abbodi1406
Content Type
Profiles
Forums
Events
Posts posted by abbodi1406
-
-
How would have skipped Spectre/Meltdown patches when all Security Only Updates include ntoskrnl.exe?
1 -
On 8/19/2023 at 1:48 AM, w2k4eva said:
One thing that still puzzles me is about the *.sst files themselves. What is the function of each file, and does updroots.exe do anything different based on the filename it is called for?
I mean, the use of something called "delroots.sst" or "disallowedcert.sst" seems self explanatory, but what about the other 3? I see from the contents that roots.sst has Microsoft-related stuff that could be needed to check the cert lists themselves, so it makes some sense to have it in a separate file for the convenience of those folks who want to manage their own lists.
But for authroots.sst vs updroots.sst, the difference is less clear. There must be some reason Microsoft used 2 files instead of combining them all into 1 file, so how are these different?
UpdRoots process the files based on the parameters not filename, e.g. if you run updroots.exe delroots.sst it will add the certificates not delete them
Usage: UpdRoots [options] <SrcStoreFilename> Options are: -h - This message -d - Delete (default is to add) -l - Local Machine (default is Third Party) -u - Add to disallowed root store
based on some checking,
updroots.sst contain certificates that can be downloaded separately from WU (manually or using CertUtil –generateSSTFromWU), e.g.
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/8F43288AD272F3103B6FB1428485EA3014C0BCFE.crt
authroots.sst certificates are not downloadable separately from WU2 -
KB930916 does not exist for XP x64
there are many updates that replace KB930627 and take place, e.g. KB2876331 or KB3069392
you can find all windowsupdate (public and custom support) links for Windows XP x64 Edition here
https://msfn.org/board/index.php?showtopic=1825992 -
Usually for Vista and Win7, it's enough to change wuauserv ServiceDll registry to point to modified file (e.g. wuaueng2.dll)
0 -
On 4/27/2021 at 4:19 AM, VistaLover said:
A cursory Google/Microsoft search didn't yield any...
Of course, I did findhttps://download.microsoft.com/download/2/0/E/20E90413-712F-438C-988E-FDAA79A8AC3D/dotnetfx35.exe
(full standalone installer), but it's only SHA-1 signed...
This page now provide the SHA-2 signed dotnetfx35.exe (it's signed since July 2021, but the server timestamp for the file is February 2022)
https://dotnet.microsoft.com/en-us/download/dotnet-framework/net35-sp1
they also signed the inner installers (exe, msi, msp..), but the content is still the same old dotnetfx35.exe
2 -
Adding g_sconsumersite manually to fe2.update url (to open MU site) prevent the redirection loop with www.update url
http://fe2.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en&g_sconsumersite=1
the site opens in Win 7 / 8.1 too (not that it would work)
2 -
What files are missing from the full .Net 3.5 offline installer?
you can build .NET 3.0 SP2 installer manually from dotnetfx35.exe
https://docs.microsoft.com/en-us/archive/blogs/astebner/creating-an-administrative-install-point-for-the-net-framework-2-0-sp1
https://docs.microsoft.com/en-us/archive/blogs/astebner/creating-an-administrative-install-point-for-the-net-framework-3-0-sp1those guide are for SP1, but works the same for SP2
similar guide
https://docs.bmc.com/docs/ServerAutomation/89/deploying-net-653397308.htmlFYI, standalone installer for .NET 3.0 SP2 actually exist, but it's not directly acquirable
you can find it within the VS 2008 bootstrapper packages
https://docs.microsoft.com/en-us/archive/blogs/astebner/vs-bootstrapper-packages-for-net-framework-2-0-sp2-and-3-0-sp2-available-for-downloadclick on Download location to get packages_setup.exe
then extract adtbs_sp2oob.cab/adtbs_sp2oob.msi
then use lessmsi to extract adtbs_sp2oob.msior install the whole package and find the installers under
C:\Program Files\BootstrapperPackages
1 -
On 1/11/2022 at 12:35 PM, ExtremeGrief said:
I found the KB4501226 that some people were searching for, is it still needed?
Name: windowsxp-kb4501226-x86-embedded-enu_708fe12ecfbbb070821a87fd538af3b6b6fd3084.exe
Size: 536616 bytes (524 KiB)
SHA1: 708FE12ECFBBB070821A87FD538AF3B6B6FD3084
I have in all languages lol
https://msfn.org/board/topic/182599-nt-5x-windows-update-urls-dump-inc-custom-support-updates/
1 -
@Boss Did you verify the new certificate is properly trusted? i.e. check authroot.stl signature
and you may need to redo steps in https://support.microsoft.com/en-us/topic/3acf0348-0f81-7c79-7029-a7c6c861cdfc
0 -
@Boss based on picture 6, parent "Microsoft Root Certificate Authority 2010" is not properly trusted in your os
http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crtCertUtil -addstore Root MicRooCerAut_2010-06-23.crt
0 -
Are you sure the msp files from the corresponding loc updates did not replace KB4504738/KB4504702/KB4493218 files in Updates folder?
i mean these updates, you should only extract the language msp file from them:
msoloc2010-kb2956076-fullfile-x86-glb.exe
powerpointloc2010-kb4092435-fullfile-x86-glb.exe
wordloc2010-kb4461625-fullfile-x86-glb.exeKB4011610 is provided as text file that contain the download links
you should choose and download the right file per Office language (e.g. eqnedt322010-kb4011610-fullfile-x86-en-us.exe)KB3001652 is VC runtime (similar to VC++ redists), it's not actual update for Office 2010 itself
0 -
https://aka.ms/framework-sha1-retirement
Quote.NET Framework 1.0, 1.1, 2.0, 3.0, 3.5, 4.0, 4.5, 4.5.1
These versions of .NET Framework are currently out of support per the published lifecycle policy.
All bundles, installers, packages, and updates for these versions will be de-listed from the download center on July 26, 2021
SHA-2 signed installers are available for .NET Framework 3.5 SP1 to be used on Windows Server 2008 SP2.
3 -
17 hours ago, WinFX said:
What about those updates? Windows 2000 ended support in July 2010, and there were updates for May 2016. As for Windows XP, there were updates for August 2019.
They were never in the Windows Update Catalog.
I don't want to be conspiranoid, but are they updates from big companies that MS secretly gave you paying for an expensive service like Windows 7 ESUs? Or could it even be from the pentagon? since I read that in 2018 they were still working 9x in the facilities but without internet for security reasons.
Hence the description "Custom Support Updates", AKA internally for paid companies
it had been known for years that XP SP3 got those custom unpublished updates, but now we know that W2k and W2k3 got them too
custom updates for W2k started in 2014-06, at the same time when the custom support program started for XP SP3the links are public, the updates are not blocked for installation, what would be suspicious?
0 -
-
Quick observation:
- Some of Window 2000 custom updates were included in the discontinued Security Release ISO Images
- Windows Server 2003 custom updates are not blocked for Windows XP x64 (i didn't check all)
even the known blocked update KB2926765 has a custom variant which is not blocked- IE for Server 2003 x86 got only two custom updates, but for Server 2003 x64 it got many (latest is 2019-09 KB4516046)
- Windows XP SP3 x86 last custom updates were for 2019-02 (not taking public KB4500331 into account)
there are none for 2019-03/2019-04 (they didn't create them or i could not get them)- Windows XP SP3 x86 custom updates eventually are the same as the equivalent embedded updates, with few exceptions:
- custom KB3092627 is not available for embedded (replaced by KB4493790 anyway)
- custom KB4025409 is equivalent to the first embedded KB4025409 (2017/06), which contain WLDAP32.dll 5.1.2600.7294 and adamdsa.dll/adambsrv_xp.dll
- custom KB4035382 is equivalent to the second embedded KB4025409 (2017/07), which contain only WLDAP32.dll 5.1.2600.7313
* some embedded updates have no custom equivalent:
- few IE updates, including the latest for IE6/7/8
- DST and Timezones updates
- RDP KB3020338
- IME KB2991963
- v2 of KB4089453 and KB4487085
- TLS 1.2 updates KB4019276, KB4459091, KB4467770
- 2019-03/2019-04 updates
* embedded-custom updates are ment for XP Embedded (XPe), but they work the same as other embedded updates:
- IE7 updates, up to the latest KB4480965 (2019-01)
- JScript/VBScript 5.7 updates, up to the latest KB3169659
0 -
- Windows NT 5.x family windowsupdate.com links for available languages, including all (any?) Custom Support Updates
- The updates links are grouped for each build, slightly sorted, and ordered lexicographically per update number or file name as possible
- Superseded (replaced) updates are not filtered or excluded
- The dump is available as csv files containing updates name and url, or plain text files containing updates url
- It's recommended to use CSVFileView to check the csv files
https://www.nirsoft.net/utils/csv_file_view.html- You can filter or extract updates for certain language using findstr (Vista or 7)
e.g.
findstr /i \-enu NT_5.2.3790-x64-Custom.csv > NT_5.2.3790-x64-Custom-enu.csv
however, few update have different language identifier or none, so it's best to review the whole file first- NT_5.1.2600-x86-SP2-Custom and NT_5.1.2600-x86-SP2-Custom-IE are ment for the EOS Windows XP SP2 x86 only
- NT5-ia64 is for Itanium-based Server 2003 / Windows XP
- .NET Framework packs and updates for NT 5.1/5.2 are in a separate list files, likewise Windows Media Player and some eXtra updates
# P.S. Maybe it's best not to post the links explicitly in the forum replies or text sites (pastebin, txtuploader..), and share them in the txt/csv files
# Download
https://gitlab.com/stdout12/adns/uploads/9ca06a12dd08c06edd889e65afa637fa/NT5_WU_URLs_csv.7z
https://gitlab.com/stdout12/adns/uploads/33fcfd0b0f6c1a0cb74472cb8407800d/NT5_WU_URLs_txt.7z
11 -
Updates with name KB24286772010* are special and not applicable for all, KB2428677 is a private paid hotfix related to some enterrise Add-ins
0 -
On 1/4/2021 at 5:40 PM, InterLinked said:
Wouldn't this download all post-SP2 updates though, including those that have been superseded?
My thinking was just to download the relevant ones, to reduce the size of the files on disk. Already this is taking up several GB on my hard drive.
No, it only download latest applicable updates, none of them is superseded
Updates folder containing osetup.dll/ose.exe + SP2 files + post SP2 files for 32-bit en-us will be ~ 1 GB
SP2 + updates files for Project/Visio ~ 255 MB1 -
I wish i saw this topic eariler, i would have recommended to try WHDownloader program (you can find at majorgeeks or softpedia)
a downloader for Windows and Office updates, including 2010
it require .NET 4.x
after running it, press on the upper left blue arrow to download update lists, then choose Office2010-x86
all updates are post SP2if you don't want to use the program, you can check this text file which contain download links for the updates
https://dl.dropboxusercontent.com/s/ryxbk6ef9cfimd5/Office2010-x86.txt
https://dl.dropboxusercontent.com/s/cq3k8prbzd9pnus/Office2010-x64.txtmost are exe files format, and the rest are in cab files format (because they removed old exe links from download center)
for some multilingual updates, the links are for other text files that contain detailed links for each languageto update or create Office 2010 ISO with SP2 + post-SP2 updates:
- you don't need any SP1 files, so you can remove them from Updates folder if exist
- download SP2, and extract the file pointing to Updates folder, example:
officesp2010-kb2687455-fullfile-x86-en-us.exe /extract:"C:\Office2010\Updates" /quiet
- optional: delete the extracted xml files, not needed
you can also delete most proof-xx-xx.msp files for language you don't have, leaving only main lang + companion proofing langs- mandatory: rename all SP2 files adding pre_ prefix, example:
pre_clientshared64mui-en-us.msp pre_clientshared64ww-x-none.msp pre_clientsharedmui-en-us.msp pre_officesuitemui-en-us.msp pre_officesuiteww-x-none.msp pre_osamui-en-us.msp pre_proof-en-us.msp pre_proof-es-es.msp pre_proof-fr-fr.msp pre_proofing-en-us.msp pre_projectmui-en-us.msp pre_projectww-x-none.msp pre_visiomui-en-us.msp pre_visioww-x-none.msp
- mandatory: add updated osetup.dll and ose.exe to Updates folder
updated osetup.dll can be found inside:
SP2 officesuiteww-x-none.msp
or
kb4022208 osetup-x-none.msp (newest)updated ose.exe can be found inside:
SP2 officesuiteww-x-none.msp
or
kb4022206 ose-x-none.msp (newest)you can use 7-zip to extract the files
- then, add post SP2 updates to Updates folder
- Important note:
for some products that have 2 updates each, one is neutral and the other is multilingual (Localizations)
you only need the language msp file from multilingual update, the main msp file take it from neutral updateexample:
wordloc2010-kb4461625-fullfile-x86-glb.exe
word2010-kb4486740-fullfile-x86-glb.exeyou need:
wordintl-en-us.msp from wordloc2010-kb4461625
word-x-none.msp from word2010-kb4486740
0 -
-
KB2990941 is the only single update that add NVMe support
KB3087873 fixes issue afterwards, and KB2864202 as prerequisiteConvenience Rollup KB3125574 replace them all
0 -
-
TrustedInstaller is a service, and it own all OS components (files)
the posted two tools provide a way to execute a program as System account with TrustedInstaller token = grant full permissions
1 -
KernelEx for Windows XP?
in Windows XP
Posted
Scroll towards the end of the archived ryanvm link he posted above, and you will find link for BuildEnviroment.7z