• Announcements

    • xper

      MSFN Sponsorship and AdBlockers!   07/10/2016

      Dear members, MSFN is made available via subscriptions, donations and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, become a site sponsor and ads will be disabled automatically and by subscribing you get other sponsor benefits.
Kurt_Aust

HOWTO create a fully up to date XP x64 DVD (EoL Feb 2016)

751 posts in this topic

January updates

Deletions:

Hotfix\348-WindowsServer2003.WindowsXP-KB971737-x64-ENU.exe

Hotfix\440-WindowsServer2003.WindowsXP-KB975562-x64-ENU.exe

Hotfix\480-WindowsServer2003.WindowsXP-KB980436-x64-ENU.exe

Hotfix\700-WindowsServer2003.WindowsXP-KB2567680-x64-ENU.exe

Additions: (all at Hotfix\)

@ . . . 768-WindowsServer2003.WindowsXP-KB2584146-x64-ENU.exe . . . 729,984 MS12-005 - Office ClickOnce

@ 772-WindowsServer2003.WindowsXP-KB2631813-x64-ENU.exe .. 3,682,176 MS12-004 - DirectShow

@ . . . 776-WindowsServer2003.WindowsXP-KB2638806-x64-ENU.exe .. 1,056,128 MS12-006 - SSL/TLS protocol

@ . . . 780-WindowsServer2003.WindowsXP-KB2585542-x64-ENU.exe .. 1,210,752 MS12-006 - SSL/TLS protocol

@ . . . 784-WindowsServer2003.WindowsXP-KB2603381-x64-ENU.exe . . . 668,544 MS12-002 - Object Packager

@ . . . 788-WindowsServer2003.WindowsXP-KB2598479-x64-ENU.exe . . . 884,608 MS12-004 - Multimedia Library

@ . . . 792-WindowsServer2003.WindowsXP-KB2644615-x64-ENU.exe .. 1,573,760 MS12-001 - Kernel Security Bypass

@ . . . 796-WindowsServer2003.WindowsXP-KB2646524-x64-ENU.exe . . . 927,104 MS12-003 - Client/Server Run-time Subsystem (CSRSS)

@ . . . 914-IE8-WindowsServer2003.WindowsXP-KB2632503-x64-ENU.exe . 1,316,224 JScript 5.8 array loops

0

Share this post


Link to post
Share on other sites

February updates

Deletions:

Hotfix\732-WindowsServer2003.WindowsXP-KB2592799-x64-ENU.exe

Hotfix\748-WindowsServer2003.WindowsXP-KB2639417-x64-ENU.exe

Hotfix\904-IE8-WindowsServer2003.WindowsXP-KB2618444-x64-ENU.exe

RunOnce\install_flash_player_ax_64bit.exe

RunOnce\NDP20SP2-KB2539631-x64.exe

RunOnce\NDP40-KB2539636-x64.exe

Additions:

@ . . . Hotfix\800-WindowsServer2003.WindowsXP-KB2645640-x64-ENU.exe . . . 805,248 MS12-009 - Ancillary Function Driver

@ Hotfix\804-WindowsServer2003.WindowsXP-KB2660465-x64-ENU.exe .. 4,363,136 MS12-008 - Kernel-Mode Drivers

# Hotfix\904-IE8-WindowsServer2003.WindowsXP-KB2647516-x64-ENU.exe 42,789,760 MS12-010 - Cumulative Security Update

# RunOnce\install_flash_player_11_active_x_64bit.exe 8,211,104 Updated 15 Febrary

. . . 64-bit flash player is only officially supported on Windows 7 however it does work on XP x64, you can use the 32-bit version if you prefer.

@ RunOnce\NDP20SP2-KB2633880-x64.exe . 5,210,048 MS12-016 - XAML Browser Applications (XBAPs)

# RunOnce\NDP40-KB2600217-x64.exe .. . 33,566,328 Reliability Update 2

@ RunOnce\NDP40-KB2633870-x64.exe . . . 3,466,160 MS12-016 - XAML Browser Applications (XBAPs)

NDP40-KB2600217-x64.exe contains updated versions of all the files in both NDP40-KB2633870-x64.exe and NDP40-KB2572078-x64.exe, but for some unknown reason Windows update still insists on them.

Dropped Java V6 and Open Office (no new version in over a year) from the supported applications list.

0

Share this post


Link to post
Share on other sites

March updates

Deletions:

Hotfix\708-WindowsServer2003.WindowsXP-KB2570222-x64-ENU.exe

Hotfix\804-WindowsServer2003.WindowsXP-KB2660465-x64-ENU.exe

RunOnce\install_flash_player_11_active_x_64bit.exe

RunOnce\WindowsServer2003.WindowsXP-KB2618451-x64-ENU.exe

Additions:

@ . . . Hotfix\804-WindowsServer2003.WindowsXP-KB2621440-x64-ENU.exe . . . 780,672 MS12-020 - Remote Desktop Protocol

@ Hotfix\808-WindowsServer2003.WindowsXP-KB2641653-x64-ENU.exe .. 4,367,232 MS12-018 - Kernel-Mode Drivers

# RunOnce\install_flash_player_ax_64bit.exe 8,209,056 Updated 4 March

. . . 64-bit flash player is only officially supported on Windows 7 however it does work on XP x64, you can use the 32-bit version if you prefer.

@ . . . RunOnce\WindowsServer2003.WindowsXP-KB2647518-x64-ENU.exe . . 675,712 ActiveX Kill-Bits Cumulative

0

Share this post


Link to post
Share on other sites

April updates

Deletions:

Hotfix\420-WindowsServer2003.WindowsXP-KB978601-x64-ENU.exe

Hotfix\904-IE8-WindowsServer2003.WindowsXP-KB2647516-x64-ENU.exe

RunOnce\install_flash_player_ax_64bit.exe

Additions:

@ . . . Hotfix\812-WindowsServer2003.WindowsXP-KB2653956-x64-ENU.exe . . . 982,400 MS12-024 - Authenticode Verification

# Hotfix\904-IE8-WindowsServer2003.WindowsXP-KB2675157-x64-ENU.exe 42,794,880 MS12-023 - Cumulative Security Update

# RunOnce\install_flash_player_11_active_x_64bit.exe 8,767,136 Updated 27 March

. . . 64-bit flash player is only officially supported on Windows 7 however it does work on XP x64, you can use the 32-bit version if you prefer.

@ . . . RunOnce\NDP20SP2-KB2656369-x64.exe . 1,581,168 MS12-025 - XAML Browser Applications (XBAPs)

@ . . . RunOnce\NDP40-KB2656368-x64.exe .. . . 1,581,168 MS12-025 - XAML Browser Applications (XBAPs)

Unfortunately PlanetAMD64.com now has the "For Sale" sign up, so I might be reworking this post to make it align better with MSFN's display methodology.

0

Share this post


Link to post
Share on other sites

May updates

Deletions:

Hotfix\608-WindowsServer2003.WindowsXP-KB2393802-x64-ENU.exe

Hotfix\660-WindowsServer2003.WindowsXP-KB2412687-x64-ENU.exe

Hotfix\808-WindowsServer2003.WindowsXP-KB2641653-x64-ENU.exe

RunOnce\WindowsServer2003.WindowsXP-KB2647518-x64-ENU.exe

RunOnce\NDP20SP2-KB2518864-x64.exe

RunOnce\NDP20SP2-KB2572073-x64.exe

RunOnce\NDP20SP2-KB2633880-x64.exe

RunOnce\NDP40-KB2518870-x64.exe

RunOnce\NDP40-KB2572078-x64.exe

RunOnce\NDP40-KB2633870-x64.exe

Additions:

# Hotfix\816-WindowsServer2003.WindowsXP-KB2676562-x64-ENU.exe 11,667,840 MS12-034 - Kernel Mode Drivers

@ . . . Hotfix\820-WindowsServer2003.WindowsXP-KB2659262-x64-ENU.exe .. 2,359,680 MS12-034 - GDI+

@ . . . Hotfix\824-WindowsServer2003.WindowsXP-KB2686509-x64-ENU.exe . . . 672,000 MS12-034 - Keyboard Layout

# RunOnce\install_flash_player_11_active_x_64bit.exe 8,769,696 Updated 4 May

. . . 64-bit flash player is only officially supported on Windows 7 however it does work on XP x64, you can use the 32-bit version if you prefer.

@ . . . RunOnce\WindowsServer2003.WindowsXP-KB2695962-x64-ENU.exe . . 676,736 ActiveX Kill-Bits Cumulative

# RunOnce\NDP20SP2-KB2604092-x64.exe 43,156,080 MS12-035 - XAML Browser Applications (XBAPs)

# RunOnce\NDP30SP2-KB2604110-x64.exe 28,602,800 MS12-035 - XAML Browser Applications (XBAPs)

# RunOnce\NDP30SP2-KB2656407-x64.exe 30,685,104 MS12-034 - TrueType Fonts

@ . . . RunOnce\NDP35SP1-KB2604111-x64.exe . . 877,680 MS12-035 - XAML Browser Applications (XBAPs)

# RunOnce\NDP40-KB2604121-x64.exe .. . 40,175,720 MS12-035 - XAML Browser Applications (XBAPs)

# RunOnce\NDP40-KB2656405-x64.exe .. . 12,126,824 MS12-034 - TrueType Fonts

And here I thought - only 2 relevant security bulletins this month, rather quiet.

Edited by Kurt_Aust
0

Share this post


Link to post
Share on other sites

There is one update replacement that Kurt_Aust did not find.

KB960803 (MS09-013) WinHTTP - Replaced by KB2638806 (MS12-006).

Edited by Explorer09
0

Share this post


Link to post
Share on other sites

He knows about it, Explorer09. However, the Microsoft Update site checks for the following registry entry:

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB960803","Installed",0x10001,1

If it doesn't exist in the registry then MU will insist that KB960803 be installed. One sure way to get that registry entry is to install the update; the other is to add the entry manually.

Edited by 5eraph
0

Share this post


Link to post
Share on other sites

He knows about it, Explorer09. However, the Microsoft Update site checks for the following registry entry:

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB960803","Installed",0x10001,1

Does Windows Update checks about this registry entry?

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2638806","Installed",0x10001,1

I can guess the reason. KB960803 and KB2638806 patch no files in the Windows directory. What the installer was doing is copying the Winhttp.dll into a cache folder (%windir%\WinSxS). Since Windows Update cannot tell the exact path where the file is copied, it will check the "Installed" registry entry.

The same problem should happen with KB2659262, am I right?

0

Share this post


Link to post
Share on other sites

The update site does indeed check for the KB2638806 and KB2659262 related "Installed" values without checking the installed files; adding the entries alone will fool the update site into believing they are installed (and is obviously not a good idea to do at this time as it will leave you vulnerable ;)).

The reason it doesn't check the files is unknown to me. But I can tell you that the site can tell the exact path where the files are copied, as it did with KB938464-v2 due to the fact that v1 of the update package had an installation issue.

Edited by 5eraph
0

Share this post


Link to post
Share on other sites

Glad that 5eraph has cleared that up, I'm sure I'm not alone in not always being impressed with how Windows Update handles things.

0

Share this post


Link to post
Share on other sites

Okay, may you guys help me try this thing?

Keep the KB2638806's "Installed" registry entry and remove the KB960803 one. Then check Windows Update and see if it still offers KB960803.

I think the answer would be no, but I don't have the time and hardware to try that out.

0

Share this post


Link to post
Share on other sites

The answer is yes, it still offers KB960803. I told you that already.

It's not hard to test on a running system. And it's easy to add the registry entry in RegEdit after it's been removed for testing. It should take no more than a couple minutes to remove the registry entry using RegEdit, check the update website, then add the entry back and check again.

0

Share this post


Link to post
Share on other sites

Yes, I get it. Time to blame Microsoft.

(Tested today on a freshly-installed Win XP x64 on VirtualBox)

post-332496-0-94201600-1337172723_thumb.

Edited by Explorer09
0

Share this post


Link to post
Share on other sites

nLite bug fix and optional updates

Deletion:

Hotfix\084-WindowsServer2003.WindowsXP-KB946026-x64-ENU.exe

Move and Rename:

Hotfix\528-WindowsServer2003.WindowsXP-KB2296011-x64-ENU.exe to RunOnce\WindowsServer2003.WindowsXP-KB2296011-x64-ENU.exe

Hotfix\776-WindowsServer2003.WindowsXP-KB2638806-x64-ENU.exe to RunOnce\WindowsServer2003.WindowsXP-KB2638806-x64-ENU.exe

Hotfix\820-WindowsServer2003.WindowsXP-KB2659262-x64-ENU.exe to RunOnce\WindowsServer2003.WindowsXP-KB2659262-x64-ENU.exe

Replace (optional):

# . RunOnce\WindowsUpdateAgent30-x64.exe 7,740,264

Additions (all at Hotfix):

@ . . . 440-WindowsServer2003.WindowsXP-KB982666-x64-ENU.exe . . . 1,637,248 . MS10-040 - Internet Information Services (IIS)

@ 608-WindowsServer2003.WindowsXP-KB2478953-x64-ENU.exe . . 5,054,336 . MS11-005 - Active Directory

@ . . . 068-WindowsServer2003.WindowsXP-KB925066-x64-ENU.exe .. . . . 764,808 . Distributed File System (DFS)

@ . . . 108-WindowsServer2003.WindowsXP-KB955417-x64-ENU.exe .. . . . 763,440 . Don't trust the French with your secrets

# . 260-WindowsServer2003.WindowsXP-KB955704-x64-ENU.exe . . 13,240,192 . exFAT file system

@ . . . 172-WindowsServer2003.WindowsXP-KB960680-v2-x64-ENU.exe . . 715,640 . Currency Symbols

@ . . . 256-WindowsServer2003.WindowsXP-KB971314-x64-ENU.exe .. . . . 895,888 . PCL Inbox Printer Drivers

@ . . . 488-WindowsServer2003.WindowsXP-KB2264107-x64-ENU.exe . . 2,261,376 . External Libraries Load Control

Thank you Explorer09 for reporting that nLite bug, I'll have to keep an eye out in future for that ASMS folder.

I've also taken a look at the optional updates that 5eraph includes and added those that aren't Hotfix by Request (HBRs), I already had most of them, the most significant addition being exFAT partition support.

0

Share this post


Link to post
Share on other sites

Additions (all at Hotfix):

@ . . . 440-WindowsServer2003.WindowsXP-KB982666-x64-ENU.exe . . . 1,637,248 . MS10-040 - Internet Information Services (IIS)

@ 608-WindowsServer2003.WindowsXP-KB2478953-x64-ENU.exe . . 5,054,336 . MS11-005 - Active Directory

@ . . . 068-WindowsServer2003.WindowsXP-KB925066-x64-ENU.exe .. . . . 764,808 . Distributed File System (DFS)

@ . . . 108-WindowsServer2003.WindowsXP-KB955417-x64-ENU.exe .. . . . 763,440 . Don't trust the French with your secrets

# . 260-WindowsServer2003.WindowsXP-KB955704-x64-ENU.exe . . 13,240,192 . exFAT file system

@ . . . 172-WindowsServer2003.WindowsXP-KB960680-v2-x64-ENU.exe . . 715,640 . Currency Symbols

@ . . . 256-WindowsServer2003.WindowsXP-KB971314-x64-ENU.exe .. . . . 895,888 . PCL Inbox Printer Drivers

@ . . . 488-WindowsServer2003.WindowsXP-KB2264107-x64-ENU.exe . . 2,261,376 . External Libraries Load Control

In the MS security bulletin, it say that Windows XP x64 does not need the MS10-040 (KB982666) update, and

http://technet.microsoft.com/en-us/security/Bulletin/MS10-040

[1]This operating system [Windows 2003/Vista/2008] is only affected when Extended Protection for Authentication has been installed.

Also KB2478953 is unnecessary because Active Directory Application Mode (ADAM) is not part of the standard installation of Windows XP x64.

Edited by Explorer09
0

Share this post


Link to post
Share on other sites

The affected component described in KB982666 is Internet Information Services 6, which is included in the x64 versions of both WinXP and Win2003. If you check the Applies To section of KB973917 you'll see that "Extended Protection for Authentication in Internet Information Services (IIS)" does apply to Windows XP x64, which strongly suggests that KB982666 should apply as well. KB982666 installs in Windows XP x64. It's better to be safe than sorry.

KB2478953 still applies to Windows XP x64 and directly replaces NetLogon.dll and wNetLogon.dll in the source. ADAM need not be present to slipstream with nLite. When slipstreamed it's one less update that needs to be installed later if the machine needs access to a network where Active Directory is in use.

0

Share this post


Link to post
Share on other sites

5eraph: You've got to admit, the KB955417 note accurately describes what in fact is fixed and is less obscure about it than most such notes.

Explorer09: Yes I did read the description on KB982666 and KB2478953 when they first came out which is why they weren't included at that time. As you might note they are now included only as optional updates, as indicated by the green description note.

0

Share this post


Link to post
Share on other sites

Explorer09: Yes I did read the description on KB982666 and KB2478953 when they first came out which is why they weren't included at that time. As you might note they are now included only as optional updates, as indicated by the green description note.

Yes, I see. But my problem is that neither of these updates have been offered to me by Windows Update, and MS has clearly said that Windows XP x64 is not affected.

I think you would better write a footnote about the reason why you include them. Something like this:

"Although Windows XP x64 is not affected by the vulnerability described in MS10-040 and MS11-005, these two updates patch some Windows XP x64 files and provides optional extended protection."

By the way, KB982666 replaces KB973917, and KB973917 replaces KB970430. So would you also remove KB970430 from the list?

Edited by Explorer09
0

Share this post


Link to post
Share on other sites

By the way, KB982666 replaces KB973917, and KB973917 replaces KB970430. So would you also remove KB970430 from the list?

Good point, it will be done with this month's updates.

I'll be off at a Sci-Fi con for the next few days, toasting the passing of "The greatest Sci-Fi writer in history". << NSFW

0

Share this post


Link to post
Share on other sites

Just a reminder: KB982666 can no longer be optional if KB970430 is removed. It is necessary to have one or the other after installing KB968389.

Edited by 5eraph
0

Share this post


Link to post
Share on other sites

Just a reminder: KB982666 can no longer be optional if KB970430 is removed. It is necessary to have one or the other after installing KB968389.

Are you sure about this? I find no information on Microsoft website saying that KB968389 depends on any other updates.

Another reminder: Neither KB982666, KB970430, or KB968389 is offered by Windows Update. I checked this less than a month ago.

Edited by Explorer09
0

Share this post


Link to post
Share on other sites

Check again after installing KB968389, Explorer09. That's what I did. The update site will list KB970430.

KB970430 requires KB968389, not the other way around.

Edited by 5eraph
0

Share this post


Link to post
Share on other sites

Check again after installing KB968389, Explorer09. That's what I did. The update site will list KB970430.

KB970430 requires KB968389, not the other way around.

I got the claim about what you said in Microsoft's article. Thanks.

http://support.microsoft.com/kb/970430

To use the features that this update includes, you must have the update 968389 installed on the computer. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

968389 Extended Protection for Authentication

By the way, I found some more items on the list that need to be corrected.

KB936357 (Intel CPU update) - This is a high-priority update.

KB971029 (Autorun patch) - This is a high-priority update, too.

KB2492386 - This is offered as optional updates in Windows Update.

KB982316 - Not offered in my Windows Update. (I think this should be optional.)

KB2345886 - Not offered in my Windows Update. (I think this should be optional.)

0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.