abbodi1406

External report https://forums.mydigitallife.net/threads/is-anyone-here-has-msfn-org-account-or-knows-how-to-contact-jfx.90161/

ESU (Extended Security Updates) != EOS (End of Service/Support)

It's wuaueng.dll regression for calculating updates metadata chain, specifically these functions CUpdatesToPruneList::PopulateSupersedenceInfo CUpdatesToPruneList::AddSupersedenceInfoIfNeeded they fixed it for Win 7-8.1, but they never backported the fix for Vista/Server 2008

FYI, Windows 2000 no longer can use Microsoft Update even with patched wuaueng because the new v6-legacy-muauth.cab is sha2 signed, it cannot verify it

Well, what workaround you were using? patched wuaueng.dll will use the same backend as Win7

https://adamdemasi.com/2025/07/04/windows-7-microsoft-update-issue.html

Scroll towards the end of the archived ryanvm link he posted above, and you will find link for BuildEnviroment.7z

How would have skipped Spectre/Meltdown patches when all Security Only Updates include ntoskrnl.exe?

UpdRoots process the files based on the parameters not filename, e.g. if you run updroots.exe delroots.sst it will add the certificates not delete them Usage: UpdRoots [options] <SrcStoreFilename> Options are: -h - This message -d - Delete (default is to add) -l - Local Machine (default is Third Party) -u - Add to disallowed root store based on some checking, updroots.sst contain certificates that can be downloaded separately from WU (manually or using CertUtil –generateSSTFromWU), e.g. http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/8F43288AD272F3103B6FB1428485EA3014C0BCFE.crt authroots.sst certificates are not downloadable separately from WU

KB930916 does not exist for XP x64 there are many updates that replace KB930627 and take place, e.g. KB2876331 or KB3069392 you can find all windowsupdate (public and custom support) links for Windows XP x64 Edition here https://msfn.org/board/index.php?showtopic=182599

Usually for Vista and Win7, it's enough to change wuauserv ServiceDll registry to point to modified file (e.g. wuaueng2.dll)

This page now provide the SHA-2 signed dotnetfx35.exe (it's signed since July 2021, but the server timestamp for the file is February 2022) https://dotnet.microsoft.com/en-us/download/dotnet-framework/net35-sp1 they also signed the inner installers (exe, msi, msp..), but the content is still the same old dotnetfx35.exe

Adding g_sconsumersite manually to fe2.update url (to open MU site) prevent the redirection loop with www.update url http://fe2.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en&g_sconsumersite=1 the site opens in Win 7 / 8.1 too (not that it would work)

What files are missing from the full .Net 3.5 offline installer? you can build .NET 3.0 SP2 installer manually from dotnetfx35.exe https://docs.microsoft.com/en-us/archive/blogs/astebner/creating-an-administrative-install-point-for-the-net-framework-2-0-sp1 https://docs.microsoft.com/en-us/archive/blogs/astebner/creating-an-administrative-install-point-for-the-net-framework-3-0-sp1 those guide are for SP1, but works the same for SP2 similar guide https://docs.bmc.com/docs/ServerAutomation/89/deploying-net-653397308.html FYI, standalone installer for .NET 3.0 SP2 actually exist, but it's not directly acquirable you can find it within the VS 2008 bootstrapper packages https://docs.microsoft.com/en-us/archive/blogs/astebner/vs-bootstrapper-packages-for-net-framework-2-0-sp2-and-3-0-sp2-available-for-download click on Download location to get packages_setup.exe then extract adtbs_sp2oob.cab/adtbs_sp2oob.msi then use lessmsi to extract adtbs_sp2oob.msi or install the whole package and find the installers under C:\Program Files\BootstrapperPackages

https://msfn.org/board/topic/182599-nt-5x-windows-update-urls-dump-inc-custom-support-updates/

@Boss Did you verify the new certificate is properly trusted? i.e. check authroot.stl signature and you may need to redo steps in https://support.microsoft.com/en-us/topic/3acf0348-0f81-7c79-7029-a7c6c861cdfc

@Boss based on picture 6, parent "Microsoft Root Certificate Authority 2010" is not properly trusted in your os http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt CertUtil -addstore Root MicRooCerAut_2010-06-23.crt

@mockingbird Are you sure the msp files from the corresponding loc updates did not replace KB4504738/KB4504702/KB4493218 files in Updates folder? i mean these updates, you should only extract the language msp file from them: msoloc2010-kb2956076-fullfile-x86-glb.exe powerpointloc2010-kb4092435-fullfile-x86-glb.exe wordloc2010-kb4461625-fullfile-x86-glb.exe KB4011610 is provided as text file that contain the download links you should choose and download the right file per Office language (e.g. eqnedt322010-kb4011610-fullfile-x86-en-us.exe) KB3001652 is VC runtime (similar to VC++ redists), it's not actual update for Office 2010 itself

https://aka.ms/framework-sha1-retirement

Hence the description "Custom Support Updates", AKA internally for paid companies it had been known for years that XP SP3 got those custom unpublished updates, but now we know that W2k and W2k3 got them too custom updates for W2k started in 2014-06, at the same time when the custom support program started for XP SP3 the links are public, the updates are not blocked for installation, what would be suspicious?

Might be another bummer for XP Microsoft to use SHA-2 exclusively starting May 9, 2021 KB5003341: Issues you might encounter when SHA-1 Trusted Root Certificate Authority expires

Quick observation: - Some of Window 2000 custom updates were included in the discontinued Security Release ISO Images - Windows Server 2003 custom updates are not blocked for Windows XP x64 (i didn't check all) even the known blocked update KB2926765 has a custom variant which is not blocked - IE for Server 2003 x86 got only two custom updates, but for Server 2003 x64 it got many (latest is 2019-09 KB4516046) - Windows XP SP3 x86 last custom updates were for 2019-02 (not taking public KB4500331 into account) there are none for 2019-03/2019-04 (they didn't create them or i could not get them) - Windows XP SP3 x86 custom updates eventually are the same as the equivalent embedded updates, with few exceptions: custom KB3092627 is not available for embedded (replaced by KB4493790 anyway) custom KB4025409 is equivalent to the first embedded KB4025409 (2017/06), which contain WLDAP32.dll 5.1.2600.7294 and adamdsa.dll/adambsrv_xp.dll custom KB4035382 is equivalent to the second embedded KB4025409 (2017/07), which contain only WLDAP32.dll 5.1.2600.7313 * some embedded updates have no custom equivalent: few IE updates, including the latest for IE6/7/8 DST and Timezones updates RDP KB3020338 IME KB2991963 v2 of KB4089453 and KB4487085 TLS 1.2 updates KB4019276, KB4459091, KB4467770 2019-03/2019-04 updates * embedded-custom updates are ment for XP Embedded (XPe), but they work the same as other embedded updates: IE7 updates, up to the latest KB4480965 (2019-01) JScript/VBScript 5.7 updates, up to the latest KB3169659

- Windows NT 5.x family windowsupdate.com links for available languages, including all (any?) Custom Support Updates - The updates links are grouped for each build, slightly sorted, and ordered lexicographically per update number or file name as possible - Superseded (replaced) updates are not filtered or excluded - The dump is available as csv files containing updates name and url, or plain text files containing updates url - It's recommended to use CSVFileView to check the csv files https://www.nirsoft.net/utils/csv_file_view.html - You can filter or extract updates for certain language using findstr (Vista or 7) e.g. findstr /i \-enu NT_5.2.3790-x64-Custom.csv > NT_5.2.3790-x64-Custom-enu.csv however, few update have different language identifier or none, so it's best to review the whole file first - NT_5.1.2600-x86-SP2-Custom and NT_5.1.2600-x86-SP2-Custom-IE are ment for the EOS Windows XP SP2 x86 only - NT5-ia64 is for Itanium-based Server 2003 / Windows XP - .NET Framework packs and updates for NT 5.1/5.2 are in a separate list files, likewise Windows Media Player and some eXtra updates # P.S. Maybe it's best not to post the links explicitly in the forum replies or text sites (pastebin, txtuploader..), and share them in the txt/csv files # Download https://gitlab.com/stdout12/adns/uploads/9ca06a12dd08c06edd889e65afa637fa/NT5_WU_URLs_csv.7z https://gitlab.com/stdout12/adns/uploads/33fcfd0b0f6c1a0cb74472cb8407800d/NT5_WU_URLs_txt.7z

Updates with name KB24286772010* are special and not applicable for all, KB2428677 is a private paid hotfix related to some enterrise Add-ins

No, it only download latest applicable updates, none of them is superseded Updates folder containing osetup.dll/ose.exe + SP2 files + post SP2 files for 32-bit en-us will be ~ 1 GB SP2 + updates files for Project/Visio ~ 255 MB