Verifying Win XP SP3 .ISO

Discussion in 'Software' started by zepper, May 20, 2008.

  1. zepper

    zepper Corporal

    So far I've been unable to convince the PTB of the value of posting the MD5 (or other) hash of the latest SP3 .ISO that was posted here a few days ago. So I guess I'll try to get the info here.

    Here is what I got on the file I downloaded from one of MG's hosts:

    Karen's Hasher v2.2.1
    http://www.karenware.com

    Date: 5/20/2008 5:25:02 PM
    Computer: HOME-ZEPPER
    User: zepper

    Files Hashed: 1

    File Name
    E:\CD_ISOs\Windows\xpsp3_5512.080413-2113_usa_x86fre_spcd.iso

    MD5 Hash - 308245853E5B231343EE17B36FFDA1E6
    SHA-1 Hash - 8FA76CCEA145D050FC6A506FFBDEDFE53282E5B4

    All I'm trying to do is be sure the file I have is the same as the one that is on their servers. If a few of you will post a hash of the file you downloaded, we can assure each other. The link to the site where I got the program I used is above in case you don't have one - there are plenty of free hashing proggies out there and all should get the same result for the same hash. Karen's Hasher like all of her programs are in Visual Basic, so you have to install the VBRun DLL before you install the programs so they will run. You can DL the latest version of that from her site as well. Thanks to all who participate.

    .bh.
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi

    May have to enlighten me to who are PTB? long day and heads not fully awake.

    Many times it has been mentioned that the XP SP3 that is on Majorgeeks.com is the same one as hosted on Microsoft, the owners of Majorgeeks are not in the habbit of posting files that are not original and not safe to use.

    This is MD5 of mine from MSDNs ISO of XP SP3
    Karen's Hasher v2.3
    http://www.karenware.com

    Date: 20/05/2008 23:46:50
    Files Hashed: 1

    File Name

    D:\MSDN Downloads\en_windows_xp_service_pack_3_x86_cd_x14-60489.iso

    MD5 Hash 308245853E5B231343EE17B36FFDA1E6
    SHA-1 Hash 8FA76CCEA145D050FC6A506FFBDEDFE53282E5B4




    This is screenshot of the download and I use the Authors Link in the downloads list and its directly off MSFTs download site and again MD5 and SHA-1 are both same as yours.

    http://img143.imageshack.us/img143/5751/69342566ff0.jpg


    Files Hashed: 1

    File Name
    D:\Temp2\xpsp3_5512.080413-2113_usa_x86fre_spcd.iso

    MD5 Hash 308245853E5B231343EE17B36FFDA1E6
    SHA-1 Hash 8FA76CCEA145D050FC6A506FFBDEDFE53282E5B4
     
  3. zepper

    zepper Corporal

    Thanks for the reply, Halo, and for going to the trouble to calculate the hashes on your file.

    Note that I didn't say anything about the file on MG's servers. I just want to assure myself that the ISO on my HDD is the same as the one on MG's servers. I am confident that their posted files are genuine and defend MG in other forums on that point, but anything can happen 'tween their server and my HDD. I just don't have the desire to download that large a file multiple times (first one took nearly two hours at my basic DSL speed) to compare the hashes myself. But I do that on smaller DLs where the MD5 isn't provided. IMO, it should be routine by now to post the MD5s of large files (acrually I'd like to see it posted on all DLable files). I don't see an MD5 posted in M$'s description of the SP3 either - not that it matters as that's not the file I'm DLing but shame on them as well.

    .bh.

    PS: PTB = powers that be
     
  4. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi

    Gotcha on PTB,

    +
    = my general reply, sorry if I gained wrong end of stick from the above.


    I get you on making sure a critical update is a legit one and actually the correct one, the admin team and the owners had a long discussion on this just before the SP was released to the public and as I have access to getting MSFT files before many we tested the file properties etc.

    Yes while many MSFT files have security certs the SH1 hash of them doesnt always match the one on the actual file, so yes indeed having these listed in text form before you download so you can compare whats posted in the DL listing to the files SH1 or MD5 could be a good way to check for authentisity, sadly dont know that many folk who actually do this, especially if downloading from known source.
     
  5. zepper

    zepper Corporal

    Anyone else?

    .bh.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds