How to: Slipstream WU Rollup Beta into XP


Recommended Posts

Hello,

Couple days ago neowin.net posted a download url for Update Rollup1 for WU4 Beta. The original story is here https://www.neowin.net/comments.php?categor...y=main&id=14055. Unfortantly neowin removed the dl url, but if you already downloaded it read on.

What the rollup does is let you install all the critical windows updates with one easy download. It's basically one big hotfix. The microsoft way to integrate hotfixes is to use cmdlines.txt or svcpack.inf. For an article on svcpack.inf see http://support.microsoft.com/default.aspx?...Ben-us%3B814847 . The only problem with this is you are not truely slipstreaming. What you are doing is extracting the hotfix to the i386 folder, then running it during xp setup. SO if you want to integrate 40 megs of updates, microsoft's method means you need about 80 megs of space. To microsoft, this is good enough. I thought this method sucked, so i tweaked it and made my own method. As far as i know, im the only person to use this method. Everyone else has just done the microsoft way.

Follow the following steps to truely slipstream the windows update rollup into a xp install point.

Step 1 - Make a flat and slipstream it:

Make a flat of XP. To do this, copy the XP cd to your hard drive. We're gonna assume you copied it to e:\newxp. Now slipstream it with sp1. I'm not gonna go into detail how to slipstream SP1, several sites such as bink's have detailed instructions.

Step 2 - Download and extract KB826939.exe:

On a windows xp system run KB826939.exe. When the screen "welcome to the windows xp kb826939 setup wizard" comes up, leave it open and look for a folder with a really long file name, such as E:\2ce9f32e4a95bc1f817e0dbf44. In this folder you will have the following:

09/29/2003 10:14 PM 528 $shtdwn$.req

09/29/2003 10:14 PM <DIR> common

09/29/2003 10:14 PM <DIR> sp1

09/29/2003 10:14 PM <DIR> sp2

08/01/2003 09:14 PM 25,600 xpsp1hfm.exe

Copy the SP2 folder to another folder. I'm gonna assume you copied it to e:\sp2. Now you can close the kb826939 wizard.

Step 3 - Prepare the flat:

Download file.bat to e:\newxp\i386\, run it, then delete file.bat. It should move a bunch of files into a folder called Backup. When we are done, you can delete the backup folder. For now, just ignore the backup folder.

Copy all of the files in e:\sp2 to e:\newxp\i386, including the Update folder. To be clear, you should now have an Update folder in the i386 folder.

Step 4 - Edit files:

Edit e:\newxp\i386\dosnet.inf. Add this:

[OptionalSrcDirs]

Update

Also in dosnet.inf, at the very bottom of the file under the section [ForceCopyDriverCabFiles], add this:

accwiz.exe

crypt32.dll

cryptsvc.dll

hh.exe

hhctrl.ocx

hhsetup.dll

html32.cnv

itircl.dll

itss.dll

locator.exe

magnify.exe

migwiz.exe

mrxsmb.sys

msconv97.dll

narrator.exe

newdev.dll

ntdll.dll

ntkrnlmp.exe

ntkrnlpa.exe

ntkrpamp.exe

ole32.dll

osk.exe

pchshell.dll

raspptp.sys

rpcrt4.dll

rpcss.dll

shdocvw.dll

shell32.dll

shmedia.dll

srrstr.dll

srv.sys

sysmain.sdb

urlmon.dll

user32.dll

win32k.sys

winsrv.dll

zipfldr.dll

Make e:\newxp\i386\svcpack.inf, and have it say this:

[Version]

Signature="$Windows NT$"

MajorVersion=5

MinorVersion=1

BuildNumber=2600

[setupData]

CatalogSubDir="\i386\Update"

[ProductCatalogsToInstall]

KB826939.cat

[setupHotfixesToRun]

update.exe -q -n

Step 5 - Cleanup:

At this point you can delete the Backup folder if you want. You can also delete e:\sp2.

That's it. To make sure kb826939 installed fine, i checked the following items:

1 - Setuperr.log is empty

2 - KB826939.cat is in the catroot folder

3 - KB826939.log is in windows folder and shows no problems.

4 - I can install/uninstall things like IIS w/o any problems.

5 - Windows update only shows 7 updates, not 25.

6 - Add/remove programs shows KB826939

7 - MS Security analyzer only shows 3 updates missing (none are installed by kb826939).

8 - sfc /scannow works w/o any problems.

Troubleshooting:

There is only one point in XP setup to pay attention to. At the 13 mins left mark, XP setup processes special code that runs things like cmdlines.txt and svcpack.inf.

If svcpack.inf is missing or invalid, SFC will log errors in setuperr.log. If setuperr.log is empty, next check %windir%\kb826939.log. If this file exists, it means update.exe was run but there was a problem running it. Check the log file for details. If this file does not exist, it means update.exe was not run. I would recommend trying to manually run update.exe. If it runs fine then it's probably an error in svcpack.inf or dosnet.inf. If update.exe gives errors, then you'll know the problem.

Last note:

Some articles like http://support.microsoft.com/default.aspx?...Ben-us%3B814847 are wrong. In the article, it has the syntax for svcpack.inf wrong. I spent hours troubleshooting until i added the Majorversion and Minorversion to svcpack.inf, then it started working.

-gosh

file.bat

Ya, that's the right one. The rollup has all updates for XP RTM and XP SP1. If you slipstream sp1, you just need the sp2 folder. If you dont have sp1 slipstreamed, you could use the SP1 folder. Like i said, if you install this it shows only 7 critical windows updates, rather than 25. When the final comes out, it'll have all the critical updates. If there's enough interest, i could post how to integrate the other 7 windows updates.

-gosh

  • 3 weeks later...

Why are you trying to start a fight? All i said was encryption copied his stuff from "the other site" and didnt give them credit. I didn't call him names or anything, just made that point. In this case, i let "the other site" copy what i did, and THEY GAVE ME CREDIT.

Encryption called me stupid, called me names, and told me to leave this site for expressing my opinion which i have a right to do. Now you tell me who the bad guy is? Trying to start a fight is against neowin's rules.

-gosh

Do you have proof that he copied it? Did you watch him cut and paste it? Just because the code is the same doesn't mean that it was copied, it means that the 2 people are good at it. The code almost has to be the same, cause there isn't many different ways you can have a program silently install a program or tweak a registary.

Do you have proof that he copied it? Did you watch him cut and paste it? Just because the code is the same doesn't mean that it was copied, it means that the 2 people are good at it. The code almost has to be the same, cause there isn't many different ways you can have a program silently install a program or tweak a registary.

You're not very clever are you, it isn't that hard to spot. :blink:

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I have updated my Series 9 Watch so I assume there is either a mistake in what was said, or as suggested - the new AI feature set isn’t supported on anything other than those listed above.
    • WhatsApp slams Isreali firm, NSO Group, for trying to spy on its users by David Uzondu WhatsApp has come out accusing Israeli cyber-intelligence firm, NSO Group, of deploying a fresh wave of highly targeted "spear phishing" attacks against users, which its security teams successfully thwarted. The Israeli firm, according to WhatsApp, ran this operation like its usual one-click phishing campaigns, trying to get people to click malicious links that lead them to external sites. To coordinate the campaign, the spyware vendor created fake test accounts and groups on the messaging app. WhatsApp said it is sharing the specific malicious domains, ikhwancast[.]com, ghazacast[.]com, and fr24cast[.]com, because potential victims need this data to check if they were targeted across other messaging systems or email platforms. The NSO Group is infamous for creating and selling Pegasus, a military-grade commercial spyware capable of silently compromising smartphones simply by sending a message or placing a missed call via apps like WhatsApp or iMessage. Users do not even have to interact with the incoming notification before the infection takes hold. Once Pegasus manages to break in, the spyware harvests private data, letting operators read private messages, emails, photos, and documents. It also tracks precise GPS locations, records keystrokes, activates the device's camera, and monitors live microphone audio. Independent investigations by cybersecurity watchdogs like The Citizen Lab and human rights organizations like Amnesty International have proven that governments use this software to track humanitarian workers, journalists, diplomats, and political dissidents. These findings directly contradict NSO Group claims that clients use the technology to spy on criminals and terrorists only. In late 2021, the U.S. Department of Commerce added the firm to its Entity List, effectively banning the vendor from buying hardware and software from American tech companies. WhatsApp said in its blog post that the spyware vendor violated a permanent court injunction with this new spear-phishing campaign. This injunction, which took effect in 2025, strictly prohibited NSO Group from targeting WhatsApp and its users. The platform is now asking a federal court to hold the firm in contempt.
    • It would be surprising if even 3 year old Apple Watches (and not SE models at that) cannot run watchOS 27. Granted, it doesn't mean it would work as well. We'll see.
  • Recent Achievements

    • Very Popular
      Captain_Eric earned a badge
      Very Popular
    • One Month Later
      amusc earned a badge
      One Month Later
    • One Month Later
      DJC50PLUS earned a badge
      One Month Later
    • Week One Done
      DJC50PLUS earned a badge
      Week One Done
    • Proficient
      Eric Biran went up a rank
      Proficient
  • Popular Contributors

    1. 1
      +primortal
      514
    2. 2
      PsYcHoKiLLa
      231
    3. 3
      ATLien_0
      87
    4. 4
      +Edouard
      84
    5. 5
      Steven P.
      80
  • Tell a friend

    Love Neowin? Tell a friend!