Correction: Starter wallpaper more secure than I thought

committed to database on March 31, 2009 at 10:21 pm Eastern Standard Time 58 comments digg this

(no, this is not an April Fools)

talkative_fishy Saturday, I posted a little blurb about Windows 7 Starter Edition and how the wallpaper could not be changed. In the article, I mentioned a workaround of simply replacing the img0.jpg file. In haste, I didn’t test it… I mean, what could have gone wrong, right?

It didn’t work at all. Sorry about that. Replacing the image will result in a beautiful black screen, identical to the one you see when you don’t activate your machine and run out of grace time (and time-bomb cheats). Why?

Microsoft was cute enough to embed code within shell32.dll that check if the seal has been tampered. More technically speaking, Windows generates a SHA-256 hash based on the image's contents and compares it to a hard-coded hash – that is BDB1C7176946A5013E57E28B46911BF04AB6DBB9402FA37464F563F502A11677.

The hard-coded nature of this hash strongly suggests that Windows 7 Starter Edition will only ship with one wallpaper and you will like it damnit. What do you think?

  1. Lightning750 March 31, 2009 at 10:37 pm

    Ha! I laugh at all the poor windows 7 netbook users!

  2. WhoCares March 31, 2009 at 10:52 pm

    I’m outraged. No, wait, I’m not. No, wait, I am. No, wait, I’m not.

    Seriously, why would I care about Starter edition? I won’t be able to buy it anyway. It’s only for “developing markets”. Yawn.

  3. random_n March 31, 2009 at 10:59 pm

    I think the entire concept of a purposefully cripped operating system is something Microsoft ought to be embarassed of even considering. It’s one thing to leave out powerful features like Remote Desktop and domain/Group Policy from the “non-network” editions and replace them with something more appropriate like HomeGroup (or Simple File Sharing in the past) and Live Mesh, or allowing equally capable third party software like VNC. It’s another thing entirely to drop baseline OS features that have been present in practically every graphical environment since the dawn of the GUI.

    Severely limited amount of open applications, restricted wallpaper, and I believe they had restricted *screen resolution* in past versions, as well (the only sane restriction was removal of SMB networking, and even that’s a slap in the face).

    In short, this will be an OS nobody wants, and Microsoft is just screwing their OEMs by selling them this.

    Off topic; Rafael, how do you get the logon wallpaper to show up under a Remote Desktop session as shown here: http://www.withinwindows.com/2009/03/15/windows-7-to-officially-support-logon-ui-background-customization/ ? It was mandatory in Windows NT 5.x where the disable wallpaper registry bit didn’t work for the logon account, and seems to have flipped the other way since Vista.

  4. Bryant March 31, 2009 at 11:57 pm

    This isn’t an April Fools joke, apparently.

    Wow.

  5. Quikboy April 1, 2009 at 2:19 am

    Windows 7 Starter edition sounds great if you’re a library, internet cafe, or public elementary school, and want a pretty cheap Windows OS that does the most basic stuff, and doesn’t let users tamper too much with the system. Seriously, Starter provides enough for people that need to use Windows just the basics. I think most average consumers will opt for Home Premium if they know what’s best for them.

  6. Jono April 1, 2009 at 3:10 am

    We need a competition to find a nice picture with a hash collision. Just for the hell of it. (and even though it probably isn’t possible)

  7. Leo Davidson April 1, 2009 at 3:56 am

    I look forward to a large group of people deciding the default image is highly offensive to them, for some irrational reason, and Microsoft having to test & deploy a shell32.dll hotfix in order to change it on the grounds of cultural sensitivity. :-)

  8. Francisco Aragão April 1, 2009 at 5:46 am

    Can’t you replace the SHA-256 with an hex editor?

  9. Wolftail April 1, 2009 at 6:10 am

    They will change the wallpaper. That fish is called the “Beta fish”. That’s why they put it in the beta. Therefore it won’t be good to have a beta fish on the final version.

    http://en.wikipedia.org/wiki/Beta_Fish

  10. tom April 1, 2009 at 6:22 am

    Well is there a way you can manipulate the black wall paper. Maybe change the color or something.

  11. PortalCake April 1, 2009 at 6:29 am

    I’ve got an idea.
    Step 1.
    SHA-256 new Background image.

    Step 2.
    Look for “talkative fishy” hash in shell32.dll

    Step 3.
    Replace hash.

    Step 4.
    Use replacer.bat to replace shell32.dll in safe mode, also replacing the one in the DllCache.

    Step 5.
    Also use the replacer.bat to replace img0.jpg

    Step 5.
    PROFIT

  12. Steven G April 1, 2009 at 6:35 am

    hey its starter edition, you’re only allowed open 3 apps at a time… what else would one expect, that said, who cares? i know i won’t see starter, i’ll be grabbing up premium or ultimate, many of us will not see starter, not even on netbooks

  13. Vincent Bethmann April 1, 2009 at 7:03 am

    Thats like the unchangeable bootscreen. I hate it when Microsoft does not allow customization. But well, it’s just Starter Edition. I will probably not care at all.

  14. Matthew April 1, 2009 at 7:20 am

    But wait … what if they give starter away absolutely for free as a download? I wouldn’t want that to be my only OS, but it could make a nice VM!

  15. Pizzaboy192 April 1, 2009 at 8:11 am

    @steven G: The app limit has been upped to 6 now
    @quikboy: Good idea, Windows 7 on dirt-cheap media labs, and internet cafes… it would save alot of time that would be used to set policies if the system didn’t even have such policies.

  16. anonymuos April 1, 2009 at 9:22 am

    How else will they test Windows Anytime Upgrade?

  17. Dan April 1, 2009 at 9:50 am

    PortalCake: Or just find the instruction that references the hardcoded hash and change the if test so it always returns true (or false, whichever indicates the hash matches).

  18. Pizzaboy192 April 1, 2009 at 11:42 am

    I honestly don’t see why we are spending so much time on this OS unless they decide to make it free…
    Wouldn’t it be just as easy to replace the shell32.dll and other “infected” files from say… Home premium or basic?

  19. Mark April 1, 2009 at 3:44 pm

    I think that people who have the starter version can care less about the wallpaper. I bet someone would release a patch that would bypass the 3 apps limit. Hopefully, the would do this AFTER Windows 7 has RTM or Microsoft could block the patch before Windows 7 is officially release.

  20. Lightning750 April 1, 2009 at 4:54 pm

    Come on people! this is just windows 7 starter, and windows 7 starter SUCKS! anyone in their right mind will get premium or ultimate unless they have a really cheap netbook in which case I laugh at them.

  21. Ryan April 1, 2009 at 6:40 pm

    I couldn’t care less. My home pc will use the Ultimate edition – if I ever decided to get a netbook with Starter edition (well, I wouldn’t period, but for the sake of typing this) I wouldn’t care about that wallpaper. It doesn’t look too bad, and it’s better than what my current [work] laptop currently uses (Windows Classic theme with no desktop wallpaper).

    How would you feel if you were locked in to using Windows Classic theme for Win 7 Starter?

    So, uh, what if you replace img0.jpg AND shell32.dll?

  22. Larry April 1, 2009 at 7:21 pm

    Isnt starter for 3rd world countries??

    north america and europe wont even be able to buy or get preinstalled starter edition.

    home basic is ‘the worst’ we can get, isnt it??

  23. Anthony Castanza April 1, 2009 at 7:30 pm

    May I suggest a domain name for your new joint venture?

    istartedwindows.com

  24. j April 1, 2009 at 11:27 pm

    did they make a cheap ’starter’ edition for ‘developing countries’, to tackle piracy? i reckon limiting users like this will only accelerate it

  25. EclipseSin April 2, 2009 at 4:57 am

    Sup Raf?

    Well, my thoughts are, what is the point? I can see the internet cafe, library, etc, but Windows 7 has a new locking system so that everything downloaded, settings changed, etc are not saved, right? I believe it is called PC Safeguard, or have they done away with that feature? So like in the first eight words I typed in this paragraph, what is the point really?

    Think of this scenario: You buy a new PC with standard parts, nothing special like a gaming computer, just an everyday PC for word processing, internet mail, reading newgroups, and downloading music from iTunes, in fact I’m going to forget this train of thought. This is aimed towards people trying to learn computer skills, beginner computer users, in countries with less developemental status’ unlike Japan or America right? Well here is a better question. How the **** are they supposed to learn how to use a PC with limitations to the ammount of applications able to be running, or not even being able to do the BASICS of computing to begin with, such as changing a wallpaper? The wallpaper may be one small, very small, part of a computer users daily or even monthly, or longer, regime, but I can say this. With computers, you learn from experiencing multiple situations that lead to questions or you tinkering about the internet reading to find out what to do or what caused this thing to happen. How are people using this edition supposed to be able to experience these things when they cant run more than what is it, 3 or 6, applications at a time? Right there went the learning of what the hardware in your computer is capable of doing at one time, and possibly even more.

    The wallpaper, being changable for as long as I can remember (Windows 3.1 for me), is a nice piece of the desktop I call relief. A little bit of personalization goes a long way, and can really make your desktop environment alot nicer, even if it is just a change of an image. I could understand maybe stripping out the Wallpaper Slideshow, but the ability to change wallpaper all together? Get bent on your Windows 7 Starter Edition Microsoft. I really do not know what you are thinking with it. By all means, try to explain, though I doubt you can give me an answer which is not something only a completely mental person could understand.

  26. ilm April 2, 2009 at 1:19 pm

    Can you elaborate on the shell32 bit? For example, which shell32 function uses the hash?

  27. ilm April 2, 2009 at 1:26 pm

    As for patching shell32 on disk – I hope those suggestions are jokes. If you patch a system file on disk, Windows Update will no longer recognize it and will thus no longer apply hotfixes to the file in question!

  28. pizzaboy192 April 2, 2009 at 4:47 pm

    ilm: and thus, windows update won’t replace the file during an update, thus keeping such a hack in place…

  29. ilm April 3, 2009 at 2:00 am

    I guess that does count as an advantage for some people.

    FWIW, I have confused things slightly. I was really referring to this: http://blogs.msdn.com/oldnewthing/archive/2003/08/05/54603.aspx

    …which is about how service pack installs will break when you modify a system file and not strictly about Windows Update. Though I would guess it applies all the same.

  30. Lorne April 4, 2009 at 12:20 pm

    Looking at the thread, all I can say is The US and Canada as well as the Rest of the developed country’s have joinded the ranks of third world nations, Microsoft is just preparing us for our new status

  31. Anonymous April 5, 2009 at 4:11 pm

    Do not want.

  32. _||_ April 7, 2009 at 8:19 pm

    some of you look confused: (as you go down the list, the previous editions features are included)

    Starter (6-app limit, no wallpaper changing, no Aero) : OEM only, available worldwide
    Home Basic (no Glass, no WMC) : OEM only, not available in US, Canada, Western Europe, Israel, Japan, Australia, New Zealand
    Home Premium (no RDP server, Fax/Scan, Location-Aware Printing, Domain-join): retail stores, web and OEM everywhere
    Professional (no Bitlocker, AppLocker, BranchCache, no VM rights): retail stores, web and OEM everywhere
    Ultimate (no volume licensing): limited retail launch, followed by promotional web, OEM everywhere (OEM/MS will bundle stuff)
    Enterprise (only edition for volume deployment, XP downgrade bundled): Software Assurance, Enterprise/Govt./Ed. new purchase

  33. Rafael April 7, 2009 at 8:25 pm

    It’s 3-app limit, where is everyone getting this bogus 6 news from?

  34. _||_ April 9, 2009 at 2:08 am

    Well, strictly speaking it is still 3 apps, but for some things, the limit is flexible. e.g. You can have AV software, multiple Live Essentials apps, Explorer-related apps like WMP, IE running in addition to 3 “other” apps. At least this is observed in 7077.

    However, if you have evidence for a non-flexible 3-app limit, Rafael, I’d say you’re right and I’m not, because you are the most technically skilled guy in the room and know the ins and outs of MS software. I am just a enthusiast dabbling in technology intermittently. :-)

  35. brian.shapiro April 25, 2009 at 11:56 am

    If they’re doing this it would make more sense if they just disallowed wallpapers and only allowed solid color backgrounds. The current wallpaper assumes you want a fish on your desktop.

  36. Mosh Jahan May 11, 2009 at 9:11 am

    Disallowing wallpapers would require more functionality to put it into effect; this method is better. I don’t get why people are outraged though. Why shouldn’t Microsoft reserve the right to disallow customization for entry level edition? Microsoft is a commercial entity and must generate revenue for it’s shareholders. One way to generate future revenue is to limit entry level products in the hope that users will want to pay to upgrade to the more featured products. It’s just business folks.

  37. Виктор Евсеев June 7, 2009 at 7:44 am

    Видел что-то похожее в англоязычном интернете, в Русском инете про такие вещи как-то не особо часто сообщения увидишь.

  38. Marc June 7, 2009 at 4:06 pm

    I thought this limit would be so manufactures could force their branding on users. The hard-coded nature of this suggests it wont be, unless Microsoft are going t have different versions of Shell32.dll(!), which would be crazy.

  39. Matt A. Tobin of Binary Outcast June 9, 2009 at 4:31 am

    Well if u hate the Aero Basic theme and the stupid wallpaper atleast there is one other choice for starter…. Windows Classic with Blue Color and no Wallpaper…

    Check it out…
    http://personal.mattatobin.com/screenshots/WindowsSeven/win7starterinclassicthemenobg.png

  40. Matt A. Tobin of Binary Outcast June 9, 2009 at 5:18 am

    I have just completed a blog post on my own website with instructions on how to get the same results as the above screenshot…

    Check it out:
    http://blog.mattatobin.com/2009/06/09/windows-seven-starter-kill-wallpaper-and-have-classic-theme.binoc

  41. morgan June 20, 2009 at 6:58 am

    After just installing Moblin2 (intel linux) on my notebook I can safely say that Windows 7 will never be installed on any notebook I own – In linux there are no stupid restrictions.

    As for the image that MS is forcing their users to look at – It should be a image of a large smiley faced Tux pointing at you whilst laughing………..

    Way to go MS !

  42. Lone_Wanderer June 21, 2009 at 11:03 pm

    -Hmm, anybody could find the way to create a working SHA-256 hash collision method?
    Or somebody already did?
    :)

    Regards.

  43. mynamesux July 2, 2009 at 2:08 am

    if i had windows 7 starter the only thing that it would be startering is pissing me off

  44. Petr July 10, 2009 at 1:35 am

    Such kind of “crippling” is so silly. Seems to me like ms has lost its mind. I feel that ms is going to be out the door once this cloud computing thingy takes off big time.

  45. Katie October 23, 2009 at 6:50 pm

    Ok, so I got a Samsung netbook yesterday with WIndows 7 Starter. So far, I’ve loved it…until I realized that you can’t change the wallpaper.

    Now, it’s not like I got Windows 7 STARTER because I was too cheap to get the full edition. It’s just what comes with netbooks, and I really wanted a netbook for school. But for fuck’s sake, if you’re first going to disallow wallpaper changes and THEN booby trap it so that if it’s tampered with it turns black….just…WHY?!

    I don’t see the point – is it supposed to be some incentive to get a full edition? Hello, it’s a NETBOOK, it won’t RUN the full Windows 7 edition well.

    It’s low-handed blows like this that really piss me off…

  46. Luke October 24, 2009 at 11:26 am

    Likewise, I bought my girlfriend a netbook today with Windows 7 Starter. I’m from the UK, so all the talk of Starter edition for developing nations is just nonsense. As mentioned above, most netbooks just ship with 7 Starter at the moment, its got nothing to do with being cheap.

    But I cannot stress how disappointed she was that the wallpaper can’t be changed! The sales pitch was
    ‘exciting new Windows 7 Starter ships with your notebook!’
    So, we bought it. Reality -
    ‘crappy watered down Windows 7 Starter ships with your notebook. You’ll be able to do f**k all’
    Perhaps we’ll go out and buy XP, but I really don’t want to be filling MS’s coffers any more after this.

    The audacity, the shame of Microsoft for going OUT OF THEIR WAY to make wallpaper changes impossible. F**king disgraceful. I have been a die-hard Microsoft fan for decades, I still think Office is one of the best pieces of software available, and up until XP, I was loving their OS work. But how misguided has MS become, in an increasingly competitive environment with Apple and the impending Google OS, MS choose to take steps back in the quality of their software?

    Disgraceful. MS continue to lose swathes of their market share, and its lunacy if they don’t know why. Who on earth thought that taking away something simple like wallpaper customising was a good idea? There are two ways this can go 1) MS release a patch in response to overwhelming negative reaction or 2) MS lose yet more of their market share as more and more customers look elsewhere for what they want.

    Grrrrrr, it all makes me so angry!!

    From, Luke.
    An ex-MS fan, growing increasingly fond of Google.

  47. Doug October 25, 2009 at 4:48 am

    Could the original author please verify that the SHA256 is found in shell32.dll? I’m looking at it now and I don’t see it. Maybe the mechanism has changed?

    Also links to anyone else working on breaking this are welcome.
    Thanks.

    (Background: Mother-in-law just got netbook yesterday, after waiting a couple of weeks for the Windows 7 release — now can’t change wallpaper and is considering going back to XP. Really why use 7 Starter over XP? The same netbook is already $30 cheaper with XP; I see nothing worth shelling out another $80 for 7 Home Premium)

  48. Doug October 25, 2009 at 6:10 am

    SHA256 of img0.jpg in public retail release version, 6.1.7600.16385:
    ba4f25bf16ba4be6bc7d3276fafeb67f9eb3c5df042bc3a405e1af15b921eed7

    Also, if you alter img0.jpg, the wallpaper goes blank because this registry key gets blanked out:
    HKEY_CURRENT_USER\Control Panel\Desktop\Wallpaper

    But you can restore it to c:\windows\web\wallpaper\windows\img0.png and then you’re at least back where you started.

  49. Shay October 25, 2009 at 2:19 pm

    Of all the drawbacks of the Windows 7 Starter Edition, why did this have to be one of them? Really… It’s stupid and kinda pointless.
    I think I’m going back to Windows XP.

  50. Eddie October 25, 2009 at 10:51 pm

    So I went out and bought a Toshiba netbook this morning with Windows 7 Starter… First thing I did…like I’ve done on every computer I’ve had since Windows 3.1…try to change the background. Nope. I’m thinking this must be a joke…why would they lock this option down? I’m taking this stupid netbook back tomorrow.

  51. kenif October 31, 2009 at 4:35 am

    as soon as word gets out sales will drop who doesnt change there wallpaper and who reallly wants to spend extra money just to change it surely they will go back on this. just got new netbook with win 7 starter managed to make the wallpaper the colour of my choice by going to clasic version then changing the name of the folder where the jpg is kept and changing back to the win 7 version

  52. peter November 4, 2009 at 5:09 am

    I got a new net book with win7 basic on it, did all the upgrades ect, backup disc ect, only to find I cannot change the wall paper,
    but having read this post, have taken what matt wrote (http://blog.mattatobin.com/2009/06/09/windows-seven-starter-kill-wallpaper-and-have-classic-theme.binoc ) and change to the blue screen then right click on the desktop and right click gadgets,
    then added the slide pictures now at least I have a pic on the desktop even if it is only a 1 inch sq but on a 10 inc screen is not to bad

  53. Blunt World November 7, 2009 at 1:56 am

    It still amazes me how Microsoft repeatedly shoots itself in the foot; it’s like they can’t help but generate negative PR. It’ll be a matter of time before they update 7 starter due to consumer backlash. The number of customers that will have a negative experience with their netbooks and windows 7 can’t help their image. I mean you would think they learned from vista.

  54. jake November 7, 2009 at 12:02 pm

    wow just got a laptop with starter…i like the running program hat that you cant change the walpaper! not to mention that they put the gayest background on it (not to affend n e 1) does anyone know the number to complain?