AstroSkipper

Are you running ESET/NOD32 anti-virus? If so and you have SSL protocol filtering enabled you need to add an exception for MU related sites or you have to disable this feature. Same in AVAST called HTTPS Scanning. My security program is AVAST Premier and I have disabled HTTPS scanning. Another method is letting MU generate a completely new SoftwareDistribution folder. Maybe there are faulty downloaded updates in this folder. Here some other methods to fix error code 0x80072F8F: https://answers.microsoft.com/en-us/windows/forum/all/error-code-0x80072f8f/d5006dbe-5946-4d68-8f08-8620eeb65efd here very interesting method 3 and 4. Hope you can fix it. Greetings from Germany

Hi @dave-h, I had a lot of error codes getting from MU site. Now it is working perfectly. Did you use WSUS server in combination with WUMT in the past? If so maybe your DataStore.edb is corrupt. This was one of my problems. Stop Automatic Update Service, make a backup of SoftwareDistribution folder, then delete DataStore.edb. Start Automatic Update Service again and try to access MU via ProxHTTPSProxy. MU generates a new DataStore.edb file. With your backup of DataStore.edb you can go back to old history whenever you want. I have two DataStore.edb files, one for WSUS server and one for MU. One for all doesn't work in my system. If that doesn't help try HTTPSProxy which came from Thomas S.. I use it and everything works flawlessly. Editing config file is necessary. My entries I provided some posts above. In my system I have both configured ProxHTTPSProxy and HTTPSProxy and they are working without any problems if config file has the correct entries.

Strangely, that redirects to http://fe2.update.microsoft.com/microsoftupdate. That trailing period looks wrong and the link just gives a server error page. (That may have been the original problem, but I couldn't see the error because IE's https: handling hid it from me.) But if you remove that trailing period (i.e., http://fe2.update.microsoft.com/microsoftupdate), it works! (BTW, MU takes way longer to scan than WU, but that makes sense because I have Office 2010 and I think one of its cumulative updates triggers the old "scans forever" bug. Oh, well; at least I can get to the scan now!) I'd still love to know why the MU link on the WU page worked a few days ago but doesn't now, but since removing the trailing period works, I'll just bookmark the link that way and not worry about it. Yes I copied your config.ini entries from your screen shot earlier. They work fine but didn't solve the MU problem, since the redirect on M$'s server is apparently wrong (has that extra period as shown above). If you want to have a working Microsoft Update shortcut in your start menu you have to add http://update.microsoft.com in trusted zone of IE (security level must be high) and to modify config file of ProxHTTPSProxy in the way I described above. Without these modifications I had problems to open MU site randomly using Microsoft Update shortcut in my start menu. For me it is now working flawlessly. Look at my screenshot! https://imgur.com/2Nr0xEi

I agree to @xpandvistafan. You have to avoid https-links to open Microsoft Update. If you want to access MU directly try http://fe2.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de (I am German), for you http://fe2.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en. And you have to check config.ini of ProxHTTPSProxy. Under section [SSL No-Verify] I added fe2.update.microsoft.com and deleted update.microsoft.com under sections [SSL Pass-Thru] and [BYPASS URL]. This is working for me although I use predominantly HTTPSProxy. If wanted I can provide my config file of ProxHTTPSProxy.

I know but in my system it didn't work. Either I have to disable sfc or I have to cut off sfc fetching an old wuaueng.dll file from \i386. I have an imaging system for backing up partitions so I am glad to disable sfc. No old system files anymore without my permission!

@maile3241 The cmd file is a batch file. You can add in first line a path command for example "path c:\WINDOWS\system32\wbem\" or "set path c:\WINDOWS\system32\wbem\", If you add more than one path you have to separate by semicolon e. g. "path c:\WINDOWS\system32\wbem\; c:\WINDOWS\system32\dllcache\". In Windows XP you can set global paths. Look here: https://cs.calvin.edu/courses/cs/112/resources/installingEclipse/path/

wmic.exe is a WMI command-line program. Maybe you have to set a path to where it is located in your system (path command). I have it twice in c:\WINDOWS\system32\wbem\ and c:\WINDOWS\system32\dllcache\. Usually these paths already exist.

In my opinion this cmd file is not working properly. So I decided to disable sfc to do it manually where the batch file fails. You can do registry manipulation by reg file (copy the section in cmd file to reg file) and apply all patches which were executed. I did it and it works. I think this file has to be executed as admin.

@maile3241 Once more, thanks for your great help! Glad it works for you too and I could help a bit. It wasn't easy to find the cause of my error codes (I had a lot of them) but my guess to edit config.ini of HTTPSProxy was correct. I have checked a lot of registry entries and files. Now I have tested Microsoft Update site several times and it works flawlessly. It found one update missing and I could install it from there. See my screenshot https://imgur.com/oAO72vT

Hello to all. First thanks all for your help! I've examined what was going wrong in my system. I found out that the patch in Restore_WU_XP_2003.7z didn't work in my system due to system file protection. The file wuaueng.dll was replaced by sfc. So I patched my sfc_os.dll in folder system32 to disable sfc. Here is a working instruction: After that patching I put the patched sfc_os.dll in both folder system32 and system32\dllcache. Now I was able to copy manually wuaueng.dll in both folders. But that was not enough. To get Microsoft Update working you have to edit config.ini in ProxHTTPSProxy or HTTPSProxy shown in my screenshot. Now it works and I can use Microsoft Update in my Internet Explorer. See my screenshot! https://imgur.com/CmN76Au https://imgur.com/re8X4cH

Well, I did all steps without any success. I tried ProxHTTPSProxy instead of HTTPSProxy, imported ca.cert and so on. I get different error codes dependent on entries in ProxHTTPSProxy's config.ini. @xpandvistafan Did you change these settings? What am I missing?

Ok, I've merged the reg file into my registry. The first two entries have been already there, only the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp was missing. After restarting my computer when searching updates I get a new error code 0x80244004. Additionally I tried to modify the entries [SSL No-Verify] and [SSL Pass-Thru] of HTTPSProxy's config.ini without final success. Can you provide your entries in ProxHTTPSProxy's config.ini? And did you patch anything else or have you imported additional certificates? Here is my screenshot with error code 0x80244004: https://imgur.com/yDfXPOc

I have reinstalled these four updates flawlessly. I get a fully loaded Microsoft Update site using HTTPSProxy (that's very good ) but when searching updates I get error code 0x80072F78 again. I tried to load it a several times. See my screenshot https://imgur.com/xOfqchc

Ok, I've corrected that. I already said this thread is a bit confusing. Now I can see a fully loaded Microsoft Update site using HTTPSProxy. Without HTTPSProxy it doesn't work. But when searching updates I get error code 0x80072F78. See my screenshots https://imgur.com/nO9N9kh https://imgur.com/OGBN3qb

Hello, thanks for reply. I've already added these sites to Trusted Zone of IE and set security level to high. No chance. When you set security level to high Active scripting is disabled and Microsoft Update site can't install plugins meaning MU can't go on. Here a screenshot: https://imgur.com/o4P8B95

All these updates I had installed when they were offered via MU. I have the most recent root certificates updated by CAupdater and all updates incl. POSReady updates. But Microsoft Update doesn't work in IE. When Active scripting is enabled Microsoft Update is looping between http://fe2.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=de and http://fe2.update.microsoft.com/microsoftupdate/v6/default.aspx. Without Active scripting no loop back but then you'll get Error number: 0x8DDD0001 like this: https://imgur.com/6jHMuyq

What certificate do you mean? cacert.pem in program folder of HTTPSProxy (using HTTPSProxy instead of ProxHTTPSProxy) or site certificates like fe2.update.microsoft.com.crt in cert folder of HTTPSProxy or what? Very confusing these comments in this topic.

Thanks for clarifying! You're right I have to test official binaries on a Windows 7 or 10 PC first to decide whether it is an official ffmeg issue or a problem of your mods. Thanks so far!

Sorry, I thought you are the creator of these new xpmod-sse binaries on https://rwijnsma.home.xs4all.nl/files/ffmpeg/?C=M;O=D. Do you know who the author of these binaries is? By the way there are a lot of free German VPN or German proxy servers but anyway I need new binaries only for Windows XP. So your link https://ffmpeg.org/download.html#build-windows does not help and I think there is something going wrong by building these specific new xpmod-sse binaries so the original coder of FFmpeg can't help. Help of the creator of these specific new xpmod-sse binaries is needed! Thanks so far

Thanks for very quick reply! I'm not getting "HTTP error 403 Forbidden" for both urls. I think you have to be in Germany to watch these streams due to terms of license . Maybe you can test it with a German VPN. I triied a German VPN and it works too. ffplay.exe of old legacy build ffmpeg-N-93674-g1e01f66-win32-static_legacy can play these streams without errors in Germany or using German VPN but using any new xpmod-sse builds no chance. In the command line log window I can see "skip...." endless lines. Then I got error message of windows. Maybe you want a log of these errors? It seems the new ones can't find audio streams and so on.

Hello, I use the FFmpeg for Windows XP builds to watch Live TV streams. Really nice work and thanks for that. But there is a problem. All new xpmod-sse builds work great and better than the old legacy ones except with Live streams of two German local channels ZDF and ZDFneo. The stream urls are https://zdf-hls-15.akamaized.net/hls/live/2016498/de/med/master.m3u8 and https://zdf-hls-16.akamaized.net/hls/live/2016499/de/med/master.m3u8. ffplay.exe of old legacy build ffmpeg-N-93674-g1e01f66-win32-static_legacy can play these streams without errors. Something must have changed by modifying I think. Any ideas? Thanks and regards

And on Windows XP Serpent can open https://tls13.1d.pw/ too saying: "Successfully connected TLS 1.3 OK;" Unbelievable!

@Roytam Hello Roytam, great job you are doing here. Thanks for keeping Win XP alive! I don't know whether you already have noticed your host o.rthost.cf is not accessible. Hope it isn't a serious problem. Best regards

Hello heinoganda, thanks for your reply. I've got no update officially offered through Microsoft Update. Can you send me your german installer MSEInstall.exe or provide a download link? Thanks and regards

@Raupinator I am german and interested in a german installer of Microsoft Security Essentials 4.4.304 you offered some posts above. Can you provide a download link? Thanks in advance