Dave-H

Well I've just manually downloaded authrootstl.cab and extracted the authroot.stl file from it. Looking at its contents, it dates from 22nd September 2017, so it's nearly a year old, and it contains a lot of long expired certificates! Why is Windows Update serving such an old version, and is it possible to change it to download the current version, even if it's not intended for XP systems? Presumably this problem must be happening on genuine POSReady systems?

Good, well that's three of us at least with the same issue! I'm sure he will correct me if I'm wrong, but I don't think running or not running Heinoganda's certificate updater has anything to do with these errors, as I think that updates something different to what the crypt32 updates are. As those crypt32 automatic updates are still happening, and were for ages after XP EOL before the errors started, they must be something different to what the certificate updater is designed to update, which is presumably something now no longer updated automatically by the OS. As I said, I've never run the certificate updater on my netbook, or done any other manual updates or alterations to any of the certificates system on that machine, and the errors have started there too, although they did take a lot longer to start appearing there than they did on my main machine for some reason.

A good thought, but I don't have Eudora installed on my netbook, so it can't be that!

Well my purging of the certificates on my machine didn't work. In fact I'm now getting so many errors on every boot that they're being suppressed to avoid swamping the log! I'm still really surprised that no-one else seems to be having this problem, as it's happening exactly the same on my netbook too, which has never had any changes made to its certificate system, it hasn't even had any manual updates applied using @heinoganda's updater or by any other means!

Yes, good to have the system working properly again finally, but why on earth did it take so long to do anything about it?! I fixed my .NET update problem by installing .NET 4 Extended, problem solved! Quite why I would need it I've no idea, but I have got it on my main machine anyway, I obviously never bothered with it on my netbook. I will have a look at that page Den mentioned. 🙂

Sorry for the delay in responding, I don't seem to be getting any e-mail notifications of replies again. Yes, I only have Client Profile installed on the machine with the problem, so that would certainly explain it!

Yes, I had to do that too! I also can't install KB4457046. It throws error 0x66A every time on Microsoft Update, and when I try the standalone installer, I get "KB4457046 does not apply, or is blocked by another condition on your computer." Anyone any ideas about that? I can't find any reference online to that specific problem. The other .NET 4.0 update installed fine.

Great, glad it worked for you, and I assume you have sound now too? I guess from what you're saying that you've done it as a global UA string. I did that for quite a while, but I then found one day that I couldn't log in to the British Airways website, and after a lot of head scratching I found it was due to having that string set, so I reverted the global setting back to default and used the add-on to just change the string for Facebook. Do bear that in mind if you get problems with any other sites. Cheers, Dave.

In that case you need to change the UserAgent that's being sent to Facebook. I use an add-on called "User-Agent Switcher" but there are many others out there. I would use one that will allow switching on a site-by-site basis, not a global change (which can be done within Firefox natively anyway in the about:config page). I found that caused issues on some other sites. Try using this UA string - Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0 With a bit of luck that will then make Facebook use HTML5, which may hopefully cure your sound problem too! The "Windows NT 6.1" bit is important, as Facebook must not be allowed to know you're using Windows XP, or it will serve Flash videos whatever version of the browser you say you're using! This tells it you're using Windows 7 of course. BTW I haven't turned off Firefox updating as I want to know if they do release an out of support update if there's a very severe security problem. I don't think it will affect the notice as the implication was that it was a once-only appearance anyway.

If you right click on a video, if it's using Flash you will see the Flash plugin menu. If it's using HTML5 you will see "Pause, Unmute, Show video URL, and Copy video URL at current time".

I was just glad to see "You will not see this again"! If it was going to pop up every time I used Firefox 52 ESR from now on I would not have been amused!

Perhaps I'm lucky, but my hardware seems to support OK Windows 98SE, Windows XP, and Windows 10 x64! I've no reason to change it anytime soon.

Are the videos definitely using HTML5, and not Flash? You do need to spoof the UserAgent to get Facebook to use HTML5 now. I use an add-on for that.

Boooooooooooooo!

Well I deleted all the files in the certificate cache folders, and cleaned the registry of all the system certificate entries. There were then no certificates recorded as being installed on the machine at all. On reboot a new lot were downloaded, with no error messages, and I then ran the Certificate Updater to get the rest of them restored. So far, so good, I guess I won't know until the next automatic update whether this has finally laid this problem to rest. From past experience, I'm not holding out a lot of hope!

Actually I've always found that MS Update scans fine as long as there is no update for IE8 pending. It suddenly falls over on Patch Tuesday when that monthly update is rolled out. If you run it any other time it's OK.

You should only need to install the IE8 Cumulative Update to avoid this, but I thought that problem was supposed to be fixed now anyway? I guess we'll find out on the 11th.

And now it's back to as it was before! So the clearing of the caches is obviously not the answer! Somewhere there is an expired certificate that is presumably causing this, but I don't seem to have been able to identify it to remove it and/or update it. It can't be an intrinsic problem with Windows XP, or everyone would be reporting it! I think what I'm going to have to do is to completely reset the certificates system on my machine and delete them all and start from scratch again. Has anyone any input on the safest way of doing this? Thanks, Dave.

I agree, there will I'm sure be a dedicated thread or two or more about finally abandoning XP after next April. I personally have no intention of doing so!

So it does! A shame that the same trick doesn't work for PowerPoint.

That is good to know that the online update system is finally fixed after all this time, but having links to the updates posted here is still extremely useful!

I third that!

Well considering that we've actually been "living on borrowed time" for over four years now, we haven't done too badly!

Same for me, the .NET 2.0 update, but not the 4.0 one. I'll try installing it manually. I no longer have the Office 2007 Compatibility Pack installed as I updated my Windows XP Office installation to Office 2010, and there were five updates for that.

No Den, Windows 98 doesn't show anything about updates in add/remove programs. In the old days you would presumably rely on your Windows Update history to tell you what patches had been installed, but now when you have to install them manually there seems to be no record. There is a list of patches in the registry installer section, but it's impossible to interpret as there are multiple entries with the patch numbers duplicated in many of them.