XPSP3_QFE_UpdatePack for Windows XP Post-SP3 20180109
- user_hidden
- Posts: 1924
- Joined: Thu Dec 06, 2007 7:52 am
- Location: Canada eh!
- ricktendo64
- Posts: 3214
- Joined: Mon May 22, 2006 12:27 am
- Location: Honduras
- OnePiece Alb
- Posts: 525
- Joined: Sat Sep 01, 2007 7:01 pm
- Location: Albania
- Contact:
- ricktendo64
- Posts: 3214
- Joined: Mon May 22, 2006 12:27 am
- Location: Honduras
http://technet.microsoft.com/en-us/secu ... ry/2607712
KB2616676 really replaces KB2607712.
Unfold the sections in that page and search for KB2616676.
KB2616676 really replaces KB2607712.
Unfold the sections in that page and search for KB2616676.
KB968730 has a Crypt32.dll. I don't see a replacement for it in KB2616676.
Oops, I was looking at the Win7 version. There is a crypt32.dll for XP
W32i DLL ENU 5.131.2600.5779 sh 599,552 03-19-2009 Crypt32.dll (KB968730)
W32i DLL ENU 5.131.2600.6147 sh 599,552 09-03-2011 crypt32.dll (KB2607712)
W32i DLL ENU 5.131.2600.6149 sh 599,552 09-09-2011 crypt32.dll (KB2616676)
Al
Oops, I was looking at the Win7 version. There is a crypt32.dll for XP
W32i DLL ENU 5.131.2600.5779 sh 599,552 03-19-2009 Crypt32.dll (KB968730)
W32i DLL ENU 5.131.2600.6147 sh 599,552 09-03-2011 crypt32.dll (KB2607712)
W32i DLL ENU 5.131.2600.6149 sh 599,552 09-09-2011 crypt32.dll (KB2616676)
Al
The security advisory may state that one replaces the other, but the INF files in the XPx64 update packages disagree. And the Certificates MMC snap-in lists six untrusted DigiNotar certificates (not eleven) when only KB2616676 is installed.yumeyao wrote:http://technet.microsoft.com/en-us/secu ... ry/2607712
KB2616676 really replaces KB2607712.
Unfold the sections in that page and search for KB2616676.
diff-u8pr_KB2607712_to_KB2616676.patchMicrosoft wrote:[KB2616676] adds six additional DigiNotar root certificates [...] The KB2616676 update [...] also contains the previous five [...] certificates added [...] by the KB2607712 update.
Code: Select all
[color=orange]--- KB2607712\update\update_SP2QFE.inf Sat Sep 03 15:53:10 2011
+++ KB2616676\update\update_SP2QFE.inf Thu Sep 08 17:00:18 2011[/color]
[color=#aaaaff]@@ -58,125 +58,147 @@[/color]
[ProductInstall.GlobalRegistryChanges.Append.ID]
AddReg=Product.Append.Reg.ID
[Product.Append.Reg.ID]
HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Clussvc","EventMessageFile",0x00020008,";%systemroot%\system32\ws03res.dll;%systemroot%\system32\w03a2409.dll"
[Save.Reg.For.Uninstall]
[color=#ffaaaa]- HKLM,"SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\C060ED44CBD881BD0EF86C0BA287DDCF8167478C","Blob"
- HKLM,"SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\43D9BCB568E039D073A74A71D8511F7476089CC3","Blob"
- HKLM,"SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\40AA38731BD189F9CDB5B9DC35E2136F38777AF4","Blob"
- HKLM,"SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\B533345D06F64516403C00DA03187D3BFEF59156","Blob"
- HKLM,"SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\5DE83EE82AC5090AEA9D6AC4E7A6E213F946E179","Blob"[/color]
[color=#aaffaa]+ HKLM,"SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\2B84BFBB34EE2EF949FE1CBE30AA026416EB2216","Blob"
+ HKLM,"SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\367D4B3B4FCBBC0B767B2EC0CDB2A36EAB71A4EB","Blob"
+ HKLM,"SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\86E817C81A5CA672FE000F36F878C19518D6F844","Blob"
+ HKLM,"SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\9845A431D51959CAF225322B4A4FE9F223CE6D15","Blob"
+ HKLM,"SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\B86E791620F759F17B8D25E38CA8BE32E7D5EAC2","Blob"
+ HKLM,"SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\F8A54E03AADC5692B850496A4C4630FFEAA29D83","Blob"[/color]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Setup", "LogLevel"
HKLM,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\%SP_SHORT_TITLE%
HKLM,"SOFTWARE\Microsoft\Updates\Windows Server 2003\SP%SERVICE_PACK_NUMBER%\%SP_SHORT_TITLE%"
HKLM,SOFTWARE\Microsoft\Updates\Windows XP Version 2003\SP%SERVICE_PACK_NUMBER%\%SP_SHORT_TITLE%
HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Clussvc","EventMessageFile"
[Product.Add.Reg]
Yes, I've noticed that diff. That's why at first I stated those 3 updates don't cover each other.
Since none of us know what the registry info stands for, that's really a confusing situation.
Since none of us know what the registry info stands for, that's really a confusing situation.
So I guess a reasonable assumption is that KB2616676's registry entries are 'big classes' and KB2607712's are 'small classes'.Microsoft wrote:The update adds six additional DigiNotar root certificates that are cross signed by Entrust or GTE to the Microsoft Untrusted Certificate Store. The KB2616676 update replaces the KB2607712 update and also contains the previous five DigiNotar root certificates added to the Microsoft Untrusted Certificate Store by the KB2607712 update.
Although the KB2616676 update replaces the KB2607712 update, the KB2607712 update is not a prerequisite for the KB2616676 update. Regardless of whether or not the KB2607712 update has been applied, customers should apply the KB2616676 update to address the issue described in this advisory. Customers who apply the KB2616676 update do not need to apply the KB2607712 update.
That's not the case for me.
Microsoft wrote:After applying the update, how can I verify the certificates in the Microsoft Untrusted Certificates Store?
[...]
In the Certificates MMC snap-in, verify that the following certificates have been added to the Untrusted Certificates folder:
5eraph wrote:And the Certificates MMC snap-in lists six untrusted DigiNotar certificates (not eleven) when only KB2616676 is installed.
- user_hidden
- Posts: 1924
- Joined: Thu Dec 06, 2007 7:52 am
- Location: Canada eh!
- user_hidden
- Posts: 1924
- Joined: Thu Dec 06, 2007 7:52 am
- Location: Canada eh!
it won't be pushed as KB931125 is not high priority.adric wrote:Hmmm. No alerts from AU on my side after installing manually. I wish AU would be more consistent on what it reports. You are right though to wait for the official update.
Al
if you manually goto WU and scan then check the OPTIONAL updates it will be listed.
- Outbreaker
- Posts: 703
- Joined: Tue Aug 21, 2007 8:06 am
- user_hidden
- Posts: 1924
- Joined: Thu Dec 06, 2007 7:52 am
- Location: Canada eh!
the current update pack in the first post is the LATEST with the certificate hotfixes.Outbreaker wrote:Should i use the UpdatePack v20110913 or is there a new version on the way? And will there be a Root Certificate update this month?
Link: XPSP3_QFE_UpdatePack_20110913.7z
CRC-32: d09b7003
MD4: e21a74a60cd63fa46ffdea84b9dea27f
MD5: c8c99e4551a7fd6c08adc91cca30a891
SHA-1: ed7fbd47ec8548616edccf174612782ed68bd390
OS: Windows XP SP3 (x86)
Date: 20110913
Size: 45.8 MB
as for a rootsupd unless microsoft releases a new build i will
not add any to the pack as 4 different microsoft web pages for KB931125
all lead to different versions however WU only accepts the June 2011 version 27.
Last edited by user_hidden on Wed Sep 14, 2011 6:47 pm, edited 1 time in total.
- user_hidden
- Posts: 1924
- Joined: Thu Dec 06, 2007 7:52 am
- Location: Canada eh!
yup leftovers from some time ago.acus wrote:I've noticed that in file qfeUpPck.inf there are few lines referring to hotfix KB2485376, no more included in the Update Pack.
I know this is not a problem for the XP installation.
Regards.
they do not get added to the installation.
i'll remove them next pack release just for cleanliness.
looks like Adric has some competition with Acus

The whole "certificate stuff" is more confusing than ever!
Now they wrote a note to this blog post:
http://blogs.technet.com/b/msrc/archive ... etins.aspx

Now they wrote a note to this blog post:
http://blogs.technet.com/b/msrc/archive ... etins.aspx
So I guess that they used the "supersedes" word too earlyUPDATE: We have updated the Known Issues section of KB 2616676 to notify customers using Windows XP and Windows Server 2003 who downloaded update 2616676, that the update only contains the latest six digital certificates that are cross-signed by GTE and Entrust. These update versions do not also contain the digital certificates that were included in update 2607712. Customers who install update 2607712, and then install update 2616676, will be protected against the fraudulent certificates described in Security Advisory 2607712.

KB2616676-v2 has been released. Out of the Advisory:yumeyao wrote:so KB2616676v2=KB2616676+KB2607712 is coming?We will issue an update to update 2616676 when testing is complete.
On September 19, 2011, we re-released update 2616676 to address this issue. If you are running Windows XP or Windows Server 2003 and you have not applied updates 2524375, 2607712, and 2616676, you should install cumulative update 2616676.
Al
- user_hidden
- Posts: 1924
- Joined: Thu Dec 06, 2007 7:52 am
- Location: Canada eh!
Hello,sittingduck77 wrote:I just made a fresh install with 1.08 on an old pc. During installation the Found New Hardware Wizard popped up and wanted to seardh for drivers for
terminal server device redirector
terminal server mouse driver
terminal server keyboard driver
I should mention that I did integrate five different drivers onto the disk before installation using nLite, but other than that I didn't do anything I don't normally do.
Does anyone know something about this?
I've integrated the latest version of the pack and got the same Found New Hardware Wizard.
I've seen this lots of times.... just OK each one separately, it wastes a few minutes then finds the drivers it had all along. I once asked the same question you have but didn't get a response. Sometimes I see it others not.jiji wrote:Hello,sittingduck77 wrote:I just made a fresh install with 1.08 on an old pc. During installation the Found New Hardware Wizard popped up and wanted to seardh for drivers for
terminal server device redirector
terminal server mouse driver
terminal server keyboard driver
I should mention that I did integrate five different drivers onto the disk before installation using nLite, but other than that I didn't do anything I don't normally do.
Does anyone know something about this?
I've integrated the latest version of the pack and got the same Found New Hardware Wizard.
- user_hidden
- Posts: 1924
- Joined: Thu Dec 06, 2007 7:52 am
- Location: Canada eh!
- user_hidden
- Posts: 1924
- Joined: Thu Dec 06, 2007 7:52 am
- Location: Canada eh!
- =[FEAR]=JIGSAW
- Posts: 400
- Joined: Mon Feb 18, 2008 11:54 am
- Location: Cape Town, South Africa
- user_hidden
- Posts: 1924
- Joined: Thu Dec 06, 2007 7:52 am
- Location: Canada eh!
This will produce a wrong reg key: "Location"="C:\\Program Files\\Common Files\\Common Files\\microsoft shared\\triedit"qfeUpPck.inf wrote:[KB973869]
..........
HKLM,"%SP4UPDATES%\KB973869\Filelist\0","Location",0x0,"%16427%\Common Files\microsoft shared\triedit"
..........
%16427% allready means "C:\Program Files\Common Files"
- mr_smartepants
- Posts: 824
- Joined: Thu May 18, 2006 5:56 am
- Location: Cambridgeshire, UK
Confirmed: http://gosh.msfn.org/Files/DirIds.txtvmanda wrote:%16427% allready means "C:\Program Files\Common Files"
- user_hidden
- Posts: 1924
- Joined: Thu Dec 06, 2007 7:52 am
- Location: Canada eh!
wow Vmanda great eyes......
actually to keep with the way others are listed the mistake
was probably that 16427 (program files/common files) really should have been
16422 (program files\) like KB973904.
a harmless typo that DOES NOT effect the system so please no one worry.
it is just cosmetic. i will update it for next release.
actually to keep with the way others are listed the mistake
was probably that 16427 (program files/common files) really should have been
16422 (program files\) like KB973904.
a harmless typo that DOES NOT effect the system so please no one worry.
it is just cosmetic. i will update it for next release.
- user_hidden
- Posts: 1924
- Joined: Thu Dec 06, 2007 7:52 am
- Location: Canada eh!
- mr_smartepants
- Posts: 824
- Joined: Thu May 18, 2006 5:56 am
- Location: Cambridgeshire, UK
Where?pdl808 wrote:KB948046-v2 is available.
http://support.microsoft.com/kb/948046
Shows the file modification dates between 2007 and 2008, hardly new.

My Windows XP installation is from the 19 May 2011 update pack. Belarc Advisor reported that KB948046 needed to be reinstalled and did not show it to be v2. I did the hotfix request from your link, received KB948046-v2 and installed it. Now Belarc Advisor shows the hotfix to be v2 and it is happy. This led me to believe that KB948046 in the pack is not v2.
- mr_smartepants
- Posts: 824
- Joined: Thu May 18, 2006 5:56 am
- Location: Cambridgeshire, UK
I would go so far to say that Belarc Advisor can display inaccurate info. To verify the condition of your installation, run "qfecheck" (without quotes) from the command line. You can also run "sfc /scannow". Info
- user_hidden
- Posts: 1924
- Joined: Thu Dec 06, 2007 7:52 am
- Location: Canada eh!
Al,adric wrote:QFECHECK does not show KB as v2 using last update pack
KB948046: Current on system.
Al
Edit: Taking a quick look, the files are still dated 2007/2008 so there may not have been any files changed. there is a KB948046-v2.CAT though.
it was one of those hotfixes that was in the original pack when
RyanVM was supporting it and the CAT and reg entries were left as
KB948046 instead of KB948046-v2. I will update the cosmetic issue
but rest assured the hotfix in the updatepack is V2. you can even
verify the file and CAT hashes.
- user_hidden
- Posts: 1924
- Joined: Thu Dec 06, 2007 7:52 am
- Location: Canada eh!
20111108 is flawless for me - many thanks excellent pack user_hidden !!
It's my next GOLD build so far. Switched from OnePiece's after AIO 4.9.0 due to subtle issues.
I also used yumeyao's Microsoft Runtime Libraries Collection(x86) 2.0.7 and
OnePiece's .Net, IE8 and WMP add-ons in my build. Everything fits perfect !
Many thanks to all of you again - user_hidden, OnePiece, Nonno , yumeyao

It's my next GOLD build so far. Switched from OnePiece's after AIO 4.9.0 due to subtle issues.
I also used yumeyao's Microsoft Runtime Libraries Collection(x86) 2.0.7 and
OnePiece's .Net, IE8 and WMP add-ons in my build. Everything fits perfect !
Many thanks to all of you again - user_hidden, OnePiece, Nonno , yumeyao
