGJ(W3ZU;N^1:U_O>P]%/O9VSY#M;^][EEO\-W[_F*]_[WP[Q;\@UGQ
MBEV$'^AZ5D'7#3_@Q7^^]&D?_:?9??*;JUSI1L4J"2=O4ZHBG>DLWWWR*^[X
MGNJ^T'^&1> U/VVJS_WTYW\?^=/__O+_L7^#T,\_GB-HY<8S'@`H((S3'06H
M0%[$'<KS?^JA?T S@"'#-MH!@1P310U8??B7@0WB@ R80,MW0<AG.)@#0.+7
M?*YR.%[C/]X7.5IG16 *3/B@8@OJS0N\G/\QW
M+1JT?2"87T15-#$('A18//VG'DV(@!,8@ L(@+TC=+[S1!&B<5'($ASX?[I#
@OH30%"T=42XAF9HA%/S-SP(-Z&3@F:(@R,(AW&8
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MI50MZ5$`]4I4A9/ZE% K>9 ;"8_PQ),->8_&Q$G ])%=L8TB^7(&8_^1/_F4
M4!F54CE.UJ%,2FD/W;@?[ A6`VE6\HB/485*'<F2"OE/"6F34YF6W,25D015
M8/E.8?E)2"E42%A83:F6>)F7>LF+<WF56:D?6RE,^]1.`&E1<#E-]IB/:#F8
\Q23C6E5EOF8)AF0
MC!F9P'B6NJ238V64AAE4FLE6$=F9=CDPCT5$?$5&F;56]16<PCF<]765LC=$
MP&F-A"1(WN&7([DECT5:OCE9Q%F=UGF=1I1$K+F=-R6=T]E<N'F+XND@+G0&
MV?4&9\!='S">["D>UG,")Q :W)4:WV4/X64^8.?5`SPP`^O5GG'C8!#F(15V
M84QI'0D@#NS@7P`F8/;@!B4`8B-V!W]P8OYI-P#*G.?A@F%$'@,:GA7ZH?K_
M\9<@JH'N01 *`0[AD*(J&@[IT*+IH XPZJ(R.J,T6J,V>J,XFJ,ZNJ,\VJ,^
M^J- &J1".J1$6J1&>J1(FJ1!JJ(MNJ).^J10FJ(*`0U>"!/(=J58FJ5:FAO*
MQA'K8 ])(1K1-J97T&SV, YAUFA6NJ5LVJ9N^J8=`585<1"?812G\&QB>FCO
MH&A2P1J.]AH+T6N.,6>L9F9Z\17_,&=J46ENX1=J81B*2FN[]FJ\5JB3RA>S
MUA:UE@"KYA7(A*AR1JFKYA/L,*I)!*>HFJH\84F2(FB*\06A(1IC`A574*N+
@'8!C#_[IK=2&LP+H5@=00=)$0
MO5:JNP:LO8ICU,JHHZJJWOJM$N%E"=&E%O$/B79HI>$4/_$!U+8:5>$:D+80
MLS&OM &NF6JO^)JO-4&N$\%L%W"N8_H%[(H:%_ `#6!MT "O\:JO#-NP#KNE
M9;9M!3JB%)L>(EJQ]'>Q&#M]&KNQS]>Q'BM\(!NROC>R)*M[)GNRMI>R*BM[
M+-NRKL>!-5(C,#M\M3<B"P=UA+(O-S)Q->NRSWD=(@)Q^L*S/ MQU<%WZS$D
$(]<,(K2P*UX"(E
M:Q>U45*U::NV&[JU!3>Q1>:2=!_7+R WM-5T+/M@<FT2`"HGMS36M24U=33W
&E'+H1HAY+X*7[(
M+9?"N$7'=G8GNF7WN%P'*VN7*HK'=9('=Z,'=X>'N]J!=WMSN=,T<S-WN'SK
M$X;KN:&"NO/BN)HX+IV"=ZH++I+WO(HHO:T[N:I3>MDB*CN'*::+O=!+@],C
M>0H8*]9[=$$[*TFG2<!+O&-BN$_'+&IBO+,"=,^KO*_KAU\7B6$7NG02N9NW
MNV2GB,?[O]D+>:#'O0<<P*HS>OY[,O\=M[D0',%R@K-05R($P'3:0[W?N[R@
M8KN-$WG6(KU$)\*H"(K0X[_KTH+2N\+B2X2>I[_14B]W=W6<ARV\6S3Z9R,B
MDG!&V\,^:P]("R.^@KJS4B<89\2[B\0:HBD51\1)[,29:RY-%R9*7#=?F+=Y
M"[8@-WL-/)XO*[@#]\5@_&]B/,;[5L9F?&]HG,;SML9L/&-N_,8I%L=RO&!T
M7,?L=<=X+%UZO,?'U<=^G%B S(34LHF7>(IA:(>M>"V+',@$,LC2(XV3`T($
M]($^.,F.["?GVR*ER,ARZ,F@;,BAL\B&G,D#`LFF7&.;G,H9N\HJ8H.\DXPH
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M?=R0;=\>)-WVC8?;I\""_-E*D]Z=_24&GN ;Q]X,GG<+_N `Y^ 2'C04+AW?
M6.$MTA66Y58AB941#B$9?GFB8R#CZ-6FS6\GGKW?Q\'3HQVUJ0G3Z9Q(?2<C
M3KN5G1\KGD$#1-ET_YUB.V[0/0AZT>B&U#%&I24027Z;$L79<N5#Y7W9"*X=
M.^[51NZ&G3SE=1/DG$C9R*.&SL<2M2E9-.[DGXD`:)[F:K[F;-[F;O[F<![G
M<C[G=%[G=G[G>)[G>K[G?-[G?N[GEQ9-=$E=-6XG3LF=B)[HBBXH>V593$Y8
M,V549=66*HE6;<FJ7CF6`KGIBBF0*WF:AIF3]EA,J6F2%T7JN826#@GJ<1F4
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MF47_\V6<KQ?CV)B-`%'/WD""!0T._,?N8$%HR!!!RX9MX42*%2U>Q)C1(+M_
M_Q)\_*A))$B0_^IY))E2Y4J6+5EZA)D`I4N:-6W*Y-A1YTZ>/7W^!!I4Z%"B
M18T>19J4J$J1FE*:U(A0(<6&#R-&_\6:5:O6G/9JVC/YS^M-LF7-GD7[$>Q)
MI6W=OH4;5^Y<G6-=KL6:L&)5B!*W_@4<>" [PH4-'T:<6/%BQHT=/X8<6?)D
MRI4M7\:<6?-FRWL=]A4<6O1HTJ5-GT:=6O5JUJVQ\KWJ6O9LVK5MW\:=6W=6
MV'ZSGCCSYLV9$Q\N6&BP6_ERYLV=CT807?ITZM6M7\>>7;MUB[VSO@$N_,P'
MXPXJV%LS8L0*&C3Z].%!8\5S^O7MWW>-`-)'NOV'?H2DN\]BR^HC=L89IR#U
M5F"AO??BFP\_"2>DL$*,]%-+- `*VM">#CL4#4 !K?(-(P1!.G <;9))L(02
M7'CAAX'^^'+C!A<LQ#%''>_#,('10/1PH V!#$U$STC4Z$0#590FF8%<A/&&
M&_[X0<H;=\0R2RUKTX\P'0D+\$C00BOCQ1>DI-+&&[9DLTTW24-@G$C$0;!.
M.^_$,T\]]^2SSSHC25!,`M\DM%!##V7..T079;111TG_JPH9B"*"IE)++\4T
M4TTWY;133S\%-5111R6U5%-/135555=EM5577X554V0<`JE2;, ))]=<Q5&G
M5U]_!39888<EMEACCT4V66679;999Y^%-EIIIZ6V6FNO758<;;?5%9M*"4H`
M&FS&);=<<,Y%-UUUUV6W77??A3=>>>>EMUY[[\4W7WWWU;=<?_\%.&"!!R:X
M8(,/-A@`A&^]5=V%`_[6TH<GIKABBR_&.&.--^:X8X\_!CED<@'X1V&,UP'+
MJ'$PG55BD5^&.6:99Z:Y9IMOGICDCDR>&)I_3GDEZ%.&'OH,H\_X(NDOKK#"
MGDIG)4!26W&FNFJKK\8Z:ZTM_]99)YX/KO2?,X)^A6BCE49[Z0K^:0AJJ<4M
M5Z8$R@7K8Y0[LH>=A>L^F.^ >=HZ<,$')]SCKG?Z&N!,__F":)W2?EQMMF=%
M)FJ7R=4);FPZ0J3BCC0?5Z9VQ.4(@8$_'Y?S@U7_^Y_."X<]=MEG]_=PGA(O
M=_'&B_[B<9VN`%[RMBN7VE^9#OCG`,Q=EQL;N=OQ*'77-Y^>\]>EOQYUU;=W
MO7/.GX\>_+DY!RN!A\K=:?EU./>9^>BI;R?<\J$?_Y\$Z[^?=OWWY[_<KG7&
M'<%\EK2C*2UR7[C !8"WMJ<YI'CH<QWJJ.<]MG$/&1/$(.N6E[WJ=9""K^.<
M!458%__08<]X'@%A!R_(NIX@0R9BF=L+O=(_&M:P<"0S&0`?]H\K0*XCO1/+
M%XR30 NPK6V(>."XP-(.1- />S*Q!R)$=[P5_H,<+_R@O]9G#^R)JR-7Y%X*
MI?B/^"7/A62D(O?6X2\-PJ\C3_1(%5]WO.;-L"/(L.,_+FA#/O:Q:HG3(<+^
M<0$#_A!M.DG@!1Q@Q$HA<6KD@L;U'G*NAR#B?..*Y/4P64E):A*2EBQA)#-)
M+DM"<I.:'.6X2JG*$EK2E=Z29/LJJ;E5?I*6E\0&*/VX2U[^<6>"5&#:TD:>
M1%Z@`8R,9!+_):]>KFYZS81F-&D'@ `*S!Y6L( %K+!-*P"+KYC%- \R'5E"
M:9;3G.=$Y\/69Q1[K -3X_R4MP06*WK6TY[WQ&<^];E/?O9SGTAZ5$ %.E""
M$D11!45H0A6ZI8,NU*$/A2A]&AI1BE;4HJZ9Z$4UNE&._B6C'05I2$7*D &5
M:*0G1:E&/YI2EK84H2MU:4QENBB8SM2F-V5H27&Z4Y[F%* ]!6I0)_]44Z$6
MU:BW(>I1E;I4U225J4^%JF"<&E6J5C4C4[5J5K5*TI]NU:M?/0A6P3K6I8J5
MK&<5JEG1NM:=JO4O_."'/^0Z5[BRU:X"=2M6XCI7OLJ5`'_EQUT%2U.=IH8?
M!C" /Q*[6'\0`*YP16Q@34,*:AJDLI0]#35)88_-#M:N>5T(/PA D,,BEK&)
M':U!'&N U)*&LI45TF5!1,T/>8@4KP7 9E^K6]KR5K.]]>Q:0<O9V]Y6M,<U
(
M<5=[6/82P#_;M<AV:7M=^L)72-T%+T&JFU__\0:)O&@U+WK_H=[CPM6];\E'
;^PX$M[[UK77[J]G_DC7 .A$M8!T[8K@H. `G_L<^
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M`XG9UUUVJS%MD5P;>[[3WK1F;_ML*G=WVI6.K:(Q;6ALHUK;5)YIKX5R9QH_
MUMWN)D"6AQUN#:OZV*E.-KZE76QP;QK6T 8TD_V,$5MK.MO35;:2!S[K/G,X
MU TO]T5>O>V%+_K%6HFQ42(-Z9WLM:^-S;/$(\YJ*2?<V?H.>*IE?6HUV_K?
M%*DVQ.M-;(2/&^4%_Y"M`XWNBE2<WB\?J;J1TN5'>[RO\=ZQI4EN\)_3V]PG
MUW3+57YO@TL=N*L6.=-E7FR3>SOJ*G\PKO]-\8<?I-_6UCI(A<YQ+>MDRS1$
MWX?1/WY@+Q.<Y=,F=[Z_#NBS-QW@1.(VFK'><[";V]\[A_79$3UX8@-]Y]0N
MO*Q+7>R3_PX7YY='<FD5NWG4^M7G8!XSV;F.<UU;_=8%1SO/:8YVQ]-<Y] F
")#<UI)VN9SWAV3M\=>_^'[FI7=X
MJF6O:5P?N<U/KSWE=Z[S<O<[]&67?/;!__=G-[O\\56]E8._FM*^F[W+C:R/
M)Z]T^3=U_>R?L?N3FUSEU]_I_J>-X?H+$2LPY@/ `U0.`43 !7P3!63 !]02
M!X3 "<P1":3 "QRJ^\/ #6Q #>3 #XQ #P3!$:Q $23!$\S KD+!%:P0"V3!
M%V0-%X3!&3P-&:3!&Q0-&\3!'?0H$^3!'XQ!'P3"(:Q!(23"(R3,02-$PB7L
M015DPB=,0B>$PBELPC&APBNLPD'!PBW4"!WDPA__],(OW,$P%,,;),,RG,$S
MI \]\Z[P&J_Q:L/\<D/_"I(XA$/^0D,)4</G(#<YQ$,Z'!(_O,,W),1 ',0Z
M_,,\M(\]M ]G$T0Z!,1(M$-(G$1#1$1"5,1%5$(WF<-*Y)!'M,10_,1#%,4Y
MS$2)VL139$)&5,4/9,56W,!7A,4+E,59G,!:5(Z8D[@^V\65LZQ?A$3!8,/(
MTPBH([91G+QC##=D]#%<U WZ"PS `\8O.SE/,XW:8L;0<$-1Q,0]DT0\A,;!
M<L;<0#A0]"]#+,7:DL9@Q,1 1,=OA,=2[,9R'$139$:JR\91],1N;+%QQ UZ
MO,1+?$=/7$=JU,<WM$2$K 3'0CQ'8$3&=^3'1"1%B:1$<XS(#O/'?]RW_XO$
M<[PV_G)$C@Q)D%Q&0$PY931%JT/(DN-%9<RT?/2SC:1(C$S%1ZG&B=#%?+Q(
M_ C'+\Q(6P3 GP3*^A/*H6S&FC1*'"S*I&2QI63*_W+*IPRNJ&PR8H2YC(#&
MGHQ&87P3@P2,D63'0RQ&G'3(O]!*G<Q"DW(4K3S+EMR-MD3+J(#+VUA'K"Q+
M-@Q+:B/+7(3_%*34$H"$R$_DM'8T1W641,/,R\$,R)!,QWILR,6\-,=,S,>L
MR(FTPX&40\3$1H8$/)]SQ\>41L3,1GF$0\VL0]'T2MWK2(R@2M8`2(7\QDY\
MQ(/<QV D2(G<3,Z4S(2$QWD41+Q\R'ALR-M,Q$DDS-@$3>%\S8#T38:$3'ND
M3-Z\*K_\2YD,+X%;S?^3MI6LK.NLN>X$25.;+=542(C,N<W$QKT+Q;U#R58C

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;+$>?4MCQ1$4'8AAQ="O8M8*6?_1O91+&QU+NYS10KM+LOQ0:<U+
M(.76V<C*K$!6I['42TTY41W.3@5/W3M/VEO&<R74DE/7>6375&57_FS7EX37
MR$3/[Y153&U3?>5/^<11:JQ73MU+Q5S5>E7)*3W8?>O,G!-,B7V-<K401U7.
M,=75CSS.].18/O-87[W2`,7.5_75D.W4%.W-),5.)"W9JE/0_CS4D:53)H5/
M>N-&FOW/BC721:G3>-58)9U(4"U4)35.2$742!5:TD143*5/DD5$/*74%67:
M+@W1G\U/2A7:G5W9I>79`H6H0?76*1S7L<V29VU6K4);%=W3;FV-LGU:<75;
M2:76F=3&NUK;.$V$4K/-K+N-2R)5V;D-5[OUV_*RV U-3CN-SB9-6LD<6<9$
M3I:-6RF]3^*LS<4M2*MEU!V-JKPMW,J-5*\D6JWMVFG<W,IDSCPM4\MU2,B5
M5#?%W+G-*L_5QH]M6P"-5:(%T,<;56N\58[\W?GSR"Z5.M \5X M6)<\7@&5
M7::B74)1UK3-_XWGE5[G/=SJ94#JQ=ZCTM[M+:KN]=Z@`M_PY;7K)5^B-%_\
MX(SU9=_V==_WA=_XE=_YI5_#$!2U9!2..%]"82>]J-2>/13]W5\W\8B"> D$
M\-^)&-^H$& <01X<?&#[*&"[6(GD2>"%6&"-:&"W_%O7B& .;E[Y^V 0]D:P
M3,V+F(F0& F2"(NI4.#TO8\-]M9YK8T1_M&!=5CN%-.ULN$4C4,3OE5WM+29
M:(H$*&+^. D7QF 8M@\9]N'3--'2Z.%?Q-><)<T0CJHI-M7;C<B7G4DB3@FG
M0.(+#BLFK@\G'DVN]6"Q`-RI55JX!2HM;LYUA4G-U;,4;HD6OM^!0O]C"9'C
M$_SCW8"AN]#C_P7;1NGC`=Z1!*@'QA (L%#B,@9@0RF=[;#D2\;D3-;D3>;D
M3O;D3P;E4!;E429E[0`+"EZ)4R;C-S5C^LB)((/E6);E6:;E6K;E6T:*\JF)
M0G[A22Z45\;EG\"ADH$+VNH)8]X9:CIF94[F_V'FDGEFKWEF9(9F9[8=8D:*
M858*:L;F9I;FP['F:-Z9VSGF;Q[GHD R<CYGG]!F<&YFVV$R/'Z))-YC@0+F
MM[CF;";F?#8*?OZ?;O;G;EYG;1;H?S9HKP%HQ-GF?E;GA!YHAQ;H=5;HB9;F
MAXYH808*=[9H`/KG@I;H4Z8)L$">2&9E7R;_E'MFYX0^:&Q>:8W>YXL^BG2F
M:(+.9XYFYI7VZ''&:9J>: *#H
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MKVYM?'9M`'=K!%=KHR9JOXYO_S!KEW9PN1;KT:X+Q-;NW5[6WG:.WV;KPN9I
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M#_(`)G E_W"[EO+*CFE:]_IDC_. _W=\I_"Q;_DMY_@TGW<6!Z#R,> *1F"=
M[W2,N':ASW> __J?MGJ03W#:GGRN;_SQCGR^+^:4G_2W=^L-F6"7L&#$3W7F

MH&<@YV/<1_[DS_565VXB'HDC)GZU/W[EI_[JMW%=!@GH'V/2-WDM67SJSOJ,
MGO7.3F_01GJP1YP_SWSK[V>ZY_=V[FE:GR]YKN#B)W.9_^]YRR;[G]_UR@>(
\2+&C!HW<NSHT2-%B!,;/I0((*)"
MBBD)VOMG+P',F#(3M*SWCYV]G#IW0D.&"%HV;#N'$BUJ]"C2I$J7[F1W,>%*
ME"8;2EUYT*I*JA(SGCPI\J'4BBB];F58<B3:@EW/AOSH]BW<N'*?<B59MJ19
'EG,G4ZZ<<;#CS)HW<^[L^;/.
MR(P+'ST,5"CHU*J;"J2I<Z;,?PC^T81M^S;NW+IW\^Z]F_3JX,*'$]=,>R=N
MV:-QEO9YNCCTQI!=Q]1D?>:_`T7'?7/W3?M[`MK=Q_,&'OT\^O2?C[],8%T3
M[.S+#3M/K/[^T.G5K\>W69L\@/&%-Z!X`1H8&W/X*;@@@Z'9]EYLF"EF'E'_
MIMG78'KZP01A?P4>:"!XX'WXX4V6F7@BBBFJR-&#_,'TCX1,43B4A:AAB)Z&
M^\$7H8<C^O@CB)"M."2111JYT4P<1CA?<XC9>&-T.>8&8X] 6GGE;T(>N267
M79K8&XQ,&E4CE#A^QZ)D7JH9%TUKNODFG Z%AZ:819%99I1QZKDGGWWZ"6>"
M=M;W))Z%&GHHHHDJ>NB=BSKZ**212CKIF(-2>BFFF6JZZ7"-<OHIJ*&*NJFG
MF9UQQJBIJKHJJYR5JM@)9[SQQADG?'"!!0VTNBNOO:[ZZE*USDKK![<Z<((]
M(XS `AU#T;""K]%*BR@""+"3"239:KLMM]UZ^RVX_^&*"TDDXR@%K%*QSEKK
MK;GFI.P*--#01Q\]\!#OM/GJVR "F6#Y[VV9)(4N4L+.:NL'N2(++PORTLL#
M#2/L.S'%Z"$`R8M_LI@`) ^^S-%3\,LRK70Q3
M:ET!H-/-.>7L&4P=T^<D8^.,$Q,[XVAS=$YCI.QPO3S,('',44NMV<RN>;:S
M/3G?C#7/''L,M&()C,-.3$)K$TTT]KC@@E%N3/TVW$Q5#1K66G/=M<]-/J>8
M.$/#5+0VTB234PDEN/#"#3?\\4/B-\3]..1#S?U9W3I;#EK/7^^]E- RF1V-
MN2T8[D+B=S!^`]N1J_[XY'V4=X7S3G=GEOG/FRNEC=#C;+/[V8/;4_CA-]SQ
M1^*(KW[\VQ?_=>E?>5<*=F? DZ[XZ:DC?SW,"$02&/?=>_\]^.&++WXDFE_X
MV=J)NU &]NU'?>VX\<L_?_SEGONQ^_GK3S'!^_O_?ZKZ!\
MJ ,JL($.Q##089 AP0E2L((6O" &,ZC!#7*P@Q[\( A#*,(1DK"$)CPA"E.H
HPA6RL(4=1 ``
`
end

[Robert Aldwinckle]

"Jim Carlock" > wrote in message
...
> "Robert Aldwinckle" expressed:
> <snip>
> 1. You appear to be using XP Classic Windows Theme.
....
> The XP Classic / XP UNclassic views don't change the copyright
> notice at all.

That's good news. Thanks for testing that. :)


> The copyright notice displayed in the about box is
> very different from the copyright notice displayed elsewhere. They
> ARE two separate strings within the file displaying two separate
> copyright notices. I can see how this happens.
>
> See the attached UNclassic image to see the string.

<LOL> Do we detect a slight bias against the new theme? ;)

> The string
> is actually a label that is filled in with information as determined
> elsewhere within the file. Instead of using the normal copyright
> notice that a DLL displays when you click on Properties, MS
> is using a hardcoded date. It should be a constant within the
> file. Thus, we all now know that the file has two very different
> copyright notices. Microsoft seems to be using the generic
> copyright notice for the Properties and the dated notice in the
> About dialog.

Only on your system, Jim. <ROTFL>


>
> When I click on properties the following information exists:
> ---------------------------------------------------------------
> Details about msoeres.dll
> ---------------------------------------------------------------
> Dates: Friday, Oct. 11, 2002, 2:09:02 PM
> Version: 6.0.2800.1123
> Size: 2,479,616 bytes
> Copyright: © Microsoft Corporation. All rights reserved.
>
> ---------------------------------------------------------------
> Strings found inside
> C:\Program Files\Outlook Express\msoeres.dll
> (I numbered them to distinguish the separate strings):
> ---------------------------------------------------------------
> (1) About Outlook Express
> (2) MS Shell Dlg
> (3) 5.00.0000.0000
> (4) Copyright (C) Microsoft Corp. 1981-2001
> (5) Certain designs and sentiments are copyrights of Hallmark
> Licensing, Inc.
> (6) No products made with the Outlook Express Stationery which
> include any copyrighted material or trademarks of Hallmark
> Cards, Incorporated or its affiliates may be sold or
> distributed for resale.
>

Agreed. I see all that too.


> <snip>
> 2. Your Copyright line is completely different.
> Yours: Copyright (C) Microsoft Corp. 1981-2001
> Mine: © Microsoft Corporation. All Rights Reserved.
> Note: first character in mine is Copyright symbol, generated by Alt-0169
> </snip>
>
> See ABOVE. I think you're looking at the File Properties there. Is
> that the file properties, as found when right clicking on the file? As
> opposed to what is displayed in the About Dialog box for Outlook
> Express?

No, I see the same string in both displays as I wrote above. <EG>


>
> <snip>
> The first difference (in theme) will only be unusual if you are *not*
> explicitly using XP Classic. OTOH using XP Classic would cause
> a different execution path to be taken; so who knows where that would
> lead?
> </snip>
>
> From what I'm seeing, the only thing that is different in the UNclassic
> views and the Classic view is that the routines that draw the windows
> and the controls are somehow flagged. It only makes sense that there
> is a global flag in the OS that is read by all controls when the controls
> are drawn and displayed (IE, an API reads this global flag to
> determine HOW to display the control -> I'll use the word control to
> mean Windows from now on, as a Window is a control).
>

Agreed. I was just pointing out that it was a possible cause.
Thanks again for testing and disproving it.


> <snip>
> As for the second difference, I can imagine the possibility of provision
> for customer copyright; that would again similarly tie having a different
> copyright format to the fact that you are using an IEAK generated/modified
> version.
> </snip>
>
> I looked for another msoeres.dll and I can't find one. Which makes me
> wonder. Didn't XP come out at the end of 2001? And the msoeres.dll
> is tagged with a 2002 copyright? Something very weird there. I should
> have another msoeres.dll on this system somewhere, in the backups or
> what not.
>
> Hope that helps you. It's helped me understand some things as well.

Did you try any of the FileMon or RegMon tracing that I suggested?
I just did it again. This time I left large enough pauses in the procedure
that they could be correlated to breaks in the timestamp sequence.
I again noticed something that I didn't tell you about before because it
seems so strange: oeimport.dll is being accessed each time I type
the A (e.g. after holding the Help menu open for about 3 seconds).

Actually when I look at the list of modules that Help, About makes
I can see that oeimport.dll is one of only 3 which do not have their
Full Path listed. So presumably the path information for all the others
is being fetched from somewhere internally (perhaps that is the same source that msinfo32 /category SWEnvLoadedModules uses;
notice that oeimport.dll is not present there either.) So that might
explain why I don't see msoeres.dll fetched but then unless those
strings that you are attributing to msoeres.dll are pre-fetched and saved
when OE is first opened I could also make a case that they are being
found in oeimport.dll and taken from there instead. (My oeimport.dll
does not have the Copyright string that your version is displaying but
it does have all the necessary pieces that my Help About displays.)

Please try the FileMon test and see if you are getting an access
to msoeres.dll as you suspect or oeimport.dll as I see.
Then tell us if oeimport.dll that is being found is the right one
and if not [1] if it has all the pieces that you need to explain your symptom.

[1] Note: FileMon shows the full path of the files being operated on.


Robert
---

[Kelly]

Jim,

Go to Start/Run/Regedit, naviagate to this key:
HKEY_CURRENT_USER\Identities\{GUID}\Software\Micro soft\Outlook Express\5.0

Right click, export and send it to me via e-mail.

--
All the Best,
Kelly

Microsoft-MVP Windows® XP

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm


"Kelly" > wrote in message
...
> Do all of the numbers under Version (File/Version/Full Path) read 5.... as
> well? Either way, this is not normal.
>
> --
> All the Best,
> Kelly
>
> Microsoft-MVP Windows® XP
>
> Troubleshooting Windows XP
> http://www.kellys-korner-xp.com
>
> Taskbar Repair Tool Plus!
> http://www.kellys-korner-xp.com/taskbarplus!.htm
>
>
> "Jim Carlock" > wrote in message
> ...
>> When I click on Help, "About Microsoft Outlook Express",
>> I get the About dialog box for Outlook Express.
>>
>> It's unusual though I think. Mine is reporting:
>>
>> Microsoft
>> Outlook Express 6
>> 5.00.0000.0000
>>
>> And I think it should be reporting different numbers. I'm wondering
>> what others are getting.
>>
>> I'm not sure if I should report this as a bug or look somewhere else
>> to find out why.
>>
>> --
>> Jim Carlock
>> http://www.microcosmotalk.com/
>> Post replies to the newsgroup.
>>
>>
>>
>
>

[Jim Carlock]

"Robert Aldwinckle" wrote:
> Did you try any of the FileMon or RegMon tracing that I
> suggested? I just did it again. This time I left large enough pauses
> in the procedure that they could be correlated to breaks in the
> timestamp sequence. I again noticed something that I didn't tell
> you about before because it seems so strange: oeimport.dll is
> being accessed each time I type the A (e.g. after holding the
> Help menu open for about 3 seconds).

> Actually when I look at the list of modules that Help, About
> makes I can see that oeimport.dll is one of only 3 which do
> not have their Full Path listed.

I'm getting full path information on the oeimport.dll and other
calls.

The way the calls are going are as follows, these are the file reads
and opens as displayed through ntfilmon.exe. I turned off the
file writes, as I don't think they apply. I've not used the registry
monitor yet.

win\sys\shell32.dll
win\sys\acctres.dll
win\winsxs\{guid}\comctl32.dll
Then there's a bunch of looking for a csapi3t1.dll and it seems to
give up when it can't find it. (weird)
pf\cf\system\directdb.dll
win\sys\inetcomm.dll
win\sys\inetres.dll
Then it looks for mapi32.dll, doesn't find it in the OE folder, but
finds it in the Windows\System32 folder...
win\sys\mapi32.dll
Then it tries to open mapi32.dll in OE folder once again, but
resolves again to...
win\sys\mapi32.dll
win\sys\mshtml.dll
win\sys\msident.dll
pf\oe\msoe.dll
win\sys\msoeacct.dll
pf\oe\msoeres.dll
win\sys\msoert2.dll
pf\oe\oeimport.dll

After the initial loading of the About box, the msoeres.dll doesn't
appear any more unless you shut down oe and restart it. Which
I think would mean that the information is put into memory and
is read from memory after that. I'm only guessing, and that's
about all I can do.

> Please try the FileMon test and see if you are getting an access
> to msoeres.dll as you suspect or oeimport.dll as I see.
>
> Then tell us if oeimport.dll that is being found is the right one
> and if not [1] if it has all the pieces that you need to explain
> your symptom.

I see access to msoeres.dll in the PF\OE folder. Then access to
msoert2.dll in the win\sys folder. And then two queries to the
oeimport.dll, which result in 8 file operations. When looking at
the exported functions inside of msoert2.dll I see there is one
that is used to center a dialog, named: CenterDialog <g>.
I'd bet a dollar that one of the calls to msoert2.dll is the
CenterDialog. There are two other routines inside that file that
display or have something to do with instantiating a messagebox.

These are the strings inside of my oeimport.dll:
CompanyName: Microsoft Corporation
FileDescription: Outlook Express Mail Import & Export
FileVersion: 6.00.2800.1106
InternalName: OEIMPORT
LegalCopyright: Microsoft Corporation. All rights reserved.
OriginalFilename: OEIMPORT.DLL
ProductName: Microsoft Windows Operating System
ProductVersion: 6.00.2800.1106
VarFileInfo: Translation

The functions exported by OEIMPORT.DLL, copy and paste it
to notepad:

ordinal hint RVA name
5 0 000041F8 DllCanUnloadNow
6 1 00004FEA DllGetClassObject
7 2 00004233 DllRegisterServer
8 3 00004247 DllUnregisterServer
3 4 00004C5B ExportMessages
2 5 00006661 PerformImport
4 6 00006831 PerformMigration

I wonder if there's a way to determine which functions are being
called.

Also, one other thing I found out about the msoeres.dll file:
It doesn't have any functions that are imported or exported, which
goes along with my belief that that particular file is just a file full
of icons, bitmaps, and such, no operational matter in it at all. I
could be wrong, who knows for sure?

--
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.

-------------------------------------------------------

"Robert Aldwinckle" also typed up the following stuff:
-------------------------------------------------------
is being fetched from somewhere internally (perhaps that is the
same source that msinfo32 /category SWEnvLoadedModules
uses; notice that oeimport.dll is not present there either.) So
that might explain why I don't see msoeres.dll fetched but then
unless those strings that you are attributing to msoeres.dll are
pre-fetched and saved when OE is first opened I could also make
a case that they are being found in oeimport.dll and taken from
there instead. (My oeimport.dll does not have the Copyright string
that your version is displaying but it does have all the necessary
pieces that my Help About displays.)

[1] Note: FileMon shows the full path of the files being operated on.


Robert
---

[Jim Carlock]

Did you get my email, Kelly?

--
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.


"Kelly" wrote:
Jim,

Go to Start/Run/Regedit, naviagate to this key:
HKEY_CURRENT_USER\Identities\{GUID}\Software\Micro soft\Outlook Express\5.0

Right click, export and send it to me via e-mail.

--
All the Best,
Kelly

Microsoft-MVP Windows® XP

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm


"Kelly" wrote:
> Do all of the numbers under Version (File/Version/Full Path) read 5.... as
> well? Either way, this is not normal.
>
> --
> All the Best,
> Kelly
>
> "Jim Carlock"
>> When I click on Help, "About Microsoft Outlook Express",
>> I get the About dialog box for Outlook Express.
>>
>> It's unusual though I think. Mine is reporting:
>>
>> Microsoft
>> Outlook Express 6
>> 5.00.0000.0000
>>
>> And I think it should be reporting different numbers. I'm wondering
>> what others are getting.
>>
>> I'm not sure if I should report this as a bug or look somewhere else
>> to find out why.
>> --
>> Jim Carlock

[Kelly]

Hi Jim,

So sorry, I didn't recognize the name with the attachment. :o( Ok, so far
that looks all correct. Go to Start/Run/Regedit, navigate to this key and
either post here what is listed for (Default), StubPath and the Version
listed in the right pane or send me the reg file, please.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed
Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
--
All the Best,
Kelly

Microsoft-MVP Windows® XP

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm


"Jim Carlock" > wrote in message
...
> Did you get my email, Kelly?
>
> --
> Jim Carlock
> http://www.microcosmotalk.com/
> Post replies to the newsgroup.
>
>
> "Kelly" wrote:
> Jim,
>
> Go to Start/Run/Regedit, naviagate to this key:
> HKEY_CURRENT_USER\Identities\{GUID}\Software\Micro soft\Outlook Express\5.0
>
> Right click, export and send it to me via e-mail.
>
> --
> All the Best,
> Kelly
>
> Microsoft-MVP Windows® XP
>
> Troubleshooting Windows XP
> http://www.kellys-korner-xp.com
>
> Taskbar Repair Tool Plus!
> http://www.kellys-korner-xp.com/taskbarplus!.htm
>
>
> "Kelly" wrote:
>> Do all of the numbers under Version (File/Version/Full Path) read 5....
>> as
>> well? Either way, this is not normal.
>>
>> --
>> All the Best,
>> Kelly
>>
>> "Jim Carlock"
>>> When I click on Help, "About Microsoft Outlook Express",
>>> I get the About dialog box for Outlook Express.
>>>
>>> It's unusual though I think. Mine is reporting:
>>>
>>> Microsoft
>>> Outlook Express 6
>>> 5.00.0000.0000
>>>
>>> And I think it should be reporting different numbers. I'm wondering
>>> what others are getting.
>>>
>>> I'm not sure if I should report this as a bug or look somewhere else
>>> to find out why.
>>> --
>>> Jim Carlock
>
>

[PA Bear]

<sniff> OK, fine, be that way.
--
~PAB

Kelly wrote:
> Hi Jim,
>
> So sorry, I didn't recognize the name with the attachment. :o( Ok, so
> far that looks all correct. Go to Start/Run/Regedit, navigate to this
> key and either post here what is listed for (Default), StubPath and the
> Version listed in the right pane or send me the reg file, please.
>
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed
> Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
>
> "Jim Carlock" > wrote in message
> ...
>> Did you get my email, Kelly?
>>
>> --
>> Jim Carlock
>> http://www.microcosmotalk.com/
>> Post replies to the newsgroup.
>>
>>
>> "Kelly" wrote:
>> Jim,
>>
>> Go to Start/Run/Regedit, naviagate to this key:
>> HKEY_CURRENT_USER\Identities\{GUID}\Software\Micro soft\Outlook
>> Express\5.0
>>
>> Right click, export and send it to me via e-mail.
>>
>> --
>> All the Best,
>> Kelly
>>
>> Microsoft-MVP Windows® XP
>>
>> Troubleshooting Windows XP
>> http://www.kellys-korner-xp.com
>>
>> Taskbar Repair Tool Plus!
>> http://www.kellys-korner-xp.com/taskbarplus!.htm
>>
>>
>> "Kelly" wrote:
>>> Do all of the numbers under Version (File/Version/Full Path) read 5....
>>> as
>>> well? Either way, this is not normal.
>>>
>>> --
>>> All the Best,
>>> Kelly
>>>
>>> "Jim Carlock"
>>>> When I click on Help, "About Microsoft Outlook Express",
>>>> I get the About dialog box for Outlook Express.
>>>>
>>>> It's unusual though I think. Mine is reporting:
>>>>
>>>> Microsoft
>>>> Outlook Express 6
>>>> 5.00.0000.0000
>>>>
>>>> And I think it should be reporting different numbers. I'm wondering
>>>> what others are getting.
>>>>
>>>> I'm not sure if I should report this as a bug or look somewhere else
>>>> to find out why.
>>>> --
>>>> Jim Carlock

[Kelly]

Hi PaBear (dry up those tears),

Here is the reading of the second export: All is norm except for the fact
that you will scream because it reads ...1106.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed
Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]

"Version"="6,0,2800,1106"
@="Microsoft Outlook Express 6"
"IsInstalled"=dword:00000001
"Locale"="EN"
"ComponentID"="MailNews"
"CloneUser"=dword:00000001
"StubPath"=hex <snipped>

--
All the Best,
Kelly

Microsoft-MVP Windows® XP

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm


"PA Bear" > wrote in message
...
> <sniff> OK, fine, be that way.
> --
> ~PAB
>
> Kelly wrote:
>> Hi Jim,
>>
>> So sorry, I didn't recognize the name with the attachment. :o( Ok, so
>> far that looks all correct. Go to Start/Run/Regedit, navigate to this
>> key and either post here what is listed for (Default), StubPath and the
>> Version listed in the right pane or send me the reg file, please.
>>
>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed
>> Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
>>
>> "Jim Carlock" > wrote in message
>> ...
>>> Did you get my email, Kelly?
>>>
>>> --
>>> Jim Carlock
>>> http://www.microcosmotalk.com/
>>> Post replies to the newsgroup.
>>>
>>>
>>> "Kelly" wrote:
>>> Jim,
>>>
>>> Go to Start/Run/Regedit, naviagate to this key:
>>> HKEY_CURRENT_USER\Identities\{GUID}\Software\Micro soft\Outlook
>>> Express\5.0
>>>
>>> Right click, export and send it to me via e-mail.
>>>
>>> --
>>> All the Best,
>>> Kelly
>>>
>>> Microsoft-MVP Windows® XP
>>>
>>> Troubleshooting Windows XP
>>> http://www.kellys-korner-xp.com
>>>
>>> Taskbar Repair Tool Plus!
>>> http://www.kellys-korner-xp.com/taskbarplus!.htm
>>>
>>>
>>> "Kelly" wrote:
>>>> Do all of the numbers under Version (File/Version/Full Path) read 5....
>>>> as
>>>> well? Either way, this is not normal.
>>>>
>>>> --
>>>> All the Best,
>>>> Kelly
>>>>
>>>> "Jim Carlock"
>>>>> When I click on Help, "About Microsoft Outlook Express",
>>>>> I get the About dialog box for Outlook Express.
>>>>>
>>>>> It's unusual though I think. Mine is reporting:
>>>>>
>>>>> Microsoft
>>>>> Outlook Express 6
>>>>> 5.00.0000.0000
>>>>>
>>>>> And I think it should be reporting different numbers. I'm wondering
>>>>> what others are getting.
>>>>>
>>>>> I'm not sure if I should report this as a bug or look somewhere else
>>>>> to find out why.
>>>>> --
>>>>> Jim Carlock
>
>

[Jim Carlock]

<g>

This message is for Robert Aldwinckle as well. I'm sending the
thread to the PA Bear newsgroup as well. ;-)

I've tried using OllyDbg to step through it. I can't slow down my
system enough to read the splash, and for some reason I can get
OllyDbg to stop right after the Splash is displayed, but the splash
at that point is unreadable (because of OllyDbg's control over it).

Some comments, so far, the best I can tell right at the moment
is the version number is being read from msoeres.dll. I've looked
through the msoe.dll for the version string but they default to a
IMproper string (ie, not the 5.00.0000.0000 string). ;-)

And I'm not sure if you'd like me to post all the gorey details
about the different strings that are contained within the other
files, so I'll start off by stating, the following:

msoe.dll <- is one of the main files
msimn.exe <- is thart starting stub
msoeres.dll <- is the resource file that holds icons (and version info ?)
This file is read initially and loaded at start up. This file is also read
when doing a version lookup (at least on my system it is).

I created a new MS IEADK (these acronyms are killing me!) and
reinstalled using the new IEAKD build, but it didn't seem to over-
write anything. Right now I've got the OLD msoeres.dll (as it
doesn't export anything but icons (and possibly a version number)),
in use. It does NOT seem to affect any of the operations of OE.
There are approx. 59 icons in msoeres.dll in 10 different formats,
and it has the version number of OE as displayed in my About box.
The About box seems to read from that file, but my first inclination
is to think that it's grabbing a bitmap or icon. Furthermore, there
seem to be numerous .gif89 files inside of msoeres.dll, as well as
Adobe 4.0 images, there is a reference to: NPhotoshop 3.0, I'm
not quite sure what that is at the moment, but I think it might be
worth finding, and other things with that tag inside of them all
seem to be some sort of .jpg images, which is really really
interesting, as there is JFIF in those files and if the image is renamed
from jpg, to jfif, it reads 100% accurately (in IE as well as other
graphics programs). If you're a graphic image specialist, you I'd
appreciate a comment, because as you can tell I don't have a
very broad knowledge of what the difference is between jfif and
jpg (there appears to be NO difference).

Some interesting strings inside of msoe.dll:

ComboBox, cmdDownload, cmdConnect, btnContinue
btnTrust, btnCert, btnOpen, Hhotmail

It almost looks like a VB application with function names as those
listed above. Either that, or the programmers took a fancy for the
Hungarian notation that VB programmers use. In fact, I'm willing
to bet that parts of msoe.dll were created with an offshoot brand
of VB5.

But what do I know? Absolutely nothing! I'm still at the same
point I started at. <g>

--
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.


"Kelly" wrote:
Hi PaBear (dry up those tears),

Here is the reading of the second export: All is norm except for the fact
that you will scream because it reads ...1106.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed
Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]

"Version"="6,0,2800,1106"
@="Microsoft Outlook Express 6"
"IsInstalled"=dword:00000001
"Locale"="EN"
"ComponentID"="MailNews"
"CloneUser"=dword:00000001
"StubPath"=hex <snipped>

--
All the Best,
Kelly

Microsoft-MVP Windows® XP

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm


"PA Bear" > wrote in message
...
> <sniff> OK, fine, be that way.
> --
> ~PAB
>
> Kelly wrote:
>> Hi Jim,
>>
>> So sorry, I didn't recognize the name with the attachment. :o( Ok, so
>> far that looks all correct. Go to Start/Run/Regedit, navigate to this
>> key and either post here what is listed for (Default), StubPath and the
>> Version listed in the right pane or send me the reg file, please.
>>
>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed
>> Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
>>
>> "Jim Carlock" > wrote in message
>> ...
>>> Did you get my email, Kelly?
>>>
>>> --
>>> Jim Carlock
>>> http://www.microcosmotalk.com/
>>> Post replies to the newsgroup.
>>>
>>>
>>> "Kelly" wrote:
>>> Jim,
>>>
>>> Go to Start/Run/Regedit, naviagate to this key:
>>> HKEY_CURRENT_USER\Identities\{GUID}\Software\Micro soft\Outlook
>>> Express\5.0
>>>
>>> Right click, export and send it to me via e-mail.
>>>
>>> --
>>> All the Best,
>>> Kelly
>>>
>>> Microsoft-MVP Windows® XP
>>>
>>> Troubleshooting Windows XP
>>> http://www.kellys-korner-xp.com
>>>
>>> Taskbar Repair Tool Plus!
>>> http://www.kellys-korner-xp.com/taskbarplus!.htm
>>>
>>>
>>> "Kelly" wrote:
>>>> Do all of the numbers under Version (File/Version/Full Path) read 5....
>>>> as
>>>> well? Either way, this is not normal.
>>>>
>>>> --
>>>> All the Best,
>>>> Kelly
>>>>
>>>> "Jim Carlock"
>>>>> When I click on Help, "About Microsoft Outlook Express",
>>>>> I get the About dialog box for Outlook Express.
>>>>>
>>>>> It's unusual though I think. Mine is reporting:
>>>>>
>>>>> Microsoft
>>>>> Outlook Express 6
>>>>> 5.00.0000.0000
>>>>>
>>>>> And I think it should be reporting different numbers. I'm wondering
>>>>> what others are getting.
>>>>>
>>>>> I'm not sure if I should report this as a bug or look somewhere else
>>>>> to find out why.
>>>>> --
>>>>> Jim Carlock
>
>

[Jim Carlock]

This is getting weirder.

I have this thread highlighted in the two newsgroups. And now only
the xp newsgroup gets the highlighting action. Somehow, OE has
forgotten how to highlight. LOL

--
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.

--------------------------------------------------------------
Note the following has just been reported to me and is true as
in fact (and is definitely NOT fiction) and is now documented
and if anyone needs information on its truth, in order for
verification purposes feel free to contact me. It is presented
verbatim from its source.
--------------------------------------------------------------
UPS (which I pronounce as OOPS) has done it again. NASA
ordered a $1000.00 airplane kit which is fairly large 1/3rd scale.
It has to be shipped in 2 boxes. Insurance on said kit is fairly
expensive, but necessary. Needless to say we (knowing OOPS
as we do) reinforced the kit box and then added another box
which we also padded. Again this added to the expense of
shipping... but..

UPS ran the sucker through with a forklift and now refuses to
pay for the destroyed kit. They claim "Insufficient Packaging".
This is their standard out. Can someone tell me a way to
sufficiently package (other than concrete and rebar) against
a forklift? The battle begins.....
--------------------------------------------------------------
--------------------------------------------------------------
"Jim Carlock" wrote:
This message is for Robert Aldwinckle as well. I'm sending the
thread to the PA Bear newsgroup as well. ;-)

I've tried using OllyDbg to step through it. I can't slow down my
system enough to read the splash, and for some reason I can get
OllyDbg to stop right after the Splash is displayed, but the splash
at that point is unreadable (because of OllyDbg's control over it).

Some comments, so far, the best I can tell right at the moment
is the version number is being read from msoeres.dll. I've looked
through the msoe.dll for the version string but they default to a
IMproper string (ie, not the 5.00.0000.0000 string). ;-)

And I'm not sure if you'd like me to post all the gorey details
about the different strings that are contained within the other
files, so I'll start off by stating, the following:

msoe.dll <- is one of the main files
msimn.exe <- is thart starting stub
msoeres.dll <- is the resource file that holds icons (and version info ?)
This file is read initially and loaded at start up. This file is also read
when doing a version lookup (at least on my system it is).

I created a new MS IEADK (these acronyms are killing me!) and
reinstalled using the new IEAKD build, but it didn't seem to over-
write anything. Right now I've got the OLD msoeres.dll (as it
doesn't export anything but icons (and possibly a version number)),
in use. It does NOT seem to affect any of the operations of OE.
There are approx. 59 icons in msoeres.dll in 10 different formats,
and it has the version number of OE as displayed in my About box.
The About box seems to read from that file, but my first inclination
is to think that it's grabbing a bitmap or icon. Furthermore, there
seem to be numerous .gif89 files inside of msoeres.dll, as well as
Adobe 4.0 images, there is a reference to: NPhotoshop 3.0, I'm
not quite sure what that is at the moment, but I think it might be
worth finding, and other things with that tag inside of them all
seem to be some sort of .jpg images, which is really really
interesting, as there is JFIF in those files and if the image is renamed
from jpg, to jfif, it reads 100% accurately (in IE as well as other
graphics programs). If you're a graphic image specialist, you I'd
appreciate a comment, because as you can tell I don't have a
very broad knowledge of what the difference is between jfif and
jpg (there appears to be NO difference).

Some interesting strings inside of msoe.dll:

ComboBox, cmdDownload, cmdConnect, btnContinue
btnTrust, btnCert, btnOpen, Hhotmail

It almost looks like a VB application with function names as those
listed above. Either that, or the programmers took a fancy for the
Hungarian notation that VB programmers use. In fact, I'm willing
to bet that parts of msoe.dll were created with an offshoot brand
of VB5.

But what do I know? Absolutely nothing! I'm still at the same
point I started at. <g>

--
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.


"Kelly" wrote:
Hi PaBear (dry up those tears),

Here is the reading of the second export: All is norm except for the fact
that you will scream because it reads ...1106.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed
Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]

"Version"="6,0,2800,1106"
@="Microsoft Outlook Express 6"
"IsInstalled"=dword:00000001
"Locale"="EN"
"ComponentID"="MailNews"
"CloneUser"=dword:00000001
"StubPath"=hex <snipped>

--
All the Best,
Kelly

Microsoft-MVP Windows® XP

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm


"PA Bear" > wrote in message
...
> <sniff> OK, fine, be that way.
> --
> ~PAB
>
> Kelly wrote:
>> Hi Jim,
>>
>> So sorry, I didn't recognize the name with the attachment. :o( Ok, so
>> far that looks all correct. Go to Start/Run/Regedit, navigate to this
>> key and either post here what is listed for (Default), StubPath and the
>> Version listed in the right pane or send me the reg file, please.
>>
>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed
>> Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
>>
>> "Jim Carlock" > wrote in message
>> ...
>>> Did you get my email, Kelly?
>>>
>>> --
>>> Jim Carlock
>>> http://www.microcosmotalk.com/
>>> Post replies to the newsgroup.
>>>
>>>
>>> "Kelly" wrote:
>>> Jim,
>>>
>>> Go to Start/Run/Regedit, naviagate to this key:
>>> HKEY_CURRENT_USER\Identities\{GUID}\Software\Micro soft\Outlook
>>> Express\5.0
>>>
>>> Right click, export and send it to me via e-mail.
>>>
>>> --
>>> All the Best,
>>> Kelly
>>>
>>> Microsoft-MVP Windows® XP
>>>
>>> Troubleshooting Windows XP
>>> http://www.kellys-korner-xp.com
>>>
>>> Taskbar Repair Tool Plus!
>>> http://www.kellys-korner-xp.com/taskbarplus!.htm
>>>
>>>
>>> "Kelly" wrote:
>>>> Do all of the numbers under Version (File/Version/Full Path) read 5....
>>>> as
>>>> well? Either way, this is not normal.
>>>>
>>>> --
>>>> All the Best,
>>>> Kelly
>>>>
>>>> "Jim Carlock"
>>>>> When I click on Help, "About Microsoft Outlook Express",
>>>>> I get the About dialog box for Outlook Express.
>>>>>
>>>>> It's unusual though I think. Mine is reporting:
>>>>>
>>>>> Microsoft
>>>>> Outlook Express 6
>>>>> 5.00.0000.0000
>>>>>
>>>>> And I think it should be reporting different numbers. I'm wondering
>>>>> what others are getting.
>>>>>
>>>>> I'm not sure if I should report this as a bug or look somewhere else
>>>>> to find out why.
>>>>> --
>>>>> Jim Carlock
>
>

[Jim Carlock]

I have noticed that when using OllyDbg, the only NEW
library delved into when opening the About window,
is located within sxs.dll. This meaning that msoeres.dll
is previously loaded upon startup of msimn.exe.

I've searched the registry for "5.00.0000.0000" but that
turns up nothing, and I'm thinking that since it is Unicode
within the Library, msoeres.dll, that it could be Unicode
format within the registry and that maybe the Find button
doesn't do Unicode to ASCII translations.

I finally got my splash screen captured. Forgot that I
could use the PrtScrn key to capture the desktop screen.
Larry Sirflatend in the VB newsgroup reminded me
that there's been a screen capture key with Windows,
and it's been around since Windows 98 I think. A quick
search on Google confirmed it. The attached oesplash
file IS a JPG file. Sometimes OE seems to display JPG
and I'm wondering if it does the same for JFIF.

That file was saved as a JPG and I renamed the extension
to JFIF. They seem to have the same internal format and
I'm puzzled and wondering if there is a difference. Most of
the Microsoft apps don't seem to care if the extension is
jpg or jfif. So I'm wondering if someone has a patent on
the jfif standard and the jpg standard is a public domain
thing?

--
Jim Carlock

"Robert Aldwinckle" replied in response to Jim:
> Did you try any of the FileMon or RegMon tracing that I
> suggested? I just did it again. This time I left large enough pauses
> in the procedure that they could be correlated to breaks in the
> timestamp sequence. I again noticed something that I didn't tell
> you about before because it seems so strange: oeimport.dll is
> being accessed each time I type the A (e.g. after holding the
> Help menu open for about 3 seconds).

> Actually when I look at the list of modules that Help, About
> makes I can see that oeimport.dll is one of only 3 which do
> not have their Full Path listed.


"Jim Carlock" previously commented:
I'm getting full path information on the oeimport.dll and other
calls.

The way the calls are going are as follows, these are the file reads
and opens as displayed through ntfilmon.exe. I turned off the
file writes, as I don't think they apply. I've not used the registry
monitor yet.

win\sys\shell32.dll
win\sys\acctres.dll
win\winsxs\{guid}\comctl32.dll
Then there's a bunch of looking for a csapi3t1.dll and it seems to
give up when it can't find it. (weird)
pf\cf\system\directdb.dll
win\sys\inetcomm.dll
win\sys\inetres.dll
Then it looks for mapi32.dll, doesn't find it in the OE folder, but
finds it in the Windows\System32 folder...
win\sys\mapi32.dll
Then it tries to open mapi32.dll in OE folder once again, but
resolves again to...
win\sys\mapi32.dll
win\sys\mshtml.dll
win\sys\msident.dll
pf\oe\msoe.dll
win\sys\msoeacct.dll
pf\oe\msoeres.dll
win\sys\msoert2.dll
pf\oe\oeimport.dll

After the initial loading of the About box, the msoeres.dll doesn't
appear any more unless you shut down oe and restart it. Which
I think would mean that the information is put into memory and
is read from memory after that. I'm only guessing, and that's
about all I can do.

> Please try the FileMon test and see if you are getting an access
> to msoeres.dll as you suspect or oeimport.dll as I see.
>
> Then tell us if oeimport.dll that is being found is the right one
> and if not [1] if it has all the pieces that you need to explain
> your symptom.

I see access to msoeres.dll in the PF\OE folder. Then access to
msoert2.dll in the win\sys folder. And then two queries to the
oeimport.dll, which result in 8 file operations. When looking at
the exported functions inside of msoert2.dll I see there is one
that is used to center a dialog, named: CenterDialog <g>.
I'd bet a dollar that one of the calls to msoert2.dll is the
CenterDialog. There are two other routines inside that file that
display or have something to do with instantiating a messagebox.

These are the strings inside of my oeimport.dll:
CompanyName: Microsoft Corporation
FileDescription: Outlook Express Mail Import & Export
FileVersion: 6.00.2800.1106
InternalName: OEIMPORT
LegalCopyright: Microsoft Corporation. All rights reserved.
OriginalFilename: OEIMPORT.DLL
ProductName: Microsoft Windows Operating System
ProductVersion: 6.00.2800.1106
VarFileInfo: Translation

The functions exported by OEIMPORT.DLL, copy and paste it
to notepad:

ordinal hint RVA name
5 0 000041F8 DllCanUnloadNow
6 1 00004FEA DllGetClassObject
7 2 00004233 DllRegisterServer
8 3 00004247 DllUnregisterServer
3 4 00004C5B ExportMessages
2 5 00006661 PerformImport
4 6 00006831 PerformMigration

I wonder if there's a way to determine which functions are being
called.

Also, one other thing I found out about the msoeres.dll file:
It doesn't have any functions that are imported or exported, which
goes along with my belief that that particular file is just a file full
of icons, bitmaps, and such, no operational matter in it at all. I
could be wrong, who knows for sure?

--
Jim Carlock

-------------------------------------------------------
"Robert Aldwinckle" also typed up the following stuff:
-------------------------------------------------------
is being fetched from somewhere internally (perhaps that is the
same source that msinfo32 /category SWEnvLoadedModules
uses; notice that oeimport.dll is not present there either.) So
that might explain why I don't see msoeres.dll fetched but then
unless those strings that you are attributing to msoeres.dll are
pre-fetched and saved when OE is first opened I could also make
a case that they are being found in oeimport.dll and taken from
there instead. (My oeimport.dll does not have the Copyright string
that your version is displaying but it does have all the necessary
pieces that my Help About displays.)

[1] Note: FileMon shows the full path of the files being operated on.

Robert
---





begin 666 oesplash.jfif
M_]C_X `02D9)1@`!`0```0`!``#_VP!#``@&!@<&!0@'!P<)"0@*#!0-# L+
M#!D2$P\4'1H?'AT:'!P@)"XG("(L(QP<*#<I+# Q-#0T'R<Y/3@R/"XS-#+_
MVP!#`0D)"0P+#!@-#1@R(1PA,C(R,C(R,C(R,C(R,C(R,C(R,C(R,C(R,C(R
M,C(R,C(R,C(R,C(R,C(R,C(R,C(R,C+_P `1" #V`9 #`2(``A$!`Q$!_\0`
M&P`!``(#`0$```````````````$$`@4&`P?_Q !"$ `!`P($`P8%`08&`0,%
M`0`!`@,1`"$$!1(Q06'P!A,B47&A%#*!D;%"!Q4CT>'Q%C-28G+!)#9SDS0U
M0U2"HO_$`!L!`0`#`0$!`0`````````````!`@,$!08'_\0`,Q$``@ (!`@0"
M" 8"`P````````$"$0,$(1(Q4? 3004B88&1H<'A!A0R<;'Q(]$50E+_V@`,
M`P$``A$#$0`_`)I2E??GABE*4 I2E *4I0"E*4 I2E *4I0"E*4`I2E *4I0
M"E*4`I2E`*4I0"E*4 I2E *4I0"E*4 I2E *4I0"E*4`I2E *4I0"E*4`I2E
M`*4I0"E*4 I2E *4I0"E*4 I2E *4I0"E*4`I2E *4I0"E*4`I2E`*4I0"E*
M4 I2E *4I0"E*4 I2E *4I0"E*4`I2E *4I0"E*4`I2E`*4I0"E*4 I2E *4
MI0"E*4 I2E *5L\LR''9L"ME*&V$_,\Z2$_2TD^E6,X[..99A!B&<0,4$ EY
M*4%)`_U)%Y]-_P#OGEJL49\#>XK:S24J$J"DA22"DB01L:FN@"E*4 I2E *4
MI0"E*4 I2E *4I0"E*4`I2E *4I0"E*4`I2E`*4I0"E*4 I2E *4I0"E*4 I
M2E *4I0"E*4`I2E *4I0"E*4!TB.Q[ZW&6OC<.EYYL.(;7()2:\&\GP^!Q;J
ML>\AUIDQI03"U#>_$?\`?OTO:QMQOL=@LQ82-3*$I7;]"AZ<#'WX\?EF-S50
M25+7.D>%/IUUQ\[2/+JH.3GLK3]WV*:F63'+PX0MOS\COAG6*S'%HR[*<.'7
MXA"$V0A(W4HQ`3<?UF]',?V?]I,PQ!=Q./0ZD7#:ITI/(1' ^9OSOUO[.F<F
M1D'Q&6XD8K$N1\6[$*"_],<`+Q][S76K6;P)@<_Y=?GQ=1K7CR..%4EU6YW:
M?2U"\KMOX'R5C]GV<84*0%,J!N$@D ;R=N71-ZV9=G<=E>%&(Q 1W94$C223
M^.OM/?=L,9CL+E:'< %!WOT)("2HE))!@ <^N//]HW,2[V80K%'4Y\7N$D"(
M/F)X^_WMI?2NIR:F.&7)^S8Z):+'#3O(GR\KW.+K9Y9E!S+!X]Y+NES#-A:$
M1/>;DC[)-:RK^79J[EH7W24DJ<;<DG_028]#,&OI<W'P?X^9YL:O<LNY'W6
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MK(>6PI]2%*2 D D1,[V\N7"M'6S;S?\`C)6^P'4_#J86-925`DF9X&35!##S
MC:G$-.*0G=022!]:VQ>(K\1E9</_`%/.E*5L5%*4H!2LVVG'E:6FUK4!,)22
#&:P=P
MS[(!=9<;!L"I)%0I1?F*9Y4I2I I2E *4I0"E*4`I2H)CS^U`32A! )(, 3M
<04S]ZBU="CRI2E2!2E* 4I
M2@%*4H!2E* 4I2@/LN#P6'S7LJS@\6WK8>8"%IF)MO6H7V"[+8!E3B,I:4K_
M`%O!3L<X,]>^WR)9_<>&`OX!SBWH>O>T\"L%*"I"ID%($\>7/^\W^(EERP<H
M0DTK\F>O4:NC4X1G"9<VIK ,L85M0E26,%I"MX)@7WZF[$9MA\/)?S)AOB=:
M`+='\_6V651)Q#Q$SP_ES]^,^+YYVUPV7.YHWW(6YF"S+R@H$1%IM\W_`%OP
:>T>4O8EMIO%MNN+4$A24*(OM)TQ?_OG?4]M
M8_<C0"0#WZ9M_M/+K\ZG+LH2[@%LC0AYU!" HB=0N")%[Q;H^_:3%?'=G,%B
MM!27'$J4#P5I5/#SGK?L6"&+4P4':M&.+//+B;DJ9R%=MV)R;#?"8G/,>A*V
M6 <*2=6TG^
MQ&G2<[?D:H?M$S$9AWA89.%U?Y,7T_\`+SK/MQDN':;P^<X)`2SB2 XE(@21
M(5];UQ=?1>U)[G]G^7-._P"84LIOO(1?\5CEQ0TV?$\*JW3]J+QD\D)<>]''
M9OD&,R1&&5BRT1B 2C0J=HF;<Q6;/9S'/Y,,U26AABL(NHZI*@G:/,UTG[1?
M_I\F_P"#GX11L$?LE=D;JM_\PJT=7D>#'D\Y2I_%H/%%3E'HK+N([&NJ[)X?
M`M,849@ES4X]8$B5?JB3N*J]FV5X?LAVB87&ML/(5&TAN*C-EK'[-,N6%*U:
MTW!_Y5CV5)/8C/B;DH=DG_VZX_\`(\$G-WZ_U-5P\:I>7T.2RO*<9G&*^'P;
M6M0$J43"4CS)K;8_L-G.`PBL04LOI2-2DLJ)4D>A`GZ36[R57[O_`&;XW%X:
M`^X5ZE#<7"?87K7?L^Q;Z.T"V-2E-O-**P3Q%P?7<?6NS)JLS\3)"J@ZKK7/
M?R,8XX>K&7-G-8# 8G,L6C"X1HN.JX#@/,^0K?XCL#G;&&+R0P\0)+;:R5>X
M`/T-=1D>%:RY_M+B,,@!QMU00(^4!)4`+;2?:N0[)YAB4]K,,LNJ6<0LI=U&
M=<@W/YH]5FR.<L5)12>_GM?N)6*$:4O,M_L_24]IUI4DA26%@@V(,BM1FF&=
MQ?:K'8=A!6ZYC'$I2.)UFNWPC#;'[3L7W8 UX;6H#@3IG^?UJ]EV68#+<\QF
MI]*LUQJG7D&)[M!48CG<>L<JYI:U0RO*ENXJEWY(T6&XJ-\FSYMF^3/Y+B$,
M8IUA3JDZBAM144CA-J]^RW_JC+__`'1^*HYFWB6LSQ+>,4I6)2XH.*5N3.]7
MNRW_`*HR_P#]T?BO4R7^6;D[=/\`@YHUXBKJ=AVG[89ADN<JP>&9PJFPA*I<
M2HF3Z*%<KFW:;'=HFV,)BD85I
M(2KO%:9@\+@UPN>YEA\US 8C#8-.$;#83W:8B03>P'G7G^C\,7&,O"K;]6QO
MGD[:XO<99OV>Q^3+83B$H6'_`/+4T2H$^6V]>KW9C'L9GA,N6MCXK$IU)1K/
M@$3XK6V/VKN>R3KF;]G&/CL,'E85S^ MS94`P?I,37)Y(_BL3V_9=QJ2G$EY
M>M)$:3I-OI6D-7FEQQ=7!._;T^Y66*"X6O,QP_8;.,1B'F@&$!I6DN+60E1B
M;6D_:M;CLAQV79FU@,2A*7'2`VH&4JDQ(-;?MMF6+_Q0ZRE]:$8<(#80J(E(
M5/K)KH.T)&,RKLWCW0GXA>(8)M?Q)D^X%1'59X^'*=5-?#:P\4'Q)>1R_P#@
MK-_C7<-I9'=-AQ;FHZ #,#:2;'A5#)\@S#/'%)P;0T(LIQ9A*?K_`"KJ_P!H
M&;8K"XYG!89Y;*%M=XX6SI*Y) !(OP]ZNM83!M?L]PK#V.^!9Q 2IQT)*BHJ
MO'7E55K<ZPQR2JY-);-UU?M]B)>&'&XKR.2S3LAFN4X4XIQ+3S ^9;"BH)'F
M9 ,5X9/V:S+/`I>%;0EE)@NNJTIGR&Y-=?D#N1Y*UB&3G?Q.'Q @M+84`/[@
M_BL<DQ&38_L\K),7B0P&W#I7J"-8*I!!(@[@0>6]'K<\82VNFM^%K9^=>P+#
4]\K25
M3Q@)/7ON,?V5QN"R9XY9FKCV%@K6Q8!:1$W$@V&T7_-_$-Y+VOPN&<5C?AWT
M(@-:DC2;3X3OPN/,>=9O79'!-2M7NTGM^Z++!'B::[_<X?-,EQN3/)1C& D+
M^58\257%YCVZ.H+"Y3W*2K5'@'F?IQ)ZX]CVHR/,<LP6'4[CUXO!H6$("I'=
MD^8OP!$]'F\`I*<QPBW$^%+J"JW"4W-NOSZ&GS>)BX[3_8PR0J=<CMLQQ/\`
(O'&Y@#A6O_`,5C%95B<#VDPCJU+$LK0T$J!\[P
M`1YUONV&;#(5L8S#89I>/?26D.."0VA-S'.5"JO9W.!VPPF*RS-L.VM24ZTK
M2F+;3R4"=QY_?R,>^!9YPO>W*]^?E[%R.J7Z^!/W>1\WI7KBF#AL6]AR9+2U
M()\X,5Y5]$G:M' ';5G!8)O#G K7I$$ZP)]
MNOO,/?M(9:5!RI]1XZ7 ?+EU];\=7CB,,WB6]"QZ*&XKS_\`B],W;3^)I+/E
MKU6=3BOVB*Q.#4W@\"IE]8,*<4%:?]T1OUZZ' H0@KQF,*E:B2HFZE*W\KD]
M<]8C!*;LD-D3>3OSVZ_-T)L-1U$;$\/2NC'IL>&'!A\^;.#+CR:C-Q9/THW6
$Y<U@F<(II"'E/:EO:R29)
MX>:CUOK:5FM#A4U-+<[E-I4A70]E>TG[BQ+C;Z"Y@W_\Q(%TGS'GZ5SU*Z,N
M*&6#A-;,K&3B^)'<AOL,C%)QXQ+I&K4,-I443Y$:=N4Q6D[4=I%Y_BT:$%O"
M,SW:#N9_4>?XK0TK#%HXPFIRDY-<K\C265M<*5?L?0'LV[-]H\IP@S;$NX;$
^ H*2EA@I424A:3),1)N=ZX>E9Q]
M'8TUNZ3M*]EYDO/)WLMSN,OS;(\S[*,Y/FF)7A5LFRDI-X)@@P1QKPRG-LIR
M[(<]P'Q9)>+J<-J;5+B2DA)L+3SBN.I5GH8>LK=-W7MY]!X\MMO8=3V7[0X7
M!83$97F@4K ;B=* H&$CRF /*=S:
MN%I3)H<<Y-VTGS2Y,B.:44E7(Z7LUVG_`'9F>*7CTEW#XTDO$"2%$GQ1Q%S(
MYUM<(_V0R+%',\'B\1B7A/=,P?#(CBD>?$_>N%I4Y-%"<G)-J^=>8CF:55='
M5Y#VB9_Q;B,US-T-)=;4)"2K3M $`G85J\3G"T=JGLUPSJEZ<2I;:C(U(DP+
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M`'5<FA@H?X[NFOWOK[R5G=^MRL[?M CLUC>T+S>9OO83$LE*5% )2ZG2%";&
M#>/I6K[0=IL)F.;9<UA24X#".I45%)$P1<#>`*Y[-\R7F^:/8YQM+:G=,I29
M`A('_54@"3 J,&A48P<VVTN5[)M;T)YK;KJ='VTS/!YQG3+V`=[YL,)02$*3

M)%AX2#;AZ<N?7&[TL'BCBMU'D_,JLLN)RZG8G$]F<DP+PP:?WIB7;#OVI2GR
M-T^GF?O53*G.S>,RE."S%DX3$HO\2V@DK\N!\Q;:N8X@E-[</2^W7Y@$")3$
M7N/2^W7YA:-<+7$[YW>_^OD2\N_)4=S^^<D[/Y0_A,J?>QCN(W[P$)3(B9TC
>-I"+'ZZ2#O7%R$C;A(MZ<J\O$L$&PZZZO$=!%;J
^O+K\P1
M$^$#T'KRJ2-R!U?E75@P0PQX8&<YN;MG;,9[DV?Y2QE_:+O&GL.?X>(0)FT3
ML8)XVBO1O-^S_97!8C]QK<QF.>3'>. /TWJ8VL-YKG>@Q
M\K?#_P";V-/'ETWZ^9DI:G%J6LRI1))/$U%8H$%0B!O65=O[&(I2E *4I0"E
M*4 I2E *4I0"E*4`I2E *4I0"E*4`I2E`*4I0"E*4 I2E *4I0"E*4 K)L2L
M6XC\UC638E8MQ'YHR#W2T"$VOOMZ<NI^^.E(*1(DP0"/3EU^<T)\*1I%P#$6
M.US;?KC?R<1+B222%1<B_75]SFN99F:6OE@>1$CTY>W1!OY=O,2/3>WMT<4D
MH3=,IW(CTOMSZXRIT!/FH^8WVN;=?EN+,%0(`%^%K\.77YE"8@QY;B8VY=?G
M$"#)!G<S]+U MP^XVVO5B+W,QYQM>2/3>W7YQ\K1'GPVOM6,CRJ*F@W9D3'"
>W+K\
M^@2+0D7@BVXMRWZX^($@Q"09@B1OMO;?KCXL[+4>?<[1MO?Z<NOM,!DV^_XY
M=?GU"08@;W%MQ;>V_7&X)!B 3.W,6Y;WZXK%'D&3:W"?QRZ_,!HR!I/F/;EU
M^?8)!B 3-QZ6WMSZXM(G:;B 1N+7VZG[N(BCQ#1,0DW$CVY<^N,AF8B;BTCT
MY<]OZ3ZA`M:=N&^U]NIXS<$BUIVX;[<NIXS=Q \@S,03<2)'IRY]6D&9B#N)
M%O3ESZM/J$B!:;<1OM?;KZW!(M:;>6YM?;KZW6R3R[F0(-B)%O3^?5I\?2K6
M@$"TR!PWVOMUSF]6K1=E6*4I5@*4I0"E*4 I2E *4I0"E*4`I2E *4I0"E*4
M`I2E`*4I0"E*4 I2E *R;$K%N(_-8UDV)6+<1^:,@LH3X4C2+@&(L=K[;]<;
MX.I!;U09WF+G:Y^_7') E"8'EP].7/W^\QJ$1.J]QOM<VWO[\9\67)ERO]+C
MVVWM6,CRJ/2E:E2344J+^0H":5$;6&]$MEU80$VF3'E?EU/W`R;:+ZA(\$_?
MVY]<;24B``F08@$;[7-M^KSXB19(`D6@$;[7-M[^_&?%($Q:9O<?-M<VWO[\
M9\63=E@!,6F;W'S;7-M[^_&?$ F+3-[CYMKFV]_?C/B 3%IF]Q\VUS;>_OQG
MQ0!,6F;W&^US;?J\^* 2!,6F;W'S;7-M[^_&?$ D;3,&XWVN;=3QXHOYSRWY
MFW4\[HF+;WVWVY<_[\0`$G:9OMN;7VY]3<!,6F>7IRY^_/Q )BTSRWVY<_?C
M/B 3%IGEOMRY^_&?$'???VB+6$_3?;ES]^?B\U+T%(TI@@1(ZZ\[SZ@;6GZ;
M[<N?OQGQ572I)1X1&D?CKK>R%T>J5$Z91PXCTN;<^N,I-T#1.PB/2^W7Y\!K
MD0C_`+_Z]/O68*UN(D3<3(].74U-$6>Z`($7!XQOMRZ^MZE6A>Y&]Y(WVY=?
M6]6IB&*4I5B!2E* 4I2@%*4H!2E*`4I2@%*4H!2E* 4I2@%*4H!2E* 4I2@%
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M5R)3L 3PF;W&^US;KG-P$G8F??GMSZFZ)BV]]M]N7/\`OQ 3%IGEOMRY^_&?
M%4D`3%IGEZ<N?OS\0"8M,\M]N7/WXSX@$Q:9Y;[<N?OQGQ )BTSRWVY<_?C/
MB#OOO[ )BTSRWVY<_?C/B 3%IGEOMRY^_&?$`F+3/+?;ES]^,^* "8M,Q]=N
M7/J;AWWW]D6V'U'IRY^_.]=T#0! N@</Z=?FP$S'A!F.&^W+KZWQ[H+TRDS'
M#CMRY]<;)T&CQ:!40"F;[#U]*R%W$2#)(M]N59I:@@P9L?/RY=?DEOQ)\)/'
MZ6OMU^9M$$Z;#PS-[_2^W7YK59"2;E),WD\=KFW7YK5,2!2E*L!2E* 4I2@%
M*4H!2E* 4I2@%*4H!2E*`4I2@%*4H!2E* 4I2@%*4H!4I^8>M14I^8>M`64I
M\*? =IF]Q\VUS;>
M_OQGQ9,L04ZTQOJO<;[7-M[^_._A\-JB(@B08Z\^I$V )BTS>X^;:YMO?WXS
MX@$Q:9O<?-M<VWO[\9\1-H4>"<*@\)FX@1]=C>_OZ3FG#MVA,S<3;RY;W]_O
MZ 3%IF]Q\VUS;>_OQGQ0!/"9@W&^US;?KCXG$P8I;0F(1/EX9F8OMS_OQD1;
MP$V_T[FU]N8ZWG0"08DGEOM?;J>/& @6M.W#?;EUSX@`K_8H@D';<VY<_?[R
M"#'A-S_IWVY<_?[P$"UIVX;[<NN?$&QX;>7 7VY=3]VP)!!BQ,Q^G?;ES]_N
M!!BQ,Q^G?;ES]_O ;%K>7Z1RY=3]X#>T"=N Y<NI^[8$@S'AF8X&^W+GUQ S
\[M@2+QX9VX>G+GUQ 3'A%XX
M;[<NOK> CD-@=ARY=?6\Z9 \!-IVWY[=?D+ '^R;3MZ7VZ^MVG;PG:?Z[=?E
("2/";C^7+GU-R1<6W_IRY_P!^
M)*9T^&9C<;[<NOK<"4"2/"3(\O3ESZF]2K20+$C<>6^V]NOK>K5HD,4I2KD"
ME*4`I2E *4I0"E*4`I2E`*4I0"E*4 I2E *4I0"E*4 I2E *4I0"I3\P]:BI
M3\P]: ]T@Z!X>''Z<N?OSOZ1)'A!F\18[7-M[_WGQ8(39/@WX$;[<NOSF!,>
M$&;Q&^US;?J\^+)E@!,6F;W'S;7-M[^_&?% $Q:9O<;[7-M_Y\9\07BVJ8)D
M;[7-M^N-Y X;S!VWY[=3SO `3/"9OMOM<VZYS=$G:9,[;[<N?OSN`F+3/+TY
M<_?GX@$Q:9Y;[<N?OQGQ`8R2K8&?]OIRY]3>!J,6F0.&^W+GU-\@D&/#,QPW
#?;ESZF^02#^D'
'
M[>E]NOK=!@>$?4>G+KZW"C%-X\,[3;?Y>7/KCB2!&H#8$^U]NOSX&9O[U'E(
M&]7X2MGN%I@2;_VY>O6\=\@?I587ZZ_GXP/(>=34\*)L]>]!'R&PO?\`IU]Y
MQ[Q84-38CU_IZ??[P$R;`\/ISK+3X;))MY>G+K\Q2(/9*9T^$&8X;[<NOK<E
M,Z?#,QN-]N77UOYL"4Q )G;ZCEU^?1*9T^&9C<;[<NOK>KV+$1X1X9D3<;[<
MNOK>M5D"0+ [;CTN;=?6]:K1*OF*4I5@*4I0"E*4`I2E`*4I0"E*4 JJG,,.
MK#O/H[U:&G%-*T,K4=0,& !*H-I$BQ\C5JM?DX4G"OH6AQ"DXO$2%H*9!=4H
M$3N""+BU4DWQ)+VDI*K/3"9IA,=W7<+</>H4MO6TM&I(TR1J`D>--^,\C5I"
MPXDD!0`)'B21L8X^F_'>M"[D.(<R[ L]XV'L+EZ\.E06H /$-Z56%P"@F^Q@
M@2+9)R5\8[#NK;PRT-/NNZUJUQJ=4L0@HL8(\25)OOJ"0#C'+ENI1Z?3[EW&
M/DS?4KF<5DV)QV-S<MM-,EPJ2E]4A3H5ATH"#;Y HZIDW3MQJXYDR_W@'&FL
M,E <;4V_LXPA`2"T@1\ITG]0'\15CQE99N_5\Z[V(X5U-L'VU8A>'"OXJ$)6
@
MXE24NI4MPZ?"H][/ZKB)XT9[.8@8/X5U;$JP@8.(!45H'<ALM@6E&J5W,2?E
MGQ"JS96OT;]T3P1OF=$5@.);A4D$@Z3%HX[#?;C?R->>(Q3.%".]*@7"4H"4
M%140DJ(``)V2?M6MQV5O8A#'=,L(",(M@LI=*4@J4V0`=!!2`@V*8-@1!->.
U-.('RB-UB2 )N8&U6EDR*TH][$*,?-F^I6A?R
M3$NHQJ4K:0IXD]\"=;P+@6$+!!$!(+8D+L=@)2<6>S[C+C3H4V7FT8=*'%F5
M-A+JEN)20D0DI5I ``($$ 4\7)=<`X8]3H*\W'VVG&4+5"GEZ$"-SI*H^R3]
MJYU79[%+P3R G#-K6^'%-@I7WH 4(6X6_%=4C4A1E,DDF4V#DN)9S+#XEONL
M26#J2_B'#WT!DMAN=)L5>,F=U'P^<>-DV]3H3P1ZFX.*9&-3A"5!Y39=`T&"
MD$ WB+$BTS<5[I^8>M:YP*5VBPQ"'-*,(]J7H.D%2VX&K:?";;VK8CYAZUM&
M3=WY%&JH]D#8:#%N'IRZG[^H3-M.]XC?:YMU];^24V'A\MQ_QY=?GU F+3/+
M?;ES]^,^*K)$2=IDSMOMRY^_.X"8M,\M]N7/WXSX@$Q:9Y;[<N?OQGQ )BTS
MRWVY<_?C/B@=]]_8!,6F>6^W+G[\9\0"8M,\M]N7/WXSX@$Q:9Y;[<N?OQGQ
M`)BTSRWVY<_?C/B#OOO[8!*I$ D?VY=3SN 5;PD[>7+EU/.^0!,6F8^NW+GU
M-P3,>$&8X;[<NOK>1N8@*MX2=O+ERZGG< JTCR\N7+J>=Y _V@[';TY=?6[3
()
MDCPFXZX=?D1OU/,M%>GPG41(,<ARZ_/BILITDIL;BK-@`HBT3?Z<N?7&NI6H
)-@$DG?;TY=?F$IN/">
M!V].7/KCDE.QTVL=O3EU^:-@\VPE+L$2#$6_I7M$@#3O'#?;EU^?%P:"E>D;
M^7+TY]<?4"8\,S'Z?^/^WK\GU)1($QX>'$6X<N?7&M5A*=O"-ANG_CRZ_->I

M"@8)CSVY]<?D,7XOQY=1'##$ZDZNU?P^Y]++\-9(X99)9%<5?+Z_8M4K'#.#
M%J6EH'4E13&\QQ!VJ\<LQ:6%/+:*&TB2I=K>=>[_`,UZ.X>-YHI>UI/X/<^<
M<))TT4Z5"5!20H;$34UZ2::M%12E*D"E*4 I2M3AG,0_JQCF8*:0,2MGN5)1
MW1"72V!MJDP/U?,=H\-4E/A=$I6;:E:,Y^\&&'1@VS\6A#F%'?GQ)4MM'C\/
MA/\`%28&KC?:?-_M/W"7)P<J;0HK'>VU)#^H`QM+! /DJ8$16;U.)<W_`"6\
M.70Z"E:'$9Z_A?C4_#)<>PX6ZM"GH0$(::4H)4$2;N")%[F185Y_OS&-M+;[
MA*WE8E:&5.* 2M(Q*6B#IN("T@&YD&18:H>JQIM=/8/#D=%2N?\`WGF/^(OA
M>Y\&W<ZD_+KC7MJ^7QZIT_\`XXUWKTQV*QZ<TQ&&:?\`X>AE2$-!"78/>Z@@
MK.E2I0"9MI!@2),_F(ULGSH>&S>4KDW,YS1>$9Q"%MI.(P_A*2V&FEG#EWQ:
MCJ"]0F_AT$3>];3!XUQEC$,8O$.?%-K6E3KJ-;39"$KDJ2E TPH'Q:23(!J(
M:F$G5,/&T;BE<WBL?F.&PZSW[@2C#XC%M*=;2''$MA&E+@@``E2K`!4:=C-8
MXO-,P1AL:ZUB$I46,8X@*;!#?<.!`T[&X))U$WB!%C#U45>SV)\-G34K1X_-
M7,NSEQW$/:<L9P[9>3IG05J<`78:C="4P/\`5/"JN%SC'8?%/-8T*6Z7%!#4
MI"6RKX?2@D"^DO1J' $P; 2]3"+I]]_1D+&V=-4C<;?6M,<[<#CB#A6Y;0V#
M#\CO5NJ:";#Y=23)W _3,BCF<XAEM6K!MAUI[NGE*=466_"E8)4$$Q"A<I $
M*DBTV>?'5W\F1P2-^A/R^'R-Q_QY=?GU`VMY</3ES]^,^+G,9G[V%P+^)1A6
M^Z'?ML+4YJ)=:2LG4B `F6U;*)VL)->W[SQC.5YP\II.K -2V78*EJ#"%GO
MD:9E7Z3!GZJR>>%UWU+\#JS>@3%IGEOMRY^_&?$`F+3/+?;ES]^,^+5.+=RH
M!3F.<QBG=*6V7TH2HJ4M" 04($)E8U65\PCR75?[0/8</H<P#9<PS+SKX#QT
M_P`-#2P$DH\4]ZG<"+[_`*CS0C^K;OV#@;Y&^ F+3,</3ES]^,W!,QX09CAO
MMRZ^M]0WFN)=Q'P3>!9..2I7>)4\0U"0T20ONR28=1^GSY:O)KM '\&]B6L*
MG3J:2PA:E:W2MM#A\*4*,A*N&K8DP+EX^/J.!F\"9_2#L=O3EU];QID?)N)V
M]+[=?GFAVEE"L8MA0P86"C00'%)^$[\Z@01]B.' '7;<S?&-8MK JR]@XUQ2
M(2,4>[TJ2XH'5W<S_"5;3Q%S)HM1C?)APD;K3MX3M/\`7;K\@F8\!,CKAU^?
M'!8AO'8/#XIM"PV^TEQ(4+PH`B=_/^_'F7<\Q:49H^'%I:7AGEX/O&(0A38\
M)2LIAW6F7 ),`'<&\SS1@DWYD*#9U@3,>$W_`*<N?4W@```D"(!DCTN;=?6^
MFPV:/AC"ZVT/+Q&8/X?4HA 2A"W#-DF2$MQ''CN9U.([2XE62AYAF"</!>6X

MLK&L%(;4D)/RDD.@$$@`S<@2<DYN^<K5B?AFN^#Z&0SWJQ!4I*1JU("D_-,:
M=H/&M5GQ[^SZ%'"1MQURK-*3(\)X';TY<ZTK6=N/.XM#&7ON)8UA"PA4$H6$
@+<#>I90)_A\"DZ@O3%XU$$55Z
MC'U)\.70WB4[>$^=QZ<NOR2M)($WM-O0>77YT+.?./-8,*P:4.XMMAQI"7=1
M6'%0K3X024)A2O*?*YC"9ZK&-LAK+G0O$.)&&+NMM"PI)7=11,A*53I"A*DP
]Z64/O/9+@<3B/XJW<
M.VZXK3$J*4DG;G[_`'MLV<(%Q8[<_0]>^L7Q1315JF>@386\OT_\>77Y\/6O
M<
M5EJL7BX)X[JTU?N-<&3P\L9U=-/X%U[.L.<"EI#+ZD\%]U //KWF_*J03F3V
M)""0R@J3*;$GZ=?GJ^T>*++"QQ @$#^G7YYC+$G&9>._25=^LA*HX>>WG^9]
M?CLWH#2Z##^>AD<>';UMU;V3V5[,]]^F=3GQRT_"O6Z<_;Y]#;=G,&2$'22J
MT^&_7WWYWWW:IQ3.4C"@R7#H(!\SOMY?G[T\KR_,\(G_`,? X=X#8J<BWG&_
M7WK9VUC#CV3CGF5+`*PTR(2F>-]SUZ_%>C_13U?I7%"4XN-WM)-M+?DK:]]'
MF9<65)Y)Q:2]Q22-*0!4TI7[:E1YPI2E`*4I0"M&_C,%A\RQ>(<R5P8C"M%Y
MS%=VT5:(4 0=6JX00/>*WE:_&99\7^\/XVCXO"##?+.B-?BWO\^W*LLT9-+A
M[[9:#2YGCB<)E#J'6E-89#;Q+^(<1W8"^Z<!5K\[R#8Q>2"1.+[>2N)PN.?Q
M6$^";0IE@*4V&1(*2 8OX9&F8MM(FL7>SX.(>=8=:;"P0ALLG2W(9 C2I)$=
MS(((@D>5_3$X'&AG+$,/I6[AWRI;SJ2H`=VXG;4";J 'B)V))N3@XSMW#N^V
M7M=3'-<+E.-2ZWB\4PVTRL+Q2"6X)4 $E94"4DBP((,&QVJTXYE02REQ>" Q
=94ZC4!I9#,*`(U>$$V(
MN1Y7JNY1BF\6RWAPI8=<;=Q+RDIT>%]3Q"?'J3=2N"K%(D7-'QQ;EP<_?WV_
M8/5>UFZ;Q^#>[GNL6POO]7=:7 >\T[Z?..,;55&+R3,G%8<8C+\4MX!);UH6
M5A,J`CC%SRO5=>1.JP^6,)QR@W@@R%)TJA?=E)F H"^G]6J+1!DG)K(NZ8::
M^)GNVL(U.C?N%E<[_JF.7.KN69NG%5]OW(J"\RT[BLNP^(=Q6)5AF'&R,.7W
M5(23("],S(WF#&TQ$&LA^[6-.5CX1OO$'3A!I&I)F81Q&_#SJJ_D[KF+<?:Q
M26BX_P!Z5!M6M(T(3"5!0'Z)A04DF)!B[$9<_B<Z6ZI:480MX<GPRI:VW%K
M!FT'3,@R#:-Z7D3?J^?R[K[D>KU,FOW"VSADM?NU+3KNO#A&@)6X+2CS4+"1
M>O1+^4N]^O5A)?=.%>*@D%QP2G0J?F.\`\-K&JO[A6G!(PJ,6D(7@T8/$%34
ME:$A0E'B\)\2M]0VM:[$]GF\24A3ZN[#CI*)6G4VZH*6DE*DS<&#M!@I)$U7
M_*EM!=]_0GU>I>>QV7X53[SN(80MKNT/JD:D!1\`5Q E1B;7)\Z+_=JG,5WG
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[:_CG_`&&XU5EG
M#-Y$RL8/#-Y:A6,;"@RV$ OH(L=('B$:O,;[\:KJ\F>P>99>PTP&\)A%)=.&
M+:>[2O4%)!V2J4$F8$P3/&MA.SQPS2DKQ?>*4MI95H.Z'U/<5$F=<7)-IO63
M60K1@L9A58I*D/8-.":(:@MH2%@%7B\1\=XT[;"J\&1I+@2^'P^)+E'J7'G>
MSJ<`XPZG+E83"+2'&@E"D,K4K2"I(!T^(FYY\YL8E>4%O%MXLX(H3H7BDNE$
M`F-)6#YPF)\AOQUKF1:]!&)A3:WG$>"VI;Z7DS>X!0`1Q'$5@.SR$XAU[OB=
M3X>1)6HH'>AU:8U:;J2-DB..KC;AR\E%=KM?WM%QZFU9<R>7%,JP4X) 2X4*
M1_ "0H"8^4 %8CF?,SY,.9-A7&L/A&L(E?\`#Q"&V@A((<(;#B;09F+22"!?
M4 JF<F<%V\6IM8&)`4E)G^*Z'.!FVF+$&\@I,5X8?L^O#M!!Q6M16A;BBA1U
M:'U/)B5$_J4#)),@\+G'+>T5WW\A<>IN&,9D^&:?#.(P+3>'*0_I6A(;(TH&
MN!X3X=(GRCUR/[K4SA,.L8-33J/_`!FU!.E:0@`Z1%QH)VX'R-]0C(EZ,,VY
MBDE&$"$8<):((0EQM4*,^)1[I(D0!),&T'<B=6K#A..4&V\4<0I!2J#+Q=@`
M* GAX@K8$ &95EK](]7J7V\9@'L'@<3I99;?*7&0Z$I45K!-O]YU';S.\F:"
M\%DZLS4M]_#*<PK!'PRNZ 8:TP9@!6G2HV42GQ;;1Z?N0IP6!80^@'#X8X5:
ME-!06VH)"B$FP4= B9 DR#7AF.2/NX#%,M/)<0!B'6&@B%EUQ*P05DP1+BHL
M.%[&9FI\.\+J@N&^9L"YE6);2LKP3J'R5 RE0<-FR>?S!'U XU@QB<H1A"EI
M6#1@60AT+2IL,IE9@V-O$G>!?8D@Q0Q638E6+P[P5WN(7B$NON)0$M!(4T2
M"HJ!(91'S7U3$@C)S)G\"WA'L*'<1B,,RPTV$MI(!0EQ)6H*6F00Z; R#&XF
MH<\B;]3OO^Q4:YEPOY,^C'N.LX93:4A>(4MM*N^0E"%A=@=:0%ICUYB;K;&#
M6C"NLL,+#2/_`!UI2DZ$E(^0QL1Y</?1L=ED#+FV,0ZD.*"0\IM%R!ANX@*/
M"ZE D<=N-;YM*PVD.E*G`/$4I@$\2!>/N:OA4Y;Y(I$2<5^EF;6 PJ#AU#"M
M:F!#)#?^6# A-K6,6_N_=V#6RXRK!,*:>6%NH+(*5J.DR1IN=KG^ZE;>&F4X
MF>C&&9PZ`EEAMI/AD(; %@@#9/D`/0#ZYI0D7">?R^F]NI^_A2I4:V0L]XV,
M>1N/3EU^:XL-@/2II$;5*5$"O7!9@Q@\2IU>'>=6!I2$I%HXSY7/6_E2HE'B
#>'<22>(_O]NC<RW"CO6,/IE+: -IO]O*/?ZB`=P#633K
MN'=[QH()F=*TV_GU]_G_`,1^CM5KM$L&F:M.]]KV[9W:+48\>7BR([S!,%O"
M@:3.^V^_+K\\3F&)^,S?%OVTZ]"2.(3;\R?K]3[NY]FSB.[2ZTRG:6T"?<'K
MWUS38:0$@SYGSKP/PE^&-7Z-U4]5JJMJDD[\]_X^9U>D=?CSP6/&9TI2OT$\
>3
M&Y;IUVO]%HRHYU&+SGX=SORI!88*5+3AU*+JY2G4`$GBATR!`2MLE)N*M.OX
MUOL^AQ(Q9Q*HE92-:;[D!LVX?Y<W$A-R-Q2J+#)7ZSY$N:Z&CP&+S#$X_#'$
M!]"58="W6DLE"$+*`2%%:+W/Z5SL"FRC5/%N9K^\G7FD/J?;:>0$EJ&VT%UN
M"A6DZE%L%4>.XC3^FNHI4/ W'A<F%-)W1H6\1F9?RYMY;LJ&IT,M$2),%:EM
MQ\H$C^&1XH!E(#"OYHZO!I<7B4E3Z?B9PZ4A![M96A)(NC4$`*CC9:IMOJ5*
MPN]Y,<:Z'(Y6K-L.VY\.P[\0MM"CAW,/W;-L*B"#``/>)"=(58381(RQSF;/
MY ZV\7RAYIY*2RRI;JSI`0A8+:2 27+A";!-[R>LI6:TKX7'B9;Q-[HTN-3C
MEYXAO#J=89<#25OM,I) "7R1J4DC<(WVU<-5\0,RQ>(RG$H#>'?5@G"\76%*
M2A2BT2F-0(,@[G@:WE*T\&[MOMV5X_8<S@CG+&+P^'"$I:+[REJ+:DI7+[A7
M(TJCPZ2F5)NK=6PQ[/OX\+P^$47]+"&FG65LZ4-(^'0J=6D'7K($$FQ-N(ZB
ML4MH0I:DH2DK.I1 )[?QT)>1.]C0]SC/W[^]?AOX?>_
M#:I/>]S\FG1$:>\_B:IG3RM57+'<R8R?"LSC48=#;*'73AOXS1T*U)0C1X@"
M&Q.E5E*N8E/54J?R^]J77YCQ-JHY\8W-4=V'$/D.K92TH,22GOU!:EP/`2UH
M)F+DP 00-ADI>3E>&8Q2WUXIMI/?*>29U7!&J %00;WD09,@G84J\,3C*W*R
MKDFJH4I2MBHJ(Y 7^U34$3_/RH""F1$#^7.D"Y(^D>M8J!,S?H\NOS,03;J_
"U(C:@)0W
MWCB4)'B4J!;B:^J*[(Y2G%9<#AV0VT%(>$G^*O2-(/N:^6-N+:=0X@Z5H4%)
)P[
M>,5.'PI7X4X=G4XHK5"1O! !PY![I"@"H@P0
M>7F16C;[19PTXI:,P>2I24H)G@G;\UYISW-$OM/C&N]ZTDH0HF2 =ZSAI]7&
M/#Q]_#J6>3$W?";]GLIE[[K"TXUX-8AE+C3*P$.%1-@2?#<7'$_F1V-81C&\
M+B'\2V[B7%IPR>[!A*1=2_KY>=:5':;.4+6L9@Z5+()*H5<;1(M]*\AGV:C#
M.X?X]_NG2HK3J^;5O?>]3X.L_P#:[]W]^PCCQ=#JU9'D>%R/6^P\IQO!_$*<
MV42LPGC%HL-O/GPBM.HZ9T\)J\K.LR6EU*L8X0ZT&EB;*0-A[G[U0K?38<F/
MB\25V4R3C*N%4*4I749BE*4`I2E *4I0"E*4`I2E`*4I0"E*4 I2E *4I0"E
M*4 I2E *4I0"E*4`I2E *4I0"E*4!! (O4 &=A$_SI2I!,;6&] .0WI2@9-1
8ON!2E0":4I0"E*4`I2E *4I0"E*4!__9
`
end

[Robert Aldwinckle]

"Jim Carlock" > wrote in message
...
> This is getting weirder.
>
> I have this thread highlighted in the two newsgroups. And now only
> the xp newsgroup gets the highlighting action. Somehow, OE has
> forgotten how to highlight. LOL

Jim,

The explanation for that is in the References: header.

References: >
>
>
>
>
>
>
>

You replied to the second last Message-ID which was originally only in a
WindowsXP.General thread.

< http://groups.google.com/groups?selm=e4qrjP7FEHA.2512%40TK2MSFTNGP10.phx.gb l&oe=UTF-8&output=gplain >

Then you cross-posted to IE6_OutlookExpress where PA Bear already
had a subthread cross-posted only from the same root Message-ID
< >

< http://groups.google.com/groups?selm=OYeOqYIFEHA.2908%40TK2MSFTNGP09.phx.gb l&oe=UTF-8&output=gplain >

which you probably marked Watched.

The Subject: is identical so OE (and Google Groups) group the two
otherwise *separate* threads (from an IE6_OutlookExpress reader's
perspective). Messages in the new (grouped) thread don't get marked
Watched until you mark the first one (the last Message-ID in the above list).


HTH

Robert
---

[Jim Carlock]

Just trying to figure some things out. The first image is a problem with
Outlook Express. The second, I'm thinking should be displayed inline
with the message, but I'm not sure if I've done this properly, so I'm
doing my best to see if it works.

begin 666 http://www.microcosmotalk.com/images/oe6/Oeatbar2.gif
end

begin 666 http://www.microcosmotalk.com/images/oe6/oesplash.jpg
end

:-)

--
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.


"Jim Carlock" wrote:
I have noticed that when using OllyDbg, the only NEW
library delved into when opening the About window,
is located within sxs.dll. This meaning that msoeres.dll
is previously loaded upon startup of msimn.exe.

I've searched the registry for "5.00.0000.0000" but that
turns up nothing, and I'm thinking that since it is Unicode
within the Library, msoeres.dll, that it could be Unicode
format within the registry and that maybe the Find button
doesn't do Unicode to ASCII translations.

I finally got my splash screen captured. Forgot that I
could use the PrtScrn key to capture the desktop screen.
Larry Sirflatend in the VB newsgroup reminded me
that there's been a screen capture key with Windows,
and it's been around since Windows 98 I think. A quick
search on Google confirmed it. The attached oesplash
file IS a JPG file. Sometimes OE seems to display JPG
and I'm wondering if it does the same for JFIF.

That file was saved as a JPG and I renamed the extension
to JFIF. They seem to have the same internal format and
I'm puzzled and wondering if there is a difference. Most of
the Microsoft apps don't seem to care if the extension is
jpg or jfif. So I'm wondering if someone has a patent on
the jfif standard and the jpg standard is a public domain
thing?

--
Jim Carlock

"Robert Aldwinckle" replied in response to Jim:
> Did you try any of the FileMon or RegMon tracing that I
> suggested? I just did it again. This time I left large enough pauses
> in the procedure that they could be correlated to breaks in the
> timestamp sequence. I again noticed something that I didn't tell
> you about before because it seems so strange: oeimport.dll is
> being accessed each time I type the A (e.g. after holding the
> Help menu open for about 3 seconds).

> Actually when I look at the list of modules that Help, About
> makes I can see that oeimport.dll is one of only 3 which do
> not have their Full Path listed.


"Jim Carlock" previously commented:
I'm getting full path information on the oeimport.dll and other
calls.

The way the calls are going are as follows, these are the file reads
and opens as displayed through ntfilmon.exe. I turned off the
file writes, as I don't think they apply. I've not used the registry
monitor yet.

win\sys\shell32.dll
win\sys\acctres.dll
win\winsxs\{guid}\comctl32.dll
Then there's a bunch of looking for a csapi3t1.dll and it seems to
give up when it can't find it. (weird)
pf\cf\system\directdb.dll
win\sys\inetcomm.dll
win\sys\inetres.dll
Then it looks for mapi32.dll, doesn't find it in the OE folder, but
finds it in the Windows\System32 folder...
win\sys\mapi32.dll
Then it tries to open mapi32.dll in OE folder once again, but
resolves again to...
win\sys\mapi32.dll
win\sys\mshtml.dll
win\sys\msident.dll
pf\oe\msoe.dll
win\sys\msoeacct.dll
pf\oe\msoeres.dll
win\sys\msoert2.dll
pf\oe\oeimport.dll

After the initial loading of the About box, the msoeres.dll doesn't
appear any more unless you shut down oe and restart it. Which
I think would mean that the information is put into memory and
is read from memory after that. I'm only guessing, and that's
about all I can do.

> Please try the FileMon test and see if you are getting an access
> to msoeres.dll as you suspect or oeimport.dll as I see.
>
> Then tell us if oeimport.dll that is being found is the right one
> and if not [1] if it has all the pieces that you need to explain
> your symptom.

I see access to msoeres.dll in the PF\OE folder. Then access to
msoert2.dll in the win\sys folder. And then two queries to the
oeimport.dll, which result in 8 file operations. When looking at
the exported functions inside of msoert2.dll I see there is one
that is used to center a dialog, named: CenterDialog <g>.
I'd bet a dollar that one of the calls to msoert2.dll is the
CenterDialog. There are two other routines inside that file that
display or have something to do with instantiating a messagebox.

These are the strings inside of my oeimport.dll:
CompanyName: Microsoft Corporation
FileDescription: Outlook Express Mail Import & Export
FileVersion: 6.00.2800.1106
InternalName: OEIMPORT
LegalCopyright: Microsoft Corporation. All rights reserved.
OriginalFilename: OEIMPORT.DLL
ProductName: Microsoft Windows Operating System
ProductVersion: 6.00.2800.1106
VarFileInfo: Translation

The functions exported by OEIMPORT.DLL, copy and paste it
to notepad:

ordinal hint RVA name
5 0 000041F8 DllCanUnloadNow
6 1 00004FEA DllGetClassObject
7 2 00004233 DllRegisterServer
8 3 00004247 DllUnregisterServer
3 4 00004C5B ExportMessages
2 5 00006661 PerformImport
4 6 00006831 PerformMigration

I wonder if there's a way to determine which functions are being
called.

Also, one other thing I found out about the msoeres.dll file:
It doesn't have any functions that are imported or exported, which
goes along with my belief that that particular file is just a file full
of icons, bitmaps, and such, no operational matter in it at all. I
could be wrong, who knows for sure?

--
Jim Carlock

-------------------------------------------------------
"Robert Aldwinckle" also typed up the following stuff:
-------------------------------------------------------
is being fetched from somewhere internally (perhaps that is the
same source that msinfo32 /category SWEnvLoadedModules
uses; notice that oeimport.dll is not present there either.) So
that might explain why I don't see msoeres.dll fetched but then
unless those strings that you are attributing to msoeres.dll are
pre-fetched and saved when OE is first opened I could also make
a case that they are being found in oeimport.dll and taken from
there instead. (My oeimport.dll does not have the Copyright string
that your version is displaying but it does have all the necessary
pieces that my Help About displays.)

[1] Note: FileMon shows the full path of the files being operated on.

Robert
---

[Robert Aldwinckle]

"Jim Carlock" > wrote in message
...
> Just trying to figure some things out. The first image is a problem with
> Outlook Express. The second, I'm thinking should be displayed inline
> with the message, but I'm not sure if I've done this properly, so I'm
> doing my best to see if it works.

Sort of. I managed to download based on your names. ;)

<message source>
begin 666 http://www.microcosmotalk.com/images/oe6/Oeatbar2.gif
end

begin 666 http://www.microcosmotalk.com/images/oe6/oesplash.jpg
end
</message source>


Is that an animated .gif? Perhaps the Views bar is in a line which
is too narrow? If you are using Large buttons in your Toolbar
try dragging the Views bar up to that level. You might have to get rid
of some rarely used buttons and learn some keyboard shortcuts
to make room for it though... ;)


HTH

Robert
---

[Robert Aldwinckle]

"Jim Carlock" > wrote in message
...
> <g>
>
> This message is for Robert Aldwinckle as well. I'm sending the
> thread to the PA Bear newsgroup as well. ;-)
>
> I've tried using OllyDbg to step through it. I can't slow down my
> system enough to read the splash, and for some reason I can get
> OllyDbg to stop right after the Splash is displayed, but the splash
> at that point is unreadable (because of OllyDbg's control over it).


Remember I said that I had to press Alt-PrintScrn in anticipation of it
even with both FileMon and RegMon running to try to slow it down?

Actually, I'm not sure how useful this is going to be for you anyway
because there isn't any version information on it apart from the OE6 logo.
It would probably be enough for you to guess that you were seeing
the real thing if you are seeing a flash of blue.


(Sorry I was slow posting this. I see now that you have captured it.)



>
> Some comments, so far, the best I can tell right at the moment
> is the version number is being read from msoeres.dll. I've looked
> through the msoe.dll for the version string but they default to a
> IMproper string (ie, not the 5.00.0000.0000 string). ;-)
>
> And I'm not sure if you'd like me to post all the gorey details
> about the different strings that are contained within the other
> files, so I'll start off by stating, the following:
>
> msoe.dll <- is one of the main files
> msimn.exe <- is thart starting stub
> msoeres.dll <- is the resource file that holds icons (and version info ?)
> This file is read initially and loaded at start up. This file is also read
> when doing a version lookup (at least on my system it is).

You mean instead of seeing oeimport.dll accessed when you press A
a few seconds after pressing Alt-H?

Here's a better FileMon filter which may help compare differences there.
Include: msimn*READ
Highlight: OE

What I missed before is that oeimport.dll is always accessed when
Alt-H,A is issued but the first time both msoeres.dll and oeimport.dll
are accessed. mapi32.dll is also read the same way and is the only
other module in the Help,About list which exists but which doesn't have
the its Full Path listed. (csapi3t1.dll is the third module which doesn't
have its Full Path listed but it doesn't exist.) There are two reads per
module. My guess is that they will just be reading them to get the module
versions.

The trace is relatively small so FWIW here it is
< second use of Help, About >
10:01:20 msimn.exe:476 IRP_MJ_READ* D:\WINDOWS\system32\config\software SUCCESS Offset: 7405568 Length: 4096
10:01:20 msimn.exe:476 IRP_MJ_READ* D:\Program Files\Outlook Express\msimn.exe SUCCESS Offset: 7680 Length: 16384
10:01:20 msimn.exe:476 IRP_MJ_READ* D:\WINDOWS\system32\mapi32.dll SUCCESS Offset: 32768 Length: 32768
10:01:20 msimn.exe:476 IRP_MJ_READ* D:\WINDOWS\system32\mapi32.dll SUCCESS Offset: 65536 Length: 32768
10:01:20 msimn.exe:476 IRP_MJ_READ* D:\$Mft SUCCESS Offset: 27074560 Length: 4096
10:01:20 msimn.exe:476 IRP_MJ_READ* D:\Program Files\Outlook Express\oeimport.dll SUCCESS Offset: 0 Length: 32768
10:01:20 msimn.exe:476 IRP_MJ_READ* D:\Program Files\Outlook Express\oeimport.dll SUCCESS Offset: 61440 Length: 32768
10:01:20 msimn.exe:476 IRP_MJ_READ* D:\Program Files\Common Files\System\wab32.dll SUCCESS Offset: 433152 Length: 12800

</ second use of Help, About >

(more...)

>
> I created a new MS IEADK (these acronyms are killing me!) and
> reinstalled using the new IEAKD build, but it didn't seem to over-
> write anything. Right now I've got the OLD msoeres.dll (as it
> doesn't export anything but icons (and possibly a version number)),
> in use. It does NOT seem to affect any of the operations of OE.
> There are approx. 59 icons in msoeres.dll in 10 different formats,
> and it has the version number of OE as displayed in my About box.
> The About box seems to read from that file, but my first inclination
> is to think that it's grabbing a bitmap or icon. Furthermore, there
> seem to be numerous .gif89 files inside of msoeres.dll, as well as
> Adobe 4.0 images, there is a reference to: NPhotoshop 3.0, I'm
> not quite sure what that is at the moment, but I think it might be
> worth finding, and other things with that tag inside of them all
> seem to be some sort of .jpg images, which is really really
> interesting, as there is JFIF in those files and if the image is renamed
> from jpg, to jfif, it reads 100% accurately (in IE as well as other
> graphics programs). If you're a graphic image specialist, you I'd
> appreciate a comment, because as you can tell I don't have a
> very broad knowledge of what the difference is between jfif and
> jpg (there appears to be NO difference).
>
> Some interesting strings inside of msoe.dll:
>
> ComboBox, cmdDownload, cmdConnect, btnContinue
> btnTrust, btnCert, btnOpen, Hhotmail
>
> It almost looks like a VB application with function names as those
> listed above. Either that, or the programmers took a fancy for the
> Hungarian notation that VB programmers use. In fact, I'm willing
> to bet that parts of msoe.dll were created with an offshoot brand
> of VB5.

Possibly! Turn on your script debugger and run this from the Address bar

< res://%ProgramFiles%\Outlook%20Express\msoeres.dll/frntpage.htm >

This would be another possible difference perhaps worth investigating.
E.g., try overriding FrontPagePath with About:Blank to avoid that script.

BTW using the res: protocol prefix would be a way to check out those
images that you noticed.


>
> But what do I know? Absolutely nothing! I'm still at the same
> point I started at. <g>


Do you have another standard version installed somewhere that you can
compare traces with? My guess is still that oeimport.dll has something
to do with the difference but I'm less certain what it is. Related to it, there
are some registry values which deal with "migration". E.g. you could use
a RegMon filter of msimn*mig to compare differences there.


Good luck

Robert
---

[Robert Aldwinckle]

> I've searched the registry for "5.00.0000.0000" but that
> turns up nothing, and I'm thinking that since it is Unicode
> within the Library, msoeres.dll, that it could be Unicode
> format within the registry and that maybe the Find button
> doesn't do Unicode to ASCII translations.

I think your other guess about msoeres.dll being accessed
at startup and bits from it read into storage is more likely.
Remember that I mentioned that I can see both that and your
Copyright string in that module. Unfortunately, the Hallmark
copyright is in the same place, otherwise we might get a clue
from the read offsets the FileMon reports. Use Notepad
and F3 for C o p y r i g h t to see both sets of strings.

BTW this may be my last post on this for a while.


Good luck

Robert
---


"Jim Carlock" > wrote in message
...
> I have noticed that when using OllyDbg, the only NEW
> library delved into when opening the About window,
> is located within sxs.dll. This meaning that msoeres.dll
> is previously loaded upon startup of msimn.exe.
>
> I've searched the registry for "5.00.0000.0000" but that
> turns up nothing, and I'm thinking that since it is Unicode
> within the Library, msoeres.dll, that it could be Unicode
> format within the registry and that maybe the Find button
> doesn't do Unicode to ASCII translations.
>
> I finally got my splash screen captured. Forgot that I
> could use the PrtScrn key to capture the desktop screen.
> Larry Sirflatend in the VB newsgroup reminded me
> that there's been a screen capture key with Windows,
> and it's been around since Windows 98 I think. A quick
> search on Google confirmed it. The attached oesplash
> file IS a JPG file. Sometimes OE seems to display JPG
> and I'm wondering if it does the same for JFIF.
>
> That file was saved as a JPG and I renamed the extension
> to JFIF. They seem to have the same internal format and
> I'm puzzled and wondering if there is a difference. Most of
> the Microsoft apps don't seem to care if the extension is
> jpg or jfif. So I'm wondering if someone has a patent on
> the jfif standard and the jpg standard is a public domain
> thing?
>
> --
> Jim Carlock
>
> "Robert Aldwinckle" replied in response to Jim:
> > Did you try any of the FileMon or RegMon tracing that I
> > suggested? I just did it again. This time I left large enough pauses
> > in the procedure that they could be correlated to breaks in the
> > timestamp sequence. I again noticed something that I didn't tell
> > you about before because it seems so strange: oeimport.dll is
> > being accessed each time I type the A (e.g. after holding the
> > Help menu open for about 3 seconds).
>
> > Actually when I look at the list of modules that Help, About
> > makes I can see that oeimport.dll is one of only 3 which do
> > not have their Full Path listed.
>
>
> "Jim Carlock" previously commented:
> I'm getting full path information on the oeimport.dll and other
> calls.
>
> The way the calls are going are as follows, these are the file reads
> and opens as displayed through ntfilmon.exe. I turned off the
> file writes, as I don't think they apply. I've not used the registry
> monitor yet.
>
> win\sys\shell32.dll
> win\sys\acctres.dll
> win\winsxs\{guid}\comctl32.dll
> Then there's a bunch of looking for a csapi3t1.dll and it seems to
> give up when it can't find it. (weird)
> pf\cf\system\directdb.dll
> win\sys\inetcomm.dll
> win\sys\inetres.dll
> Then it looks for mapi32.dll, doesn't find it in the OE folder, but
> finds it in the Windows\System32 folder...
> win\sys\mapi32.dll
> Then it tries to open mapi32.dll in OE folder once again, but
> resolves again to...
> win\sys\mapi32.dll
> win\sys\mshtml.dll
> win\sys\msident.dll
> pf\oe\msoe.dll
> win\sys\msoeacct.dll
> pf\oe\msoeres.dll
> win\sys\msoert2.dll
> pf\oe\oeimport.dll
>
> After the initial loading of the About box, the msoeres.dll doesn't
> appear any more unless you shut down oe and restart it. Which
> I think would mean that the information is put into memory and
> is read from memory after that. I'm only guessing, and that's
> about all I can do.
>
> > Please try the FileMon test and see if you are getting an access
> > to msoeres.dll as you suspect or oeimport.dll as I see.
> >
> > Then tell us if oeimport.dll that is being found is the right one
> > and if not [1] if it has all the pieces that you need to explain
> > your symptom.
>
> I see access to msoeres.dll in the PF\OE folder. Then access to
> msoert2.dll in the win\sys folder. And then two queries to the
> oeimport.dll, which result in 8 file operations. When looking at
> the exported functions inside of msoert2.dll I see there is one
> that is used to center a dialog, named: CenterDialog <g>.
> I'd bet a dollar that one of the calls to msoert2.dll is the
> CenterDialog. There are two other routines inside that file that
> display or have something to do with instantiating a messagebox.
>
> These are the strings inside of my oeimport.dll:
> CompanyName: Microsoft Corporation
> FileDescription: Outlook Express Mail Import & Export
> FileVersion: 6.00.2800.1106
> InternalName: OEIMPORT
> LegalCopyright: Microsoft Corporation. All rights reserved.
> OriginalFilename: OEIMPORT.DLL
> ProductName: Microsoft Windows Operating System
> ProductVersion: 6.00.2800.1106
> VarFileInfo: Translation
>
> The functions exported by OEIMPORT.DLL, copy and paste it
> to notepad:
>
> ordinal hint RVA name
> 5 0 000041F8 DllCanUnloadNow
> 6 1 00004FEA DllGetClassObject
> 7 2 00004233 DllRegisterServer
> 8 3 00004247 DllUnregisterServer
> 3 4 00004C5B ExportMessages
> 2 5 00006661 PerformImport
> 4 6 00006831 PerformMigration
>
> I wonder if there's a way to determine which functions are being
> called.
>
> Also, one other thing I found out about the msoeres.dll file:
> It doesn't have any functions that are imported or exported, which
> goes along with my belief that that particular file is just a file full
> of icons, bitmaps, and such, no operational matter in it at all. I
> could be wrong, who knows for sure?
>
> --
> Jim Carlock
>
> -------------------------------------------------------
> "Robert Aldwinckle" also typed up the following stuff:
> -------------------------------------------------------
> is being fetched from somewhere internally (perhaps that is the
> same source that msinfo32 /category SWEnvLoadedModules
> uses; notice that oeimport.dll is not present there either.) So
> that might explain why I don't see msoeres.dll fetched but then
> unless those strings that you are attributing to msoeres.dll are
> pre-fetched and saved when OE is first opened I could also make
> a case that they are being found in oeimport.dll and taken from
> there instead. (My oeimport.dll does not have the Copyright string
> that your version is displaying but it does have all the necessary
> pieces that my Help About displays.)
>
> [1] Note: FileMon shows the full path of the files being operated on.
>
> Robert
> ---
>
>
>
>
>
>