Hotfix Hunting

ricktendo64 · Post by **ricktendo64** » Tue Aug 31, 2010 12:16 pm

No not CopyFiles, these modes...it tells weather/when to install the component

[Optional Components]
BitLocker

[BitLocker]
OptionDesc ="%BitLocker2Go%"
Tip ="%BitLocker_Tip%"
Modes =0,1,2,3

Edit: nm, found it

if anyone is interested, i figured how default components are determined by windows setup. sysoc.inf contains a list of all optional components. and each .inf it mentions has the subcomponents.
In the subcomponents look for a line that says Modes=0,1,2,3
this means installed in all install scenarios (clean, upg9x, upgNT, upg2K)
removing the line should no longer make it a default component. (it is explained in commented lines in fxsocm.inf)

i believe modes=0,1,2,3 means
0 is default in clean install, 1 is in Win9x upgrade, 2 is in WINNTupgrade, 3 is in WIN2Kupgrade.. to undefault the component the line should be commented (;) or deleted.

OnePiece Alb · Post by **OnePiece Alb** » Tue Aug 31, 2010 2:43 pm

5eraph wrote:According to TechNet, InstallDefault performs this task.

Microsoft wrote:InstallDefault=0 | 1 ; Whether to install this component by default. 1=Yes, 0=No.
I thought I knew about Modes at one time, but I can't remember now. Strangely enough, the article linked above gives no mention of Modes.

Sysoc to do with SETUPAPI.DLL, not to do with ADVPACK.DLL

ricktendo64 wrote:Anybody have documentation on Modes = 0,1,2,3 directive in INF files?

I want to NOT install a certain component by default, I know I can use Modes = 0 (or not add it at all) but was just curious if anybody had the full story on the use of Modes

tia

tried to use InstallType? http://www.wincert.net/forum/index.php? ... &pid=56068 I never tried it, but maybe works

Ciao

Post by **5eraph** » Tue Aug 31, 2010 6:44 pm

Thanks for the link, Rick.

And thanks for the reminder, OnePiece.

ricktendo64 · Post by **ricktendo64** » Sat Sep 04, 2010 3:02 am

Just a suggestion, but for you guys who make addons for IE8/WMP11 dont you think it would be nice to update the icons in add/rem windows components to the newer style icons?

Here is what I'm thinking

Code: Select all

[ExtraFileEdits]
; ieframe.dll bitmap #807
ieaccess.inf|IconIndex    = *, ..\xpsp1res.dll, 200|IconIndex    = *, ..\ieframe.dll, 807|1

; wmploc.dll bitmap #101
wmpocm.inf|IconIndex = *, ocgen.dll, 1003|IconIndex = *, ..\wmploc.dll, 101|1

OnePiece Alb · Post by **OnePiece Alb** » Sat Sep 04, 2010 3:30 am

I chose not to update the old icons of windows, not to create more confusion between IE8-RollBack and the option of IE-Shortcuts http://img27.imageshack.us/img27/156/ie ... icone1.png

Ciao.

ricktendo64 · Post by **ricktendo64** » Sun Sep 12, 2010 10:08 am

Found this IE hotfix for XP in SoLoRs updates

KB2300135-v2 - ieframe.dll/8.00.6001.23060

Post by **user_hidden** » Tue Sep 14, 2010 12:07 pm

so far as of 12:00 noon Eastern Time

MRT 3.11 x86
KB982802
KB2141007

there are a couple of Jscript hotfixes showing up again in the download center but are already in our packs or IE addons.
of course there are Office, Junk Email and such but that is not our interest

yumeyao · Post by **yumeyao** » Tue Sep 14, 2010 12:59 pm

so far so much:
KB981322
KB2141007
KB982000
KB982802
KB2288608

-EDIT-
adding to it:
KB2121546
KB2259922
KB2124261
KB975558

-EDIT2-
according to Security Bulletin Advance Notification and KB894199, KB2398632 for IE7/8 is the only one that is missing.

-EDIT3-
Sorry, KB2288608 is for Office XP

, so there is still one more missing.

-EDIT4-
This one is here:
KB2347290

-EDIT5-
KB981322 updates usp10.dll, so maybe the one for vista is best.
KB2124261 is for IIS.
KB975558 is for WMP.

-EDIT6-
So the update KB2398632 for IE7/8 is only for Win7/Win2k8?
http://www.microsoft.com/downloads/en/r ... pe=s_basic
it's already 2:37 now.

yumeyao · Post by **yumeyao** » Tue Sep 14, 2010 4:14 pm

KB982000 is for Active Directory Application Mode (ADAM), which is also an optional component of Windows 2003 R2.

So the final list should be:
KB981322
KB2141007
KB982802
KB2121546
KB2259922
KB2347290
MRT 3.11 x86

KB975558 - WMP
KB2124261 - IIS
KB2290570 - IIS(Thanks rick for reminding)

ricktendo64 · Post by **ricktendo64** » Tue Sep 14, 2010 4:57 pm

Another IIS one is

KB2290570

acus · Post by **acus** » Tue Sep 14, 2010 9:15 pm

http://www.microsoft.com/downloads/en/d ... afddc098b5

Update for Windows XP (KB2158563)

tzchange.exe - 5.1.2600.6002

Regards

Post by **5eraph** » Thu Sep 30, 2010 8:55 pm

Does anybody have a link to the XP/2003 x64 package for KB2362765? I can't find it at the download center or the catalog. Microsoft Update doesn't offer it. It's not available for request either.

yumeyao · Post by **yumeyao** » Thu Sep 30, 2010 10:10 pm

I guess you can use KB2362765 for Vista x64.

Post by **5eraph** » Fri Oct 01, 2010 2:12 am

It's worth considering, but I have no idea how to get the files out. 7-Zip gives me 4950 files, none of them DLLs.

Apparently I need the Vista version of Expand.exe, which I don't have.

yumeyao · Post by **yumeyao** » Fri Oct 01, 2010 2:26 am

http://www.sereby.org/index.php?cat=hfext
This utility works very well.

Then you can use Pasha_ZZZ's script to get the cat that signs the dlls.
http://www.mediafire.com/file/jta0ca9yb ... llFiles.7z (Mirrored by 5eraph)

Post by **5eraph** » Fri Oct 01, 2010 2:42 am

Thanks.

How do I use Pasha_ZZZ's script? The procedure is not obvious to me from reading the CMD file. No instructions are included.

I have tried placing both IECompat.dll files (after renaming the 32-bit file) into the Files folder and running the CMD. I have also tried dragging the DLLs onto the CMD file. Nothing works so far.

yumeyao · Post by **yumeyao** » Fri Oct 01, 2010 2:54 am

Put IECompat.dll files into the Files folder, then put all catalogs into CATs folder, finally run _SignTest.cmd.
A CATsDLLs.log is generated showing what catalogs sign what files.

Post by **5eraph** » Fri Oct 01, 2010 2:58 am

Thanks again. Now my only problem is that no log file is created.

The CMD is missing quotes around instances of %~dp0%LOGFILE% to allow for spaces in the path. I now have a log file.

Pasha_ZZZ should probably update the script.

acus · Post by **acus** » Tue Nov 30, 2010 1:00 pm

Hi,
in this thread:
http://www.ryanvm.net/forum/viewtopic.php?t=7231

5eraph talks about 2 hotfixes for Internet Explorer 8 64 bit that could be usefull also for Internet Explorer for Windows XP 32 bit.

http://support.microsoft.com/kb/2325737 -> ieframe.dll 8.00.6001.23084
http://support.microsoft.com/kb/2422556 -> mshtml.dll 8.00.6001.23091

Regards

Post by **5eraph** » Wed Dec 01, 2010 9:13 pm

I should have mentioned those here, acus. Thanks for the reminder.

They will be included in the next cumulative update for IE which should be released 13 days from now if Microsoft keeps its IE cumulative update schedule.

ricktendo64 · Post by **ricktendo64** » Tue Dec 14, 2010 12:20 pm

Here is my changelog so far, lets see how it stacks up in a bit

Code: Select all

Updated KB890830-v3.14 (MRT)
Updated Flash Player v10.1.102.64
Updated KB931125 Root Certificates [October 2010]
Updated XPS Viewer EP v1.2

Added KB2296199 Replaces KB2279986
Added KB2416400-IE8 Replaces KB2360131-IE8
Added KB2423089
Added KB2436673 Replaces KB981957
Added KB2440591
Added KB2443105
Added KB2443685 Replaces KB2158563
Added KB2447568-IE8 Replaces KB2362765-IE8
Added KB2467659

acus · Post by **acus** » Tue Dec 21, 2010 1:23 pm

KB2454533-v2

http://support.microsoft.com/kb/2454533/en-us

For all supported x86-based versions of Windows XP.

Davclnt.dll 5.1.2600.6047
Webclnt.dll 5.1.2600.6047

Regards

ricktendo64 · Post by **ricktendo64** » Tue Dec 21, 2010 4:21 pm

I was just about to report, thanks

ricktendo64 · Post by **ricktendo64** » Sat Dec 25, 2010 2:54 am

KB978787 Rdpdr.sys/5.1.2600.5950 but it still has not been placed on the view and request hotfix page

Post by **user_hidden** » Thu Jan 06, 2011 1:07 pm

i presume these will be comming up on patch tuesday.

Microsoft Security Advisory (2490606) Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution

Microsoft Security Advisory (2488013) Vulnerability in Internet Explorer Could Allow Remote Code Execution

mf3imp · Post by **mf3imp** » Fri Jan 07, 2011 5:10 am

user_hidden wrote:i presume these will be comming up on patch tuesday.

We had the same idea in an Italian forum, but according to this post, will not be so.

http://blogs.technet.com/b/msrc/archive ... lease.aspx

ricktendo64 · Post by **ricktendo64** » Sat Feb 19, 2011 12:04 pm

KB2498072 scsiport.sys/5.1.2600.6073

RicaNeaga · Post by **RicaNeaga** » Sat Feb 19, 2011 2:24 pm

ricktendo64 wrote:KB2498072 scsiport.sys/5.1.2600.6073

the link is down.

Post by **user_hidden** » Sat Feb 19, 2011 3:46 pm

RicaNeaga wrote:the link is down.

probably because the hotfix was removed or replaced as it was request only release.

ricktendo64 · Post by **ricktendo64** » Sat Feb 19, 2011 5:36 pm

Not just this hotfix but all hotfix request links are down, try again later

Post by **user_hidden** » Sat Feb 19, 2011 8:01 pm

ricktendo64 wrote:Not just this hotfix but all hotfix request links are down, try again later

thanks for the heads-up

bphlpt · Post by **bphlpt** » Sat Feb 19, 2011 11:17 pm

Seem to be working again now.

Cheers and Regards

ricktendo64 · Post by **ricktendo64** » Sun Mar 06, 2011 12:19 pm

New timezone hotfix KB2515337 (no installer for XP yet but there is a REG that can be applied)

Other: here is the updated "TZVersion" number taken from the Windows 7 hotfix (I also manually updated this number in my updatepack)

Code: Select all

Dec=131792897
Hex=0x7db0001

Post by **5eraph** » Sun Mar 06, 2011 5:33 pm

Thanks, Rick.

Do you also update the KBLast value? It usually matches TZVersion.

ricktendo64 · Post by **ricktendo64** » Sun Mar 06, 2011 5:37 pm

Yep, I do

Post by **user_hidden** » Mon Mar 07, 2011 5:13 pm

ricktendo64 wrote:New timezone hotfix KB2515337 (no installer for XP yet but there is a REG that can be applied)

XP hotfix has been posted on the request page......

"TZVersion"=dword:07db0001
"TZBaseYear"=dword:000007db
"KBLast"=dword:07db0001

yumeyao · Post by **yumeyao** » Sat Mar 12, 2011 7:38 am

KB2519231(replaces KB2515337)
tzchange.exe 5.1.2600.6090
tzchange.dll 5.1.2600.6090

Info from 2ch.
http://hibari.2ch.net/test/read.cgi/win/1256168269/l50

yumeyao · Post by **yumeyao** » Sat Mar 12, 2011 7:48 am

Just heads up,
KB2467659 has been unnecessary since KB2482017 is released.

http://support.microsoft.com/kb/2467659

Note These issues are resolved by security update 2482017.

Post by **user_hidden** » Sat Mar 12, 2011 9:17 am

thanks for the headsup Yumeyao

ricktendo64 · Post by **ricktendo64** » Sat Mar 12, 2011 12:16 pm

Double thanks

Post by **5eraph** » Wed Mar 16, 2011 7:56 pm

Another time zone update has been released (KB2519231).

ricktendo64 · Post by **ricktendo64** » Wed Mar 16, 2011 7:59 pm

WTF?

I guess its because of the time of year, lots of countries changing

Edit: 5eraph yumeyao also posted this one

Post by **5eraph** » Wed Mar 16, 2011 8:15 pm

Somehow I missed it. Sorry about that.

Post by **5eraph** » Thu Mar 17, 2011 3:56 am

Another Flash update will be released sometime next week due to a critical vulnerability.

Adobe wrote:We are in the process of finalizing a fix for the issue and expect to make available an update for Flash Player 10.x and earlier versions for Windows [...] during the week of March 21, 2011.

ricktendo64 · Post by **ricktendo64** » Wed Mar 23, 2011 1:31 pm

KB2524375

Microsoft is aware of nine fraudulent digital certificates issued by Comodo, a certification authority present in the Trusted Root Certification Authorities Store on all supported versions of Microsoft Windows. Comodo advised Microsoft on March 16, 2011 that nine certificates had been signed on behalf of a third party without sufficiently validating its identity. These certificates may be used to spoof content, perform phishing attacks, or perform man-in-the-middle attacks against all Web browser users including users of Internet Explorer.

These certificates affect the following Web properties:

login.live.com

mail.google.com

www.google.com

login.yahoo.com (3 certificates)

login.skype.com

addons.mozilla.org

"Global Trustee"

Comodo has revoked these certificates, and they are listed in Comodo’s current Certificate Revocation List (CRL). In addition, browsers which have enabled the Online Certificate Status Protocol (OCSP) will interactively validate these certificates and block them from being used.

Post by **user_hidden** » Wed Mar 23, 2011 3:53 pm

gracias

ricktendo64 · Post by **ricktendo64** » Sat Mar 26, 2011 10:09 am

New timezone hotfixes have been published on the DST blog

http://blogs.technet.com/b/dst2007/

Post by **5eraph** » Sat Mar 26, 2011 2:39 pm

Thanks very much for the link, Rick. Bookmarked.

code65536 · Post by **code65536** » Sat Mar 26, 2011 10:14 pm

ricktendo64 wrote:New timezone hotfixes have been published on the DST blog

http://blogs.technet.com/b/dst2007/

The story behind the Turkish move (of only one day!) is quite amusing. Apparently, the Turkish move was the result of a test taken by 1.5 million students. Sounds like our SAT. Out of a total population of nearly 78 million. Quite a lot of trouble to go through for 2% of the population. Wouldn't it have made much more sense to move the test date instead of the DST date (which is coordinated with all of Europe)?

ricktendo64 · Post by **ricktendo64** » Sat Mar 26, 2011 10:48 pm

LMAO

Looks like they are not going to publish any other languages, any English x86 updatepack makers or XP users have the registry entries (only need the filelist) to share?

I could do it manually but I prefer the one generated by installer