5 replies to this topic

[andrewwan1980]

I like to create my own AutoPatcher for XP SP1a. I still have AP 5.6 that came with WinXP May07 x86 ENU Core (but this was for SP2). Is it possible to reuse this but modify it for SP1a? How can one build his own AP system?

[Cristiano]

yes, it may be possible, but you will face an big issue: the end of support for Windows XP Service Pack 1 (SP1) and Service Pack 1a (SP1a) ended in october, 10 2006 (that means something like 2 years ago). According to ms, the will not give any support for those versions after that date, that includes security updates for those service packs. that info can be found in here:
http://support.micro...com/gp/lifean19

so, knowing this issue and being aware that some softwares may refuse to install due the lack of service packs, you may look for the updates replaced by sp2 and make your own version of autopatcher with those updates. but you know, you may be unable to continue after some point, because the updates that will be required may refuse to install due the lack of sp2

[]s

[andrewwan1980]

Cristiano, on Nov 10 2008, 11:01 AM, said:

yes, it may be possible, but you will face an big issue: the end of support for Windows XP Service Pack 1 (SP1) and Service Pack 1a (SP1a) ended in october, 10 2006 (that means something like 2 years ago). According to ms, the will not give any support for those versions after that date, that includes security updates for those service packs. that info can be found in here:
http://support.micro...com/gp/lifean19

so, knowing this issue and being aware that some softwares may refuse to install due the lack of service packs, you may look for the updates replaced by sp2 and make your own version of autopatcher with those updates. but you know, you may be unable to continue after some point, because the updates that will be required may refuse to install due the lack of sp2

[]s

Yep, I already know and experience the consequences of using SP1a. I already journal software compatibility issues with SP1a, generating a big useful list of what works and what doesn't under SP1a. For example I like using AVG Free 8.0. However it's a type of product you cannot use a previous version (because it prevents you). Also AVG Free 8.0 requires SP2 and will not work in SP1a. So I try other free alternatives from http://www.apphit.com/ etc. and write a small review/comment.

Anyway, I've done a clean install using a Windows XP SP1a CD. Then I goto http://windowsupdate.microsoft.com/ and note down the High Priority & Software, Optional lists (KB numbers). Then manually search and download the exes.

The Windows XP SP1a CD I got already has some KB patches because it's a royalty Dell CD. So maybe I can modify and add more KB patches. Or use AutoStreamer or nLite to add more KB patches. Or figure out how to use AutoPatcher... so other people can have a AutoPatcher XP SP1a too... which I doubt will be popular.


How can I get it so that 2 specific patches are installed first before the rest? Like preliminaries? On an initial SP1a system, it requires:

WindowsInstaller-KB893803-v2-x86.exe (Microsoft Windows Installer 3.1)
WindowsXP-KB842773-v2-x86-enu.exe (Update for Background Intelligent Transfer Service (BITS) 2.0 and WinHTTP 5.1 (KB842773))

first before it can install the rest.

Edited by andrewwan1980, 10 November 2008 - 01:02 PM.

[Cristiano]

well, windows update or automatic updates leave an track in your system. take a look at %windir%\windowsupdate.log and you will find each update that already was applied to your system. so, this is the easy part. to allow install other updates after KB893803, KB842773 and KB842773 be installed first can be a pain. you will need edit each module, looking for:
[SystemComponents]

and edit WindowsInstaller=ANY to be at least higher than 3.1. also, you may require an field like: File= (patch) to be sure that the other modules will look for those strings before allow any installation. of course, for those 3 only, you may let them without that strings, so, you will be allowed to install only those 3 at ap first run.

you may be tired to answer, but why be stucked with sp1? blaster and other worms can be a pain for this one, without sp2, even if you update your system to the highest possible without sp2 or 3.

[]s

[andrewwan1980]

Cristiano, on Nov 10 2008, 01:22 PM, said:

well, windows update or automatic updates leave an track in your system. take a look at %windir%\windowsupdate.log and you will find each update that already was applied to your system. so, this is the easy part. to allow install other updates after KB893803, KB842773 and KB842773 be installed first can be a pain. you will need edit each module, looking for:
[SystemComponents]

and edit WindowsInstaller=ANY to be at least higher than 3.1. also, you may require an field like: File= (patch) to be sure that the other modules will look for those strings before allow any installation. of course, for those 3 only, you may let them without that strings, so, you will be allowed to install only those 3 at ap first run.

you may be tired to answer, but why be stucked with sp1? blaster and other worms can be a pain for this one, without sp2, even if you update your system to the highest possible without sp2 or 3.

[]s

Nice about the windowsupdate.log however would need to use perl script to parse it since it's got too many information...

So you're telling me I have to modify my existing AP 5.6 (for XP SP2) and change everything? I notice there's an editor but could not find any amc files to load... so I guess the source files were not distributed with the releases.

Blaster Worm was fixed after SP1a (but still vulnerable in SP1) as far as I remember. But with a good firewall like Zone Alarm, everything should be fine.

[Cristiano]

> I notice there's an editor but could not find any amc files to load
i don't remember kite well about editor from that time, because i don't like of that tool. i remember about the .amc files and i remember that we have changed that kind of file, but if you have our current .apm format, in any current version of autopatcher you will find a working version for editor. anyway, notepad shall work fine, except if the version that you have has all files encrypted (and we did that for a long time)

> Blaster Worm was fixed after SP1a (but still vulnerable in SP1)
not exactally. the versions from that worm from before sp1 was fixed, but there's hundreds of variants for this one. at any antivirus software, you will find blaster.aaaz or something for the variants. also, there's sasser and others from same kind. until now, even for sp3, you don't stay safe for a long time without update your windows, even if you just connect your machine and let it downloading updates. believe me, ms doesn't release a brand new version each month for kb890830 for free

> But with a good firewall like Zone Alarm, everything should be fine
also any good antivirus/firewall company would say to you, without fully update the SO, their software is useless. but it's your call, so...

edit:
> windowsupdate.log however would need to use perl script
when required, i do it by hand. but the structure of that file allow an script to track all stuff.

[]s