New slipstream or delete updates?

[MistyEyes]

Hello Group!
I am having a few problems with my machine, and I hopefully will be
able to do a rebuild,
rather than a full repair/reinstall of XP. (fingers xx'ed)
Last year I created a slipstream of SP2. What I wanted to know was:
should I create a new slipstreamed SP2 with all of the new updates that
I have on my machine from the past year, or delete all of the updates,
or just use the original slipstreamed XP. OR if anyone has any other
suggestions, I am a sponge ready to learn!
I have always kept up with the windows updates.
Thanks!

 

[MistyEyes]

Hello Group!
I am having a few problems with my machine, and I hopefully will be
able to do a rebuild,
rather than a full repair/reinstall of XP. (fingers xx'ed)
Last year I created a slipstream of SP2. What I wanted to know was:
should I create a new slipstreamed SP2 with all of the new updates that
I have on my machine from the past year, or delete all of the updates,
or just use the original slipstreamed XP. OR if anyone has any other
suggestions, I am a sponge ready to learn!
I have always kept up with the windows updates.
Thanks!

=======
I have an addition to my post.
The problem that I am having also involves
ntoskrnl.exe version: 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519). I am
still able to boot, but I crash all the time.
I was wondering if by replacing the xp update that brought this file to
it's current version would fix the problem?

 

[Jim]

=======
I have an addition to my post.
The problem that I am having also involves
ntoskrnl.exe version: 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519). I am
still able to boot, but I crash all the time.
I was wondering if by replacing the xp update that brought this file to
it's current version would fix the problem?

That is the version which my laptop is using, The laptop does not crash.
Your problem lies elsewhere.
Jim

 

[MistyEyes]

That is the version which my laptop is using, The laptop does not crash.
Your problem lies elsewhere.
Jim

=======
And your laptop and my computer have the same hardware, and
software and your point it?

 

[NewScience]

Are there any errors in EVENTVWR.MSC logs? ON the crash?
Does it crash even in Safe Mode(s)?

 

[MistyEyes]

Thanks for answering my post!
No, there are no crashes listed in the EVENTCWR.MSC ...
This is the debug log from the mini-dump:

Debugging Details:
------------------


READ_ADDRESS: 00320036

CURRENT_IRQL: 2

FAULTING_IP:
+320036
00320036 ?? ???

PROCESS_NAME: firefox.exe

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xD1

LAST_CONTROL_TRANSFER: from 80504f1a to 00320036

FAILED_INSTRUCTION_ADDRESS:
+320036
00320036 ?? ???

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be
wrong.
b910bc04 80504f1a 00010005 836d2778 836b10ec 0x320036
b910bc20 806164af 836d2778 00000000 836d2778 nt!IoCancelIrp+0x6f
b910bc3c 805e66f6 836b10ec 836d2778 836d2854
nt!IopCancelAlertedRequest+0x28
b910bc58 80579a8a fe9ccda8 00000103 836b1090
nt!IopSynchronousServiceTail+0xe1
b910bd00 8057bfa5 000004d4 000003f4 00000000 nt!IopXxxControlFile+0x611
b910bd34 804de7ec 000004d4 000003f4 00000000
nt!NtDeviceIoControlFile+0x2a
b910bd34 7c90eb94 000004d4 000003f4 00000000 nt!KiFastCallEntry+0xf8
070df518 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!IoCancelIrp+6f
80504f1a b001 mov al,1

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 42250ff9

SYMBOL_NAME: nt!IoCancelIrp+6f

FAILURE_BUCKET_ID: 0xD1_CODE_AV_BAD_IP_nt!IoCancelIrp+6f

BUCKET_ID: 0xD1_CODE_AV_BAD_IP_nt!IoCancelIrp+6f

Followup: MachineOwner

 

[frodo]

Last year I created a slipstream of SP2. What I wanted to know was:
should I create a new slipstreamed SP2 with all of the new updates that
I have on my machine from the past year, or delete all of the updates,
or just use the original slipstreamed XP. OR if anyone has any other
suggestions, I am a sponge ready to learn!
I have always kept up with the windows updates.
Thanks!

look at AutoPatcher

makes it easy to apply all hotfixes since SP2 in one fell swoop.

AutoStreamer can be used to make a full up slipstream, but since
autopatcher it doesn't seem as popular/necessary. AP does require you to
have a SP2 install CD, either original or slipstreamed.

Finally, use Belarc Advisor to double check that all the hotfixes have
been applied.

 

[MistyEyes]

OK great!
I do have all of the patches, but if one or two are FUBAR reinstalling
them will not hurt!
I already also have the auto streamer just found that 2 days ago.
I will check out the belarc advisor!
Thank you VERY much for your helpful post! I will post a followup to
let you know how it goes!

 

[AJR]

Keep in mind that and "hotfixes", "patches" and "updates" are not
synonymous - hotfixes do not require restart and generally can be
slipstreamed - patches and updates may pr may not.

 

[MistyEyes]

I am still downloaded the auto patcher. BIG file!
I ran the belarc, and it said:
"All required security hotfixes (using the 10/10/2006 Microsoft
Security Bulletin Summary) have been installed."
and I have to reinstall KB902400, & KB885836. I also noticed that
there are a few KB/s that do not have any check or X next to them at
all. Does that mean that they should be reinstalled?
Also, the file "ntoskrnl.exe" that keeps showing up in my minidumps,
should I replace that with the WindowsXP-KB890859-x86-ENU.exe, since
that is the KB that contains the newest version of that? Is there a way
just to extract that particular file only? If so, please tell me how. I
would appreciate that lots!
TY again!

 

[frodo]

I am still downloaded the auto patcher. BIG file!
I ran the belarc, and it said:
"All required security hotfixes (using the 10/10/2006 Microsoft
Security Bulletin Summary) have been installed."
and I have to reinstall KB902400, & KB885836. I also noticed that
there are a few KB/s that do not have any check or X next to them at
all. Does that mean that they should be reinstalled?
Also, the file "ntoskrnl.exe" that keeps showing up in my minidumps,
should I replace that with the WindowsXP-KB890859-x86-ENU.exe, since
that is the KB that contains the newest version of that? Is there a way
just to extract that particular file only? If so, please tell me how. I
would appreciate that lots!
TY again!

Well, my ntoskernel is at 5.1.2600.2622, and this supposedly comes from
KB890859 as you said, so I would try reinstalling that. Belarc says you
have that installed, yet the version is still at .2180??? Shouldn't be...

I have always wondered HOW both WU and Belarc "know" what has been
installed. I have heard that it looks in the reg for entries re:
hotfixes, but that seems short-sighted - it should do a full-up file
version check, and cross ref w/ some DB for which fix included the latest
versions. More work really, but the only way to know what is actually
being used. My gut says this is what Belarc is doing, I'm not sure about
WU. I KNOW that WU's history list of "Installed Updates" relies on what
it has downloaded FROM WU in the past, and not on what has been installed
OVERALL (if you manually install a fix then WU will not display that in
its history. I does seem to know the fix is in tho, as it doesn't
recommend it again.)

All in all the patch process is worrisome, I wish there was a definative
way to BE SURE you've got all the latest versions. MSBSA certainly implies
it's the bees knees, but can you really trust it? Really MS, how hard is
it to publish a full up list of version numbers for the 250 or so core
files, and a tool that checks them all? Seeing that sort of display
somehow would make me feel better...

Good Luck