pennsylvaniaron

thiersee MUCH success! the first time I tested after reading your procedure post I must have misunderstood what to do with 2603229 & 2533552. You said they would not integrate, that I would have to do it on live windows. I thought that was meant to say do not include them at all in silent OR basic updates in wtk. when I did it that way I got on error on 2640418. I re-did the wtk and included them in silents (which I think they got integrated, check marks), I put 3020369 & 2670838 as prereq's, I put NFW in silent and I did not remove any other updates (such as 3004375, supposedly not needed in home premium). I made a successful iso, tested on VM. I then took that iso extracted it in wtk and included a preset with only my tweaks, silents and files. I then also included the updates again (are you supposed to do that and keep the prereq's?). they all get checks within 10 seconds so if they are already integrated do you have to "try" and integrate them again?. so everything works, passes sfc, no Trojans in NFW. I end up with 9 updates ready to be installed after install on VM (no mention of 2533552 or 2603229). btw the 2 IE11 tweaks I use are to stop the meet your browser from repeating and to turn smartscreen ON. to recap: 1. do I need to include the UL updates every time I want to make an updates iso and put those prereq where they belong? 2. What exactly do you do with 2533552 & 2603229. regards...

wow thiersee thx so much. I was experimenting for hours also. let me tell you of MY findings, although your post coincides with my results to a degree. yes pink_freud was correct. 3020369 has to be a pre-requisite NOT to get the 3172605 error. BTW I used the link you sent me for the win 7_64 HP iso. Personally I don't see a difference from mine but I'll use it from now on to be consistent with you. also by using your link to nfw and putting it in silent with /y then I get no Trojans. there is no c:\wondows\inf\inf directory created. sfc passes. I used the IE11 EXE file and 2 things about that. when I do my usual tweaks (not now) I have 2 registry fixes for IE. one turns smartscreen on (my preference, with the cab file its off) and I have a tweak to stop the MEET YOUR BROWSER from starting every time you open IE. That I still get without my tweak. DO YOU GET THAT?? OK so now I will follow your "PROCEDURE" step by step and report back with all these little nags, errors, what not. Appreciate it very much... regards...

see this is what is sooooo frustrating about this process. AGAIN, I am using an untouched (as far as I know) media refresh win 7_64 HP iso (downloaded yrs ago from either Microsoft website or bleepinging computer link) and only installing the updates for the classic ie: from WUD box 2, box 3, box 5 (I don't include rdp), box 6 period! the only other update I add is the iecab file 2841134. that cab file and the ieupdate go into its own section in wtk. kaboom on 3172605 which after install without it becomes a RECOMMENDED update on the VM. in addition no one seems to have an answer to the aboddi nfw 4.61 Trojan agents directory that is created under windows\inf. is it possible for someone to write a step by step procedure with links to NFW, IE11 et al on how to make a proper iso. I cannot see why my (only updates) fails and you have no problems other than I am using English and I assume yours is German or French? I have included the error txt file. regards... 3172605.txt

thiersee 3172605 has ? next to it. updates have not completed yet but if that ? is there I assume it will fail. regards...

thiersee I am retired too! So I have the time to get this right. an initial answer as I do this as I write. The added to silent updates are 3020369, 2533552, 2603229 and 3046269. I then add 2841134.cab for IE11. making iso now with no presets, only updates including 3172605. will report back in an hour or so...thx regards...

thiersee I really really appreciate your help (and patience). I am not as versed as others on this subject and many of you seem to have a more "understanding" conversation between each other when it comes to all these new updates coming into integration and then being superseded on top of being superseded. its really hard to follow the posts. in addition there are 2 ways of making the iso, convenience and classic and different ways of integrating NFW and many other things, so it does get confusing because the goal we desire has many different ways of being achieved. to answer your question (and to ask a few) I take a new win 7_64 sp1 HP iso untouched (no updates) and extract it using latest WTK. I always do the classic method because convenience seems to fail sfc. I then use WUD and download the latest UL from post#1. There are 4 updates they want to go to silents which I do. then I have my personal silents and the latest NFW 4.61 ADD-ON, tweaks, and no components removed. for me wtk was failing on 3161608 and now I see it was removed and I assume 3172605 took its place in latest UL. here are the issues. originally 3161608 made WTK fail (update had ?) and now 3172605 has (?) and it fails. I cant see any other function I personally use causing the failure. The first thing WTK does after mounting is integrating the updates and that's where it fails before it gets to my personal tweaking etc.. If I remove 3172605 then it works perfectly. So I made the iso (w/o 3172605) with the latest july UL and here are the issues. there is an infected c:\windows\inf\inf directory created by the NFW 4.61 add-on according to MBAM. I can easily just delete it and then no infections or have MBAM detect and remove. whats that all about?? secondly the amt of updates has increased to I think it was 17. here is what now gets installed minus 3035583 and the malicious and defender. 2533552, 3139923, 3153171, 3123862, 2992611, 3080149, 2952664, 3072630, 3042058, 3040272, 3139940, 2798162, and 3068708. one of these got installed after a reboot of the majority of them getting installed, I forget which one. 3172605 is now in the recommended section of WU. I then did a deep clean and its log says 2685811, 2685813, 3004375, 3075220 were uninstalled (superseded). It seems to me that the prior July UL had some of the updates that did not get installed this time so I don't understand that either. shouldn't the amt be less if M$ doesn't come out with new ones prior to a Tuesday release? hopefully you can make heads or tails of ALL these issues. thank you so much for your time. regards....

now 3172605 is making WTK fail doing the 7_22_16 UL classics...

Thank you. I will make new classic vm later with latest Juky ul's and report back... regards...

When I installed the july UL updates into a fresh copy of win 7_64 HP 3161608 made WTK fail. I had to remove it and re-do the integration. Does anyone know the reason and will it be included in future UL's? regards...

oops, sorry alpha_95, my mistake. I meant pink_freud... regards...

hi. are me and alpha_95 the only ones getting over 350 malwarebytes Trojan errors in c:\windows\INF\INF directory by using the abbodi1406 nfw 4.61 add-ons? regards...

Just completed a classic install with just the 7_12_16 UL updates, no NFW 4.61 add-on, tweaks etc. JUST THE UPDATES and malwarebytes finds nothing. There isn't an INF sub-directory created under c:\windows\inf like there is (and where the Trojan agents reside) when using the NFW 4.61 add-on. FYI..... regards....

what's the story with kb3161608? its making wtk fail in classic integration? I appreciate your response. regards...

ok about to test w/o the nfw add-on. I am using a slightly older add-on from 051816. I didn't know that new one was out. apparently both (or no NFW add-on) gives the Trojan agents. I'll report back soon... regards...

yes thiersee its weird. at least this time I have company! As I said I never gotten this before with all the other iso's I have made. I have time later to try another classic from 7_22 ul with no tweaks, no nothing except the updates. will report.. regards...

Do you believe this is a nfw 4.61 add-on issue?? Guess the only way to find out is to do another install without that add-on. I cant do it for a number of hours so if you have tried it plz let me know. will save me some work. regards...

after my successful 6_22 and 7_12_16 win 7_64 home premium iso creations I am getting 361 Trojan agents being detected. I am using a VM. I have taken the iso and extracted it into a new folder via WTK. In the preset I add my tweaks, silents, and nfw 4.61 add-on. I then go into the silents and remove everything except the 4 needed kb's. I do not remove ANY components. when wtk does it thing all the updates get a yellow check (very fast, I think there were 192 using classic method). other than the add-on and the updates I don't think its any personal "thing" I am doing. that whole compilation takes 3.5 minutes. I then make the iso and do a new VM install. First thing I do is go to the internet, download malwarebytes v.2.2.1.1043. I check the box to also search for rootkits and do a THREAT scan. MBAM finds 361 Trojan agents in the c:\windows\inf\inf directory. sub dir are windows workflow foundation, net memory cache 4.0, asp.net, asp.net_4.0.30319, SMSvchost 4.0.0.0 and a few others. MBAM will successfully remove them all. Are these false positives? Are others getting the same results? I have never seen this before. In the past I always have run a threat scan as part of my initial setup and it has never detected anything. It is the heuristic (last part) of the scan that finds all 361. regards...

I appreciate your patience! I help people much less knowledgeable than me on other computer issues. It can be frustrating. Thanks again to all for helping me and hopefully as I read each post I will understand more... regards...

sorry another nubie question. how (where) do you do a deep-clean. I have seen you guys mention it a few times. regards...

Here's my challenge. I now have an excellent working win 7 iso with all the classic updates from 6/22/16. in addition nfw 4.61 wa and my personal tweaks, silent etc. what is the process now that a new updated UL (7/12/16) has been released. I really just want to get those new wu installed. do we have to start all over? take a NO UPDATES win 7 sp1 and use wtk with that? or do we extract the latest iso we made (prior month) into a new folder and load in the last preset (minus the updates), but include all the other items in the preset? since NFW is integrated already in the iso do we again include it as an add-on? regards... ps..just ran that june iso for the first time and malwarebytes found about 300 items in the c:\windows\inf\inf folder pertaining to asp.net 4.0, net clr networking, and many other entries, all Trojan agents.

nubie question. what is LDR and GDR? regards...

eureka! Looks good. completed 6/22/16 classic home premium_64 ISO. passes sfc. minimal amount of updates present after install. all my personal files, silents, tweaks, nfw 4.61 are installed. no kb3136000 lurking. If I had to pinpoint the problem its either I "had" to do the classic update integration separately OR something in the component removal module caused an issue. The only other thing I can think of is I put the kb's in the silent list AHEAD of my personal silent. In any event she's perfect. Now I await the new July UL list and want to see if I can update this iso with the latest updates. Once again thanks to all who contributed to this endeavor! regards...

ok so far so good. I used wtk as instructed with the classic updates (202), no rdp. I used the nfw 4.61 wa add-on. I installed my default theme. This time I removed NOTHING. before I was mainly removing the different country local packs, win anytime upgrade and the dvd registration (from memory). I DID integrate all my tweaks. This time I DID NOT copy files to the desktop that I use to install personal programs. they are basically exe's just copied to the desktop. I also DID NOT install any personal silents such as adobe reader, fp, mbam, google toolbar, ccleaner. The only silents are 3020369, 2533552, 2603229, 3046269. iso passes sfc /scannow before and after manually installing updates of which there were 12, then 1, then 1 with subsequent checking for updates. no sign of 3136000. now I will try copying those desktop files and installing my personal silents using this iso. I will (for now) not remove any components. Thanks much. Lets hope she goes smoothly... regards....

ok just started a "vanilla" classic wtk session. differences from theirsee instructions is that I am using home premium and will not integrate RDP. I am also using the NFW 4.61 wa add-on from 5/18/16 that I believe he used as have others. regards...

thiersee I have abandoned the classic iso. just too much work trying to figure out the 3136000 repeat problem. I am back to doing the convenience. I just made a new ISO and have 16 updates in WU after vm install. about 8 of those are after 6/22/16 plus m$ june tool and defender. that's good enough for me. But she still fails SFC. It repairs the files but a PIA to have to run that after every install. Is there a fix for that on the horizon? oopps! I ran sfc a second time (in a row) and now it finds corrupt files again but CANNOT repair them. this is just a disaster.... regards...