Hotfix Hunting

ricktendo64 · Post by **ricktendo64** » Fri Jun 22, 2012 12:33 am

ricktendo64 wrote:5eraph do you know if there is a cab with a INF and CAT for muweb?

I think it may be possible to create a standalone installer for Microsoft Update using the same method if I can find those two files

Well I found the INF responsible for Microsoft Update Client I think now I can make a standalone installer

Edit: yep, it is possible to make a 'Windows Update Agent' + 'Microsoft Update Client' AIO standalone installer, just need to do some more testing and will release it tomorrow

Post by **5eraph** » Fri Jun 22, 2012 9:13 am

That's great news.

Have you found sources for the new 7.6.7600.257 files?

ricktendo64 · Post by **ricktendo64** » Fri Jun 22, 2012 10:18 am

5eraph wrote:Have you found sources for the new 7.6.7600.257 files?

Nope, my guess is if its not self updating on x64 then the update/fix is only needed on x86

Edit: Here is the x86 and x64 AIO Windows Update Agent+Microsoft Update Client (in case anybody wants to try it,) still need to play around see if I can add the MU shortcut

x86: http://adf.ly/1713566/wuamucx86
MD5: 2184f0f50910707c8938364340c8fa3e

x64: http://adf.ly/1713566/wuamucx64
MD5: 5aa41395fa41215d4be44c3e01dfd3ab

Changelog:
6-23-2012
fixed wow64 version of wuweb.dll
added MU shortcut
6-23-2012
Updated both packages
Added missing muweb.dll to x64
6-22-2012
muweb.dll & wuweb.dll v7.6.7600.257

Post by **5eraph** » Fri Jun 22, 2012 11:21 am

wuweb.dll is updated to r257 when Microsoft Update is not enabled. It's not included in the current installer.

ricktendo64 · Post by **ricktendo64** » Fri Jun 22, 2012 11:24 am

O my! thanks for the info, how can I disable MU?

bphlpt · Post by **bphlpt** » Fri Jun 22, 2012 12:21 pm

You mean -- Windows Update -> Change Settings -> uncheck Microsoft Update? [Win7 x64]

I tried that, no new offerings, rechecked it, still no new offerings. But frankly, I have just done a new install over the last few days so I might have managed to pick it up already. Where can I go specifically to see which version of all of these new files that I have, and what's the best way to confirm the version of the files in question?

Cheers and Regards

ricktendo64 · Post by **ricktendo64** » Fri Jun 22, 2012 12:31 pm

bphlpt wrote:You mean -- Windows Update -> Change Settings -> uncheck Microsoft Update? [Win7 x64]

No, were talking XP

BTW 7.6.7600.257 links (submix8c stated the obvious)

x86:
http://update.microsoft.com/windowsupda ... b_site.cab
http://update.microsoft.com/windowsupda ... b_site.cab

x64:
http://update.microsoft.com/windowsupda ... b_site.cab
http://update.microsoft.com/windowsupda ... b_site.cab

keloo05 · Post by **keloo05** » Fri Jun 22, 2012 12:37 pm

ricktendo64 wrote:
bphlpt wrote:You mean -- Windows Update -> Change Settings -> uncheck Microsoft Update? [Win7 x64]
No, were talking XP

It's the same for Windows Xp.

ricktendo64 · Post by **ricktendo64** » Fri Jun 22, 2012 12:41 pm

keloo05 wrote:
ricktendo64 wrote:
bphlpt wrote:You mean -- Windows Update -> Change Settings -> uncheck Microsoft Update? [Win7 x64]
No, were talking XP
It's the same for Windows Xp.

I tried disabling it in IE and did not force wuweb.dll to update

BTW AIO package updated, now to update the default packages and later will see if I can do the x64 AIO

Post by **5eraph** » Fri Jun 22, 2012 7:11 pm

Thanks again, Rick.

keloo05 wrote:
ricktendo64 wrote:
bphlpt wrote:You mean -- Windows Update -> Change Settings -> uncheck Microsoft Update? [Win7 x64]
No, were talking XP
It's the same for Windows Xp.

It's basically the same. Go to MU site, "Change Settings" in the left pane, scroll to the end on the right and tick, "Disable Microsoft Update software and let me use Windows Update only."

ricktendo64 · Post by **ricktendo64** » Fri Jun 22, 2012 7:26 pm

5eraph wrote:It's basically the same. Go to MU site, "Change Settings" in the left pane, scroll to the end on the right and tick, "Disable Microsoft Update software and let me use Windows Update only."

Like I said it didn't work, did not force wuweb.dll to update. Anyway not needed since we now have the direct links

bphlpt · Post by **bphlpt** » Fri Jun 22, 2012 8:10 pm

For what it's worth, in Win7 x64, with the option checked to use MU, I have the following files installed on my actual system, all installed via MU/WU. all are v7.6.7600.256, all are dated June 2, 2012, and I can't get MU/WU to offer me anything more:

C:\Windows\System32\wuapi.dll - Windows Update Client API
C:\Windows\System32\wuapp.exe - Windows Update Application Launcher
C:\Windows\System32\wuauclt.exe - Windows Update
C:\Windows\System32\wuaueng.dll - Windows Update Agent
C:\Windows\System32\wucltux.dll - Windows Update Client User Experience
C:\Windows\System32\wudriver.dll - Windows Update WUDriver Stub
C:\Windows\System32\wups.dll - Windows Update Clent Proxy Stub
C:\Windows\System32\wups2.dll - Windows Update Clent Proxy Stub 2
C:\Windows\System32\wuwebv.dll - Windows Update Vista Web Control

I of course also have (all v6.1.7601.17514 and all dated Nov 20, 2010):

C:\Windows\System32\wusa.exe - Windows Update Standalone Installer
C:\Windows\SysWOW64\wuapi.dll - Windows Update Client API
C:\Windows\SysWOW64\wuapp.exe - Windows Update Application Launcher
C:\Windows\SysWOW64\wudriver.dll - Windows Update WUDriver Stub
C:\Windows\SysWOW64\wups.dll - Windows Update Clent Proxy Stub
C:\Windows\SysWOW64\wusa.exe - Windows Update Standalone Installer
C:\Windows\SysWOW64\wuwebv.dll - Windows Update Vista Web Control

In case it is of interest to anyone. If anyone needs me to check the version of any other installed file in Win7 x64 regarding this issue, just let me know.

Cheers and Regards

ricktendo64 · Post by **ricktendo64** » Fri Jun 22, 2012 11:58 pm

@bphlpt Microsoft Update needs nothing extra to function on Vista/7 (its just a regtweak somewhere) and the updated files are only the activex dll's that connect IE to the Windows/Microsoft Update "website"

BTW added WUA+MUC AIO x64 (sum1 with x64 XP or 2k3, need you to test it)

Post by **5eraph** » Sat Jun 23, 2012 8:51 am

x64 installer posted 2012/06/22 20:00 UTC, tested on clean install of XPx64SP2 without update pack or addons:

Install failed with following error number:
0x800703e3

Occurs whether AU is configured or not.

ricktendo64 · Post by **ricktendo64** » Sat Jun 23, 2012 10:02 am

Crap, muweb.dll was missing from my package...updated both AIO, I had to edit the version of wuweb.dll in wusetup.inf (it skipped the update to 257 if you had 256)

Finally if the x64 works I will tackle the shortcut

Post by **5eraph** » Sat Jun 23, 2012 12:15 pm

Same error with x64 installer posted 2012/06/23 06:05 UTC. Looks like WUSetup.inf needs updating.

Download:

Link: WindowsUpdate.2012-06-23,0605.log
Size: 15.7 KB
MD5: b408a9d61595802877b8ba2b9a382a8d

ricktendo64 · Post by **ricktendo64** » Sat Jun 23, 2012 12:52 pm

Thanks for the log

Updated, fixed wuweb.dll wow64 version in wusetup.inf and added MU shortcut

Post by **5eraph** » Sun Jun 24, 2012 12:13 am

Same error with x64 installer posted 2012/06/23 08:51 UTC. Same fatal error in log file. I don't know which INF it refers to if not WUSetup.inf.

FATAL: Setup found that version for file c:\bb5892bf9eb71c36345adea7\Wow64\wuweb.dll specified in INF (7.6.7600.256) doesn't match source version (7.6.7600.257
WARNING: Setup failed while processing file operations, error = 0x800703E3. Rolling back changes.

ricktendo64 · Post by **ricktendo64** » Sun Jun 24, 2012 1:20 am

WTF? I am out of ideas whats the problem

tomasz86 · Post by **tomasz86** » Sun Jun 24, 2012 3:55 am

I've just had a look at the x64 installer. This WUA installer is somewhat special (different than normal M$ updates) so I can't really help in this case but could you try to change:

Code: Select all

[UpdateID]
GUID = d67661eb-2423-451d-bf5d-13199e37df28
RevisionID = 0
TargetClientVersion = 7,6,7600,256

to

Code: Select all

[UpdateID]
GUID = d67661eb-2423-451d-bf5d-13199e37df28
RevisionID = 0
TargetClientVersion = 7,6,7600,257

?

If it still doesn't work could you try to disable the catalog file?

Code: Select all

; CatalogFile=wsus3setup.cat

acus · Post by **acus** » Sun Jun 24, 2012 9:02 am

I notice that in WUA x86 installer other 2 files could be replaced:
1. msxml3.dll 8.100.1052.0 coming from KB2079403
2. winhttp.dll 5.1.2600.6175 coming from KB2585542

ricktendo64 · Post by **ricktendo64** » Tue Jul 10, 2012 12:10 pm

Wierd, new type of roots cert (revoke) installer rvkroots.exe

tomasz86 · Post by **tomasz86** » Tue Jul 10, 2012 1:36 pm

What's the difference between rvkroots and rootsupd?

ricktendo64 · Post by **ricktendo64** » Tue Jul 10, 2012 2:54 pm

I forgot to do a regscan before I installed but you can read about what it does here.

I notice it has a new updroots.exe (I am going repack it and also update my repacked rootsupd.exe with the new EXE)

Post by **user_hidden** » Tue Jul 10, 2012 3:14 pm

the rootsupd is the update for root certificates.
the rvkroots is to update the revoke certificates list.
i am including both in my pack.

tomasz86 · Post by **tomasz86** » Tue Jul 10, 2012 4:42 pm

Thanks for explanation. I didn't know about the revoke certificates list

Post by **user_hidden** » Tue Jul 10, 2012 5:09 pm

tomasz86 wrote:Thanks for explanation. I didn't know about the revoke certificates list

neither did i

combo · Post by **combo** » Mon Jul 23, 2012 9:19 pm

ricktendo64 wrote:
Edit: Here is the x86 and x64 AIO Windows Update Agent+Microsoft Update Client (in case anybody wants to try it,) still need to play around see if I can add the MU shortcut

x86: http://adf.ly/1713566/wuamucx86
MD5: 2184f0f50910707c8938364340c8fa3e

x64: http://adf.ly/1713566/wuamucx64
MD5: 5aa41395fa41215d4be44c3e01dfd3ab

Changelog:
6-23-2012
fixed wow64 version of wuweb.dll
added MU shortcut
6-23-2012
Updated both packages
Added missing muweb.dll to x64
6-22-2012
muweb.dll & wuweb.dll v7.6.7600.257

ricktendo64, great work on this. I have deployed successfully to Windows 7 machines but I've got a strange problem deploying to Windows XP that maybe you can shed some light on..

On Windows 7, running the installer as a user or as the system account installs fine.

On Windows XP, running the installer as a user works fine (assuming they have administrator rights) but when the installer is run as system the update fails, with windowsupdate.log showing:

WARNING: Setup failed while processing file operations, error = 0x800B0100. Rolling back changes.

As best I can work out this looks like some kind of certificate or signing issue, but that doesn't explain why it runs fine as a user but not as system.

Any ideas?

ricktendo64 · Post by **ricktendo64** » Mon Jul 23, 2012 11:26 pm

Dont use the AIO windows update+microsoft update, I had to edit the INF breaking the digital cert so use this one instead http://www.wincert.net/forum/topic/9907 ... 676002567/

No files were edited so all files including INF should be signed

BTW use the /wuforce switch for best results

combo · Post by **combo** » Tue Jul 24, 2012 2:52 am

ricktendo64 wrote:Dont use the AIO windows update+microsoft update, I had to edit the INF breaking the digital cert so use this one instead http://www.wincert.net/forum/topic/9907 ... 676002567/

No files were edited so all files including INF should be signed

BTW use the /wuforce switch for best results

I downloaded and tried your repack from wincert.net yesterday but that did not install correctly, with Windowsupdate.log indicating:

FATAL: Setup found that version for file c:\7b64b8e10faee9e8ba40e413\wuweb.dll specified in INF (7.6.7600.256) doesn't match source version (7.6.7600.257
WARNING: Setup failed while processing file operations, error = 0x800703E3. Rolling back changes.

RicaNeaga · Post by **RicaNeaga** » Tue Jul 24, 2012 5:02 am

@ricktendo64 I've edited my post at wincert - .256 is really the latest version, however something is wrong since Microsoft Update via Internet Explorer isn't working, giving a strange error.

Maybe it's because the files are from the version .257 and not .256? You know better, hope you'll have the time to revise also the MU installer at some point.

ricktendo64 · Post by **ricktendo64** » Tue Jul 24, 2012 9:08 am

Reverted wuweb.dll to 7.6.7600.256, please download and try aggain (note when you first run WU you will be prompted to update wuweb.dll to 7.6.7600.257)

RicaNeaga · Post by **RicaNeaga** » Tue Jul 24, 2012 12:42 pm

So the AIO (WU+MU) from the previous post in this thread is not ''updated'' to .256? Just wanted to be sure, I'll try only the WU installer from wincert if this is the case, no problem.

ricktendo64 · Post by **ricktendo64** » Tue Jul 24, 2012 1:06 pm

No I have now downgraded the WU+MU because with these I edited the INF to change the version of m/wuweb.dll

RicaNeaga · Post by **RicaNeaga** » Thu Aug 23, 2012 6:44 am

Very important ''updated update'' for Background Intelligent Transfer Service (BITS) 2.0 and WinHTTP 5.1 - KB842773 - released yesterday, for Windows Server 2003, Windows XP, and Windows 2000.

@ricktendo My problems with your WU or WU+MU addons (I had problems with both) were STRICTLY related to the BITS service. And using xable's addons (with older versions of the WU and MU) was ok, however this update aknowledges that newer versions of WU files can have problems with BITS.

So the problems may have been with Microsoft all along, and not with your addons. I'm going to test them once again, so please post an updated version of the WU+MU (7.6.7600.257) addon especially, if it doesn't generate other issues (like the broken digital cert you've mentioned).

tomasz86 · Post by **tomasz86** » Thu Aug 23, 2012 10:09 am

KB842773 wasn't released yesterday. It was removed from M$ servers a few days ago and now it seems that the file is available only for XP but not for 2000/2003. I'll need to check it because the files may be exactly the same for the all three systems. Thanks for information anyway

ricktendo64 · Post by **ricktendo64** » Wed Aug 29, 2012 11:51 am

New XP Hotfix (thanks to komm)

KB2732488

Post by **user_hidden** » Wed Aug 29, 2012 3:09 pm

ricktendo64 wrote:New XP Hotfix (thanks to komm)

KB2732488

thank you "kernel"

shiner · Post by **shiner** » Thu Sep 20, 2012 2:31 am

Incoming out-of-band coming tomorrow.

Post by **5eraph** » Thu Sep 20, 2012 6:17 pm

Thanks, shiner.

Post by **user_hidden** » Fri Sep 21, 2012 11:52 am

shiner wrote:Incoming out-of-band coming tomorrow.

Cumulative Security Update for Internet Explorer for Windows XP (KB2744842)

Post by **5eraph** » Fri Sep 21, 2012 12:53 pm

More links:

Cumulative Security Update for IE 6 for 2003 (KB2744842)
Cumulative Security Update for IE 6 for XP/2003 x64 Edition (KB2744842)

Cumulative Security Update for IE 8 for XP (KB2744842)
Cumulative Security Update for IE 8 for 2003 (KB2744842)
Cumulative Security Update for IE 8 for XP/2003 x64 Edition (KB2744842)

ricktendo64 · Post by **ricktendo64** » Fri Sep 21, 2012 1:02 pm

I also add the updated shdocvw.dll and browseui.dll from the XP IE cumulative to my pack

Post by **5eraph** » Fri Sep 21, 2012 1:10 pm

As do I in my IE8 addon to satisfy KB972582, along with the rest that aren't replaced by IE8 versions.

ricktendo64 · Post by **ricktendo64** » Sat Oct 27, 2012 10:51 am

Couple XP hotfixes thanks to komm

2732488
2769756

acus · Post by **acus** » Sat Oct 27, 2012 1:12 pm

komm has found another HF for IE8:

2762509

ricktendo64 · Post by **ricktendo64** » Sat Oct 27, 2012 1:38 pm

acus wrote:komm has found another HF for IE8:

2762509

Thanks, if somebody can post the update reg entries I will update the english yumeyao ie8 addon

Post by **5eraph** » Sat Oct 27, 2012 3:19 pm

Registry entries for KB2762509-IE8:

HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8","Description",0,"Hotfix for Windows Internet Explorer 8 (KB2762509)"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8","InstalledBy",0,"Administrator"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8","InstalledDate",0,"10/27/2012"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8","RemoveOnIE8Uninstall",0x10001,1
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8","Type",0,"Update"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\0","BuildCheckSum",0,"aa0b20"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\0","BuildDate",0,"Fri Oct 12 02:03:27 2012"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\0","FileName",0,"ieframe.dll"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\0","Location",0,"%11%"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\0","Version",0,"8.0.6001.23448"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\1","BuildCheckSum",0,"5c58fa"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\1","BuildDate",0,"Fri Oct 12 02:03:27 2012"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\1","FileName",0,"mshtml.dll"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\1","Location",0,"%11%"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\1","Version",0,"8.0.6001.23448"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\2","BuildCheckSum",0,"12ddb3"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\2","BuildDate",0,"Fri Oct 12 02:03:27 2012"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\2","FileName",0,"urlmon.dll"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\2","Location",0,"%11%"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\2","Version",0,"8.0.6001.23448"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\3","BuildCheckSum",0,"efbea"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\3","BuildDate",0,"Fri Oct 12 02:03:27 2012"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\3","FileName",0,"wininet.dll"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\3","Location",0,"%11%"
HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8\Filelist\3","Version",0,"8.0.6001.23448"
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8","Backup Dir",0,""
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8","Comments",0,"Hotfix for Windows Internet Explorer 8 (KB2762509)"
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8","Fix Description",0,"Hotfix for Windows Internet Explorer 8 (KB2762509)"
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8","IE Service Pack",0x10001,0
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8","Installed",0x10001,1
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8","Installed By",0,""
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8","Installed On",0,""
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8","RemoveOnIE8Uninstall",0x10001,1
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8","Service Pack",0x10001,20
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8","Valid",0x10001,1
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8\File 1","Flags",0,""
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8\File 1","New File",0,""
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8\File 1","New Link Date",0,""
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8\File 1","Old Link Date",0,""

tomasz86 · Post by **tomasz86** » Sun Oct 28, 2012 1:14 am

Out of these the only one really required is:

Code: Select all

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB2762509-IE8","Installed",0x10001,1

and maybe

Code: Select all

HKLM,"SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2762509-IE8","RemoveOnIE8Uninstall",0x10001,1

Post by **5eraph** » Sun Oct 28, 2012 1:25 am

QFECheck uses the Filelist entries.