LeveL Posted October 6, 2006 Posted October 6, 2006 I tried stripping XP Professional the original "no service pack" OS.I want to just make one without any service pack to see if it isany faster. I normally integrate SP2 and all hotfixes but I thinkthis bloats it more than "fixes" security issues, yeah most peoplewill disagree but this SP0 thing is an experiment more than anything.I tried with nLite v1.2 first of all and it crashed nLite saying "nLite has encounteredan error and needed to close, you're screwed, sorry, you lost it all" like XP has a knackof doing, so I reverted to nLite v1.0.1, which is what I was using my Last Session fromin the first place...Using nLite v1.0.1, I can strip it and make an ISO, but I get these errors whenWindows is installing...I am sure nLite isn't made to not support XP SP0, or is it? Looking at the Last Session won't help solve it, but no doubt people will still ask for it so here it is...Last_Session.ini
nuhi Posted October 6, 2006 Posted October 6, 2006 This sounds like ASMS compression was enabled but it shouldn't have.See if the files in that gdiplus directory are compressed...if yes then recopy your clean installation files, use 1.2rc and see that in Hotfixes-Advanced ASMS compression is disabled...I'll review this too.
LeveL Posted October 6, 2006 Author Posted October 6, 2006 (edited) Thanks for your response...None of the files are compressed in the ASMS directory, all are CAT, DLL and MAN files...I386\ASMS\1000\MSFT\WINDOWS\GDIPLUS\I386\ASMS\5100\MSFT\WINDOWS\SYSTEM\DEFAULT\I386\ASMS\6000\MSFT\VCRTL\I386\ASMS\6000\MSFT\WINDOWS\COMMON\CONTROLS\I386\ASMS\7000\MSFT\WINDOWS\MSWINCRT\I only tried once with nLite v1.2 and got the "nLite had to close"in XP, pah. I will try again. Could it be because I am using a LastSession INI from v1.0.1 on v1.2? A few things are changed likewhere it used to be "Luna Theme" it is now "Luna Desktop Theme"although in past strips I have never had that pose any problem, like using an XP INI on Server 2003 and vice versa, its nevercrashed before. My fault for using full XP, knowing Windows Icould probably remove Dr. Watson and it wouldn't crash. EDIT: OK I tried again with v1.2 and - no crash this time.It might have been because in the [MAIN] section it still said env = v1.0.1 etc and I am using v1.2.Just deleted the lines in the [MAIN] section and it is fine, it might also have beenKaspersky AV scanning everything that moves so I also disabled KAV whilst I stripped it.Still got to test it again now, see if I get the SXS.DLL error...! Edited October 6, 2006 by LeveL
LeveL Posted October 6, 2006 Author Posted October 6, 2006 (edited) Heh, nope.Get the same ASMS error with v1.2 but this time the error log is not as long...You say check under the Hotfixes section but I am not integrating any hotfixesor a service pack, the section is never selected, but all the CAT, INF and MANfiles are not compressed.The problem is I386\ASMS\1000\MSFT\WINDOWS\GDIPLUS\GDIPLUS.MANI opened GDIPLUS.MAN (with Notepad2) on an SP2 ISO and get this code...<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity type="win32" name="Microsoft.Windows.GdiPlus" version="1.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df"/> <file name="GdiPlus.dll" hash="c62f993be17646ed23895955799841c0938d6c7a" hashalg="SHA1"/></assembly>However if I open it on the SP0 one I get "NUL NUL NUL NUL" an unreadable file!I will simply replace GDIPLUS.MAN from the SP2 ISO with the one in the SP0 ISOand see if it fixes it...Nope - replaced GDIPLUS.MAN and now it says the checksum (which it hadthe courtesy to at least tell me is a SHA1 checksum) does not match up withGDIPLUS.DLL - because I am using a GDIPLUS.MAN from SP2 on an SP0 install,so I calculated the SP0 GDIPLUS.DLL file with HashCalc, it is...ede6c1ba261f35fff7a712d6633a88573a4a1129 (SP0)(not c62f993be17646ed23895955799841c0938d6c7a) (SP2)Pasted that into the GDIPLUS.MAN file on the SP0 install, lol, I will post back if this works.EDIT: Yes that worked changing the checksum to match but now I get the same error for the 5100 folder! It is no doubt the same error, the MAN file will be NUL NUL NUL NUL etcso I will do the same for the rest of the MAN files, there are only 5 of these MAN filesaltogether, its not so bad. I will post back if this works, I don't know why the MAN files on the SP0 installsay NUL NUL NUL etc (unreadable) and the SP2 ones are fine. EDIT AGAIN: OK these are the .MAN files that are unreadable in the SP0install...CONTROLS.MANDEFAULT.MANGDIPLUS.MANMSWINCRT.MANVCRTL.MANThey are in the various sub-directories of ASMSI copied the relevent .MAN files from an SP2 install (that used thesame Last Session.ini) and had to change easch SHA1 checksum ineach .MAN file by calculating the SHA1 checksum with HashCalc forthe SP0 DLL files and changing this checksum in each .MAN file.Some .MAN files have more than one checksum, it was about 7or 8 checksums in total.Hopefully I fixed it by doing this!nLite seems to make the .MAN files unreadable on an SP0 install The simple answer is "use SP2" but nah, this is an SP0 experiment Edited October 6, 2006 by LeveL
LeveL Posted October 6, 2006 Author Posted October 6, 2006 None of that worked, it gets past the ASMS part but now itsdoing the old reboot loop "setup is restarting". Sorry aboutso many posts, just trying to keep it organised.
Ponch Posted October 6, 2006 Posted October 6, 2006 I normally integrate SP2 and all hotfixes but I think this bloats it more than "fixes" security issues, yeah most people will disagree but this SP0 thing is an experiment more than anything.yeah, and those Blaster and Sasser were just rumors anyway.
nuhi Posted October 6, 2006 Posted October 6, 2006 LeveL, lets see, this all seems kinda weird and random so for start first take a clean installation files again, put the into some dir...browse with 1.2rc to it and don't use any preset...just to test...especially don't use Services page as disabling some vital one can be the cause.Then if it fails...test in vmware or virtualpc...attach that last session from that iso and I'll try on sp0...thxNo rush.
RyanVM Posted October 7, 2006 Posted October 7, 2006 yeah, and those Blaster and Sasser were just rumors anyway. I forget, how long did it take for an unpatched XP install to be compromised when some people tried it? I know people have tested it in the past. Wasn't it on the order of seconds?EDIT: Nope, 20 minutes
Recommended Posts
Please sign in to comment
You will be able to leave a comment after signing in
Sign In Now