8 hours ago, roytam1 said:

I can't say it is "False Positive", since cvttsd2si is really SSE2 instruction: https://www.felixcloutier.com/x86/CVTTSD2SI.html

The only problem is that we don't know if code is called ONLY if SSE2 is available.

Yes, this is what I mean by it coming from __ftol2_sse. (hint: disassemble the routine with a debugger like WinDbg)

BTW Microsoft had just killed its hotfix download service: https://www.ghacks.net/2018/11/05/microsofts-hotfix-service-is-no-longer-available/

4 hours ago, roytam1 said:

BTW Microsoft had just killed its hotfix download service: https://www.ghacks.net/2018/11/05/microsofts-hotfix-service-is-no-longer-available/

So what does it mean to us?

53 minutes ago, someguy25 said:

So what does it mean to us?

so old hotfixes that is not released via Update Catalog is no longer downloadable.

1 hour ago, roytam1 said:

so old hotfixes that is not released via Update Catalog is no longer downloadable.

Patch Tuesday!  EDIT: Installed the updates no problems so far.Altough Avast stated poping up about some rpcss.dll file that is infected with Win.32.GenMalicious-DLQ[TRJ] 3 times!Did Microsoft screw their updates again

Edited November 13, 20187 yr by someguy25

Direct links for November 2018 updates - WES09/POSReady 2009 (5 updates, English only), IE8 cumulative security update (English) and Office 2007 compatibility pack SP3 security update (international):

http://download.windowsupdate.com/c/msdownload/update/software/secu/2018/11/windowsxp-kb4466388-x86-embedded-enu_b177578d5bc6c95cf31dd1848a22ddbe10b9501b.exe
http://download.windowsupdate.com/c/msdownload/update/software/secu/2018/11/windowsxp-kb4467689-x86-embedded-enu_471a3ffee9661ee17087bd244ecec7edee0eff55.exe
http://download.windowsupdate.com/d/msdownload/update/software/secu/2018/11/windowsxp-kb4467689-x86-embedded-enu_b974cbc4675474ddb38c41f7926f493cde207eee.exe
http://download.windowsupdate.com/c/msdownload/update/software/secu/2018/10/windowsxp-kb4470118-x86-embedded-enu_eb3fe70a186545d1745f48eda37ecf21a1d330d9.exe
http://download.windowsupdate.com/c/msdownload/update/software/secu/2018/10/windowsxp-kb4470198-x86-embedded-enu_7b13aaf44e4587d599a456d888e42f40e8b5ff3b.exe

http://download.windowsupdate.com/c/msdownload/update/software/secu/2018/10/ie8-windowsxp-kb4466536-x86-embedded-enu_3edc5c600667b0925a02e757737942009abf643e.exe

http://download.microsoft.com/download/D/E/5/DE510014-CB14-4027-B510-D2534694A6B9/xlconv2007-kb4461518-fullfile-x86-glb.exe

46 minutes ago, someguy25 said:

Patch Tuesday!  EDIT: Installed the updates no problems so far.Altough Avast stated poping up about some rpcss.dll file that is infected with Win.32.GenMalicious-DLQ[TRJ] 3 times!Did Microsoft screw their updates again

AHA! I might found the updates that are detected as malware.Because it installed and it still pops up.hmmm

This update software is also notified to me:

 

https://support.microsoft.com/en-us/help/4459091/update-for-tls-in-windows-embedded-posready-2009-and-windows-embedded

Edited November 13, 20187 yr by Sampei.Nihira

That's from last month. It was released out-of-band, near the month's end, IIRR.

Attention! KB4467689 has been released twice this month! The file versions of the files (kernel32.dll, ntdll.dll, ole32.dll, rpcrt4.dll, rpcss.dll, sprv0407.dll, xpsp2res.dll) are different! In this regard, KB4466388 (kernel32.dll, ntdll.dll, ole32.dll, oleaut32.dll, rpcss.dll, xpsp2res.dll)! With KB4466388 the file "oleaut32.dll" is available again in its original size (550 KB), here I still have to test. For KB4467689
(windowsxp-kb4467689-x86-embedded-enu_b974cbc4675474ddb38c41f7926f493cde207eee.exe)
the version should be taken from 11/12/2018, as the file version harmonizes with KB4466388.

Meanwhile, the older version of KB4467689 was taken offline at MS.
 

Update:

Problems with the file "rpcss.dll" from the updates WindowsXP-KB4466388-x86-ENU.exe and WindowsXP-KB4467689-x86-ENU.exe with under forwarded to Avast.

https://www.virustotal.com/en/file/1857d37693b8b96a2fdfaadc9bc18e4839fedd5a18ee064f922370887210d024/analysis/1542142348/

A comparison with the German-language updates (The file "rpcss.dll" is just in the English language version and identical in size)

https://www.virustotal.com/en/file/58098a479b7db74de938f5a9dd3e474ea5ec52ad46883a659a5d490daf01c75d/analysis/1542143217/

Funny, I am curious about the result of Avast.
 

Update 2:

A test with MBAM legacywos-3.5.1.2522 was successful and I could not find any problems because of the current "oleaut32.dll" of KB4466388. Apparently the missing functions were implemented again. In addition, KB4134651-v2 has been replaced by KB4466388.

 

@Sampei.Nihira

Edited November 13, 20187 yr by heinoganda

11 hours ago, heinoganda said:

KB4134651-v2 has been replaced by KB4466388

Conclusion: we can run the update without patching oleaut32.dll? Great!

Yes, it finally works!

Once again, how long did that take?!
Terrible response time, but at least they fixed it before the updates completely ended.
I got the Avast warning too, it said it had quarantined the rpcss.dll file, but as said it didn't seem to matter, all updates installed OK.

Edited November 14, 20187 yr by Dave-H
Addition

My yellow shield list shows only one version of KB4467689 ready to install, not two.  And KB4467689 is NOT already installed, per MU update history and Belarc.

Should I do anything before letting the yellow shield run?

Thanks.

@glnz

11 minutes ago, glnz said:

My yellow shield list shows only one version of KB4467689 ready to install, not two.

This is normal behavior, for, as already noted here

18 hours ago, heinoganda said:

Meanwhile, the older version of KB4467689 was taken offline at MS.

So You only need and offered single and latest revision of this update.

14 minutes ago, glnz said:

Should I do anything before letting the yellow shield run?

No. Just install all that is offered and that's it. You possibly need to manually install only one office 2007 compatibility pack update if it isn't offered automatically (Windows 7 computer with Office 2003 and Office 2007 compatibility pack for example).