Home > Security News > Microsoft Windows background update blocks 80 patches
Security News:
EMAIL THIS

Microsoft Windows background update blocks 80 patches

By SearchSecurity.com Staff
27 Sep 2007 | SearchSecurity.com

Security Wire Daily News
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google

A Windows expert warned Thursday that the repair feature in Windows XP was knocked out of alignment when Microsoft silently deployed a batch of new support files for Windows Update (WU) in July and August. As a result, those who rely on XP's repair function were unable to install 80 of Microsoft's latest patches.

People have told us that we should have been clearer on how Windows Update behaves when it updates itself.
Nate Clinton,
program manager, Microsoft Windows Update

Scott Dunn, associate editor of the Windows Secrets newsletter, wrote that trouble ensues when users reinstall XP's system files using the repair tool found on XP CD-ROMs. "The repair option, which is typically employed when XP for some reason becomes unbootable, rolls many aspects of XP back to a pristine state [and] wipes out many updates and patches and sets Internet Explorer back to the version that originally shipped with the operating system," Dunn wrote. "Normally, users who repair XP can easily download and install the latest patches using the Automatic Updates control panel or navigating directly to Microsoft's Windows Update site."

But after using the repair option from an XP CD-ROM, Dunn wrote, Windows Update now downloads and installs the new 7.0.600.381 executable files. Some WU executables aren't registered with the operating system, preventing Windows Update from working as intended. "This, in turn, prevents Microsoft's 80 latest patches from installing -- even if the patches successfully downloaded to the PC," he wrote.

Dunn said he was able to independently confirm the glitch on a test machine. When WU tries to download the most recent patches to a "repaired" XP machine, he wrote, Microsoft's Web site simply states: "A problem on your computer is preventing the updates from being downloaded or installed."

To work around the problem, Dunn said users can install an older version of WU over the top of 7.0.600.381. The newsletter also offers instructions to register seven missing DLL (dynamic link library) files needed for the patching process to work properly.

Nate Clinton, program manager for Windows Update, acknowledged in the Microsoft Update Product Team Blog that there may be a better way to do things going forward.

"People have told us that we should have been clearer on how Windows Update behaves when it updates itself," he wrote. "This is helpful and important feedback, and we are now looking at the best way to clarify WU's behavior to customers so that they can more clearly understand how WU works."



Tags: Windows Security: Alerts, Updates and Best PracticesVIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



RELATED CONTENT
Windows Security: Alerts, Updates and Best Practices
Microsoft to address 12 vulnerabilities, IE display zero-day
Exploit code targets Internet Explorer zero-day display flaw
Windows 7 DoS flaw allows hackers to freeze Microsoft's newest OS
Microsoft patches serious Windows kernel flaws
Microsoft to address flaws in Windows, Office for Mac
Microsoft fixes security update that breaks Internet Explorer
What is the best database patch management process?
Microsoft addresses critical SMBv2 flaw, fixes record number of flaws
Microsoft to address SMB zero-day, IIS FTP Service vulnerabilities
Microsoft releases temporary fix for SMB2 zero-day vulnerability

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
BotHunter  (SearchSecurity.com)
principle of least privilege (POLP)  (SearchSecurity.com)
security identifier  (SearchSecurity.com)
trusted computing  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



More Tips to Secure Your Network
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts