7096 Comments

File Details
Language: English
Author: Ramsey
File Size: 1.08 GB (Gigabytes)
File Format: ZIP (Compressed File Archive)
Download Links
Torrent (P2P) Download: Magnet
HTTP Download: PixelDrain.com

[---------- CHANGELOG ----------]

(#) 2023.11.26 Changes:

* Added a few small cosmetic improvements.
* Added a new Preconfigured Tweak that adds the "Device Manager" in the right-click menu of "My Computer".
* Added Microsoft XNA Framework Runtimes v1.0, v2.0, v3.1, v4.0.
* Added Microsoft Visual F# 2.0 SP1 Runtime (v2.0.40219.1).
* Added Microsoft Visual J# 2.0 Runtime (v2.0.50727.937).
* Added Visual Studio 2010 Tools for Office Runtime v10.0.60828.0.
* Added Windows 11 Time Zone Update (23H2.2715 - November 2023).
* Added Windows XP Certificate Updater v1.6 (In ZIP folder ".\Extras\Programs and Tools").
* Added Naraeon SSD Tools v5.4.0 (In ZIP folder ".\Extras\Programs and Tools").
* Added WinSetupFromUSB v1.10 (In ZIP folder ".\Extras\Programs and Tools").
* Updated Windows XP Root Certificates Update (KB931125) from "April 2023 v41.0.2195.2304" to "August 2023 v41.0.2195.2308".
* Updated Windows XP Revoked Roots Certificates (SA3123040) Update from "March 2021 v8.0.2195.2103" to "September 2023 v8.0.2195.2309".
* Updated MyPal from "v68.13.0b" to "v68.13.7b".
* Updated 7-Zip from "v22.01" to "v23.01".
* Updated XP Codec Pack from "v2.1.1" to "v2.1.2".
* Updated Paragon GPT Loader from "v8.0.1.2" to "v11.0.0.175".
* Updated Patch Integrator script from "v3.5.0" to "v4.0.1".
* Removed Toshiba UDF2.5 Reader Driver v1.0.0.3 (UDF2.5 support is already added in the Windows XP Update KB952011).

ReadMe File:

[---------- SHORT SUMMARY ----------]

Includes ALL the latest Windows XP and POSReady 2009 Updates/Hotfixes until 22.5(May).2019 and will also automatically receive new Windows XP (POSReady 2009) Updates until at least April 2019 and no Windows XP Activation or Crack or CD-Key is required.
Also included are over 330 MB of additional LAN, WLAN, SATA/AHCI, NVMe and USB3 drivers. Including with some Themes, Runtimes, Patches, Fixes, Tweaks and some optional Programs and Preconfigured Settings.
A Help file is also included in the ISO/Disc folder ".\OEM\WinXPPx86IE" with lots of useful information, such as on how to install Windows XP with an USB Flash Drive and on how to integrate your own SATA/AHCI drivers and much more.

[---------- INCLUDES ----------]

(#) Windows XP Updates:

* Windows XP Service Pack 3 (KB936929).
* Windows XP and POSReady 2009 Updates/Hotfixes until 22.5(May).2019.
* Windows Genuine Advantage Validation v1.9.42.0 (KB905474) {Cracked/LgtCkCtl.dl_}.
* Windows Internet Explorer v8 (Roll Back to 6 possible).
* Windows Media Player v11 (Roll Back to 9 possible).
* Windows Remote Desktop Connection 7.0 (KB969084, KB2813347-v2).
* Windows Rights Management Client (KB979099).
* Windows Driver Frameworks 1.9 - User Mode (KB970158) and Kernel Mode (KB970159).
* Windows Feature Pack for Storage v1.0 (KB952013) - Image Mastering API v2.0 (KB932716-v2, KB952011).
* Windows Feature Pack for Storage v1.0 (KB952013) - ICCD Smart Card Driver.
* Windows Installer v4.5.6002.24298 (KB942288, KB4087398).
* Windows XP exFAT file system driver update package v1.0 (KB955704).
* Windows XP Root Certificates Update [August 2023 v41.0.2195.2308] (KB931125).
* Windows XP Revoked Roots Certificates Update [September 2023 v8.0.2195.2309] (SA3123040).
* Windows XP CAPICOM v2.1.0.2 (KB931906).
* Microsoft European Union Expansion Font Update v1.2.
* Microsoft WinUSB 2.0 (KB971286).
* Microsoft XML Paper Specification Essentials Pack v1.2 (KB971276-v3, KB977585-v2, KB2958997-v4).
* Microsoft XML Core Services v4.0 SP3 4.30.2117.0 (KB2758694).
* Microsoft XML Core Services v6.0 SP2 6.20.2509.0 (KB2957482, KB4493790).
* Microsoft Web Folders v12.0.6606.1000 (KB907306, KB2526086=msdaipp.dll,msonsext.dll).
* Windows High Definition Audio "Function" Driver v1.0a (KB888111).
* Windows Browser Choice (KB976002-v5).
* Windows Update v7.6.7600.256.
* Windows Update Web Control v7.6.7600.257.
* Microsoft Update Web Control v7.6.7600.257.
* Microsoft Update Catalog Web Control v7.4.7057.249 (build timestamp 130620-1021).

(#) Windows XP Runtime Libraries:

* Microsoft DirectX 9.0c End-User Runtimes v9.29.1974 (June 2010).
* Microsoft .NET Framework [Up-to-Date/20.6(June).2022]: 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 4.0 Full - {Optional}.
* Microsoft Visual C++: 2002 (v7.0.9975.0), 2003 (v7.10.6119.0), 2005 SP1 (v8.0.50727.6229), 2008 SP1 (v9.0.30729.7523), 2010 SP1 (v10.40219.473), 2012 Update 5 (v11.0.61135.400), 2013 Update 5 (v12.0.40664.0), 2015-2019 (v14.28.29213.0) - {Optional}.
* Microsoft Visual Basic: v1.00, v2.0.9.8, v3.0.5.38, v4.0.24.22 (16-bit), v4.0.29.24 (32-bit), v5.2.82.44, v6.1.98.39 (SP6 Update KB3096896) - {Optional}.
* Microsoft XNA Framework 1.0 (v1.1.10405.0), 2.0 (v2.0.11128.1), 3.0 (v3.0.11010.0), 3.1 (v3.1.10527.0), 4.0 (v4.0.30901.0).
* Microsoft Visual F# 2.0 SP1 (v2.0.40219.1).
* Microsoft Visual J# 2.0 (v2.0.50727.937).
* Microsoft Visual Studio 2010 Tools for Office Runtime (v10.0.60828.0).

(#) Windows XP Applications:

* Microsoft Calculator Plus v1.0.0.908 {Replaces the default Calculator}.
* Microsoft BitLocker To Go Reader v1.0 (KB970401).
* Microsoft Active Directory Application Mode SP1 - {Standalone Installer}.
* Windows Management Framework Core v6.3.15.0 (KB968930) - {Standalone Installer}.
* Windows PowerShell 1.0 (KB926139-v2) - {Standalone Installer}.
* Windows XP Powertoy - ClearType Tuner v1.01 - {Optional}.
* Windows XP Powertoy - Alt-Tab Replacement v1.0 - {Optional}.
* Windows XP User Profile Hive Cleanup Service v2.0.49 Beta - {Optional}.
* Windows XP GDI+ Detection Tool v1 (KB873374).
* Windows XP QFEcheck v6.2.29.0 (KB282784).
* Windows Movie Maker 2.1.4028.0 Plus - {Standalone Installer v1.4.2}.
* Outlook Express 6 - {Standalone Installer v1.0.2}.

(#) Additional Applications:

* 7-Zip v23.01 - {Optional}.
* MyPal v68.13.7b (Backported Firefox v68.12.0 with Firefox JavaScript engine v78) - {Optional}.
* 360 Extreme Explorer v13.0.2310.0 (Backported Chromium v86.0.4240.198) - {Standalone Installer v1.0.2}.
* XP Codec Pack v2.1.2 (Includes: MPC-BE, LAV, ffdshow, madVR, xy-VSFilter, XySubFilter, Icaros) - {Optional}.
* Unlocker v1.9.2 - {Optional}.
* ImDisk Toolkit v2022.08.26 - {Optional}.
* HashCheck v2.4.1.58-alpha - {Optional}.
* Open Command Prompt Shell Extension v2.1.0.1 - {Optional}.
* Take Ownership XP v1.2.1 (Allows to take ownership of a file or folder from the Right-click menu) - {Optional}.
* Windows XP Certificate Updater v1.6 - {Standalone Installer}.
* Naraeon SSD Tools v5.4.0 (For SSD Trim with IDE&SATA) - {Standalone Installer}.
* Paragon GPT Loader v11.0.0.175 - {Standalone Installer v1.0.2}.
* WinSetupFromUSB v1.10 - {Standalone Installer}.

(#) Windows XP Patches/Fixes:

* Extended Update Support Patch v1.0: Extends the Windows XP update support from "April 2014" till at least "April 2019" (POSReady 2009 Updates).
* TCP/IP Patch v1.0: Increase the number of Half-Open outgoing TCP connections from 10 to 16777215 (Maximum) [tcpip.sys].
* UxTheme Patch v1.0: Allows you to apply unsigned Custom Visual Styles (Windows XP Themes) [uxtheme.dll].
* TermSrv Patch v1.0: Allows you to have multiple concurrent remote desktop connections [termsrv.dll].
* SFC Patch v1.0: Allows you to disable and enable the Windows File Protection with the registry entry "SfcDisable" [sfc_os.dll].
* FlopX NT5.1 Patch v1a: Allows Non-standard Floppy Formats [flpydisk.sys].
* SndRec32 Patch v2.0: Fixes a Sound Recorder error message on computers that have more than 2GB of RAM and Increases the Recording Time Limit from 60 Seconds to 999 Seconds [sndrec32.exe].
* Shell32 Patch v1.0: Fixes the missing Icons in the notification area [shell32.dll].
* WOW32 Patch v1.0: Fixes the Win 16 Subsystem insufficient resources problem [wow32.dll].
* NTDETECT Patch v1.1: Deactivates the resetting of the USB controller to prevent a crash of the USB drive on which the Windows XP installation is carried out [NTDETECT.COM].
* RAID-5 Patch v1.0: Enables Software RAID-5 Support [dmadmin.exe, dmboot.sys, dmconfig.dll].
* SERVICES Patch v1.0: Includes more assigned port numbers for well-known services defined by IANA [services].
* NF4SBF v3.1: Fixes a Microsoft .NET Framework 4 bug that causes a slow Windows XP boot up (File is placed in the Startup menu).
* Fixed missing ClipBook Viewer shortcut in the Start Menu (accessor.inf).
* Fixed missing dll registry entries for the Microsoft Jet and OLE files (KB4034775 Update Bug).

(#) Windows XP Tweaks:

* Preconfigured Windows XP Settings - {Optional}.
* Preconfigured Program Settings - {Optional}.
* Suppressing Microsoft Update nagging to install Windows Genuine Advantage Notifications v1.9.40.0 (KB905474).
* Suppressing Microsoft Update nagging to install Windows XP End Of Service Notifications (KB2934207).
* Suppressing Microsoft Update nagging to install Windows Malicious Software Removal Tool v5.39.12900.0 (KB890830).

(#) Extras:

* Windows XP SP3 (POSReady 2009) SSE2 Updates Remover v1.1 (For the CPUs that don't support the SSE2 instruction set).
* Compatible Updates/Hotfixes and RTM files from Office 2000, Windows 2000, Windows Server 2003, Windows POSReady 2009, Windows Vista, Windows 7 (More details in the ReadMe file).
* DriverPacks BASE v11.09.01.2f with Driver Pack Mass Storage v18.04.21 (SATA/AHCI) - Compressed = 10 MB / Uncompressed = 62 MB. 
* Separate Driver Packs: LAN (Cable Ethernet) v18.04.21 - Compressed = 12 MB / Uncompressed = 81 MB - {Optional}.
* Additional Drive Packs: WLAN (Wireless Ethernet) v15.01.23.1 - Uncompressed = 188 MB - {Standalone Installer v1.1.1}.
* 9 Additional Windows XP Themes - {Optional}: "Windows XP Embedded", "Black Mesa v2.0", "ChaNinja Style RC5 v1.0", "Disney - It's a Magical World v2.0", "NeoGeniX LS v1.0", "Luna Element Black v5.1 + CSS", "Royale Remixed v1.47", "Windows 7 Colors v1.1", "Zune Final v1.0".
* Windows File Protection Utility v1.6.2 (In "Start Menu -> All Programs -> Accessories -> System Tools").
* Windows XP CD-Key Changer v1.2 (In ISO/Disc folder ".\OEM\WinXPPx86IE").
* Windows NT Registration Changer v1.0 (In ISO/Disc folder ".\OEM\WinXPPx86IE").
* Text file with some valid WGA CD-Keys (In ISO/Disc folder ".\OEM\WinXPPx86IE").
* Help file with lots of useful information (In ISO/Disc folder ".\OEM\WinXPPx86IE").
* All Modified and Patched files are digitally signed with a custom certificate.

(#) Patch Integrator v4.0.1:

* Kai-Schtrom SATA/AHCI driver v1.0 (Backported Windows 8 driver).
* Microsoft SATA/AHCI driver v6.3.0.1 (Backported Windows 8.1 driver).
* ASMedia SATA/AHCI driver v2.3.0.1 (Best for GPT disks on Intel boards).
* AMD SATA/AHCI driver v1.2.001.0337 (Backported Windows 7 driver).
* Universal Intel SATA/AHCI/RAID Drivers+Software v11.2.0.1006.2 (For RST Series).
* Microsoft NVMe driver v6.1.7601.23403 (Backported Windows 7 driver).
* Kai-Schtrom NVMe driver v1.3 (Backported Windows 7 Open Fabrics Alliance driver).
* Intel NVMe driver v4.0.0.1007 (Backported Windows 7 driver).
* Samsung NVMe driver v3.3.0.2003 (Backported Windows 7 driver).
* Silicon Motion NVMe driver v10.4.49.0 (Backported Windows 7 driver).
* Microsoft USB3.x xHCI driver v2.2 (Backported Windows 8 driver).
* AMD/Intel USB3.0 xHCI driver v3 (Patched Windows 7 AMD driver).
* Microsoft SD+MMC Card driver v6.2.8056.0 (Backported Windows 8 driver).
* ACPI Patch v5.1.2600.7777 (2023.4.6): Adds support for mainboards that are newer than 2016.
* PAE Patch v3.6: Allows you to set the RAM limit from 3.5 Gigabyte to 4 Gigabyte or to 128 Gigabyte.
* PM/RTC Timer Fix: For 2015 or newer Intel CPUs.
* Intel USB3.x HC-Switch v1.2.1 (Uses ACPI v5048).
* AVX/AVX2 Enabler v1.1: Allows you to use AVX 256-bit on Multi-Core CPUs with Physical Address Extension.
* Live USB Setup configuration settings: Allows you to Install and Boot Windows XP from a USB Hard Drive Drive.
* DriverPacks BASE Remover (Also removes all the included Driver Packs).
* Windows XP SSE2 Updates Remover: For CPUs without SSE2 support.

[---------- REMOVED ----------]

(#) Windows XP Components:

* Nothing was removed that could cause System or Software problems, only outdated and unneeded components were removed.
1. Applications: "Address Book", "Internet Games", "Program Manager".
2. Multimedia: "Images and Backgrounds", "Movie Maker", "Music Samples".
3. Network: "MSN Explorer", "Netmeeting", "Outlook Express", "Windows Messenger".
4. Operating System Options: "Blaster and Nachi removal tool", "Desktop Cleanup Wizard", "Out of Box Experience (OOBE)", "Tour".
5. 3rd-party Drivers: "Display Adapters", "ISDN", "Logitech WingMan", "Scanners", "Sony Jog Dial", "Toshiba DVD decoder card".
6. Disc Files: "clock.avi", "flash.ocx", "mmc.chm", "plugin.ocx", "rdsktpw.chm", "swflash.inf", "swtchbrd.bmp", "yahoo.bmp".
7. Disc Folders: "DOTNETFX", "SUPPORT", "VALUEADD", "I386\WIN9XMIG", "I386\WIN9XUPG".

(#) Bugged Updates/Files that have not been added (Manual installers in ISO/Disc folder ".\OEM\Bugged Updates"):

1. KB960921 (Including default SP3 file "videoprt.sys") / This update was not added as it will reduce the 2D performance by around 150% and also slows down the browser scrolling when using PAE (Physical Address Extension) with a AMD Radeon graphics card.
2. KB2926765 (shlwapi.dll) / This update was not added due to a Microsoft bug with the changing of the Internet and E-mail item on the Start menu.

[---------- INFORMATION ----------] + [---------- HELP GUIDES ----------]
http://www.zone54.com/ddl/WXPPx86IE_-_ReadMe.txt

Say something here...
symbols left.
You are a guest ( Sign Up ? )
or post as a guest
Loading comment... The comment will be refreshed after 00:00.
  • This commment is unpublished.
    Teotl · 21 days ago
    Hey guys, I have a strange problem - I installed Windows XP on ASUS CM1435 (F2A55-M motherboard) and it is very fast, Windows XP loading screen is there for about 2-3 seconds and it boots instantly.
    Now I have purchased AsRock Z68 Extreme4 Gen3, which is a more powerful motherboard, but booting sometimes takes 20 seconds, even after installing all the drivers. Does anyone have any experience with long boot times? Thanks!
    • This commment is unpublished.
      infuscomus · 21 days ago
      @Teotl
      Old AMD drivers interfering maybe?

      Try a fresh OS install.
    • This commment is unpublished.
      ForgotMyOldAlias · 21 days ago
      @Teotl I presume your boot.ini already has /fastdetect as an option since it's default, but you can add the /SOS flag to boot.ini to help get an idea if something takes a long time.
      It will show you the name of each driver as they are loaded, and if you will notice it "hangs" if anyone takes a huge amount of time.
      (Can also add /bootlog to write info to %SystemRoot%\ntbtlog.txt but it will not help to see which one is slowing you down.)

      There are more complex tools from Microsoft to track down boot times, but 20 secs for a full boot doesn't seem out of the ordinary while 2-3 secs is similar to waking up from hibernation, but I'm not familiar with your hardware.

    • This commment is unpublished.
      Dood McMan · 21 days ago
      @infuscomus
      U R cynically, sadistically trolling with yor '#JustReinstallWindows' krap, like the #BadTech$upport memes =))  "Is yor power turned on?  R U sure it's plugged in?" LOL  U talk like a #VaxTard =P  iBet U got all tha (((Clot$hots))) & #Maskd2ThaMax Mr. (((Face Diaper))) =)) ~>
    • This commment is unpublished.
      WhiteLion · 20 days ago
      @Teotl
      i would check your boot settings in bios as well as set sata mode to ahci if your os is installed on a sata drive but you
  • This commment is unpublished.
    Voice of Forum · 25 days ago
    Who or what is that wretched DoodMcOneBrainCell? His comments are incomprehensible, demands,requests bizarre. Mental age of a child? Escaped mental asylum patient? Who knows? Troll definitely. Everyone totally ignore, don't reply DO NOT FEED this fruitcake jerk!
    • This commment is unpublished.
      Dood McMan · 23 days ago
      @Voice of Forum Stopped reading after 'wretched' = U R just another troll attacking people 4 posting helpful advice, because U would rather have them waste their time & their stuff destroyed = lame.
    • This commment is unpublished.
      Concerned Citizen · 22 days ago
      @Dood McMan Aren't YOU getting the message yet moron? You are not liked/nor wanted. In fact everyone HATES YOU! Bye bye!
      P.s start taking your medication again and re-admit yourself to that psycho ward you came from. You need help big time!!!!!🤥
    • This commment is unpublished.
      Dood McMan · 21 days ago
      @Concerned Citizen
      Stopped reading at 'message' = U R just attacking me because U R a destructive person who thinks they will gain '$tatus' like a riot goblin burning down their own city.  U R insane.  All iDo is come here providing GR8 helpful advice, like 'Uze M$ Excel '97 + #VariousFreeware instead of 'Office 365' because it zux azz by comparison =) ~>
      Gud luk weth yor #BloatyBull$hit appz frum Micro$hit =))  iWood Suggest 'Notepad++' 2 start & tweak it out.  iPut a big list 'module' on tha left 4 E Z switchen tween many dox =;-) ~>
      https://portableapps.com/apps/development/notepadpp_portable
      WOOP!  B sur 2 tell us how if U chop off my head & set my corpse on fire it fixes the flaws in Windows 10 file explorer LOL =))
    • This commment is unpublished.
      Hoping You Vanish! · 20 days ago
      @Dood McMan All YOU do is talk gibberish and insult people, because you are retarded in some way, and most certainly struggle with normal writing and expression.  In a nutshell you are obnoxious as well as being thick as pig muck. If only one could only time travel and stop your conception in the sewer where you were spawned, by pouring tons of dettol into it. Comprende douchebag CroodMcIdiot you're hated! Now get lost fast!
  • This commment is unpublished.
    Accelerate · 25 days ago
    When I try on a z97, haswell, sata, geforce 980 machine, I get multiple errors. Fx. I get error sometimes with some PFN list, and sometimes not. If I get far enough, I can begin install with all the options, but .net gives multiple error at two tries. I disabled that, and then it just freeze with user profile hive. Now I went without any options and i'm side windows xp now.

    Is it possible to install those options now someway?
  • This commment is unpublished.
    R.G · 29 days ago
    the guy reviewed your iso 
  • This commment is unpublished.
    Raul Popescu · 1 months ago
    Subject: Windows XP ISO Upgrade Recommendation

    I would like to recommend a valuable upgrade for your Windows XP ISO. Consider including the One Core API project. This would cause the One Core API to be automatically installed along with Windows XP, providing some benefits.

    What is One Core API?

    The One Core API allows you to run modern software and take better advantage of newer hardware on the legacy Windows XP operating system. It bridges the gap between Windows XP compatibility and newer versions.

    Project link: https://github.com/Skulltrail192/One-Core-API-Binaries
    • This commment is unpublished.
    • This commment is unpublished.
      Dood McMan · 26 days ago
      @Raul Popescu
      A while ago I tried contacting those 'core' guys through their 'web form' 2 suggest they do exactly that, + a few other tweaks, but never heard back from them.  Do U have some actual E-Mail addresses 4 those 'developers' iCould try out?  I'm happy 2 pay them =)  Can reach me at 'balkanguy (at) live (dot) com'. 1 of the sily things they should 'undo' is using a later 'shell' than XP, because XP is WAAAY better than N E thing that came after in terms of file management interface =D  Even the  simplest things, Micro$hit really goes out of their way 2 wreck it, like the 'save as' dialog is so DELIBERATELY broken even with 'disable full row select' hax, the 'save as dialog box' doesn't automatically scroll the frame under the mouse cursor, & instead have 2 grab the slider = insane!  XP's Windows Explorer is also more compact & efficient in layout, without so much need hacking, except of course 'QTTabBar' which is really ESSENTIAL in N E 'Windows' setup =)  Even that could B better = like 'enclosing' BOTH the right & left pane within each tab, instead of having 2 play visual 'catch up' on the left frame when switching tabs 2 show different contents in the right pane 'elsewhere'.
  • This commment is unpublished.
    Rickz · 1 months ago
    this project looks very interesting..: http://shorthornproject.com/onecoreapi.html
    any plans to integrate it ? is it possible ?
    Regards
    • This commment is unpublished.
      Ramsey · 1 months ago
      @Rickz I added a link to it in the "Recommended Programs.txt" file. But I can't per-install this because some users can run into BSOD and then I would get bombarded with comments. 🙃
    • This commment is unpublished.
      Dood McMan · 27 days ago
      @Ramsey LOL @ pretending it will cause BSOD = U really like 2 lie a lot =))  U use MPC-HC & other 3'rd party programs.  Being a 'program' does not necessarily mean 'BSOD' or whatever.  Instead of LYING U should just say 'I am not interested in doing any of that stuff.  Feel free to roll your own custom release.' =)  Pretending it's a 'BSOD Risk' is just U being a 'trolling jakazz' =P  Kind of like the clowns who pretend the (((Clot $hots))) R about 'safety'.
    • This commment is unpublished.
      Ramsey · 27 days ago
      @Dood McMan If you weren't so self-centered and read a few forum topics in msfn.org or mydigitallife.net . . . then you would see that people run into such problems.

      And again stop spamming the comment section with shit posts and make false accusations without any proof. I don't have time to edit, move or delete all of your nonsense over and over again.
    • This commment is unpublished.
      capybaraman · 27 days ago
      @Dood McMan If you've done some basic reading, you'd know that One Core API is not simply a "program", it directly modify your system files in the process. Of course people would get BSOD...
  • This commment is unpublished.
    TGO · 1 months ago
    Just an FYI.. 
    You have some security issues on this OS that didn't exist out of the box.. 
    The Remote assistance is enabled, and set to NULL authentication, meaning that your Admin$, c$ are shared with the world, you also have the Windows Firewall set to disabled by default, and you also have RDP enabled on the 3389 port with zero password configurations set.. Note: not no password, but NULL value password, this is generally a backdoor into the system. I ran a tenable Nessus scan against this system and against a plain Jane configured Windows XP machine, out of the box, and the Plain Jane machine has far less vulnerabilities over the customized machine. Doesn't make much sense to run all the patches on a system that is now less secure than it is from the original disk with all the updates installed. 

    I would suggest... (Unless it's done on purpose as a backdoor into a system) 
    The next build, remove the default configuration of Remote assistance with no password, use the custom port configuration in the registry to change the default 3389 port to something else, add the firewall configuration to secure the system against new security risks, and then remove the default configuration of the Remote assistance application. 

    I also noticed you have a publicly configured RSA vulnerability installed. 
    Are you creating a backdoor into the build on purpose? 

    Then someone disabled FIPS, in XP SP2 you had FIPS version 2 available, but for whatever reason this system has FIPS disabled.. Which means that the remote access doesn't require any encryption what-so-ever.. 

    Lastly the no password, you can set the auto-authentication to use a custom password, and bake the custom password into the registry, while that's still not secure, it would be more secure than a null password value added to the system. 

    It all looks suspect: 
    If it's not on purpose, let me know, and I can send you the CIS Configuration standards update for XP to secure the system.. Because right now, even without any viruses, i am not sure how this is better.. 

    • This commment is unpublished.
      ForgotMyOldAlias · 1 months ago
      @TGO Untrusted accounts (without password) should be disabled, and that should prevent them from working.

      Admin and SystemDrive (C$) are always shared on every Windows XP together with IPC$. (Along with any fixed drive$ on your computer.)
      You can turn it off with some registry setting but I don't remember which one for the moment.

      Remote Assistance is best turned off. Mine is always disabled, but you say a "netstat.exe -na" shows 3389 listening on 0.0.0.0?

      What public RSA vulnerability? Any reference?

      FIPS is a standard for how to implement security, usually TSL/SSL. It's not better and I never use it.
      It's an extensive checklist to ensure implementing the encryption API isn't susceptible to errors or MITM.
      Here is what the OpenSSL guys says https://wiki.openssl.org/index.php/FIPS_Warnings_and_Cautions

      As far as I know Windows use it when the OS is asked to do a https connection (iexplore), but I'm not sure since I don't use it. Most software use their own encryption libraries.
      The only windows authentication I use is NTLMv2 with no fallback to older versions.

      One easy way to check your current settings is by firing up "secpol.msc" and read values and description there.
      I haven't installed the latest version since everything works with the XP currently installed so not sure how it looks
    • This commment is unpublished.
      Algoflex · 1 months ago
      @ForgotMyOldAlias Was httpS protocol even active or created at all when XP was around?
    • This commment is unpublished.
      Ramsey · 1 months ago
      @TGO The preconfigured settings will turn of the auto creation of the shared "C$ ... + ADMIN$" folder and the default administrator account is also disabled.

      And changing the default Remote assistance port would not be a very user friendly move. On top of that there are no remote user account added.

      All the encryption updates (KB187498, KB245030, KB811833, SA3009008) are also installed, but i did not disbale the old cryptography, because of backwards compatibility. And by now it doesn't even matter if they are disabled or not because more of them are now outdated. 😅 And it's not really that important. But if you into this then here are the settings.

      Windows Registry Editor Version 5.00 ; Disables weak encryptions.

      ; * Reference to SA3009008.
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\SSL 2.0\Client]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\SSL 2.0\Server]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\SSL 3.0\Client]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\SSL 3.0\Server]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      ; * Reference to KB187498 & KB245030 & KB811833.
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Ciphers\NULL]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Ciphers\DES 56/56]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Ciphers\RC2 40/128]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Ciphers\RC2 56/128]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Ciphers\RC2 128/128]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Ciphers\RC4 40/128]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Ciphers\RC4 56/128]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Ciphers\RC4 128/128]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Hashes\MD5]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\Multi-Protocol Unified Hello\Client]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\Multi-Protocol Unified Hello\Server]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\PCT 1.0\Client]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\PCT 1.0\Server]
      "Enabled"=dword:00000000
      "DisabledByDefault"=dword:00000001
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\TLS 1.0\Client]
      "Enabled"=dword:00000001
      "DisabledByDefault"=dword:00000000
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SChannel\Protocols\TLS 1.0\Server]
      "Enabled"=dword:00000001
      "DisabledByDefault"=dword:00000000
      ; * Disables SSL 3.0 for WinHttp applications.
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
      "DefaultSecureProtocols"=dword:00000a80
      ; * Disables SSL 3.0 in Internet Explorer.
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\SSL3.0]
      "CheckedValue"=dword:00000000
      "DefaultValue"=dword:00000000
      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
      "SecureProtocols"=dword:00000a80
      [HKEY_USERS\DefaultUserHive\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
      "SecureProtocols"=dword:00000a80
    • This commment is unpublished.
      ForgotMyOldAlias · 1 months ago
      @Algoflex The encryption wrapper using SSL over http, thus called https, was invented by Netscape in 1994 so it has been around for a while. Later versions of SSL v2, v3 and TSL 1.0 and up are newer but the principles are the same.
  • This commment is unpublished.
    Dreamer · 1 months ago
    Ramsey, I have few suggestions for Win-XP-IE,
    they are small size and "must have" for me.
    Would like to hear some feedback..
    I put them in following cloud:
    https://ln5.sync.com/dl/33eb18360/47gvwcd7-dukv9esr-k6whw33b-wngg4vks
    Desktop Restore (save and restore your icons positions the way you want)
    Taskbar Shuffle (taskbar buttons rearrange, behaves as taskbar in windows 10)
    USB Disk Ejector (quickly remove drives)
    Win-XP - Visual Effects (disable unnecessary visual effects to optimize performance)
    Explorer drive C shortcut (start Windows Explorer on custom folder)
    Explorer++ (free multi-tabbed file manager)
    Paint Shop Pro 4.14 (very light version from 1997, much better then "Windows Paint")
    Process Hacker (Advanced Task Manager, much better then "Windows TaskManager")
    OE Classic (Perfect replacement for Outlook Express)

    • This commment is unpublished.
      Ramsey · 1 months ago
      @Dreamer
      The "Desktop Restore" tool is something I can add, because it is an annoying problem with Windows XP.

      I think the "Taskbar Shuffle", "Explorer++", "Process Hacker" and the "USB Disk Ejector" tool is not something that most people will need/use and the once that will use them will have them already saved on thier computer. 🤠

      The "Paint Shop Pro" tool isn't really much different than the standard Paint tool. I think everyone that needs something more advanced will look for something else, like Paint.NET v3.5.11.

      Instead of using "OE Classic" would it not be better to use Thunderbird (Mail News)? Did you compare the 2?

      The Win-XP Visual Effects never gave me any noticeable performance benefit when I tested this 16 years ago. 😅
    • This commment is unpublished.
      Dood McMan · 1 months ago
      @Dreamer Explorer++ is absolute garbage compared 2 N E version of Micro$oft Windows Explorer, even the sper-retarded deliberately crippled ones from Win 7 or L8R, infinitely worse than XP's Explorer, especially after installing QTTabBar =)  It's the kind of cynical bull$hit anti-solution people like Mr. Ram-Z throw out there like 'so go use Linux Mint' = O'HaHaHa U R so funny with yor 'Go eat dog $hit if U don't like donuts' remark =P  As 4 process managers, 'Process Explorer' & 'pserv.cpl' R the best.  The 'visual effects' stuff is just a matter of personal preference but yes it's best 2 turn all forms of 'animation' off.  As 4 'ejecting' it's safe 2 yank out N E USB drive so long as U R not actively writing 2 it.
    • This commment is unpublished.
      Dood McMan · 1 months ago
      @Ramsey
      Taskar Shuffle is EXTREMELY useful & iHav been using it 'forever'.  U pretend 2 think it isn't useful only because YOU have not bothered 2 use it 2 C how AMAZINGLY HELPFUL it is =)  U can not only drag apps 2 different places in the task bar, but within the drop down as well!  It is also configurable how many apps R in the task bar B 4 it switches 2 drop-down.  Another thing that iUse non-stop 'forever' is 'ZoomIt'.  Details here ~>
      Which, together with Windows Explorer for XP, is not perfect but so INFINITELY SUPERIOR 2 N E thing from Windows 7 or N E other garbage after (10, 11, etc.) that iAm 'forced' 2 stick with XP.  Also the 'save as' & 'taskbar' in XP R infinitely superior 2 =)  If U could 'port' those 2gether with 'ZoomIt' & 'Taskbar Shuffle' 2 Windows 10, U would B doing everybody a YUUUGE favor, + of coruse using a 'retro' theme like Windows '95 style =D  Ideally U could mod Windows 10 (because 11 is a total waste of time half-azzed anti-PC/anti-tablet anti-OS) so it has that + can use 'retro' style (text-based) themes created 4 XP =)  Micro$hit deliberately destroyed the theming mechanism of 7 & after 2 wreck everything on purpose just 4 the joy of ruining people's experience 2 slow them down & waste their time & trick them into buying ever newer hardware, same as the fake 'system requirements' of 10 & 11, which U righly disable by default, same as U should B installing MPC-HC with FFDShow & AC3 filter by default + the Sordum update blocker by default 2 permanently block (user selectable) all 'phone home' & 'update' (down-grade/bug sabotage injection) by default =) ~> https://www.sordum.org/9470/windows-update-blocker-v1-8/
    • This commment is unpublished.
      Dood McMan · 1 months ago
      @Ramsey BTW: Just as yet another of a bazillion obvious examples of how Micro$cam totally destroyed a 'later' version on purpose, the 'Paint' program in 7+ is a joke compared 2 what was in XP, which even then was a wreck but at least not super-counter-intuitive.  They changed a single 'paste' operation into requiring 3 separate clicks 2 drill down into submenus 2 do the same thing, & (of course) wasting tons of space in the interface, like how in 11 everything is exploded out into a bazillion more submenus & $hit 2 hide functionality so U can't make efficient use of yor own computer = they R evil, & that is not 'trolling' but obviously true.  Like instead of saying (essentially) I am used 2 dealing with the insane taskbar interface that won't let U move items around or group them', U should actually USE TaskBar Shuffle 2 C wat U hav been missing, especially when U have dozens of apps running at the same time.  It's WAAAY better than N E thing Micro$hit ever did, including in 10 & 11, etc.  Same goes 4 'ZoomIt' & 'QTTabBar', etc..
  • This commment is unpublished.
    capybaraman · 1 months ago
    I'm thinking of trying to make something similar for the x64 version. How do you setup the OEM part?
    • This commment is unpublished.
      Algoflex · 1 months ago
      @capybaraman Ramsey mentioned it multiple times, that if you wish to run a 64 bit version, might as well just stick to the Windows10 release, here on the site.
    • This commment is unpublished.
      capybaraman · 1 months ago
      @Algoflex That isn't what i'm asking
    • This commment is unpublished.
      Ramsey · 1 months ago
      @capybaraman If your already stuck at the OEM part then I think you don't know what work still awaits you.
      There is no tool for this where you can click a few buttons and then everything will be done for you, you have to do this all by hand. If you open the OEM setting files with a text editor then you will see how all of it works.
    • This commment is unpublished.
      Dood McMan · 1 months ago
      @Algoflex HAY maybve next U can tell us 2 have a bowl of cat vomit 4 breakfast if we don't want 2 have cereal? =))  Yes Mr. Ram-Z likes 2 troll people with anti-solutions often, as if Windows 10 is N E where remotely as good or usable as Window $ex Pee =))  It's like how he would tell people 2 use 10 or whatever instead of Windows 7, which is infinitely less buggy, but still much worse than XP.  U can find the best version of that here (far as I've found) & includes 64 bit option ~> https://archive.org/details/windows-7-sp-1-aiox-64-x-86-multi-complete-pre-activated-update-septemper
  • This commment is unpublished.
    Mylo · 1 months ago
    Hello i am trying to install achi but autodetec says no device founded when i try to intsall in achi mode i tried all the achi patches provides what i am doiging wrong
    • This commment is unpublished.
      Mylo · 1 months ago
      @Mylo
      i also the problem i combined ur iso with easy3booz+dms worked now