Jump to content

1.4.2: Windows Update not working for XP SP2


lek

Recommended Posts

Experiencing similar issues as the ones described in this post, Windows Update is not functional after slipstreaming XP SP2 using HFSLIP 1.4.2.

Symptoms:

  • The screen to activate Automatic Updates does not appear in the initial "Let's set up Windows" sequence.
  • In the "Automatic Updates" control panel applet, all options are unchecked.
  • The "Automatic Updates" service is missing from the list of services.
  • When opening http://windowsupdate.microsoft.com/, I'm prompted to install the Windows Update ActiveX control. After that, the process stops on the "Checking to see if your computer has the latest..." page.

See the attached HFSLIP.LOG for details on the files I'm using. I've also tried install sets with the Microsoft Update files added, but this yielded the same result. I have attached my WindowsUpdate.log file, as it was right after running the Windows Update web site control (unsuccessfully, per description above) and then rebooting.

The only way I've found to get automatic updates working is to visit the Microsoft Update web site. After installing the ActiveX control, the site blurts out that "Files required to use Microsoft Update are no longer registered or installed on your computer." After choosing "Register or reinstall the files for me now (Recommended)" and rebooting, the "Automatic Updates" service is restored and working properly again.

Windows Update worked without problems with a previous version of HFSLIP, one I used about half a year ago (can't remember the exact version, sorry).

HFSLIP.zip

WindowsUpdate.zip

Edited by lek
Link to comment
Share on other sites


Ah, yes. Forgot to add: I have created an install set of the SOURCE tree (XP + SP2), of which the Automatic Updates feature works without any problems. So it seems the source files are intact, in that respect.

Link to comment
Share on other sites

Another update: I have created a new install set, with the files "WindowsUpdateAgent20-x86.exe", "WindowsXP-KB898461-x86-ENU.exe" and "LegitCheckControl.cab" removed (see attached HFSLIP.LOG). Using this install set, Automatic Updates functions properly (see attached WindowsUpdate.log).

I chose to disable Automatic Updates on the initial setup screen, then enabled the "Notify me but don't automatically update.." option in the control panel applet. AU proceeded to update itself and then offered KB898461 (Package Installer) as an update.

So, it seems that something is broken in HFSLIP 1.4.2 with the processing of either of those three files I removed. Please advise if you need me to do some additional troubleshooting.

HFSLIP.zip

WindowsUpdate.zip

Edited by lek
Link to comment
Share on other sites

I just did a few tests on different computers and all's fine. Make sure that neither of those files you left out is corrupt. What's the timestamp for WindowsUpdateAgent20-x86.exe (right-click > Properties > Digital Signatures)?

Link to comment
Share on other sites

I just did a few tests on different computers and all's fine. Make sure that neither of those files you left out is corrupt. What's the timestamp for WindowsUpdateAgent20-x86.exe (right-click > Properties > Digital Signatures)?

Drat! I almost thought I had it. I've been using HFSLIP for awhile now, so source files that have once been downloaded, and that are still on the list of required files, are still being used in my source tree.

The WindowsUpdateAgent20-x86.exe I was using had a signature timestamp of "15 June 2005 20:49:50". One that I downloaded just now has a timestamp of "30 October 2006 06:14:57". You got to love Microsoft for releasing new versions under the same file name. The other two files are identical to the ones I used previously. All signatures verify correctly.

However, even with the new/updated WUA file, the problem remains. It looks like all the WU files are in place (I did a quick file search of all "wu*" files), but the HKLM\SYSTEM\CurrentControlSet\Services\wuauserv key is missing from the registry (and hence, the "Automatic Updates" service).

Is there any other log file I can check to see what's going on during the installation of these files? Could there be a dependency on other components (ones I'm not using but you might)?

Edited by lek
Link to comment
Share on other sites

That seems OK to me. Besides corrupt hotfixes (did you redownload the ones you left out at one point?), I can only think of something causing HFSLIPWU.INF to not execute properly. This file registers the necessary WUA20 files among other things.

I forgot to ask: can you add a copy of HFSLIPWU.INF from SOURCESS\I386? You can remove the previous attachment -- I no longer need it.

Link to comment
Share on other sites

My HFSLIPWU.INF from SOURCESS/i386, as requested. If you don't spot anything weird, I could dig up some older HFSLIP install sets (ones that did have a working WU), and see what the differences are with the current one. Just let me know if there's anything specific to look for. Thanks!

PS: By the way, I did check the MD5 hashes of the files in the HF directory, and found no corrupt files. This is truly weird. If I weren't the only one reporting this, I'd start to question my sanity at this point. :)

HFSLIPWU.INF

Edited by lek
Link to comment
Share on other sites

ha! ha! i wonder how this came to be? i've actually been asking how i could disable the functionality of WU (set it to Turn off Automatic Updates... setting it to disabled & have it grayed-out so it couldn't changed) ... together with removing its shortuct from the Start menu ... ;)

Link to comment
Share on other sites

I did some more research on my end. This did confirm one thing: when omitting just "WindowsUpdateAgent20-x86.exe" from the HF directory, AU works as expected (the service is properly registered and proceeds updating itself to the latest version). When including that file, AU breaks as described.

Another thing I noticed: when "WindowsUpdateAgent20-x86.exe" is included and processed, the file AU.IN_ in SOURCESS\I386, when expanded to AU.INF, is essentially empty: most of its contents have been removed by HFSLIP or commented out. This is what it looks like:

; Windows Update INF
; Installation of AutoUpdate Service
; Copyright Microsoft ® 2003
[Version]
Signature="$Windows NT$"
ClassGUID={00000000-0000-0000-0000-000000000000}
LayoutFile=layout.inf
[DestinationDirs]
AUCopyFilesSys = 11
AUDelSysFiles = 11 ; system directory
AUDelRootFiles = 25 ; windows directory
AUDelInfFiles = 17
CUNDelSysFiles = 11 ; LDID_SYS
CUNDelInfFiles = 17 ; LDID_INF
CUNDelTaskFile = 10, Tasks ;LDID_WIN
[DefaultInstall]
DelFiles = AUDelSysFiles, AUDelRootFiles, AUDelInfFiles, CUNDelSysFiles, CUNDelInfFiles, CUNDelTaskFile
DelReg = DelAUKeys, DelCUNKeys, DelW2kAUKeys, DelOtherKeys
AddReg = AddRegControlPanelCategory, AddRegKillBit
CopyFiles = AUCopyFilesSys
RegisterDLLs = AU_dlls
[AUCopyFilesSys]
[AU_dlls]
[AUDelSysFiles]
[AUDelRootFiles]
[AUDelInfFiles]
[CUNDelSysFiles]
[CUNDelInfFiles]
[CUNDelTaskFile]
[DelAUKeys]
;wuv3is
;wuauboot
;wuauclt
;wuaucpl
;auhook
;wuaures
;wuaupd
[DelCUNKeys]
[DelW2kAUKeys]
[DelOtherKeys]
; Service Startup Key
; old IUpdate
; wuv3is.dll
; wupdinfo.dll
;iuctl.dll
[AddRegKillBit]
;AddRegKillBit WUV3IS
[AddRegControlPanelCategory]
[Strings]
;Non-Localizable
;Localizable
;needs to be localized exactly as the task scheduler job created by CUN
WUCUN_TS_JOBFILE = "windows critical update notification.job"

By contrast, the same file from an install set I made in November 2005 (which works correctly) looks like this:

; Windows Update INF
; Installation of AutoUpdate Service
; Copyright Microsoft ® 2003

[Version]
Signature="$Windows NT$"
ClassGUID={00000000-0000-0000-0000-000000000000}
LayoutFile=layout.inf


[DestinationDirs]
AUCopyFilesSys = 11
AUDelSysFiles = 11 ; system directory
AUDelRootFiles = 25 ; windows directory
AUDelInfFiles = 17
CUNDelSysFiles = 11 ; LDID_SYS
CUNDelInfFiles = 17 ; LDID_INF
CUNDelTaskFile = 10, Tasks ;LDID_WIN

[DefaultInstall]
DelFiles = AUDelSysFiles, AUDelRootFiles, AUDelInfFiles, CUNDelSysFiles, CUNDelInfFiles, CUNDelTaskFile
DelReg = DelAUKeys, DelCUNKeys, DelW2kAUKeys, DelOtherKeys
AddReg = AddRegControlPanelCategory, AddRegKillBit
CopyFiles = AUCopyFilesSys
RegisterDLLs = AU_dlls

[AUCopyFilesSys]
wuapi.dll
wuauclt.exe
wuauclt1.exe
wuaucpl.cpl
wups.dll
wuaueng.dll
wuaueng1.dll
wuauserv.dll
wucltui.dll
wuweb.dll

[AU_dlls]
11,,wuapi.dll, 1
11,,wuaueng1.dll, 1
11,,wups.dll, 1
11,,wuaueng.dll, 1
11,,wucltui.dll, 1
11,,wuweb.dll, 1

[AUDelSysFiles]
auhook.dll
wuaupd98.dll
wuaucpl.cpl.disabled
wuv3is.dll
wupdinfo.dll
iuctl.dll


[AUDelRootFiles]
wuauclt.exe
wuaures.dll
wuauboot.exe

[AUDelInfFiles]
noau.inf

[CUNDelSysFiles]
wucrtupd.exe
wuloader.exe
wuslflib.dll

[CUNDelInfFiles]
wucrtupd.inf
wucrtupd.pnf

[CUNDelTaskFile]
%WUCUN_TS_JOBFILE%

[DelAUKeys]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\HiddenItems"
HKLM,"SOFTWARE\Microsoft\Active Setup\Installed Components\{92D1915F-BAF9-4928-BB8E-967AEEC13527}"
;wuv3is
HKLM,"SOFTWARE\Microsoft\Active Setup\Installed Components\{CEBC955E-58AF-11D2-A30A-00A0C903492B}"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\Flags","wuaucpl.cpl",,1
HKLM,"SOFTWARE\Classes\CLSID\{BCBCD383-3E06-11D3-91A9-00C04F68105C}"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad","AUHook"
;wuauboot
HKLM,"SOFTWARE\Microsoft\Active Setup\Installed Components\{2FD2FACA-4071-11d3-8CD1-00C04F8ED9EB}"
;wuauclt
HKLM,"SOFTWARE\Microsoft\Active Setup\Installed Components\{48B5862A-4071-11d3-8CD1-00C04F8ED9EB}"
;wuaucpl
HKLM,"SOFTWARE\Microsoft\Active Setup\Installed Components\{11566B38-955B-4549-930F-7B7482668782}"
;auhook
HKLM,"SOFTWARE\Microsoft\Active Setup\Installed Components\{BCBCD383-3E06-11D3-91A9-00C04F68105C}"
;wuaures
HKLM,"SOFTWARE\Microsoft\Active Setup\Installed Components\{DF893A39-485B-457F-8366-965C316A143E}"
;wuaupd
HKLM,"SOFTWARE\Microsoft\Active Setup\Installed Components\{0B9C698E-3029-11D3-91A5-00C04F68105C}"
HKLM,"SOFTWARE\CLASSES\CLSID\{0B9C698E-3029-11D3-91A5-00C04F68105C}"
HKLM,"SOFTWARE\CLASSES\CLSID\{C3CCEDF8-2412-11D3-919B-00C04F68105C}"
HKLM,"SOFTWARE\CLASSES\TypeLib\{BFF80E2A-3028-11D3-91A5-00C04F68105C}"
HKLM,"SOFTWARE\CLASSES\Wuaupd.WUProgressiveDL"
HKLM,"SOFTWARE\CLASSES\Wuaupd.WUProgressiveDL.1"
HKLM,"SOFTWARE\CLASSES\Wuaupd.WUQueueManager"
HKLM,"SOFTWARE\CLASSES\Wuaupd.WUQueueManager.1"


[DelCUNKeys]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Run","CriticalUpdate"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Windows Critical Update Notification"
HKLM,"SOFTWARE\Microsoft\Active Setup\Installed Components\{73a41784-3241-11d2-aa16-00c04fb16f9e}"
HKLM,"Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Critical Update"
HKLM,"SOFTWARE\Microsoft\Active Setup\Installed Components\{7FD58812-D1B2-11d2-94A5-00C04F797DF4}"

[DelW2kAUKeys]
HKLM,"Software\Microsoft\Windows NT\CurrentVersion\SvcHost","wugroup"
HKLM,"Software\Microsoft\Windows NT\CurrentVersion\SvcHost\wugroup"

[DelOtherKeys]
; Service Startup Key
HKLM,"Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Setup\ServiceStartup"
; old IUpdate
HKLM,"SOFTWARE\CLASSES\Interface\{C350CAC8-7BEB-494A-A846-FE42C392E054}"
; wuv3is.dll
HKLM,"SOFTWARE\CLASSES\CLSID\{CEBC955E-58AF-11D2-A30A-00A0C903492B}"
HKLM,"SOFTWARE\CLASSES\TypeLib\{CEBC954F-58AF-11D2-A30A-00A0C903492B}"
HKLM,"SOFTWARE\CLASSES\CV3.CV3"
HKLM,"SOFTWARE\CLASSES\CV3.CV3.1"
HKLM,"SOFTWARE\CLASSES\Interface\{CEBC955D-58AF-11D2-A30A-00A0C903492B}"
; wupdinfo.dll
HKLM,"SOFTWARE\CLASSES\CLSID\{A3863C2E-86EB-11D1-A9DB-00C04FB16F9E}"
HKLM,"SOFTWARE\CLASSES\TypeLib\{A3863C1C-86EB-11D1-A9DB-00C04FB16F9E}"
HKLM,"SOFTWARE\CLASSES\CWUpdInfo.CWUpdInfo.1"
HKLM,"SOFTWARE\CLASSES\CWUpdInfo.CWUpdInfo"
HKLM,"SOFTWARE\CLASSES\Interface\{A3863C2D-86EB-11D1-A9DB-00C04FB16F9E}"
;iuctl.dll
HKLM,"SOFTWARE\Classes\IUCtl.Update"
HKLM,"SOFTWARE\Classes\IUCtl.Update.1"
HKLM,"SOFTWARE\Classes\IuCtl.Detection"
HKLM,"SOFTWARE\Classes\IuCtl.Detection.1"
HKLM,"SOFTWARE\Classes\IuCtl.ProgressListener"
HKLM,"SOFTWARE\Classes\IuCtl.ProgressListener.1"
HKLM,"SOFTWARE\Classes\IUCtl.UpdateCompleteListener"
HKLM,"SOFTWARE\Classes\IUCtl.UpdateCompleteListener.1"
HKLM,"SOFTWARE\Classes\CLSID\{9F1C11AA-197B-4942-BA54-47A8489BB47F}"
HKLM,"SOFTWARE\Classes\CLSID\{B5AF6951-FFBD-4E7B-A126-8F28F86E5D2E}"
HKLM,"SOFTWARE\Classes\CLSID\{3E873CB7-D5F5-43EF-AC4A-1F97D3118265}"
HKLM,"SOFTWARE\Classes\CLSID\{C65CF02D-749C-46F0-B2BF-3E65875A5C70}"
HKLM,"SOFTWARE\Classes\Interface\{CD19302B-FF55-4274-BA18-D98F21FCD672}"
HKLM,"SOFTWARE\Classes\Interface\{4F5E50AF-A2C0-40EF-AC9A-469D9462EA76}"
HKLM,"SOFTWARE\Classes\Interface\{8E2EF6DC-0AB8-4FE0-9049-3BEA4506BF8D}"
HKLM,"SOFTWARE\Classes\TypeLib\{306C2111-D294-4DD1-9C47-41036F58EBB3}"
HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\iuctl.dll"

[AddRegKillBit]
;AddRegKillBit WUV3IS
HKLM,"SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CEBC955E-58AF-11D2-A30A-00A0C903492B}","Compatibility Flags",0x00010001,0x00000400

[AddRegControlPanelCategory]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Extended Properties\{305CA226-D286-468e-B848-2B2E8E697B74} 2","%SystemRoot%\System32\wuaucpl.cpl",0x00010001,"10"

[Strings]
;Non-Localizable

;Localizable
;needs to be localized exactly as the task scheduler job created by CUN
WUCUN_TS_JOBFILE = "windows critical update notification.job"

This looks like quite a difference to me. Are you sure this is how it should be?

Edited by lek
Link to comment
Share on other sites

Yes, that's fine.

The problem definitely lies with HFSLIPWU.INF; it is incomplete.

Can you do two tests?

Test 1:

1) Run HFSLIP with ONLY WindowsUpdateAgent20-x86.exe in HF

2) Afterwards, open HFSLIPWU.INF from SOURCESS\I386 and search for occurances of "regsvr32"

Test 2:

1) Run HFSLIP with all hotfixes EXCEPT WindowsUpdateAgent20-x86.exe

2) Afterwards, open HFSLIPWU.INF from SOURCESS\I386 and search for occurances of "regsvr32"

Do you get results for "regsvr32"? (Y/N)

Link to comment
Share on other sites

Test 1 HFSLIPWU.INF (ONLY WindowsUpdateAgent20-x86.exe in HF):

[Version]
Signature="$WINDOWS NT$"

[Optional Components]
WinUpdate
CLEANUP

[WinUpdate]
CopyFiles = PFILES1,PFILES2,PFILES3,PFILES4,PFILES5,PFILES6,PFILES7,PFILES8,PFILES9,SYS32,NDIAG,MUIfall
DelFiles =
AddReg = ROROE,HFSLIPREG
DelReg =
OptionDesc = "Hotfix Registry Edit"
Tip = "Hotfix Registry Edit"
Modes = 0,1,2,3

[CLEANUP]
CopyFiles =
DelFiles =
AddReg = OTHER
OptionDesc = "HFSLIP OTHER"
Tip = "Hotfix Registry Edit"
Modes = 0,1,2,3

[SourceDisksNames]
1="Windows CD","win51",,"\I386"

[HFSLIPREG]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HFSLIPTotalSlipstream","DisplayName",0,"HFSLIP Total Slipstream (70325)"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HFSLIPTotalSlipstream","UninstallString",0,"CMD.EXE /C ECHO>ER.REG REGEDIT4&ECHO>>ER.REG [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HFSLIPTotalSlipstream]&REGEDIT /S ER.REG&DEL/Q/F ER.REG"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZZ999","999CLN",,"CMD.EXE /C RD/Q/S ""%SystemRoot%\HFSLIP"""
HKLM,"SOFTWARE\Microsoft\Driver Signing","Policy",0x30001,00
HKLM,"SOFTWARE\Microsoft\GdiDetectionTool","GDITool",0x10001,1
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ext\CLSID","{17492023-C23A-453E-A040-C7C580BBF700}",,"1"

[ROROE]

Test 2 HFSLIPWU.INF (all hotfixes EXCEPT WindowsUpdateAgent20-x86.exe):


[Version]
Signature="$WINDOWS NT$"

[Optional Components]
WinUpdate
CLEANUP

[WinUpdate]
CopyFiles = PFILES1,PFILES2,PFILES3,PFILES4,PFILES5,PFILES6,PFILES7,PFILES8,PFILES9,SYS32,NDIAG,MUIfall
DelFiles =
AddReg = ROROE,HFSLIPREG
DelReg =
OptionDesc = "Hotfix Registry Edit"
Tip = "Hotfix Registry Edit"
Modes = 0,1,2,3

[CLEANUP]
CopyFiles =
DelFiles =
AddReg = OTHER
OptionDesc = "HFSLIP OTHER"
Tip = "Hotfix Registry Edit"
Modes = 0,1,2,3

[SourceDisksNames]
1="Windows CD","win51",,"\I386"

[HFSLIPREG]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HFSLIPTotalSlipstream","DisplayName",0,"HFSLIP Total Slipstream (70325)"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HFSLIPTotalSlipstream","UninstallString",0,"CMD.EXE /C ECHO>ER.REG REGEDIT4&ECHO>>ER.REG [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HFSLIPTotalSlipstream]&REGEDIT /S ER.REG&DEL/Q/F ER.REG"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZZ999","999CLN",,"CMD.EXE /C RD/Q/S ""%SystemRoot%\HFSLIP"""
HKLM,"SOFTWARE\Microsoft\Driver Signing","Policy",0x30001,00
HKLM,"SOFTWARE\Microsoft\GdiDetectionTool","GDITool",0x10001,1
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ext\CLSID","{17492023-C23A-453E-A040-C7C580BBF700}",,"1"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB885836","Type",0,"Update"

[DestinationDirs]
PFILES1=16422,"Windows Media Player"

[SourceDisksFiles]
msoobci.dll=1
wmsetsdk.exe=1

[PFILES1]
msoobci.dll
wmsetsdk.exe

[ROROE]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","151",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP151.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","152",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP152.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","153",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP153.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","154",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP154.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","155",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP155.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","200",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP200.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","201",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP201.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","202",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP202.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","203",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP203.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","204",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP204.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","205",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP205.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","206",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP206.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","207",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP207.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","208",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP208.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","209",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP209.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","210",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP210.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","211",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP211.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","212",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP212.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","213",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP213.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","214",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP214.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","215",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP215.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","216",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP216.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","217",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP217.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","218",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP218.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","219",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP219.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","220",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP220.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","221",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP221.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","222",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP222.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","223",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP223.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","224",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP224.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","225",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP225.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","226",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP226.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","227",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP227.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","228",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP228.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","229",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP229.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","230",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP230.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","231",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP231.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","232",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP232.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","233",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP233.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","234",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP234.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","235",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP235.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","236",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP236.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","237",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP237.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","238",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP238.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","239",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP239.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","240",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP240.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","241",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP241.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","242",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP242.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","243",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP243.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","244",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP244.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","245",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP245.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","246",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP246.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","247",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP247.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","248",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP248.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","249",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP249.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","250",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP250.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","251",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP251.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","252",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP252.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","253",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP253.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","254",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP254.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","255",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP255.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","256",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP256.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","257",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP257.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","258",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP258.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","259",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP259.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","260",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP260.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","261",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP261.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","262",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP262.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","263",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP263.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","264",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP264.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","265",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP265.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","266",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP266.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","267",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP267.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","268",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP268.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","269",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP269.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","270",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP270.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","271",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP271.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","272",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP272.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","273",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP273.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","274",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP274.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","275",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP275.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","276",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP276.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","277",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP277.INF,DefaultInstall"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZA","278",0,"RunDll32.exe %11%\AdvPack.Dll,LaunchINFSection %10%\HFSLIP\HFSLP278.INF,DefaultInstall"

As you can see, neither of the two files has any reference to regsvr32 in it.

Edit: I take it the area of interest is the last bit of the :POSTHFX routine?

Edited by lek
Link to comment
Share on other sites

Some more debugging info. I have inserted a pause in HFSLIP at the following location:

IF "%VERSION%"=="2000" ECHO>>WORK\NSFREGNOT.TXT iuctl.dll
FINDSTR/VIB /G:WORK\NSFREGNOT.TXT WORK\NSFREG0.TXT>WORK\NSFREG.TXT
FOR /F %%I IN (WORK\NSFREG.TXT) DO SET NSFREG=1

PAUSE

IF NOT DEFINED NSFREG GOTO :EOF
SET HFSLP=200
FOR /F %%I IN (WORK\NSFREG.TXT) DO (
ECHO>>WORK\RGSVRWU.TXT HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\ZZB","!HFSLP!",0,"%%11%%\regsvr32 /s """%%11%%\%%I""""
SET /A HFSLP=!HFSLP!+1
)
GOTO :EOF

When hitting the breakpoint, the file WORK\NSFREG.TXT is empty. Hence, the NSFREG variable does not get set, and the block adding the regsrv32 lines to WORK\RGSVRWU.TXT does not get executed.

Is that of any help?

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...