heinoganda

Coming Patchday, in case there is a cumulative update for IE8, install it manually again first!

No good news, on Facebook, videos are now only played with the Flashplayer. Videos need, compared to Google Chrome, very long time to start this. On youtube, the Primetime Content Decryption Module is still used. It is probable that probably the future support for the Primetime Content Decryption Module will be omitted.

Oh, oh! There was the error devil at work!

Which version of MSWord, older, same or newer than 2007? Is the Office Compatibility Pack installed? If the version of MSWord is older than 2007, and no Office Compatibility Pack is installed, then disable Automatic Updates, restart the PC, make sure Windows Installer 4.5 (KB942288-v3 INT) is installed, now the latest cumulative update for IE8 (KB4040685 NOR) download and install, make sure that the POSReady entry is correctly registered in the registry, and finally open Internet Explorer and let Windows Update check for updates. KB942288-v3 for Windows Installer 4.5 http://download.microsoft.com/download/2/6/1/261fca42-22c0-4f91-9451-0e0f2e08356d/WindowsXP-KB942288-v3-x86.exe KB4040685 for IE8 http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/09/ie8-windowsxp-kb4040685-x86-embedded-nor_137ebc499cced82d90fae6c4b9e27d014a82ad62.exe

It should be installed before the POSReady key is installed the regular updates (with under IE8, Media Player11 and if necessary .NET framework 3.5 / 4). Next, disable Automatic Updates, Install Windows Installer 4.5. KB942288-v3 for Windows Installer 4.5 http://download.microsoft.com/download/2/6/1/261fca42-22c0-4f91-9451-0e0f2e08356d/WindowsXP-KB942288-v3-x86.exe KB4040685 for IE8 http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/09/ie8-windowsxp-kb4040685-x86-embedded-nor_137ebc499cced82d90fae6c4b9e27d014a82ad62.exe Now enter the POSReady entry in the registry, restart, install current Cumulative Update for IE8 (update each month manually before starting a scan for updates) and the Internet Explorer with Windows Update to search for updates. If a Norwegian language version of Windows XP is installed, then Norwegian updates are also required according to the language version. There is an exception when an English-language Windows XP Pro VLK (volume license key) with Norwegian MUI (Multilingual User Interface) is installed, but English-language updates are still installed. Is an Office Software Installed (Word Excel)?

Regarding WIFI: There was an update for Windows XP, KB4042723 (wzcsvc.dll). Best inquire inform at your router manufacturer, whether your router is affected by this vulnerability.

Here is the link for the Norwegian language version of Windows XP. http://download.windowsupdate.com/c/msdownload/update/software/updt/2017/10/windowsxp-kb4019276-x86-embedded-nor_be244a0ef03a7b2bd69923b3f7617594b21585fa.exe

@Dibya No ECC root certificates (signature algorithm 2.840.10045.4.3.3) can be added to the certificate management in Windows XP. Here's the problem! @Dave-H The update KB4019276 must be downloaded manually. http://download.windowsupdate.com/c/msdownload/update/software/updt/2017/10/windowsxp-kb4019276-x86-embedded-enu_3822fc1692076429a7dc051b00213d5e1240ce3d.exe

If the certificate management of Windows XP would also process ECDHE_ECDSA certificates, many problems would be solved with Chromium based webbrowser!

Because of KB4019276, communication between a client and server with TLS 1.1 and TLS 1.2 is possible (domain controller and IIS). Root certificates with encryption ECDHE_ECDSA are still not supported and have no effect with IE8 on Windows XP. Chromium-based web browsers use the certificate management of Windows, since it already supports TLS 1.1 and TLS 1.2 certificates, but no ECDHE_ECDSA certificates, does not change with this update. @Dibya Look at the files for Server 2008, which could show you the way for an implementation of modern encryption techniques in Windows XP.

Of course there was an update to Windows XP, KB4042723 (wzcsvc.dll). According to my manufacturer of the router, this is not affected with the current firmware, best at your router manufacturer inquire / inform. Today, there was another update (KB4019276 download / info) for Windows XP to support TLS 1.1 and TLS 1.2 (client - server / IIS).

@Dave-H Thank goodness a feedback, had already been afraid that the apartment burned down. In the future it is enough to install the latest cumulative update for IE8 manuel before a search, AU should be deactivated.

Have it just tested with switched on AU, with the svchost.exe no prolems with increased processor load due to KB4025398. Already a reboot? Latest cumulative update of IE8 already installed? Otherwise, I agree with the previous comment.

@Dave-H I do not want to see your electricity bill, but in the cold season it can be heated with the computers during the search well. Something positive, it is a good stability test.

@dencorso Find it nice that you at least tried it before it is no longer possible. In the future, the most recent cumulative update for IE8 should suffice. Many should not forget to install the latest KB4025398 from August 28, 2017 (msinfo.dll), firstly uninstall the older KB4025398 update to restore the original version 5.1.2600.0 of the msinfo32.exe file.

@SD73 On the subject of the high CPU utilization during the search at WU / MU, I had already given a recommendation a long time ago. Here, the steps with the most recent cumulative update of IE8 and Office Compatibility Pack and / or Office Updates have already been circulated, but no one seems to have taken the trouble to date. That's why an upvote to @dencorso. @ all Small info on the edge, the complete list of .NET Framework 3.5 and 4 updates for Windows XP now also with downloadlinks.

So far there was no problem with the updates. Off Topic: @FranceBB If no interest is at ProxHTTPSProxyMII more, then please send me a message.

Update for root certificates: Delete: CN = Sonera Class1 CA O = Sonera C = FI New: OU = AC RAIZ FNMT-RCM O = FNMT-RCM C = ES SN:5d 93 8d 30 67 36 c8 06 1d 1a c7 54 84 69 07 CN = GTS Root R1 O = Google Trust Services LLC C = US CN = GTS Root R2 O = Google Trust Services LLC C = US CN = Halcom Root Certificate Authority 2.5.4.97 = VATSI-43353126 O = Halcom d.d. C = SI CN = Netrust Root CA 2 OU = Netrust Certificate Authority O = Netrust Pte Ltd C = SG CN = SSC GDL CA Root A OU = CA ROOT Services O = Skaitmeninio sertifikavimo centras C = LT CN = SSC GDL CA VS Root OU = VS ROOT Services O = Skaitmeninio sertifikavimo centras C = LT CN = SSL.com EV Root Certification Authority RSA R2 O = SSL Corporation L = Houston S = Texas C = US Those using heinoganda's Cert_Updater.exe should run it ASAP. Others needing a redistributable rootsupd.exe should follow his instructions for creating their own, or PM at 5eraph for an updated EXE file.

Bliss Moon (As an allusion to the background image of Windows XP)

Have you given an updated HTTPS proxy, just start ProxHTTPSProxy_PSwitch.exe and on the fly, all websites work with Chrome!

Have new build generated by ProxHTTPSProxy (Rev2i), various python modules and CA certificates (cacert.pem) updated. If anyone has interest please write a PM to me. Info:

Links also work unencrypted! 32bit http://o.rthost.cf/palemoon/palemoon-27.6.0a1.win32-git-20171006-fc3f4bdc7-xpmod.7z 64bit http://o.rthost.cf/palemoon/palemoon-27.6.0a1.win64-git-20171006-fc3f4bdc7-xpmod.7z Download Pale Moon unstable releases from https://www.palemoon.org/unstable, unzip the file with WinRAR or 7zip and exchange the content from the core folder. The files from the LAV Codec can also be copied directly into the core folder.

Yes, you should install KB4039111. About KB4039111. @ all For KB4025398, the incorrect version should be uninstalled before installing the latest one. If the current update is installed with KB4025398 via the incorrect update, the msinfo32.exe file is not removed. If KB4025398 is uninstalled, the msinfo32.exe file is restored, but msinfo.dll is not restored, KB4025398.cat is also uninstalled from the ProductCatalogs. So that there could be problems with the file protection. In this case, I can offer a uninstaller solving this problem, it will be necessary any suitable Windows XP sp3 installation medium which was used for the installation. After cleanup, reinstall the more up-to-date and error-free KB4025398 update. For ENU and DEU is also an uninstaller, where no Windows XP sp3 CD is needed. If interested, please send a PM.

Hello glnz, if KB4039384 and KB4039111 already installed, they do not need to be installed again!

So far it has now also worked with the language pack, as recommended by @VistaLover recommended the maxVersion entry in the file install.rdf. I am not a big Pale Moon user, but it is always good to have an alternative web browser. In the upcoming versions of New Moon by Feodor2 will show whether various changes such as the three codec files of K-Lite. If not, it would not be bad if in the future you also a version of New Moon from the regular release give. Thank you for your efforts.