Hi!

Hey, Mimo, I saw you updated the FC. Sadly, I have several bugs to report:

First, FC is asking for 2618451, which is a really old update, already replaced by 2736233, which in turn was replaced by 2820197.

Second, the FC doesn't seem to know about the latest root certifcates update (may 2013) and it asks for the previous version.

other than that, thx and bye!

new file-checker:

2013-05-18
- Added: KB2829530 (MS13-037: Internet Explorer)
- Added: KB2847204 (MS13-038: Internet Explorer 8)
- Added: KB2829361 (MS13-046: Kernel-Mode Drivers)
- Added: KB2820197 (Security Advisory 2820197: ActiveX Kill Bits)
- Added: KB890830 (Malicious Software Removal Tool 4.20.7401.0)
- Added: Adobe Flash Player 11.7.700.202
- Removed: KB2817183 (MS13-028: Internet Explorer, replaced by KB2829530)
- Removed: KB2808735 (MS13-036: Kernel-Mode Driver, replaced by KB2829361)
- Removed: KB2736233 (Security Advisory 2736233: ActiveX Kill Bits, replaced by KB2820197)
- Removed: KB2797052 (MS13-010: Vector Markup Language, replaced by KB2817183)
- Removed: KB890830 (Malicious Software Removal Tool 4.19.7304.0)
- Removed: Adobe Flash Player 11.7.700.169

download: HFSLIPFC v.2013/01/06 with WindowsXP-update-list v.2013/05/18

new file-checker

Thanks for new file-checker.

Great job, but (like jvidal mentioned above) there are 3 issues:

- missing (S): HF\WindowsXP-KB2618451-x86-XXX.exe (MS11-090: ActiveX Kill Bits)

(KB2618451 is not missing - it's obsolete)

- new rootsupd.exe (May 2013, 431336 Bytes)

http://www.microsoft.com/en-us/download/details.aspx?id=38918

- unknown: HF\WindowsXP-KB2828030-x86-XXX.exe

why KB2828030 is "unknown"?

dziubek noticed (on 02 May 2013) that:

"A new technical hotfix for Windows XP SP3: KB2828030 (USB)

A hotfix is available for download on the standard reference.

Article KB, corresponding to a given hotfix does not currently have.

Replace a previously released hotfixes technical: KB968764 and KB969238."

Maybe it's "unknown" because it's not critical or recommended.

If MU/WU doesn't ask for an update, we usually ignore it...

The "new" updroots.exe inside rootsupd.exe is downgraded (5.2.3790.4456 -to- 5.1.2484.0) and does not support the switch -u.

u = Add to disallowed root store
updroots.exe -l -u disallowedcert.sst

rvkroots.exe returns an error because it is using the same updroots.exe tool to install the cert.

One solution is to place the old updroots.exe in HFSLIP\REPLACE\I386\updroots.ex_. Is there anyone that have a better Idea?

The "new" updroots.exe inside rootsupd.exe is downgraded (5.2.3790.4456 -to- 5.1.2484.0) and does not support the switch -u.

u = Add to disallowed root store
updroots.exe -l -u disallowedcert.sst

rvkroots.exe returns an error because it is using the same updroots.exe tool to install the cert.

One solution is to place the old updroots.exe in HFSLIP\REPLACE\I386\updroots.ex_. Is there anyone that have a better Idea?

If your method works it is a good solution. A better solution would be to update the HFSLIP batch script.

If your method works it is a good solution. A better solution would be to update the HFSLIP batch script.

Another alternative is to put the rootsupd.exe in HFSVCPACK_SW2, for installation in T13 with /Q:A /R:N switch.

The "new" updroots.exe inside rootsupd.exe is downgraded (5.2.3790.4456 -to- 5.1.2484.0) and does not support the switch -u.

u = Add to disallowed root store
updroots.exe -l -u disallowedcert.sst

rvkroots.exe returns an error because it is using the same updroots.exe tool to install the cert.

One solution is to place the old updroots.exe in HFSLIP\REPLACE\I386\updroots.ex_. Is there anyone that have a better Idea?

Blame Microsoft. This is their fault for downgrading "updroots.exe". The December 2012 roots certificate update does not have this problem.

Here's my workaround for the latest Root Certificates Update:

Add the following lines to the :HF2EXTRACT section of HFSLIP.cmd

REM WORKAROUND FOR MAY 2013 ROOT CERTIFICATES UPDATE
IF EXIST TEMP\updroots.exe (
	IF EXIST HF\rvkroots.exe (
		FOR /F %%I IN ('FINDSTR "5...1...2.4.8.4" TEMP\updroots.exe') DO DEL /F/Q TEMP\updroots.exe
	)
)

As the file modification time of the updroots.exe is also newer than the one from rvkroots.exe my solution is to check for this specific file version.

Hopefully future Root Cerificate Updates won't have this problem.

Edited May 21, 201313 yr by Acheron

- missing (S): HF\WindowsXP-KB2618451-x86-XXX.exe (MS11-090: ActiveX Kill Bits)

(KB2618451 is not missing - it's obsolete)

Oh, a mistake in the filechacker (KB2820197 replaces KB2618451)

- new rootsupd.exe (May 2013, 431336 Bytes)

http://www.microsoft...s.aspx?id=38918

Thx for the info

- unknown: HF\WindowsXP-KB2828030-x86-XXX.exe

why KB2828030 is "unknown"?

dziubek noticed (on 02 May 2013) that:

"A new technical hotfix for Windows XP SP3: KB2828030 (USB)

A hotfix is available for download on the standard reference.

Article KB, corresponding to a given hotfix does not currently have.

Replace a previously released hotfixes technical: KB968764 and KB969238."

http://www.msfn.org/...51#entry1038651

I thought about it to add this hotfix to the list. But I found now information about that hotfix so I decided to don't add this.

CU, Mimo

new file-checker for XP:

2013-05-22
- Fixed: the replacement-info for KB2618451 (KB2618451 will not be reported as
          missing anymore when KB2820197 was found)

Thx to jvidal and jakson!

download: HFSLIPFC v.2013/01/06 with WindowsXP-update-list v.2013/05/22

Regarding new rootsupd: I'm not sure what to do. At the moment I think a method which will be supported by the current HFSLIP should be listed in the update-list (which will also be implemented in the file-checker). Can anyone confirm one of the solutions above?

Thx, Mimo

Good day to all.

With the intention of helping, repacked the kb931125 of 20130419 , replacing the updroots.exe file (5.1.2484.0) for the 5.2.3790.4456 version.

http://www.mediafire.com/?zr5yf6l55bozub7

Tested on VirtualBox with WinXP SP3

Edited May 22, 201313 yr by SunLion

Thx! Although now the fc needs to know about the size if your repacked rootsupd.exe...

c ya!

Hi SunLion,

thx for your support. Regarding your two posts...

Another alternative is to put the rootsupd.exe in HFSVCPACK_SW2, for installation in T13 with /Q:A /R:N switch.

With the intention of helping, repacked the kb931125 of 20130419 , replacing the updroots.exe file (5.1.2484.0) for the 5.2.3790.4456 version.

...I have the following in mind:

1. I add your repacked version of rootsupd.exe to the list (Folder HF). Is it OK for you when I host this file?

2. As an alternative I also add the official version of rootsupd.exe to the list (folder HFSVCPACK_SW2) for someone who want to use only files from MS.

I'm not sure that the file-checker can handle the same file with two file-sizes but hopefully it works because these files will be expected in different folders. I have to check it...

Thx, Mimo

...I have the following in mind:

1. I add your repacked version of rootsupd.exe to the list (Folder HF). Is it OK for you when I host this file?

2. As an alternative I also add the official version of rootsupd.exe to the list (folder HFSVCPACK_SW2) for someone who want to use only files from MS.

I'm not sure that the file-checker can handle the same file with two file-sizes but hopefully it works because these files will be expected in different folders. I have to check it...

Thx, Mimo

OK Mimo. Glad to help. Thank you for your excellent work.

NOTE: just to inform you that the rootsupd.exe repacked with iexpress tool and its final size is 396 KB.