Rundll32m is alternative
file for controling your windows.
Program write log about
system rundll32 calls.
This is replacement of
standart rundll32.exe file from Microsoft.
The old file must be renamed
to rundll32w.exe.
next lines will be added
to win.ini :
[Rundll32m]
Showcall=0
SysTick=38508
Dis20s=0
If Showcall=1 then
program ask before every execution,
is posible reject this.
After execution is automaticaly
created c:\rundll32.log file
with this structure:
action time tickcount
command to execute
-------------------------------------------------------------------
Exe 20:19:58 0001AF424
: shell32,Control_RunDLL SYSDM.CPL
Dis 20:20:04 0001B0865
: shell32,Control_RunDLL SYSDM.CPL
Run 20:20:12 0001B2FC1
: shell32,Control_RunDLL SYSDM.CPL
Err 0002 22:03:48 000052FD3
: shell32,Control_RunDLL SYSDM.CPL
Wscriptm is alternative
file for controling your windows.
Program write log about
system Wscript calls.
This is replacement of
standart Wscript.exe file from Microsoft.
The old file must be renamed
to Wscriptw.exe.
next lines will be added
to win.ini :
[Wscriptm]
Showcall=0
SysTick=38508
Dis20s=0
If Showcall=1 then
program ask before every execution,
is posible reject this.
After execution is automaticaly
created c:\Wscript.log file
with this structure:
action time tickcount
command to execute
-------------------------------------------------------------------
Exe 20:19:58 0001AF424
: shell32,Control_RunDLL SYSDM.CPL
Dis 20:20:04 0001B0865
: shell32,Control_RunDLL SYSDM.CPL
Run 20:20:12 0001B2FC1
: shell32,Control_RunDLL SYSDM.CPL
Err 0002 22:03:48 000052FD3
: shell32,Control_RunDLL SYSDM.CPL
Exe - executed by user
Dis - disabled by user
Run - runned automaticaly
Tickcount is value of windows system timer.
Exe means user click Yes
button,
Dis means user click No
button,
Run means automatic execution
without ask user
Err means error during
execution, number is error number.