[wela]

Hi
Thx for reply. I´ve found this http://support.microsoft.com/?scid=kb%3Ben...842193&x=9&y=11
and tried the German translation. It doesn´t work.
I go your way at afternoon.

[Camarade_Tux]

A quick note:
HFNetChk reports

Patch NOT Installed	 MS06-013	 Q912812
	File C:\WIN\system32\mshtml.dll has a file version [6.0.2800.1543] 
	that is less than what is expected [6.0.2800.1544].

But according to http://www.microsoft.com/technet/security/...n/MS06-013.mspx , latest is 6.0.2800.1543, not 1544.



Then, it seems I lack reg keys for 833987. Could someone send me "SOFTWARE\Microsoft\Updates\Windows XP\SP2\KB833987\Type" ? (just to see if it is the *only* missing thing)



MBSA and HFNetChk both reports 914798 is missing. Does anybody knows which files get update ?
I've been able to find :

Quote

Four of the six services identified (NetBT, SCardSvr, DHCP, DnsCache) require an attacker to already be running in a privileged security context. Additionally, the two services, SSDPSRV and UPNPHost, which allow an authenticated user to attack a vulnerable system are only vulnerable on Windows XP Service Pack 1

With nLite I removed UPnP so the error may come from this.
But HFNetChk also reports the missing reg key thing. ( SOFTWARE\Microsoft\Updates\Windows XP\SP2\KB914798\Type )



Following updates are only reported by MBSA, not HFNetChk

I checked and 908531 contains an update for "Desktop Cleanup". I remove this component with nLite.


900725 has an update for a file I remove (fldrclnr.dll)


840374 updates Help Center : removed with nLite.


841873 updates Task Scheduler : removed with nLite.


841873 updates Messenger service : removed with nLite.
(imo Messenger service is only useful at school when working on computers )


MBSA also reports MDAC update, normal, I don't add it.
And last, it reports a WMP update and I removed WMP.



Thanks a lot for your help.


NB: I used nLite cause it takes 5 minutes and then installation is much faster.
If I have enough time, I'll try without it this afternoon.

Attached File(s)

•  wu.txt (1.52K)
  Number of downloads: 22

[the_guy]

@Camerade_Tux: the mshtml.dll build 1544 is the QFE version, not the GDR version.

the_guy

[Tomcat76]

Most likely HFSLIP then needs to use the QFE versions of the files in KB912812 for XPSP1. I'll update this later.

[the_guy]

An idea for ya Tomcat:

For the IE6 SP1 update for XPSP1 and 2000 SP4(same download), and all updates for XPSP2 and 2003, why not make HFSLIP integrate the QFE version of the file. It might make it easier for ya, and might let users integrate unofficial updates (that they get themselves).

the_guy

[Tomcat76]

I already did this for the KB912812 update (XPSP1 only). If neither Windows Update, Microsoft Update, MBSA nor HfNetChk complain I'll consider doing it for all updates, but would it also benefit upgrade installs?

[Camarade_Tux]

I don't understand, "I already did this". Does it mean yesterday's build uses QFE version or does it mean you are about to release one that will ?

I'll build a new iso in a few minutes. That time, I won't use nLite (except for tweaks though, I can't stand webview, especially when running 640x480).
I'll report what each of them say.

[Tomcat76]

It's to be released. I wanna do one last test with MDAC_TYP and then I'll put it in the wild.

[Camarade_Tux]

Could you quickly tell me what to change in HFSlip's code ?
I won't be able to make new tests before a while.

[Tomcat76]

It's released

[Camarade_Tux]

Thanks a lot.
(in fact, I only have a few minutes to complete my tests, that's why I'm in a hurry)

[Camarade_Tux]

Textmode install says "impossible to copy MDAC_TYP.msi".
I have a mdac_typ.ex_ in I386 which is not corrupted.
btw imo mdac_typ shouldn't be compressed, it only saves 40Ko and it's long to expand.

[the_guy]

@Tomcat

The XPSP1 912812 fix, is that also for 2000 sp4 with IE6? It's just that 2000sp4+IE6 uses the exact same file as XPSP1.

You don't need to do this for 2000sp4+IE5.01sp4

the_guy

[Camarade_Tux]

With UPHClean and MDAC_TYP in HF, at first logon, I get a cmd window and another one which looks like msiexec /? (but that could be bad syntax, maybe because of missing mdac_typ.msi)
Note I don't have MsiCabExtract in TOOLS.


edit : you're killing me, it's possible to stand WMP, but not the bliss wallpaper.

This post has been edited by Camarade_Tux: 23 April 2006 - 10:24 AM

[Camarade_Tux]

* WINDOWS XP SP1

	Warning			 	 
	The latest service pack for this product is not installed.  
	Currently SP1 is installed.  The latest service pack is SP2.


	Warning			 MS03-008	 Q814078
	File C:\WIN\system32\jscript.dll has a file version [5.6.0.8825] 
	that is greater than what is expected [5.6.0.8513].


	Patch NOT Installed	 MS04-028	 Q833987
	The registry key **SOFTWARE\Microsoft\Updates\Windows 
	XP\SP2\KB833987\Type**  does not exist.  It is required for this 
	patch to be considered installed.


	Patch NOT Installed	 MS06-011	 Q914798
	The registry key **SOFTWARE\Microsoft\Updates\Windows 
	XP\SP2\KB914798\Type**  does not exist.  It is required for this 
	patch to be considered installed.



	* INTERNET EXPLORER 6 SP1

	Patch NOT Installed	 MS04-028	 Q833989
	File C:\Programs\Fichiers communs\Microsoft Shared\VGX\vgx.dll has a
	file version [6.0.2800.1106] that is less than what is expected 
	[6.0.2800.1411].


	Warning			 MS05-044	 Q905495
	File C:\WIN\system32\msieftp.dll has a file version [6.0.2800.1724] 
	that is greater than what is expected [5.50.4956.500].


	* WINDOWS MEDIA PLAYER FOR WINDOWS XP SP1

	Patch NOT Installed	 MS06-005	 Q911565
	File C:\WIN\system32\wmpui.dll has a file version [8.0.0.4487] that 
	is less than what is expected [8.0.0.4495].


	* MDAC 2.7 SP1

	Patch NOT Installed	 MS06-014	 Q911562
	File C:\WIN\system32\dbnetlib.dll has a file version 
	[2000.81.9030.2] that is less than what is expected 
	[2000.81.9053.0].

I solved my problem with KB833987 and KB914798. I just had to create a REG_SZ key named "Type" and which value is "Update".


On this page, http://www.microsoft.com/technet/security/...n/MS06-005.mspx you can read that the updated file for "WMP for XP SP1" (i.e. WMP 8) is wmpui.dll but with more recent versions of WMP, the file is called wmp.dll. It's just a supposition.





edit: what WU (or rather microsoft update) says, probably not so important.

Mise à jour de sécurité pour Windows XP (KB908531)
Taille habituelle du téléchargement : 795 Ko , 1 minute 
 
Outil de suppression de logiciels malveillants Windows - Avril 2006 (KB890830)
Taille du téléchargement : 1.7 Mo , inférieur à 1 minute 
 
Mise à jour de sécurité pour Windows XP (KB914798)
Taille du téléchargement : 482 Ko , inférieur à 1 minute 
 
Mise à jour de sécurité pour le Lecteur Windows Media 8 pour Windows XP (KB911565)
Taille du téléchargement : 963 Ko , inférieur à 1 minute 
 
Mise à jour de sécurité pour le Lecteur Windows Media 9 (KB911565)
Taille du téléchargement : 2.2 Mo , inférieur à 1 minute 
 
Mise à jour pour Windows XP (KB835409)
Taille habituelle du téléchargement : 152 Ko , inférieur à 1 minute 
 
Mise à jour de sécurité pour Windows XP (KB900725)
Taille habituelle du téléchargement : 1.6 Mo , 2 minutes 
 
Mise à jour de la sécurité pour Microsoft Data Access Components (KB832483)
Taille du téléchargement : 2 Mo , inférieur à 1 minute 
 
Mise à jour de sécurité pour Windows XP (KB841873)
Taille habituelle du téléchargement : 445 Ko , inférieur à 1 minute

This post has been edited by Camarade_Tux: 23 April 2006 - 10:23 AM

[Tomcat76]

@Camarade_Tux

The MDAC_TYP.msi problem was solved in 60423c.

Would you mind giving me the REG fixes you included?

the_guy, on Apr 23 2006, 05:50 PM, said:

The XPSP1 912812 fix, is that also for 2000 sp4 with IE6?

I'm only doing it for XPSP1.

Camarade_Tux, on Apr 23 2006, 05:56 PM, said:

edit : you're killing me, it's possible to stand WMP, but not the bliss wallpaper.

Are you talking about the black DOS boxes?

[Camarade_Tux]

I added this, by hand, after installation.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP2\KB833987]
"Type"="Update"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP2\KB914798]
"Type"="Update"

...testing new release.

Tomcat76, on Apr 23 2006, 05:31 PM, said:

Camarade_Tux, on Apr 23 2006, 05:56 PM, said:

edit : you're killing me, it's possible to stand WMP, but not the bliss wallpaper.

Are you talking about the black DOS boxes?

No, I removed many things with nLite and I didn't that time, and it was a shock to see all those components back. Nevermind.
btw, I'm a command-line warrior : everything with CLI even when it should be done in another way.

This post has been edited by Camarade_Tux: 23 April 2006 - 10:37 AM

[murvun]

Tomcat76: for the cpl and cpi Problem I added my hfslip.log and my txtsetup.sif

I can't add a .log file so it is compressed...

Thanx for looking!

Attached File(s)

•  SOURCESS_FILES.7z (53.36K)
  Number of downloads: 29

This post has been edited by murvun: 23 April 2006 - 11:02 AM

[Camarade_Tux]

Using last version, I still have the same "missing" updates with MBSA and HFNetChk. Especially, it complains about MDAC 2.7. A file named MDAC_TYP.pf exists in the Prefetch folder so MDAC_TYP.exe has been launched but I can't say anything else.

edit: remember I'm using SP1a.

This post has been edited by Camarade_Tux: 23 April 2006 - 11:20 AM

[Tomcat76]

@Camarade_Tux:
When you include MDAC_TYP.EXE, the hotfix won't take. You need to apply it manually after setup finishes. It's the same deal as with WMP10 on XPSP1 (and on XPSP2 when it's in the HFSVCPACK_SW folder).

@murvun:
Thanks. I'll take a look at it.