UpdatePack 20.4.20 LOG: https://forums.mydigitallife.net/th...l-wim-esd-creation.79421/page-26#post-1591539
@LittlePro + @Enthousiast Last time I ran anything related to the updates, it was in early to mid 2016 and it was aegis voat. It was back then that everyone was saying that ms is pushing telemetry updates through wu and aegis voat was one of the best tools for the job. Also, I did not know about simplix back then. I will install 20.4.20 next time I get to windows, because last time I installed 20.4.15. Last but not least, I know how to run sfc /scannow from within windows. What I do not have is a disc, in case sfc asks to do any repair.
https://forums.mydigitallife.net/threads/windows-7-sp1-media-refresh-download-links.60681/ P.S. sfc /scannow doesn't ask directly for Installation media. Thanks. ...
Good morning, sir, I proceeded to a new installation of a fr_windows_7_ultimate_with_sp1_x64_dvd_u_677299.iso with the correct sha-1 5370BB44F497E1B19114C7CF70F5CDEF9F3A2582 without additional software. I installed malwarebytes, then proceeded to a complete scan. result no virus! I proceeded to install the last updatepack dated 20/04/20. 58 updates successfully installed. I proceed to a complete analysis. result : 20 ! Register key: 16 Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\1990649205B55EAB5D692E9EDB1BE0DDD3B037DE, No User Action, 6758, 813677, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\1990649205B55EAB5D692E9EDB1BE0DDD3B037DE, No User Action, 6758, 813677, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\3AD010247A8F1E991F8DDE5D47989CB5202E5614, No User Action, 6758, 813678, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\6A2C691767C2F1999B8C020CBAB44756A99A0C41, No User Action, 6758, 813679, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\6B6FA65B1BDC2A0F3A7E66B590F93297B8EB56B9, No User Action, 6758, 813680, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\8835437D387BBBB1B58FF5A0FF8D003D8FE04AED4, No User Action, 6758, 813681, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\3AD010247A8F1E991F8DDE5D47989CB5202E5614, No User Action, 6758, 813678, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\9FEB091E053D1C453C789E8E9C446D31CB177ED9, No User Action, 6758, 813682, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\6A2C691767C2F1999B8C020CBAB44756A99A0C41, No User Action, 6758, 813679, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\C597D4E7FF9CE5BD3EC321C11827FCA9294A6BA1, No User Action, 6758, 813683, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\6B6FA65B1BDC2A0F3A7E66B590F93297B8EB56B9, No User Action, 6758, 813680, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\D3FD325D0F2259F693DD789430E3A9430BB59B98, No User Action, 6758, 813684, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\8835437D387BBBB1B58FF5A0FF8D003D8FE04AED4, No User Action, 6758, 813681, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\9FEB091E053D1C453C789E8E9C446D31CB177ED9, No User Action, 6758, 813682, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\C597D4E7FF9CE5BD3EC321C11827FCA9294A6BA1, No User Action, 6758, 813683, 1.0.22874, , ame, Trojan.DisabledAVSecurityCerts, HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\D3FD325D0F2259F693DD789430E3A9430BB59B98, No User Action, 6758, 813684, 1.0.22874, , ame, Register value: 4 PUM.Optional.DisableMRT, HKLM\SOFTWARE\WOW6432NODE\POLICIES\MICROSOFT\MRT|DONTOFFERTHROUGHWUAU, No User Action, 6927, 676880, 1.0.22874, , ame, PUM.Optional.DisableMRT, HKLM\SOFTWARE\WOW6432NODE\POLICIES\MICROSOFT\MRT|DONTREPORTINFECTIONINFORMATION, No User Action, 6927, 676881, 1.0.22874, , ame, PUM.Optional.DisableMRT, HKLM\SOFTWARE\POLICIES\MICROSOFT\MRT|DONTOFFERTHROUGHWUAU, No User Action, 6927, 676880, 1.0.22874, , ame, PUM.Optional.DisableMRT, HKLM\SOFTWARE\POLICIES\MICROSOFT\MRT|DONTREPORTINFECTIONINFORMATION, No User Action, 6927, 676881, 1.0.22874, , ame, I think the four "disable.MRTs" are normal. On the other hand the 16 "Trojan.DisabledAVSecurityCerts" I don't know. What do you think? Thank you.
@simplix madam please have a look https://forums.mydigitallife.net/th...win7-distribution.45005/page-159#post-1592310
Good morning, sir, I understood that they were certificates. after what the implications are, I don't know. Also to tell you that this morning malwarebytes re-scanned the computer and the certificate errors are gone compared to yesterday. That leaves only the four disable.MRTs. but it would be interesting to hear from the creator of the post. Yours truly.
The april updatepack contains the same bypass (+WU patcher) as the one developed by IMI Kurwica & @abbodi1406 at MDL. Updated the OP with updatepack 20.4.20
Dear @simplix ,I am your fan My English is not good enough, please don't make fun of me I think there may be several redundant patches in UpdatePack7R2 for official Windows7 SP1 WIM KB2716513 KB2884256 KB2920188-v7 KB3000483 KB3020393 KB3140245 KB4054998 replaced by KB4532945/KB4552940 Because these updates will not be provided by Windows Update，and the files in these patches have also been replaced by newer version of the files In addition, I hope that the following patches are optional, because these patches are not very necessary for me KB917607 KB2818604 KB3064209 In fact, if I removed the above ten patches，Windows Update only has the following patchs： KB4493132 KB3021917 KB3068708 KB3080149 KB3150513 KB3172605 very perfect！！！！ In addition,I think KB3172605 is necessary Although it contains Consent.exe，it has been replaced by a later version 6.1.7601.24553 Instead, KB3172605 can provide a new version of olepro32.dll & CipherSuiteOrder.adml It‘s useful