Hotfix Hunting

Post by **user_hidden** » Sat Jan 18, 2014 3:13 pm

Thanks Rick and Komm for finding them

Post by **user_hidden** » Tue Feb 11, 2014 9:26 am

MRT 5.9.9902.0
FC5CF920-B37A-457B-9AB9-36ECC218A003

ricktendo64 · Post by **ricktendo64** » Wed Feb 12, 2014 10:33 am

KB2929729 (thanks to komm)

regapi.dll v5.1.2600.6510 (xpsp_sp3_qfe.140131-0420)

Post by **user_hidden** » Wed Feb 12, 2014 10:38 am

Gracias Rick

OnePiece Alb · Post by **OnePiece Alb** » Wed Feb 12, 2014 2:04 pm

Thanks

Post by **5eraph** » Tue Feb 25, 2014 6:15 pm

New time zone update:

KB2922717 - Jordan, Brazil and Fiji

Also, the EMET 5.0 Tech Preview is available.

ricktendo64 · Post by **ricktendo64** » Tue Mar 04, 2014 10:11 am

TimeZone hotfix http://support.microsoft.com/kb/2935092

Post by **5eraph** » Tue Mar 04, 2014 10:59 am

Thanks, Rick.

Post by **user_hidden** » Tue Mar 11, 2014 9:32 am

3.11.2014 so far as of 9:30am EST

Microsoft Malicious Software Removal Tool
Adobe Flash Player 12.0.0.77 ActiveX Control
KB931125 Root Certificates Update (March 2014) http://www.microsoft.com/en-us/download ... x?id=42092
KB2929961 http://www.microsoft.com/en-us/download ... x?id=42113
KB2930275 http://www.microsoft.com/en-us/download ... x?id=42101
KB2934207
KB2935092 http://www.microsoft.com/en-us/download ... x?id=42048

ricktendo64 · Post by **ricktendo64** » Tue Mar 11, 2014 11:06 am

Thanks, I also got KB2933528 (but this may not apply because its for AD/AM) http://www.microsoft.com/en-us/download ... x?id=42171

BTW, anybody know what the trick to dl the wga updates where you edit the url? (I forget)

OnePiece Alb · Post by **OnePiece Alb** » Tue Mar 11, 2014 3:45 pm

Microsoft Malicious Software Removal Tool v5.10
http://download.microsoft.com/download/ ... -V5.10.exe

Ciao.

tomasz86 · Post by **tomasz86** » Tue Mar 11, 2014 8:08 pm

ricktendo64 wrote: BTW, anybody know what the trick to dl the wga updates where you edit the url? (I forget)

Do you mean this?

http://www.msfn.org/board/topic/158593- ... ?p=1013571

ricktendo64 · Post by **ricktendo64** » Tue Mar 11, 2014 8:13 pm

YES!!!

acus · Post by **acus** » Tue Apr 08, 2014 2:05 pm

KB2922229: http://www.microsoft.com/en-us/download ... x?id=42329 (kernel32.dll) supersedes KB960417 & KB2758857
KB2936068: http://www.microsoft.com/en-us/download ... x?id=42431 (IE6 update) supersedes KB2925418

acus · Post by **acus** » Thu May 01, 2014 4:36 pm

New update for Internet Explorer (Win.XP):

IE6 (KB2964358): http://www.microsoft.com/en-us/download ... x?id=42591

IE8 (KB2964358): http://www.microsoft.com/en-us/download ... x?id=42588

poolside · Post by **poolside** » Thu May 01, 2014 7:35 pm

acus wrote:New update for Internet Explorer (Win.XP):

IE6 (KB2964358): http://www.microsoft.com/en-us/download ... x?id=42591

IE8 (KB2964358): http://www.microsoft.com/en-us/download ... x?id=42588

Interesting. A fix for the all-encompassing IE vulnerability, for XP, post-EOS.

ricktendo64 · Post by **ricktendo64** » Tue May 13, 2014 11:53 am

Can somebody dl this mo security iso to check if any xp hotfixes are present?

http://www.microsoft.com/en-us/download ... x?id=42776

SHO_GuN · Post by **SHO_GuN** » Tue May 13, 2014 12:25 pm

ricktendo64 wrote:Can somebody dl this mo security iso to check if any xp hotfixes are present?

There are not any XP updates in it.

Post by **5eraph** » Tue May 13, 2014 12:45 pm

I can confirm that. No XP updates. Surprisingly, no IE7 updates are on the ISO either--not even for Win2003.

Outbreaker · Post by **Outbreaker** » Tue May 13, 2014 1:42 pm

This May 2014 updates i get on the Microsoft POSReady 2009 (Windows XP):

Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2003 (KB2932079)
Security Update for WEPOS and POSReady 2009 (KB2926765)
Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008 x86 (KB2931365)
Security Update for Internet Explorer 8 for WEPOS and POSReady 2009 (KB2953522)
Windows Malicious Software Removal Tool - May 2014 (KB890830)

SHO_GuN · Post by **SHO_GuN** » Fri May 16, 2014 12:28 pm

Where does one obtain the original POSReady 2009 updates?

ricktendo64 · Post by **ricktendo64** » Fri May 16, 2014 1:48 pm

Search for "Windows XP Embedded" on the Microsoft Update Catalog and sort by date

Atari800xl · Post by **Atari800xl** » Fri May 16, 2014 2:04 pm

Do these need editing/ changing, if I wanted to add them to my XP source (with nLite)?
If so, I would be very grateful if somebody could explain how.

bphlpt · Post by **bphlpt** » Fri May 16, 2014 7:46 pm

harkaz explained it briefly here.

Cheers and Regards

ricktendo64 · Post by **ricktendo64** » Fri May 16, 2014 11:50 pm

bphlpt you have a link for a tutorial on how to patch update.exe?

I would be willing to try repacking some

Atari800xl · Post by **Atari800xl** » Sat May 17, 2014 1:03 am

Thanks so much! I will try integrating the Dutch updates into my Dutch XP!

bphlpt · Post by **bphlpt** » Sat May 17, 2014 5:08 am

ricktendo64 wrote:bphlpt you have a link for a tutorial on how to patch update.exe?

I would be willing to try repacking some

At this time, it seems that harkaz used the instructions found here developed by 5eraph and CrashControl. But I think that harkaz is looking into a possible improvement because of a problem that someone ran into if some Norton apps are already installed when the modified updates are attempted. At least that is my understanding.

Cheers and Regards

acus · Post by **acus** » Sat May 17, 2014 5:29 am

Posted by Tomasz86 & Erpdude8

http://www.msfn.org/board/topic/44639-s ... ntry969871
http://www.msfn.org/board/topic/44639-s ... try1013535

bphlpt · Post by **bphlpt** » Sat May 17, 2014 5:47 am

And yet a later update from tomasz86

http://www.msfn.org/board/topic/44639-s ... try1036972

Cheers and Regards

Post by **5eraph** » Sat May 17, 2014 11:39 am

bphlpt wrote:[...] developed by 5eraph and CrashControl.

I had no hand in development. I just followed directions and posted the result for those unfamiliar with hex editing.

PJAmerica · Post by **PJAmerica** » Tue May 20, 2014 9:59 am

Is there a manual download for KB2934207 anywhere? I can't find it at all.

OnePiece Alb · Post by **OnePiece Alb** » Tue May 20, 2014 10:30 am

PJAmerica wrote:Is there a manual download for KB2934207 anywhere? I can't find it at all.

WindowsXP-KB2934207-x86-%Local%.cab https://app.box.com/s/lwfwd77nw0ctrdi7hnai/1/1097545522 or (UpdatePack Folder) in my signature in MEGA

Ciao.

PJAmerica · Post by **PJAmerica** » Tue May 20, 2014 1:26 pm

Thank you. I am trying to make my own manual update via nlite and wanted to have it as complete as I could.

ltsnow · Post by **ltsnow** » Tue May 20, 2014 3:40 pm

PJAmerica wrote:Thank you. I am trying to make my own manual update via nlite and wanted to have it as complete as I could.

Just curious, why would you want the "end of service" notification?

PJAmerica · Post by **PJAmerica** » Tue May 20, 2014 11:16 pm

ltsnow wrote:
PJAmerica wrote:Thank you. I am trying to make my own manual update via nlite and wanted to have it as complete as I could.
Just curious, why would you want the "end of service" notification?

Because I am a completest

acus · Post by **acus** » Fri Jul 18, 2014 12:38 pm

New update KB2982792: rvkroots.exe

http://www.microsoft.com/en-us/download ... x?id=43672

dencorso · Post by **dencorso** » Fri Jul 25, 2014 12:06 am

acus wrote:New update KB2982792: rvkroots.exe

http://www.microsoft.com/en-us/download ... x?id=43672

Thanks, acus!

However, after applying it MU starts offering me KB2917500 (the previous rvkroots.exe, from Dec 10, 2013)...

It turs out that the new KB2982792 has VERSION set to 6 (and Ver still 005!) in the .INF...
So, the workaround I found is fix version in the registry. Here's a .reg for it:

Code: Select all

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{C3C986D6-06B1-43BF-90DD-BE30756C00DE}]
@="RevokedRootsUpdate"
"IsInstalled"=dword:00000001
"Version"="5,0,2195,0"
"Locale"="*"
"ComponentID"="Windows Revoked Roots Update"

Post by **5eraph** » Fri Jul 25, 2014 2:57 am

Very nice, dencorso.

Works in XPx64 as well, but Win2003x64 needs the version to stay at 6. Argh.

dencorso · Post by **dencorso** » Wed Jul 30, 2014 2:24 am

The same problem occurs with the latest http://download.windowsupdate.com/msdow ... otsupd.exe (direct download link)

However, in this case the GUID is EF289A85-8E57-408d-BE47-73B55609861A, and the sought after version 40,0,2195,0

In case the version is not corrected, one gets reoffered instead the older Nov 2013 rootsupd.exe (KB931125) by WU, just as in the case of rvkroots, reported in my previous post.

Code: Select all

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{EF289A85-8E57-408d-BE47-73B55609861A}]
"Version"="40,0,2195,0"

SHO_GuN · Post by **SHO_GuN** » Wed Jul 30, 2014 2:39 pm

I have always blindly added rvkroots and rootsupd to my personal update pack just cuz everyone else adds them ... what do they actually do? Do they affect anything other than IE?

Neither of the above updates are being requested by MU (with POS reg hack installed).

Post by **5eraph** » Tue Sep 23, 2014 1:27 pm

A new time zone update is available today.

KB2998527 - Time Zone - Cumulative - Russia

It can be downloaded from the Windows Update Catalog.

SHO_GuN, rvkroots and rootsupd add entries to subkeys of the following registry key:

HKLM\SOFTWARE\Microsoft\SystemCertificates

They affect IE and all other Windows functions that involve certificates, such as file signing and file encryption.

Outbreaker · Post by **Outbreaker** » Wed Oct 22, 2014 7:46 am

Please share however has this KB977073 Hotfix for Windows XP x86 English.
KB977073 replaces KB973624

OnePiece Alb · Post by **OnePiece Alb** » Wed Oct 22, 2014 12:16 pm

Outbreaker wrote:Please share however has this KB977073 Hotfix for Windows XP x86 English.
KB977073 replaces KB973624

http://thehotfixshare.net/board/index.p ... opic=13846

ricktendo64 · Post by **ricktendo64** » Sun Oct 26, 2014 12:26 am

Fiji DST Change for 2014

Fiji government announced on Oct. 20th, 2014 that Fiji will enter DST on November 2nd, 2014 till Jan 18th, 2015 (link). While Microsoft is preparing a Hotfix to address this change, below are temporary solutions that users who are impacted by this change should take before Oct 26th, 2014, when Windows is currently set for Fiji to enter DST.

For Windows Vista and newer versions, users need to disable DST by running the following command from a command prompt:

TZUTIL /s “Fiji Standard Time_dstoff”

Users will later install the Hotfix to update DST data when the Hotfix becomes available, and enable DST by running the following command from a command prompt:

TZUTIL /s “Fiji Standard Time”

For Windows Server 2003 and Windows XP Embedded, users can run the following command to update the DST data for Fiji time zone, so it will observe the latest DST rules.

TZCHANGE /F “Fiji Standard Time” /S 11 0 1 2 0 0 0

Edit: tzchange in XP is way more powerful than tzutil in Vista+

ricktendo64 · Post by **ricktendo64** » Fri Oct 31, 2014 11:08 am

TZ update

http://support2.microsoft.com/kb/3011843

Post by **user_hidden** » Fri Oct 31, 2014 6:08 pm

gracias Rick

harkaz · Post by **harkaz** » Tue Nov 18, 2014 3:19 pm

kerberos.dll - KB3011780: Vulnerability in Kerberos could allow elevation of privilege: November 18, 2014

Post by **5eraph** » Tue Mar 10, 2015 3:25 pm

KB3039024 - Daylight saving time changes for Chile and Mexico in Windows

Requires the POSReady registry tweak or a patched update.exe to install on XPx86.

Outbreaker · Post by **Outbreaker** » Tue Mar 10, 2015 5:18 pm

Thanks!
Any clue why this Time Zone update is not distributed over the POSReady automatic Upadte?

ricktendo64 · Post by **ricktendo64** » Tue Mar 10, 2015 7:50 pm

Its a Hotfix, non security update