Dave-H

Yep, midnight GMT!

Posts relating to the expiration of SHA-1 certificates moved here.

There is a KB2890375 update to the 2010 Redistributable in case you haven't got it.

If the files are version 10.xx then they are part of the Visual C++ 2010 Redistributable as far as I know. Is that what you tried installing? If not you could try that, the last version is Visual C++ 2010 SP1 (10.0.40219.473) I think. Try installing that and remove the files in the program's folder and see if it still works. If it doesn't, just put them back again of course! You never know, it might make a difference. If it was a different runtime version you installed, installing it might have done more harm than good.

From my experience with Firefox, I guess those "api-ms" files are C++ runtime files. If you can see what version they are, you might be able to install the latest version of the same runtime version to the system, in which case it wouldn't need its own. I found with Firefox (52.9 ESR) that the browser performance was better with a system runtime.

Thanks!

Thanks, yes I have those versions of both files. Good to know where they came from!

Please be clear, there is no Service Pack 4 for Windows XP! There's nothing to find. All that happened, as far as I know, is that some later XP updates were installed as "SP4" updates on systems, but only in that their registry entries are listed under "SP4", and the xpsp4res.dll "Service Pack 4 Messages" file was installed. That almost certainly means that there was going to be a Service Pack 4 for XP at one time, but for whatever reason, Microsoft decided not to press ahead with it and issue it as an installable component.

KB2868626 contains version 5.131.2600.6459 of crypt32.dll, which is the one I've got. It also contains version 5.1.2600.6459 of xpsp4res.dll. My version of xpsp4res.dll is 5.1.2600.7651 however, so where would that have come from? Presumably a later "SP4" update, as it's only the "Service Pack 4 Messages" dll.

My rsaenh.dll is version 5.1.2600.7345.

Not here apparently.

I have quite a few updates which claim in the registry to be from "SP4" too, and have had for years. I suspect it refers to a notional Service Pack 4 for Windows XP which was mooted by Microsoft at one time but never actually issued.

I suspect that's because the free version of Malwarebytes does not offer realtime scanning, whereas the premium paid version does. The Windows XP Security Center probably only recognises realtime scanner programs as being AV programs.

Yes, sadly so. I was asking XPerceniol if the catalogue was actually working for them, as they had said that it was "empty". I don't think they realised that the home page of the catalogue does look pretty empty until you actually search for something!

Yes it does.

There's no point in doing it as it will apparently install but not actually do anything as the crypt32.dll file in the hotfix is older than the one already on the system, at least that was my experience. If you have 5.131.2600.6459 as I have, that is the latest (and presumably last) version for XP.

Thanks @i430VX, understood!

Well i430VX's installer appears to install it, but doesn't seem to produce any uninstall mechanism.

Well that's very interesting! So that tool does fetch updates and works on XP, presumably with the wsusscn2.cab that it downloaded, which shouldn't work on XP?!

I just tried out roytam's build of Serpent, and was puzzled to find that there appears to be no uninstallation option for it. It didn't appear in Add/Remove Programs. Is that normal? I just deleted its folders, is that the only way of uninstalling it or have I missed something? I used i430VX's installer to install it.

Thanks, good to know you're aware of this!

Keeping my fingers crossed for you!

Firefox 52.9 ESR tells me your installer file "contains a virus or malware", and I have to override this to download it. Malwarebytes says it's clean. A false positive obviously, but just thought I'd mention it!

Yes I could, but I'm not sure which one I would try! My instinct is to just let well alone!

Just for interest, I thought I would try out the "Portable Update" tool referenced in this post. It does seem to work fine still, and downloaded a new wsusscn2.cab file, containing updates from this month. The tool lists all my installed updates, and says I don't need any, which is almost certainly correct, but surely if it did decide I needed any, it wouldn't work anyway as that cab isn't SHA-1 signed? I would be interested to see what it would do if I tried to use it!