Jump to content

Welcome to MSFN Forum
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
Login to Account Create an Account



Photo

HOWTO create a fully up to date XP x64 DVD (March 2015)

- - - - -

  • Please log in to reply
728 replies to this topic

#726
Kurt_Aust

Kurt_Aust

    Master of trial, error & Google

  • Member
  • PipPipPipPip
  • 566 posts
  • Joined 26-April 07
December updates

Deletions:
Hotfix\328-WindowsServer2003.WindowsXP-KB2478971-x64-ENU.exe
Hotfix\764-WindowsServer2003-KB2998527-x64-ENU.exe
Hotfix\916-IE8-WindowsServer2003.WindowsXP-KB2909210-x64-ENU.exe
Hotfix\920-IE8-WindowsServer2003-KB3003057-x64-ENU.exe

Replace:
# . install_flash_player_ax.exe (link near bottom of page) . . . . 17,541,296 . 16.0.0.235 Updated 9 December

Additions:
@ Hotfix\792-WindowsServer2003-KB3011780-x64-ENU.exe .. . . . . . . . . . . 1,243,352 . MS14-068 - Kerberos
@ Hotfix\796-WindowsServer2003-KB3013126-x64-ENU.exe .. . . . . . . . . . . 2,372,312 . MS14-085 - GDI+
@ Hotfix\800-WindowsServer2003-KB3013410-x64-ENU.exe . . . . . . . . . . . . . 722,136 . Time Zone - Cumulative
@ Hotfix\916-IE8-WindowsServer2003-KB3012176-x64-ENU.exe .. . . . . . . . . . 1,095,896 . MS14-084 - VBScript Engine
# . Hotfix\920-IE8-WindowsServer2003-KB3008923-x64-ENU.exe . . . . . . . . . 22,925,528 . MS14-080 - Cumulative Security Update


Applications:
The latest version of Opera uses the same version of Adobe flash player as Chrome and now cannot be installed prior to user account generation.

As EMET v5.0 is a bit iffy on XP x64 (and 5.1 is completely broken) I've reverted back to 4.1u1. I've also written a new .xml protection profile that fixes the bug listed below as well as adding a number of additional applications to the protected list and fixing compatibility issues in XP x64 (it's always EAF). EMET, while a great idea, seems to suffer the same lack of testing as general Windows Updates of late.

Copy/Paste from Microsoft Technet:
Bug - changing any mitigation via the software.xml protection profiles also disables SEHOP

Bug applies to both 4.1u1 & 5.1 (OS: XP Pro x64 )

Consider this from the "Popular Software.xml" file (4.1u1)

<Product Name="Skype">
<Version Arch="x86" Path="*\Skype\Phone\Skype.exe">
<Mitigation Name="EAF" Enabled="false" />
</Version>
</Product>

For some reason this will also disable SEHOP, in fact any change from the default settings will disable SEHOP, for instance this (from 5.1 popular) will also do it even though it's adding rather than subtracting:

<Product Name="Internet Explorer">
<Version Path="*\Internet Explorer\iexplore.exe">
<Mitigation Name="EAF+" Enabled="true">
<eaf_modules>mshtml.dll;flash*.ocx;jscript*.dll;vbscript.dll;vgx.dll</eaf_modules>
</Mitigation>
<Mitigation Name="ASR" Enabled="true">
<asr_modules>npjpi*.dll;jp2iexp.dll;vgx.dll;msxml4*.dll;wshom.ocx;scrrun.dll</asr_modules>
<!-- 0 = Local; 1 = Intranet; 2 = Trusted; 3 = Internet; 4 = Untrusted; -->
<asr_zones>1;2</asr_zones>
</Mitigation>
</Version>
</Product>

If one adds <Mitigation Name="SEHOP" Enabled="true"/> as the last mitigation for the application, the effect can be overridden, for example:

<Product Name="Skype">
<Version Arch="x86" Path="*\Skype\Phone\Skype.exe">
<Mitigation Name="EAF" Enabled="false" />
<Mitigation Name="SEHOP" Enabled="true"/>
</Version>
</Product>


How to remove advertisement from MSFN

#727
Kurt_Aust

Kurt_Aust

    Master of trial, error & Google

  • Member
  • PipPipPipPip
  • 566 posts
  • Joined 26-April 07
January updates

Deletion:
Hotfix\276-WindowsServer2003.WindowsXP-KB2264107-x64-ENU.exe

Replace:
# . RunOnce\install_flash_player_ax.exe (link near bottom of page) . . . . 17,539,760 . 16.0.0.257 Updated 13 January

Additions:
@ Hotfix\804-WindowsServer2003-KB3020393-x64-ENU.exe . . . . . . . . . . . . . 729,816 . MS15-002 - Telnet
@ Hotfix\808-WindowsServer2003-KB3021674-x64-ENU.exe .. . . . . . . . . . . 1,163,992 . MS15-003 - User Profile
@ Hotfix\812-WindowsServer2003-KB3014029-x64-ENU.exe . . . . . . . . . . . . . 814,296 . MS15-007 - Network RADIUS
@ Hotfix\816-WindowsServer2003-KB3019215-x64-ENU.exe . . . . . . . . . . . . . 796,384 . MS15-008 - Kernel-Mode Driver


A quiet month, not even the usual IE cumulative update. In other Microsoft news they have decided to no longer give advance notification of the number and general types of patches to be released, almost channelling Apple's secretive nature.

Added some notes about the first run of Foxit reader and Vuze bittorrent client/server, most notably Vuze will not find Java if the user account does not have administrator rights on its first run, after the first run one can change the user account to limited without further problems.

#728
Kurt_Aust

Kurt_Aust

    Master of trial, error & Google

  • Member
  • PipPipPipPip
  • 566 posts
  • Joined 26-April 07
February updates

Deletions:
Hotfix\768-WindowsServer2003-KB3006226-x64-ENU.exe
Hotfix\772-WindowsServer2003-KB2992611-x64-ENU.exe
Hotfix\916-IE8-WindowsServer2003-KB3012176-x64-ENU.exe
Hotfix\920-IE8-WindowsServer2003-KB3008923-x64-ENU.exe

Replace:
# . RunOnce\install_flash_player_ax.exe (link near bottom of page) . . . . 17,549,488 . 16.0.0.305 Updated 5 February

Additions:
@ Hotfix\820-WindowsServer2003-KB3023562-x64-ENU.exe .. . . . . . . . . . . 1,110,744 . MS15-010 - Kernel-Mode Driver
@ Hotfix\824-WindowsServer2003-KB3004361-x64-ENU.exe . . . . . . . . . . . . . 899,288 . MS15-014 - Group Policy
@ Hotfix\828-WindowsServer2003-KB3029944-x64-ENU.exe .. . . . . . . . . . . 2,371,800 . MS15-016 - GDI+
@ Hotfix\832-WindowsServer2003-KB3020338-x64-ENU.exe .. . . . . . . . . . . 1,303,776 . Object Linking and Embedding (OLE)
# . Hotfix\920-IE8-WindowsServer2003-KB3021952-x64-ENU.exe . . . . . . . . . 23,595,232 . MS15-009 - Cumulative Security Update

MS15-010 / KB3013455
Microsoft released a hotfix this month about which they had this to say "you may notice some text quality degradation in certain scenarios", this is a euphemism. In a great many cases text is unreadable or at least likely to induce a headache, making one's system nigh on unusable, hence that hotfix is not included at this time.

Other changes
Support for VirtualBox's experimental Direct 3D guest additions has been added, to use it copy VBoxGuestAdditions.iso to the nLite root directory (where the Run1_XP-64.bat file is) instead of \AddOns\ and increase the number of automatic logins (at step 8) by one.

With D3D installed Skype is blocked due to it causing graphics corruption (I suspect Skype throws a wobbly when it probes for a webcam) and YouTube only works with Chrome and Opera but on the other hand it allows some games to work (Doom 3 for instance).

#729
Kurt_Aust

Kurt_Aust

    Master of trial, error & Google

  • Member
  • PipPipPipPip
  • 566 posts
  • Joined 26-April 07
March updates

Deletions:
Hotfix\340-WindowsServer2003.WindowsXP-KB2478953-x64-ENU.exe
Hotfix\472-WindowsServer2003.WindowsXP-KB2691442-x64-ENU.exe
Hotfix\580-WindowsServer2003.WindowsXP-KB2813170-x64-ENU.exe
Hotfix\632-WindowsServer2003.WindowsXP-KB2847311-x64-ENU.exe
Hotfix\788-WindowsServer2003-KB3002885-x64-ENU.exe
Hotfix\820-WindowsServer2003-KB3023562-x64-ENU.exe
Hotfix\920-IE8-WindowsServer2003-KB3021952-x64-ENU.exe
RunOnce\WindowsServer2003-KB2918614-x64-ENU.exe

Replace:
# . RunOnce\install_flash_player_ax.exe (link near bottom of page) . . . . 17,658,544 . 17.0.0.134 Updated 12 March
@ RunOnce\rvkroots.exe .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200,840 . Untrusted Certificate Store Updated 19 March

Additions:
@ Hotfix\834-WindowsServer2003-KB3033889-x64-ENU.exe .. . . . . . . . . . . 1,048,288 . MS15-020 - Text Services
# Hotfix\836-WindowsServer2003-KB3039066-x64-ENU.exe .. . . . . . . . . . . 6,485,728 . MS15-020 - Windows Shell
@ Hotfix\838-WindowsServer2003-KB3032323-x64-ENU.exe . . . . . . . . . . . . . 876,768 . MS15-021 - Adobe Font Driver
@ Hotfix\840-WindowsServer2003-KB3034344-x64-ENU.exe .. . . . . . . . . . . 2,548,952 . MS15-023 - Kernel-Mode Driver
@ Hotfix\842-WindowsServer2003-KB3035132-x64-ENU.exe .. . . . . . . . . . . 2,372,312 . MS15-024 - GDI+
@ Hotfix\844-WindowsServer2003-KB3046049-x64-ENU.exe .. . . . . . . . . . . 1,110,752 . MS15-031 - Schannel
@ Hotfix\846-WindowsServer2003-KB3033395-v2-x64-ENU.exe . . . . . . . . . 4,352,224 . MS15-025 - Kernel
@ Hotfix\848-WindowsServer2003-KB3002657-v2-x64-ENU.exe . . . . . . . . . 1,109,720 . MS15-027 - NetLogon
# . Hotfix\920-IE8-WindowsServer2003-KB3032359-x64-ENU.exe . . . . . . . . . 23,605,464 . MS15-018 - Cumulative Security Update
@ . RunOnce\WindowsServer2003-KB3000988-x64-ENU.exe .. . . . . . . . . 4,017,368 . Windows Installer Service

Note that last month's MS15-010 / KB3013455 bug has been fixed by MS15-023 / KB3034344. Quite a hectic month for updates this time, although that is not the reason that this month's guide update was so late.

That is due to a combination of work picking up, helping out on the state election and my PC deciding to fall over last weekend, still considering how the updates to updates dribbled out this time that was overall a net positive. Next month's guide update will also likely be late as I will be attending a Terry Pratchett convention from the 10-12th April.




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users