Need to update with hotfixes, etc. in a post install

[Thinkster]

Without creating a whole new build with slipstreamed or integrated hotfixes and installing that on an existing system, is there a simple way to get current critical hotfixes, etc. installed WITHOUT using windows autoupdate? I have disabled autoupdate on the users systems so that updates can be approved first. I believe the updates are current upto June 2006, so I need some sort of automated way to install July-Oct 2006 Critical updates. Autopatcher looked promising, but at 42mb, I can't see it containing that much, plus when I ran the .exe, nothing happens.

[nitro322]

Is there any reason you cannot use Automatic Updates for this? I understand the desire to disable the "automatic" part of it and require approval before installing anything (I do the same on my systems), but as a patch delivery mechanism it really works quite well.

On my system, I have Automatic Updates set to notify me about updates, but NOT to automatically download or install them. I then run a command in my GuiRunOnce script that forces Windows to check for any updates using Automatic Updates immediately after installation is complete. I then browse through the updates available, select the ones I want, and tell it to install. It actually works very well.

You can force Windows to check for updates using the following command (assuming that Automatc Updates is running):

start /wait wuauclt /detectnow

You can force Automatic Updates into notification-only mode with the following registry settings:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto
 Update]
"AUOptions"=dword:00000002
"AUState"=dword:00000002
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000003

I know this doesn't exactly answer your question, but I hope it helps out.

[Thinkster]

I would prefer to be able to put all of the "approved" updates/patches on a CD and have some sort of script or method to install all of them, then reboot. There have been some hotfixes in the past that have caused problems with certain applications that work with a paticular version of a .dll or other system file. I would like to test all the patches on a test system before compiling them onto a cd that can be deployed. I don't want to have to go to each system individually and have it wait to download 25+ updates and then install them.

So would something like Autopatcher work and if so, where do I get a full version rather then just a monthly update?

[blinkdt]

How about good ol' QCHAIN? I use it in my post-install routine and it works well.

[Telenut]

See code below:

CLS
@echo off
TITLE Windows XP SP2 - installatie updates

GOTO START

@author Steven Algoet
@version 11/10/2006

Aanpassingen:
10 nieuwe updates bij geplaatst

:START

SET /A NUMOFUPDATES=0

ECHO Installatie windows update V6
SETLOCAL
ECHO SET objFSO = CreateObject("Scripting.FileSystemObject") >_temp.vbs
ECHO Wscript.stdout.write objFSO.GetFileVersion("%SystemRoot%\system32\wuapi.dll") >>_temp.vbs
FOR /F %%a IN ('CSCRIPT /NOLOGO _temp.vbs') DO IF "%%a" NEQ "5.8.0.2469" START WUv6.exe /wuforce /quiet /norestart
DEL _temp.vbs
ENDLOCAL

ECHO Controle op .NET Framework 1.1
REG QUERY "HKEY_CLASSES_ROOT\Installer\Products\DDE7F2BCF1D91C3409CFF425AE1E271A" /v "ProductName" | FIND "Microsoft .NET Framework 1.1" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
dotnetfx1.1.exe /Q /C:"install.exe /Q"
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)


ECHO Controle op .NET Framework 2.0
REG QUERY "HKEY_CLASSES_ROOT\Installer\Products\D6461317C3DC4F04799BDCE9E42626FE" /v "ProductName" | FIND "Microsoft .NET Framework 2.0" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
dotnetfx2.0.exe /Q /C:"install.exe /Q"
langpack.exe /Q /C:"install.exe /Q"
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB922770 Update .NET 2.0
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0\KB922770" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
NDP20-KB922770-X86.exe /quiet
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)


ECHO KB890830-V1.21 Microsoft Windows Malicious Software Removal Tool V1.21
REG QUERY "HKLM\SOFTWARE\Microsoft\RemovalTools\MRT" /v "Version" | FIND "79e385d0-5d28-4743-aeb3-ed101c828abd" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
Windows-KB890830-V1.21.exe /q
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB873339 Vulnerability in HyperTerminal could allow code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB873339" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
%CDROM%\Software\Basicsoft\hotfixes\KB873339.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB873374 Microsoft GDI+ Detection Tool registratie
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\GdiDetectionTool" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
REG ADD "HKLM\SOFTWARE\Microsoft\GdiDetectionTool" /v "GDITool" /t REG_DWORD /d "00000001" /f > nul 2>&1
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB885835 Vulnerabilities in Windows Kernel and LSASS could allow
ECHO elevation of privilege
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB885835" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB885835.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB885836 A vulnerability in WordPad could allow code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB885836" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB885836.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)


ECHO KB886185 Critical Update for Windows XP
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB886185" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
%CDROM%\Software\Basicsoft\hotfixes\KB886185.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

REM ECHO KB887472 Security update to Microsoft Windows Messenger
REM REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB887472" > nul 2>&1
REM IF %ERRORLEVEL% EQU 0 (
REM ECHO is reeds aanwezig
REM ) ELSE (
REM ECHO Bezig met installeren...
REM KB887472.exe /quiet /norestart
REM SET /A NUMOFUPDATES+=1
REM ECHO Installatie compleet.
REM )

ECHO KB888302 Vulnerability in Windows could allow information disclosure
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB888302" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB888302.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB890046 Vulnerability in Microsoft agent could allow spoofing
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB890046" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB890046.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB890859 Vulnerabilities in Windows kernel could allow elevation of privilege and denial of service
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB890859" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB890859.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB891781 Vulnerability in the DHTML editing component ActiveX control could
ECHO allow code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB891781" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB891781.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

REM ECHO KB893066 Vulnerabilities in TCP/IP could allow remote code execution and denial of service (v2)
REM REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB893066" > nul 2>&1
REM IF %ERRORLEVEL% EQU 0 (
REM ECHO is reeds aanwezig
REM ) ELSE (
REM ECHO Bezig met installeren...
REM KB893066.exe /quiet /norestart
REM SET /A NUMOFUPDATES+=1
REM ECHO Installatie compleet.
REM )


ECHO KB893803 Microsoft Windows Installer 3.1
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB893803v2" > nul 2>&1
REM REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB893803\FileList\0" /v "Version" | FIND "3.1.4000.1823" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB893803.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB896358 A vulnerability in HTML Help could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB896358" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB896358.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB896428  Vulnerability in Telnet client could allow information disclosure
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB896428" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB896428.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB898461 Met deze update wordt een volledige versie van Package Installer voor Windows geïnstalleerd waarmee het downloadformaat van softwareupdates aanzienlijk kan worden verkleind.
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB898461" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB898461.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB901214 Vulnerability in Microsoft Color Management Module could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB901214" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB901214.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB892130 Kontroleren legale windows
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\LegitCheckControl.LegitCheck" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB892130.exe
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB893756 Vulnerability in Telephony Service Could Allow Remote Code Execution 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB893756" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB893756.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB896424 Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB896424" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB896424.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB899591 Vulnerability in Remote Desktop Protocol Could Allow Denial of Service 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB899591" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB899591.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB899587 Vulnerabilities in Kerberos Could Allow Denial of Service, Information Disclosure, and Spoofing 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB899587" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB899587.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB896423 Vulnerability in Print Spooler Service Could Allow Remote Code Execution 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB896423" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB896423.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB894391 DBCS attachment file names are not displayed in Rich Text e-mail messages and you may receive a "Generic Host Process" error message after you install security update MS05-012
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB894391" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB894391.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB896688 Cumulative Update for Internet Explorer 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB896688" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB896688.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB899589 Vulnerability in the Client Service for NetWare Could Allow Remote Code Execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB899589" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB899589.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB900485 Error message in Windows XP Service Pack 2: "Stop 0x7E"
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB900485" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB900485.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB900725 Vulnerabilities in Windows Shell Could Allow Remote Code Execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB900725" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB900725.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB901017 Security Update for Windows XP
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB901017" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB901017.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB902400 Vulnerabilities in MSDTC and COM+ Could Allow Remote Code Execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB902400" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB902400.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB904706 Vulnerability in DirectShow Could Allow Remote Code Execution (te testen!)
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB904706" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB904706.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB905414 Vulnerability in Network Connection Manager Could Allow Denial of Service
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB905414" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB905414.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB905749 Vulnerability in Plug and Play Could Allow Remote Code Execution and Local Elevation of Privilege
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB905749" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB905749.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB908519 Beveiligingsupdate voor Windows XP
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB908519" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB908519.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB910437 Automatic Updates can no longer download updates after an Access Violation error occurs
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB910437" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB910437.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB912919 A remote code execution security issue has been identified in the Graphics Rendering Engine that could allow an attacker to remotely compromise your Windows-based system and gain control over it.
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB912919" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB912919.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)


ECHO KB911564 Beveiligingsupdate voor de Windows Media Player-invoegtoepassing
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player\KB911564" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB911564.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB911927 Beveiligingsupdate voor Windows XP
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB911927" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB911927.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB911567 Cumulative Security Update for Outlook Express 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB911567" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB911567.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB911562 Vulnerability in Microsoft Data Access Components (MDAC) function could allow code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB911562" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB911562.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB908531 Vulnerability in Windows Explorer Could Lead to Remote Code Execution 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB908531" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB908531.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB911280 Vulnerability in Routing and Remote Access could allow remote code execution (V2)
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB911280" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB911280.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB913433 Vulnerabilities in Macromedia Flash Player from Adobe could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB913433" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB913433.exe /Q:A /R:N
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB913580 Vulnerability in Microsoft Distributed Transaction Coordinator could allow denial of service
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB913580" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB913580.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB922616 Vulnerability in HTML Help could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB922616" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB922616.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB922582 Error message when you try to update a Microsoft Windows-based computer: "0x80070002"
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB922582" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB922582.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB921883 Vulnerability in Server service could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB921883" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB921883.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB921398 Vulnerability in Windows Explorer could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB921398" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB921398.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB920872 Audio playback does not play the audio file from the correct position after you pause it, and you randomly receive a Stop error message when you try to play audio files in Windows XP Service Pack 2 (SP2)
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB920872" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB920872.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB920685 Vulnerability in Indexing Service could allow cross-site scripting
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB920685" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB920685.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB920683 Vulnerability in DNS resolution could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB920683" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB920683.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB920670 Vulnerabilities in Microsoft Windows Hyperlink Object Library could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB920670" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB920670.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB920214 Cumulative security update for Outlook Express 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB920214" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB920214.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB919007 Vulnerability in Pragmatic General Multicast (PGM) could result in remote code execution 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB919007" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB919007.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB918899 Cumulative security update for Internet Explorer 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB918899" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB918899.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB918439 Vulnerability in ART image rendering could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB918439" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB918439.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB917953 Vulnerability in TCP/IP could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB917953" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB917953.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB917734 Vulnerability in Windows Media Player could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player 10\KB917734_WMP10" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB917734.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB917537: Beveiligingsupdate voor Windows XP
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB917537" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB917537.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB917422 Vulnerability in the Windows kernel could result in remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB917422" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB917422.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB917344 Vulnerability in Microsoft JScript could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB917344" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB917344.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB917159 Vulnerability in Server service could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB917159" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB917159.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB916595 Stop error message on a Windows XP-based computer: "STOP 0x000000D1"
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB916595" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB916595.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB914389 Vulnerability in Server Message Block could allow elevation of privilege
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB914389" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB914389.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB914388 A vulnerability in the DHCP Client Service could allow remote code execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB914388" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB914388.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB925486 Vulnerability in Vector Markup Language Could Allow Remote Code Execution
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB925486" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB925486.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB922819 This update resolves several vulnerabilities in Windows, the most critical of which could allow denial of service.
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB922819" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
WindowsXP-KB922819-x86-NLD.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB923191 Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB923191" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
WindowsXP-KB923191-x86-NLD.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB923414 Vulnerability in Server Service Could Allow Denial of Service 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB923414" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
WindowsXP-KB923414-x86-NLD.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB924191 Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB924191" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
WindowsXP-KB924191-x86-NLD.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)

ECHO KB924496 Vulnerability In Windows Object Packager Could Allow Remote Code Execution 
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB924496" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
WindowsXP-KB924496-x86-NLD.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)




ECHO Extra kritieke updates

ECHO KB917283: Beveiligingsupdate voor Microsoft .NET Framework versie 2.0
REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0\KB917283" > nul 2>&1
IF %ERRORLEVEL% EQU 0 (
ECHO is reeds aanwezig
) ELSE (
ECHO Bezig met installeren...
KB917283.exe /quiet /norestart
SET /A NUMOFUPDATES+=1
ECHO Installatie compleet.
)



ECHO Er werden %NUMOFUPDATES% Windows updates geinstalleerd.
IF %NUMOFUPDATES% GTR 0 ECHO De pc herstarten is aangeraden.

pause


exit