Deny or restrain installation of applications WM5 - Windows Mobile Development and Hacking General

I want to deny or restrain installation of applications on the fly as an service/process or by making changes in the registry on WM5 devices. Any ideas? The app preferely in C++/C#

CAB files are installed by wceload.exe in the windows directory.
You can overwrite this file with a blank exe, or remove the CAB extension reference to it in registry under HKEY_CLASSES_ROOT.

Deny or restrain inst. of apps
Thanks, yes I've thought about this - but this isn't a very dynamic solution. When a person run a CAB I want to check if app is okay to install from a "List" - then show a popup with a message saying something like "Sorry, you are not allowed to install this application. Please contact your company IT Admin for more info".
Is the .CAB association in HKEY_CLASSES_ROOT linked to wceload - so I could run an app to validate CAB, and if ok execute wceload..?
levenum said:
CAB files are installed by wceload.exe in the windows directory.
You can overwrite this file with a blank exe, or remove the CAB extension reference to it in registry under HKEY_CLASSES_ROOT.
Click to expand...
Click to collapse

Write up a registry entry in HKEY_CLASSES_ROOT to associate .CAB files with your custom file. Then, when the user taps on a CAB file, your program reads it, compares it against its list and, if it's approved, calls WceLoad with the appropriate parameters.
The key would probably look something like this:
HKCR\cabfile\shell\open\command
(default) = "<path to your app>" "%1"
(%1 will be replaced with the path to the CAB file).
Then, if the CAB was approved, call WceLoad with the following parameters:
\windows\wceload.exe "<path to cab file>" /nodelete

Note that some apps, may call wceload.exe directly. I am not sure if Activesync does it, but I know a couple of custom installers that do.
If you really want to secure the device against unothorized software do the following:
Rename wceload.exe to something else like wceload1.exe.
Create you own wceload.exe, but make sure you capture and preserve all command line parameters in case you need to transfer them to the original file for proper installation.
This way you can be sure no one will install anything without your permission.
Olso, keep in mind wceload is used to switch themes as well. (It handles *.tsk files).

Very much..
Thank You all!!

Related

K-JAM CAB Delete Disable tool - Stop CAB files being deleted

I made a little CAB file which contains a reg key to prevent CAB files from being deleted after you install them.
Just run this on your K-JAM and no more CAB files will be deleted.
(Although ironically of course it still deletes this CAB file since the change doesn't take place until after the install finishes and this file is deleted.)
Neat!
I store CAB files in zip files, when I want to install anything, just open it and run from zip. This way my CABs are not deleted either.
I think it's enough if you set the Read Only attribute on the CAB file.
Re: K-JAM CAB Delete Disable tool - Stop CAB files being del
awojtas said:
I made a little CAB file which contains a reg key to prevent CAB files from being deleted after you install them.
Click to expand...
Click to collapse
my solution is CabInstaller program. simply copy it on your wizard, run it and check two options:
[x] Do not delete CAB file
[x] Associate CabInstl with CAB files
from now on, CabInstaller will popup after every CAB file installation attempt, then just click install and that's it!
I've got my cabs on a storage card, and within totalcommander you can
set the properties of the cabs to "read only",
this works like a good workaround for me, some cabs i want to be deleted,
some not..
I agree^^^. I set them to read only before I copy them to the device and they are fine. If you have something like total commander or resco explorer then you can set the Read Only attribute on the device.

AutoRun application from Cab File

I'm creating a CAB file with _setup.xml. Is there a way I can automatically launch an application withing the cab file after or during the install?
Also, is there a way I can get a list of the verbs used in the _setup.xml. I've been unsuccessful here.
Thanks.
You can't launch an app using _setup.xml
Basically what you can do there (sorry I don't have a link to a full list) is to copy files, create shortcuts and add / change registry. This is all that cab installer knows how to do.
If you can code c++ you can add a setup.dll which has 4 functions that are automatically activated:
1 - before installation
2 - after installation
3 - before uninstall
4 - after uninstall
You can use that to do whatever you want.
Thanks for the quick reply. Any links on more info on Setup.DLL?
Can't you just create a process from within the setup dll on the after install message. I have not tried that but I have been able to do just about everything I can think of from a setup dll (ie edit registry, manipulate files, create dialogs draw stuff). If you know the location of what you want to run it should be easy.
I have only created cabs the old way, so to search for that google cabwiz.
I have this document about it (i can't remember where it comes from), log in to get it attached.

Auto install of CAB files

Hi all,
I have a cab file (call it cab1) containing three files to install on a WM5.0 device. These three files are another cab file (call it cab2) and two config files. I drop cab1 onto the device and it executes. This puts cab2 and the two config files into the correct folders that I want. This is all fine
What I need to happen then is for cab2 to auto execute without anymore interaction. How can I add this instruction to cab1?
Dropping cab2 into the startup folder and waiting for the device to soft reset is not an option for me
The whole install needs to happen on the device by sending a single cab file to the device i.e. I cannot use any msi etc to install over ActiveSync
I've created the cabs in VS2005
Thanks for any help
This one is tricky. You need to create a setup.dll for cab1 then have it launch an exe and exit. The exe will wait about a second for th cab installer to complete then launch the installation of cab2.
i believe this is the only way to accomplish what you want with one cab without combining the content of cab1 and cab2 in to a single cab.
Thanks levenum
Combining the cabs is what I would like to do but cab2 is signed so I can't unpack it without breaking it. That's why I went down the road of putting it into another cab with the other files I need to install
Is there a way to add a post-install command to launch cab2 in the setup.dll of cab1(or anywhere else)?
What levenum means is that you can't launch the installation of the second cab from the first one. The reason for this is that only one instance of wceload.exe can be running.
You need to build a setup.dll in the first cab file. The first cab must also have an exe that will install the second cab file. You launch the exe from the setup.dll. The exe must wait until wceload.exe has shut down after installing the first cab before it can install the second one by running createprocess on wceload.exe with the right arguments.
If you don't know how to make the setup.dll, take a look in the Windows Mobile 5.0 SDK. It includes an example on how to do this.
Did you get it?
Øystein

How to convert LNK to EXE? For key remap

I have been trying to get my HW keys remapped on the Q9 for a day now. After picking through the registry, I found a reg key that maps to the button
\HKEY_CURRENT_USER\ControlPanel\Keybd\APP2_Path
It accepts any .exe but I need to point it to a Mortscript file and that won't work. I can't even put a shortcut LNK value in there. Soon as I pop any exe in that field it works. Anybody know how to convert a LNK into an exe to trick this thing? I even tried running Mortscript.exe with the script name as a parameter but no luck. Thanks!
Looks like what I need is a basic applauncher .exe that would read the script/exe parameter from the registry or file. I have experimented some more with this registry key and it won't take anything other then a straight exe. Even quotes around the value breaks everything so I can't pass parameters around.
Mortscript comes with a file called autorun.exe. rename this file to the name of your mortscript, so if your mortscript is named 'myscript.mscr' then rename autorun.exe to 'myscript.exe'. make sure both files are in the same folder. Now when you run 'myscript.exe' it executes 'myscript.mscr'. For more information check mortscript documentation.
joemanb said:
Mortscript comes with a file called autorun.exe. rename this file to the name of your mortscript, so if your mortscript is named 'myscript.mscr' then rename autorun.exe to 'myscript.exe'. make sure both files are in the same folder. Now when you run 'myscript.exe' it executes 'myscript.mscr'. For more information check mortscript documentation.
Click to expand...
Click to collapse
i was so happy to see this fix and tried it. it appears to work about 5 times and then it stops responding. i have to reboot to get it working again. If i click on the script .mscr it works however. so something buggy in the autorun.exe. Any suggestions?
Take a look at http://www.vijay555.com
I think it's VJbrisk.exe or something like that, but I'm not sure...
There's definitely something there that can help you!
ithx i tried vbrisk but it would not install on wm6 smartphone. Any other apps that do the same?
Are your files in the same folder as 'mortscript.exe'? If not, put them there and try it. Make sure you have the lastest mortscript version.
Also, there is an old program called 'Launch Pad' by 'On Hiatus' that was developed for the HPC version of WinCE, and uses PocketC by 'Orbworks' (google both). You can use it to create .EXEs that work like .lnk files.
It works fine on my WM6 Wizard PPC, don't know if it will work on a Smartphone, but it's worth a try if the above doesn't work.
Another thing you could try is to extract the VJbrisk.exe from the cab file and manually transfer it to your device, then see if it works.
Yah they are in the same folder and named the same. I moved it al into the root. It appears to work for a couple hours, then dies and requires reboot. Otherwise it does the trick nicely. Mortscript is great!

[HELP] How to register a dll?

I try to create a program which consists of
.asx files (to show online tv channels),
.lnk files (shorcuts to the .asx files) and
a .dll file which contains only some .ico files (icons of the tv channels).
I added all these files to a cab using WinCE Cab Manager and tried to install it on my ppc. So far so good. The problem occurred when the message “The program can not be installed. Choose another location” appeared during installation, just after the process bar was filled.
Although I have no idea about computer programming, I have created many cab’s with WinCE Cab Manager for skins I have created for several programs. Anyway, I realized that the problem occurred due to the .dll file, since this is the first time I add such a file in a .cab.
I created my .dll file using a .dll from another program which had only icons in it, as well. I deleted them using Restorator 2007 and I had an “empty” .dll sized 4KB. Then I added my icon files using XN Resource Editor.
I searched the Internet to see what might be the problem with the .dll and I found out that I have to “register” my .dll file. I really have no idea what this means but it needs to be done. I also found an option in WinCE Cab Manager for “self-registering” file, but it didn’t work either.
So, the question to you dev guys is how can I register my .dll file, or should I create it from the beginning with another way?
Please help! Thanks in advance!
sorry to repost but it seems that posts keep coming in this forum and this thread is already in the second page and I'm afraid that noone will see it and reply to it. By the way, is there any special sub-forum for such questions?
This may help. I use his instructions to edit existing DLL's
http://www.modaco.com/content/i9x0-...88904/lisbian-taskbars-for-i910/#entry1023568
It will unsign the dll which will probably fail on your custom dll but it should sign it when you are done editing.
NilsP
Many thanks for your suggestion but unfortunately it didn't work for me.
As you said, this is mainly for resigning already signed .dll files.
Any other help will be appreciated. I can attach it here if anypne is willing to help. Or just tell me the way. Thanks!
I deploy a few dll's with my app, without any problem. If the installer complains about the location, what did you specify where it should go?
There are 2 approaches to solve this problem:
1.) If you have a private key to match a certificate in the device's certificate store, sign the .dll and .cab with this private key and it will be installed with elevated privledges, and be successful. To facilitate this you can install the "SDK Certificates" - and sign with the matching private key (you should be able to find these on a search, term "SDKCerts" or similar)
2.) Look for an "Application Unlocker" or other security reduction tool, run it, and you should be able to install the cab. On this note, if you check here, it will give you a more technical overview of the security policies. You want to change 4101 / 0x1005 to "SECROLE_MANAGER" (8) - which tells the system to install it with elevated privledges. Also make sure 4102 / 0x1006 is set to 1 to allow unsigned applications.
6Fg8
I don't believe that is the location I specified that causes the problem because when I deleted the .dll file from the .cab, it was installed properly. How do you create your dll files? With programming or you just edit existing files? If I send you my .ico files, will you be able to create the .dll file for me?
Da_G
Thanks but both approaches seem very complicated for me!
So, will I need Visual Basic in order to do this or is there any easier way? Can anyone sign the dll for me?
angelos_cy said:
6Fg8
How do you create your dll files? With programming or you just edit existing files? If I send you my .ico files, will you be able to create the .dll file for me?
Click to expand...
Click to collapse
Yes with programming, C++ or .net. Never had any issue with signing. I can try to make a dll if you send me the icons (or post them here if they aren't too secret ).
6Fg8 said:
I can try to make a dll if you send me the icons (or post them here if they aren't too secret ).
Click to expand...
Click to collapse
I have sent them to you by pm. They are not secret at all but I will create a "program" (wannabe ) with that dll and I want that program to be a surprise for users of the forum where I'll post it. I may post it on xda too, but it's nothing important.
Many thanks!
angelos_cy said:
The problem occurred when the message “The program can not be installed. Choose another location” appeared during installation, just after the process bar was filled.
Click to expand...
Click to collapse
This happens because you've changed resources in signed file, which changed file checksum and invalidated it's signature, and Windows installer refuses to install file with invalid signature. But it won't refuse to install this file WITHOUT signature at all - so use unsigner (search for it on XDA) to remove signature completely; if you encounter error, try to remove signature from original (unmodified) file, and then change resources in it...
6Fg8
the_ozyrys
Thanks to both of you!
6Fg8 has created and signed the dll for me and it finally worked, but I also tried the_ozyrys' method and it also worked.
So thanks to baniaczek too, since he created the unsigner.exe.
Everything worked fine with the dll. Now the cab is installed properly.
However, I have another problem. Just after the installation of the cab on my ppc, it seems that the device freezes for about a minute. This is propably because my cab contains a lot of shortcuts (.lnk files) that go under Programs folder.
So, I would like to ask for another favour, if it's possible. As I said I intend to give this cab to others too. Since this delay can make them believe that my program has freezed their device, I would like to make the cab restart the device just after installation and after uninstallation as well. I think this is made with the "Setup.dll" which I don't know how to create.
If anyone knows how to do this and has the time for it, could you please create this setup.dll for me. If the cab is needed to do this, just tell me to send it to you.
Thanks in advance!
Anyone? Plzzzzzzz!
If you want to sign .dll or .exe u can use the apps posted in the two posts below
http://forum.xda-developers.com/showthread.php?t=432041
or
http://forum.xda-developers.com/showpost.php?p=3530246&postcount=18
raykisi
Thanks for your answer but 6Fg8 and the_ozyrys already helped me on that.
My question now is how to create a setup.dll in order to make my .cab to prompt the user to restart the device after installation and uninstallation. If anyone can do it for me, I can send you the .cab which I alreday created and you can add the setup.dll with those functions.

Categories

Resources