Slashdot Mirror


Microsoft 'Stealth Update' Proving Problematic

DaMan writes "According to the site WindowsSecrets, the stealth Update that Microsoft released back in August isn't quite as harmless as the company claims. The site's research has shown that when users try to do a repair to XP subsequent to the update, bad things happen. 'After using the repair option from an XP CD-ROM, Windows Update now downloads and installs the new 7.0.600.381 executable files. Some WU executables aren't registered with the operating system, preventing Windows Update from working as intended. This, in turn, prevents Microsoft's 80 latest patches from installing -- even if the patches successfully downloaded to the PC.' ZDNet's Hardware 2.0 has independently confirmed that this update adversely affects repaired XP installations: 'This issue highlights why it is vitally important that Microsoft doesn't release undocumented updates on the sly. Even the best tested update can have unpleasant side-effects, but if patches are documented properly and released in such a way that users (especially IT professionals) know they exist, it offers a necessary starting point for troubleshooting.'"

257 comments

  1. Let me be the first to say... by morgan_greywolf · · Score: 5, Funny

    Duh. Undocumented updates cause problems. In related news, failure to check for a buffer overflow causes software bugs.

    1. Re:Let me be the first to say... by Anonymous Coward · · Score: 0

      Checking for a buffer overflow doesn't help: it's already happened by the time you've checked for it. Preventing an overflow is much more useful.

      Why yes I am a pedantic prick, thanks!

    2. Re:Let me be the first to say... by igny · · Score: 4, Funny

      That is why I have a clean reinstall for all Winboxes every Tuesday.

      --
      In theory there is no difference between theory and practice. In practice there is. - Yogi Berra
    3. Re:Let me be the first to say... by Doctor+Faustus · · Score: 1

      In related news, failure to check for a buffer overflow causes software bugs.
      Checking for overflows is a band-aid. Use of null-terminated strings is the root cause.

    4. Re:Let me be the first to say... by YojimboJango · · Score: 2, Interesting

      This is kinda funny to me, because I had to do a recovery on my windows box last week. I eventually got so pissed off at it that I finally switched to Ubuntu. I'm finally a statistic of the people that have been burned by windows on their shady practices and switched my OS.

    5. Re:Let me be the first to say... by IhuntCIA · · Score: 1

      Well..
      I did my winXP SP2 reinstall 3 years ago... Still works good without any updates ( automatic update and security shield services disabled )

      It is plain obvious that some versions of windows do not need updates.

  2. Just let us patch the systems by 192939495969798999 · · Score: 4, Insightful

    Why not just let everyone patch their systems, and shut off the "non genuine" check or whatever is blocking this? Why wouldn't you want people to patch the systems? Doesn't an unpatched and infected system equate more directly to lost revenue than a "non-genuine" flagged system?

    --
    stuff |
    1. Re:Just let us patch the systems by musikit · · Score: 2, Insightful

      to me it seems that MS is charging for updates (or wanting to move toward charging for updates) to windows now instead of for windows itself. since if i warez windows i have a perfectly good machine with an OS it is only for updates that i am forced to actually pay for windows.

      to me it seems that a large majority of issues with windows can be solved in 3 ways
      1. dont use the OS "Add ons" (ie outlook msn messager etc)
      2. use a properly configured firewall
      3. dont be an idiot.

      i have no problem following these 3 rules to save $300 on my OS.

    2. Re:Just let us patch the systems by Anonymous Coward · · Score: 1, Funny

      dont be an idiot

      You do realize you're running Windows, right?
    3. Re:Just let us patch the systems by Anonymous Coward · · Score: 0

      1. dont use the OS "Add ons" (ie outlook msn messager etc) 2. use a properly configured firewall 3. dont be an idiot.
      You realize that the whole list can be summed up with the third one, right?
  3. Microflaccid strikes again by jollyreaper · · Score: 5, Funny

    "I will gladly patch you Tuesday for something I broke today."

    --
    Kwisatz Haderach
    Sell the spice to CHOAM
    This Mahdi took Shaddam's Throne
    1. Re:Microflaccid strikes again by BronsCon · · Score: 1

      Shouldn't that be "Microflaccid Strokes Again?"

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
    2. Re:Microflaccid strikes again by Jesus_666 · · Score: 1

      Shouldn't that be "Microflaccid Strokes Again?"

      $DEITY, please don't let a Zune owner see this or he'll start "squirting" all over the place.

      --
      USE HOT GRITS WITH STATUE OF NATALIE PORTMAN (NAKED AND PETRIFIED)
  4. Subconscious or stealth push to Vista? by Bearhouse · · Score: 2, Interesting

    I guess their focus & therefore resources will switch more and more to Vista, so this kind of thing will probably happen with increasing frequency.

    1. Re:Subconscious or stealth push to Vista? by Rob+T+Firefly · · Score: 5, Funny

      "Nice PC you have here. Shame if something were to happen to it..."

    2. Re:Subconscious or stealth push to Vista? by Frosty+Piss · · Score: 4, Insightful

      True. They have a tough road ahead to make Vista live up to Win98. But seriously, I suspect that there are many great code advances in Vista, and that if it where not encombered by paranoid we-must-control-the-consumer DRM security model, it might actually be better than XP. As long as the consumer (vs corporate) is not Microsoft's actual customer, they will continue to offer the opertunity for user friendly Linux distros like Ubuntu to gain market share.

      --
      If you want news from today, you have to come back tomorrow.
    3. Re:Subconscious or stealth push to Vista? by Corporate+Troll · · Score: 1

      They have a tough road ahead to make Vista live up to Win98.

      *blink* Vista may be bad, but I cannot imagine that it's worse than a 9x based operating system. Live up to the rest of the NT line? Yes... Live up to the 9x line? It already does only by being part of the NT family. The two are worlds apart.

    4. Re:Subconscious or stealth push to Vista? by Frosty+Piss · · Score: 3, Funny

      It was a "joke". I can't think of much worse than Win98...

      --
      If you want news from today, you have to come back tomorrow.
    5. Re:Subconscious or stealth push to Vista? by Corporate+Troll · · Score: 1

      Aaah, I though I heard that whoosching sound before... (Sorry, didn't get it)

    6. Re:Subconscious or stealth push to Vista? by Anonymous Coward · · Score: 0

      They modded you "insightful", so the joke must have not been very funny.

    7. Re:Subconscious or stealth push to Vista? by PitaBred · · Score: 1

      Funny doesn't give you karma. Many funny jokes are modded insightful to give a karma boost instead of just being funny.

    8. Re:Subconscious or stealth push to Vista? by sYkSh0n3 · · Score: 1

      It was a "joke". I can't think of much worse than Win98...


      That ones easy. WinME. Easily the worst thing pushed out of redmond since Bob.
    9. Re:Subconscious or stealth push to Vista? by Anonymous Coward · · Score: 0

      Sounds like: "Make it look like a buffer overflow accident"

    10. Re:Subconscious or stealth push to Vista? by Anonymous Coward · · Score: 0

      ... and many meta-moderators miss the point on all counts, and mark the moderation as Unfair.

      Stupid gits!

    11. Re:Subconscious or stealth push to Vista? by AJWM · · Score: 1

      I can't think of much worse than WinME...

      There, fixed that for you.

      --
      -- Alastair
    12. Re:Subconscious or stealth push to Vista? by Anonymous Coward · · Score: 0

      They have a tough road ahead to make Vista live up to Win98. But seriously... they will continue to offer the opertunity for user friendly Linux distros like Ubuntu to gain market share.

      Alan Greenspan says "Would somebody please taser the penguin?" Honest. At least that's what Tom said he said. I mean, if you don't believe me follow the link... Come on, I dare you. I swear it's not goatse or tubgirl, and in fact it's SFW. Well, I guess it's SFW if you don't work fro Microsoft, the Republican Party, or the Federal Government.

      Oh hell, DON'T follow the link, see if I care!

      -Walter Theodore Franklin

    13. Re:Subconscious or stealth push to Vista? by Jesus_666 · · Score: 1

      UAC Notice
      You know, something bad might just happen to that nice data you've got there... Happens all the time, you know.

      [Allow] [Pay up]

      --
      USE HOT GRITS WITH STATUE OF NATALIE PORTMAN (NAKED AND PETRIFIED)
    14. Re:Subconscious or stealth push to Vista? by Almahtar · · Score: 1

      1. The parent was joking.

      2. Having a completely re-written kernel, it's not a member of the NT family.

    15. Re:Subconscious or stealth push to Vista? by Bearhouse · · Score: 1

      Hi Frosty - actually I quite *liked* Win98(SE). After Win95 it was, well, less bad...as long as you used 98SElite.
      Not as good as OS/2 (what?), though...

    16. Re:Subconscious or stealth push to Vista? by Corporate+Troll · · Score: 1
      1. I didn't get the joke, and I admitted it in a reply in this thread.
      2. Vista is NT version 6.0, just like WinXP is NT version 5.1 and Windows 2000 is NT version 5.0... The kernel has not been completely rewritten as it is based on Windows 2003 Server and that is... (wait for it!)... NT version 5.2...
  5. The problem with MicroSoft by phoenixwade · · Score: 5, Interesting

    This is the reason I support and use Linux. It started as a hobby, something to do with old equipment. But, now it's because of disclosure. I know what is being installed, and can choose when to update, what to update, and, If I've the time and inclination, I can take the update apart, see what it's doing, and even modify part of it.

    Microsoft doesn't allow me this, and continues to fail to predict the negative consequences resulting from these choices. Apple at least gives me the option of installing an update, even though they have a bad record on the full disclosure thing too.

    --
    A positive attitude may not solve all your problems, but it will annoy enough people to make it worth the effort.
    1. Re:The problem with MicroSoft by Anonymous Coward · · Score: 2, Insightful

      I know what is being installed

      You know whats installed, eh? So you go through and check the source of all code that is being installed on your Linux box? I understand the idea that because it is open source, there must be no problems with what you are installing, but don't make the false assumption of this, because as Linux becomes more and more popular the chance of something getting on your system that you were unaware of will most likely grow. Everything might not always be so hunkydory.

    2. Re:The problem with MicroSoft by apparently · · Score: 4, Insightful

      at a minimum, if any given end-user doesn't have the time or ability to look at the source of each piece of code, there is a worldwide community of individuals who can pool their time and ability to dive into the source, and if anything suspicious or odd is going on, there's a good chance (at least compared to closed-source) that it will be found and reported. So even the Linux newbs who don't know source code from morse code still benefit. (disclaimer: naturally, it's not completely so rosy. Any given grandma isn't going to be looking up this information, but I think the point is still valid)

    3. Re:The problem with MicroSoft by pilgrim23 · · Score: 1

      "- continues to fail to predict ... consequences"

      which is why Microsoft
        predictably and consequentially continues to fail

      --
      - Minutus cantorum, minutus balorum, minutus carborata descendum pantorum.
    4. Re:The problem with MicroSoft by Anzhr · · Score: 1

      The Ubuntu Update Manager has the option to show the Launchpad bug number that is being fixed by the update, if one wants to research or keep track.

    5. Re:The problem with MicroSoft by Shotgun · · Score: 1

      One of the features that I'd really like to see in Kubuntu's Adept is an addition to the "Update" feature that would tell you what the changes are. Just a listing of the change history would be sufficient. Then a button that would tell the system not to bother me about this particular version again.

      I don't want to update my kernel because there's a potential buffer exploit in a driver for an obscure driver for hardware I don't have, which then forces me to remember to recompile and update the binary NVidia drivers I'm using. There's also been a lot of updates due to "improved internationalization." Well, I don't care to upgrade when they improve support for a language I'd not even recognize. I'm glad the improvement was made, but it doesn't affect me. I want to avoid potentially breaking things.

      If it isn't broke, and you mess with it, and it breaks, you're a dumbass. Most of the updaters I've seen don't give you much to go on in deciding if it is broken in the first place.

      --
      Aah, change is good. -- Rafiki
      Yeah, but it ain't easy. -- Simba
    6. Re:The problem with MicroSoft by phoenixwade · · Score: 1

      I know what is being installed

      You know whats installed, eh? So you go through and check the source of all code that is being installed on your Linux box? I understand the idea that because it is open source, there must be no problems with what you are installing, but don't make the false assumption of this, because as Linux becomes more and more popular the chance of something getting on your system that you were unaware of will most likely grow. Everything might not always be so hunkydory. Actually, no, I don't go through all the code line by line. But, I have the OPTION of doing so, as I mentioned in my first post. However, yes, I do know what is being installed, what services are running. I choose when and if to update AND I can determine exactly what is going to be changed, and override any of those changes if I choose to.

      --
      A positive attitude may not solve all your problems, but it will annoy enough people to make it worth the effort.
    7. Re:The problem with MicroSoft by Grail · · Score: 1

      I gave up on Debian after three upgrades in a row broke my X Windows installation to the point that I had to reinstall from scratch.

      I just have bad luck it seems, and end up doing my updates when the repository is in a state of flux.

    8. Re:The problem with MicroSoft by cloakable · · Score: 1

      Which version of Debian were you using? I'm using stable, and while I'm slightly behind cutting edge, ;) I haven't have many problems in the way of stability. Certainly no breakage from updates.

      --
      No tyrant thrives when every subject says no.
  6. WTF by Ariastis · · Score: 5, Insightful

    Wasn't it for windows update to "work properly" that those patches were released? Way to go MS, foot in mouth, lather, rinse, repeat...

    1. Re:WTF by scjazz · · Score: 1

      I just erased and reloaded my brand new vista laptop. The stealth update broke Windows Update completely. Since it isn't associated with a proper patch uninstalling wasn't an option and as this is my first Vista system I couldn't copy the files.

  7. Serves them right! by HartDev · · Score: 1

    Ha ha, it is like taunting a little kid with candy telling MS not to do something like this, now as odd as it may sound I hope they keep doing stuff like this so that all the company computers where I work will have troubles and then I can help all my IT buddies install some Ubuntu!

    --
    To see a few of my Android apps goto: www.hartwired.com
  8. Been using this fix for ages. by richy+freeway · · Score: 1

    I've been using this fix since before August for other windows update problems. Did notice an increase in how often I had to use it but didn't work out why.

  9. Why did no antivirus s/w pick this up? by jkrise · · Score: 5, Interesting

    A dozen system files have been updated as part of this undocumented stealth update... and yet not a single antivirus software reported this. Why?

    How do these antivirus programs know for sure that these updates were 'harmless' and 'normal behaviour'.

    In light of this revelation, I think corporates must now take action against these antivirus firms for not preventing this breach. Let's see what Microsoft has to say to this 'harmless' update that allows users to 'know and be informed of further updates'. A Media Defender style expose' of internal communications on this issue would be very interesting indeed.

    --
    If you keep throwing chairs, one day you'll break windows....
    1. Re:Why did no antivirus s/w pick this up? by Etrias · · Score: 2, Insightful

      A dozen system files have been updated as part of this undocumented stealth update... and yet not a single antivirus software reported this. Why?
      How do these antivirus programs know for sure that these updates were 'harmless' and 'normal behaviour'.
      In light of this revelation, I think corporates must now take action against these antivirus firms for not preventing this breach. Let's see what Microsoft has to say to this 'harmless' update that allows users to 'know and be informed of further updates'. A Media Defender style expose' of internal communications on this issue would be very interesting indeed.
      Updates are run under the system user process. If you had ever been a Windows admin, you'd know that there are all sorts of ways to hide updates and the like from users...which means that there's something in the process that MS can enable to hide it from their users. The reason no AV caught it is because it was using an update service already approved by the AV program and was running it under the already accepted system user.

      I'm not saying that I approve of their actions, I don't. But just because an AV program didn't pick it up isn't surprising, nor should they have.
    2. Re:Why did no antivirus s/w pick this up? by Tsunayoshi · · Score: 1

      Good point (no mod points or you'd get some.). Unregistered system DLLs didn't flag somewhere?

      --
      "Get a bicycle. You will not regret it, if you live." - Mark Twain, "Taming the Bicycle"
    3. Re:Why did no antivirus s/w pick this up? by alexhs · · Score: 3, Informative

      A dozen system files have been updated as part of this undocumented stealth update... and yet not a single antivirus software reported this. Why? 1) Most antivirus software can only detect known viruses. They do not detect viral activity, only a numeric signature. Won't detect stealth updates, if that update doesn't match a signature.

      2) For the few behavioral antivirus software, my guess is that they're monitoring activity under some user accounts, and that they're not able to monitor activity of the "System" accounts and other special accounts.
      --
      I have discovered a truly marvelous proof of killer sig, which this margin is too narrow to contain.
    4. Re:Why did no antivirus s/w pick this up? by sqlrob · · Score: 1

      BITS has had known flaws. Why should AV give it a free pass?

    5. Re:Why did no antivirus s/w pick this up? by jkrise · · Score: 3, Interesting

      Updates are run under the system user process. If you had ever been a Windows admin, you'd know that there are all sorts of ways to hide updates and the like from users

      So, does an antivirus program run as a normal user process or system user process? If it is the latter, then how is it that the stealth update managed to escape attention??

      And if antivirus s/w firms do not know systems programming, why do they exist at all? Looks like most anti-virus programs have been configured / patched NOT TO REPORT this particular stealth update... I cannot see any other logical explanation for this lapse.

      --
      If you keep throwing chairs, one day you'll break windows....
    6. Re:Why did no antivirus s/w pick this up? by jkrise · · Score: 1

      1) Most antivirus software can only detect known viruses. They do not detect viral activity, only a numeric signature. Won't detect stealth updates, if that update doesn't match a signature.

      Every antivirus software I have seen, has this feature that prompts you when any 'write' or 'update' happens in the system folders. Try copying a dll file and the antivirus s/w throws up a window, asking for confirmation... in many cases, it is rejected outright. The logic is that any update to the system files can only be malicious in nature, since the system was behaving normally prior to these updates. This is totally different from scanning for 'signatures' in exe or com files elsewhere.

      2) For the few behavioral antivirus software, my guess is that they're monitoring activity under some user accounts, and that they're not able to monitor activity of the "System" accounts and other special accounts.

      Monitoring system accounts and special accounts is the first job of any antivirus software. Viruses, worms and trojans run with full system access, not restricted user access.

      --
      If you keep throwing chairs, one day you'll break windows....
    7. Re:Why did no antivirus s/w pick this up? by Etrias · · Score: 5, Informative

      So, does an antivirus program run as a normal user process or system user process? If it is the latter, then how is it that the stealth update managed to escape attention??

      And if antivirus s/w firms do not know systems programming, why do they exist at all? Looks like most anti-virus programs have been configured / patched NOT TO REPORT this particular stealth update... I cannot see any other logical explanation for this lapse
      Like I mentioned, it seems that you have not ever been a Windows admin, nor have ever dealt with a large roll-out of a system patch.

      Whether or not the AV program runs under a user process (highly unlikely) or a system process, it doesn't matter. You're ignoring what AV programs are looking for anyway. If a trusted process and service (windows update) run by a trusted user (SYSTEM), the chances that the AV program is even going to log such activity is doubtful. As far as the AV program is concerned, the service (Windows Update) is doing it's job...which in a way, it is. Windows Update has the control to change system files. No big secret there.

      You seem to think that every time a system file gets updated by whatever process, that should be flagged and prevented. It's not some rogue program that is being run to update the files, it's the WU service that's on every single XP (and other MS OS's) machine out there.

      Like I said, I'm not defending MS on this...no one I bitch about more. But to say that the AV companies have culpability on this, that's off the mark. A trusted Windows service did what it was built to do. Nothing to see here. Move along.
    8. Re:Why did no antivirus s/w pick this up? by Anonymous Coward · · Score: 0

      If problem Microsoft code was caught by virus checkers then no Microsoft operating system would ever boot.

    9. Re:Why did no antivirus s/w pick this up? by Etrias · · Score: 5, Insightful

      Monitoring system accounts and special accounts is the first job of any antivirus software. Viruses, worms and trojans run with full system access, not restricted user access.
      If a virus or trojan has that access already, you're screwed anyway. Might as well wipe the box and start over. However, to get that access, they usually need an exploit or to run an executable to grant them that access.

      I don't think you have a very good understanding of what a virus program is expected to do. If a system account isn't allowed the power to update system files, then why have it in the first place?
    10. Re:Why did no antivirus s/w pick this up? by Etrias · · Score: 1

      I know that BITS had some flaws, though I can't remember them right now...if you could provide info on that, it's appreciated. :-)

      But BITS is essentially a downloading program where Windows Update is there to...update Windows. Updating system files is a part of it's M.O. (modus operandi, for those not in the know).

    11. Re:Why did no antivirus s/w pick this up? by sqlrob · · Score: 1

      And it uses BITS, IIRC. Which means you definitely have the potential to install bogus updates. *NOTHING* should get a free pass.

    12. Re:Why did no antivirus s/w pick this up? by Anonymous Coward · · Score: 0

      "The reason no AV caught it is because it was using an update service already approved by the AV program and was running it under the already accepted system user."

      I don't do Windows so I'm no help but how about telling people what port these updates happen on so people can configure their firewall/routers to drop or block in/out traffic on that port until they are ready to do the updates themselves.

    13. Re:Why did no antivirus s/w pick this up? by jkrise · · Score: 1

      As far as the AV program is concerned, the service (Windows Update) is doing it's job...which in a way, it is. Windows Update has the control to change system files. No big secret there.

      I think you have it backwards. The job of Windows Update is (supposedly) to patch the system in order to keep it in a secure, useful state. Which is precisely the definition of an antivirus software too. If Windows Update can reliably patch the OS and keep it secure, there would be no market for any antivirus software.

      Therefore, any antivirus program can only trust itself, not even Microsoft.. insofar as updating / modifying files that affect system behaviour is concerned.. for instance dll files, and other 'system' files. This is an elemntary function of any antivirus program, which is why if I log in as 'administrator' and even try to copy a dll file, I get a warning message from the antivirus software.

      You seem to think that every time a system file gets updated by whatever process, that should be flagged and prevented. It's not some rogue program that is being run to update the files, it's the WU service that's on every single XP (and other MS OS's) machine out there.

      Yes. Every time a system file is updated by any other program than the antivirus program itself, it should be flagged, and the user made aware of this updation. Else the antivirus is broken.

      What if the WU service itself is the ROGUE PROGRAM?

      --
      If you keep throwing chairs, one day you'll break windows....
    14. Re:Why did no antivirus s/w pick this up? by jonwil · · Score: 1

      The files in question are signed with Microsoft's own digital signature. Ergo (assuming no-one has stolen the signing files somehow and assuming no-one has been able to install a fake certificate by stealth) the files are genuine and are not viruses.

    15. Re:Why did no antivirus s/w pick this up? by Etrias · · Score: 1

      And how do you propose to do updates if the AV flags every system update? What MORE can the AV program do? Windows has chosen this way to update their files. The AV doesn't care if Windows Update tells the user if it's okay to install the program. All it cares about is that what is being done is happening with a trusted service by a trusted user.

      As far as I remember, BITS had an exploit that was patched when discovered. Not saying that it can't have more or less, but how do you propose that updates get installed on Windows, because MS isn't giving you any options. What exactly are the AV companies supposed to do then? Stop WU from doing it's job? You'll have system admins going nuts because their scheduled roll-outs are being stopped by the AV program.

      Ugh, I hate doing this...makes me sound like a MS apologist.

    16. Re:Why did no antivirus s/w pick this up? by walt-sjc · · Score: 1

      Actually, the reason that AV software doesn't pick this shit up is TOTALLY different than what you claim.

      The reason AV software doesn't pick this crap up is that the current crop of AV software uses a BLACKLIST based model and not WHITELIST based model. Since AV software is blacklist based, there IS NO "trusted" anything. Once they move to a whitelist model, THEN we can start talking about what is "trusted" and what is not.

    17. Re:Why did no antivirus s/w pick this up? by Etrias · · Score: 1

      If WU is a rogue program, your machine is compromised. Wipe and start over.

      Just try to go with me on this and pretend your a system admin of about, oh, say a small-medium company of around 500 users. You have your brilliant AV that tells the user at every time any process or user (system or otherwise) tells you of updated system files. Well, get ready for the flood, because besides every update you want to push to your users, they call in and hammer your help desk for a week with calls about an alert that their "system files were changed" every patch Tuesday (if you do automatic updates) or every time that you need to push a critical update to the users. These ALWAYS affect system files. Not to mention that there are some system files that are altered every day. What then?

      Well, what if you leave it up to the users to install your critical updates? Nope. They never do. The worst threat a sys-ad has is not from the outside, but it's what your users do...or don't do in a lot of cases. Casual users just do see the need to install an update because then they have to reboot, and God forbid if they do that.

      MS was wrong by not publishing this update, for not allowing their users the choice to install or not install this update. But saying that AV companies are liable for what is clearly a MS problem is ridiculous. Again, this is MS's fault.

    18. Re:Why did no antivirus s/w pick this up? by sqlrob · · Score: 1

      If the files themselves aren't signed by MS and are going into the system directories, the AV should damn well flag it. Even if it's signed, there needs to be version checks. Corrections can be added to later signatures, and if you're doing scheduled rollouts, you would've done the testing that would've showed the AV problem in the first place.

    19. Re:Why did no antivirus s/w pick this up? by Etrias · · Score: 2, Interesting

      Ah yes, good point. But still moot as Windows Update would end up being on the trusted list almost immediately.

      However, turning that around, Windows Update isn't on the blacklist. Why should it be logged as changing the files? Even AV programs that do heuristic scanning aren't really going to notice WU doing it's job.

    20. Re:Why did no antivirus s/w pick this up? by Alari · · Score: 1

      AVG tracks changes to system files in that it will report which system files have changed since the last full scan, though it won't have any specific information as to why.

      (as mentioned by others, most AV programs look for virus activity and wouldn't report this, though I think a few others besides AVG can be configured to show various alarms when system files are changed)

      --
      I use Windows... like a two dollar wh.. why don't I just go ahead and not finish that sentence.
    21. Re:Why did no antivirus s/w pick this up? by Etrias · · Score: 1

      I think the best you can hope for this is an optional log file generated from the AV program. Why optional? Because anything that logs changes in system files is 1) going to eat away a tiny chunk of your CPU, which may not be a big deal, but 2) end up having a massive, bloated, quickly enlarging log file on your drive.

    22. Re:Why did no antivirus s/w pick this up? by jkrise · · Score: 1

      If WU is a rogue program, your machine is compromised. Wipe and start over.

      Unfortunately, following your advice is impossible. The official WU program that is shipped with a Genuine Copy of Windows XP and Vista has been proved to be a Rogue Program by this episode. The only reliable protection appears to be, to disable Windows Update completely, and depend on the antivirus program to do a better job of protecting and securing the system.

      Just try to go with me on this and pretend your a system admin of about, oh, say a small-medium company of around 500 users.
      I was indeed a sysadmin of a company that had just over 500 users, and as I remember, we initially had WSUS setup to do these updates over the network. After chaotic times, we got Symantec's antivirus program; and we disabled Auto Updates completely on every single desktop. Had I continued in that position, I think I'd have been Vice President - Enterprise Antivirus or something similar by now.

      You have your brilliant AV that tells the user at every time any process or user (system or otherwise) tells you of updated system files. Well, get ready for the flood, because besides every update you want to push to your users, they call in and hammer your help desk for a week with calls about an alert that their "system files were changed" every patch Tuesday (if you do automatic updates) or every time that you need to push a critical update to the users. These ALWAYS affect system files. Not to mention that there are some system files that are altered every day. What then?

      This scenario is purely hypothetical, because the Auto Updates would be disabled, and the patches would be pre-aproved by Symantec, and deployed through THEIR PROGRAM, not Windows Update. I don't recall the name of this program though... it's been a while since I left.

      --
      If you keep throwing chairs, one day you'll break windows....
    23. Re:Why did no antivirus s/w pick this up? by Anonymous Coward · · Score: 0

      Exactly! Windows isn't (officially) considered a virus. ;)

    24. Re:Why did no antivirus s/w pick this up? by rbanffy · · Score: 1

      "Updates are run under the system user process. If you had ever been a Windows admin, you'd know that there are all sorts of ways to hide updates and the like from users...which means that there's something in the process that MS can enable to hide it from their users. The reason no AV caught it is because it was using an update service already approved by the AV program and was running it under the already accepted system user."

      Besides that, no AV can detect a process started by the undocumented MSOnlyStartStealthProcess call. ;-)

    25. Re:Why did no antivirus s/w pick this up? by pohl · · Score: 1

      If a virus or trojan has that access already, you're screwed anyway. Might as well wipe the box and start over.

      True, but if the write is not detected and reported to the user, the user can't know that it's time to wipe & reinstall. In my opinion, anti-malware software should be expected to do that detection and reporting -- although I agree that "anti-virus" software is too narrow a genre for the sake of this discussion.

      Still, I think the orginal question still stands. In the UNIX world, for example, software like tripwire does exactly what the original poster desired: detects and reports writes to system files that only root can write. Why isn't the anti-malware industry on Windows, which is so much more mature by necessity (one would think) able to raise a flag when something like this happens?

      --

      The "cue the foo posts in 3, 2, 1..." posts will commence with no subsequent foo posts in 3, 2, 1...

    26. Re:Why did no antivirus s/w pick this up? by Etrias · · Score: 1

      Unfortunately, following your advice is impossible. The official WU program that is shipped with a Genuine Copy of Windows XP and Vista has been proved to be a Rogue Program by this episode. The only reliable protection appears to be, to disable Windows Update completely, and depend on the antivirus program to do a better job of protecting and securing the system.
      *sigh* I'm not sure that AV companies want to bring the wrath from the beast from Redmond if they flag their update system as rogue software. If Windows updates its systems through WU, then that's how MS wants it done...unless you want to install everything manually or write a script for every patch that comes out.

      I was indeed a sysadmin of a company that had just over 500 users, and as I remember, we initially had WSUS setup to do these updates over the network. After chaotic times, we got Symantec's antivirus program; and we disabled Auto Updates completely on every single desktop. Had I continued in that position, I think I'd have been Vice President - Enterprise Antivirus or something similar by now.
      WSUS still uses the WU service for deploying the update...so I'm not really seeing the point of this, but keep reading.

      This scenario is purely hypothetical, because the Auto Updates would be disabled, and the patches would be pre-aproved by Symantec, and deployed through THEIR PROGRAM, not Windows Update. I don't recall the name of this program though... it's been a while since I left.
      There are a number of programs that do this, ZenWorks and Patchlink come to mind. Problem is still this. It makes little sense for AV companies to flag a major component of Windows as rogue software, especially when MS promotes WSUS 3.0 or SMS. Turning off WU will be the solution for some, but not for all. I would argue not even for most people, companies, etc. Most will want to use it's functionality.

      The problem still lies with Microsoft for pushing a stealth update and not telling anyone. I still am not sure why AV companies would be culpable for this at all.

      I think we'll just have to agree to disagree.
    27. Re:Why did no antivirus s/w pick this up? by DrgnDancer · · Score: 2, Insightful

      You're asking for a nightmare... Can you imagine trying to do a big update (say a service pack) with your AV flagging every single file? You'd spend days clicking "Yes, install the File"The AV assumes that WU is updating Windows... It's what Windows Update does, the alternative would be to never get anything done as your AV tries valiantly to block every update MS puts out.

      --
      I don't need a million points of light, just two points of multi-mode fiber and a 10 Gig-E router.
    28. Re:Why did no antivirus s/w pick this up? by Drgnkght · · Score: 1

      Because that would completely defeat the whole purpose of doing these types of updates on the sly. Microsoft doesn't want you to be able to block them. (Which is, of course, the problem.)

      Or did you mean why doesn't some good samaritan do this? It be far easier to just install a decent firewall and block everything that isn't on a whitelist. (Nothing on my one Windows machine can access the web by default. And the windows services are flat out denied access to the network.)

    29. Re:Why did no antivirus s/w pick this up? by Tuoqui · · Score: 1

      Media Defender-like exchange?

      Bill Gates: Ok so we need to get everyone to start using Vista so we can take over the world.
      Steve Ballmer: Gimme a few more chairs, I'll solve all our problems!
      Finance Guy: But we've already gone through the chair budget twice...
      Programmer: Why dont we just break Windows Update for XP?
      Bill Gates: Brilliant Idea!
      Steve Ballmer: Super, and I dont need to throw any chairs. Lets do it!
      Legal Guy: Wont that get us sued?
      Bill Gates: Who's gonna sue us? We're Microsoft!

      --
      09F911029D74E35BD84156C5635688C0
      +2 Troll is Slashdot's way of saying groupthink is confused
    30. Re:Why did no antivirus s/w pick this up? by illumin8 · · Score: 1

      You seem to think that every time a system file gets updated by whatever process, that should be flagged and prevented.
      As well it should. If I install a Redhat patch in the form of an RPM, or a Solaris patch, I can first scan the contents of the patch file and know *exactly* which files will be updated or replaced by the patch.

      The fact that Windows updates hide this information until after they are installed (and have potentially already done their damage) should tell you right there why Windows is not an enterprise operating system.
      --
      "When the president does it, that means it's not illegal." - Richard M. Nixon
    31. Re:Why did no antivirus s/w pick this up? by sjames · · Score: 1

      I suppose there's a certain twisted sense here. MS consideres ALL users and processes but their own untrusted (otherwise, why would Vista have processes to make sure the user didn't tamper with other processes that make sure the user didn't tamper with the video output). As I think about it, MS treats the user and all user commands as a virus and goes further than any previous AV softwre to block them. Perhaps I exagerate slightly .

      Back to reality, anyone who would even briefly consider using AV sofware to protect them from their OS vendor REALLY needs to think long and hard about why they are trusting the OS AT ALL! It was designed and developed with exactly the same cavalier attitude towards the users wishes , security, and stability that the stealth update demonstrates.

      I'm convinced the new MS ad campaign should be Bill Gates holding a football while Charlie Brown runs headlong towards it. The new "Microsoft sound" should be AUUUUUUUGHHH...THUMP!

    32. Re:Why did no antivirus s/w pick this up? by Intrinsic · · Score: 1

      This is why I use a firewall with sandbox technology. I never allow any service on my system to make changes to my OS without warning me first. And I never use Windows Update. If I have to install a patch (which is not usually the case because my system is pretty secure) I do it manually from the executable. and I am able to revert changes if it messes shit up.

    33. Re:Why did no antivirus s/w pick this up? by Lord+Artemis · · Score: 1

      What firewall is this? I'd like to give that a try.

      --
      Air is just like fog, but it's not gray.
    34. Re:Why did no antivirus s/w pick this up? by Intrinsic · · Score: 1

      Tiny Personal Firewall, but its been taking over by Computer Associates, so you cant buy it anymore.. Their are other firewall replacements out there with sandbox technology for windows, but they are buggy as hell.

  10. Whoa! by Anonymous Coward · · Score: 0

    My PC dual-boots XP and Mandriva. I've set it to default to Windows, because windows boots over and over, sometimes for hours, before it finally relents and comes to life. I've suspected a BIOS setting it doesn't like, or that Windows wants its own FAT instead of LILO, but could it be that Windows is trying to phone home, even though my internet access has been shut off for a couple of months? Even though it's a fresh install and the PC hasn't been connected to the internet since before the install?

    And do thay have any idea what a pain in the ass it is to "register" that God damned OS without internet access? If I could get the S-Video out to work with Linux, XP would be history on my PC.

    I only hate Microsoft because I've used their shitty programs and operating systems. Funny, their stuff was pretty good fifteen or twenty years ago! I loved DOS 6.2!

    -mcgrew

    1. Re:Whoa! by mattgreen · · Score: 1

      Er, hate to break up your little rant but did you ever try actually troubleshooting your Windows problem? As in, checking the event log and other places to see why it restarted?

    2. Re:Whoa! by tdos20 · · Score: 0

      You might want to check your /etc/X11/xorg.conf for a way to get your s-video out to work (also depends on what brand of video card you have so see the driver documentation)

  11. Have to get away from the "patch" concept by dpbsmith · · Score: 4, Interesting

    I'm not sure what the answer is, but someone has got to work out better technology for designing and updating operating systems. For thirty years now, we've had operating systems that only work as perfect integrated wholes, and operations called "installation" and "uninstallation" and "updates" and "patches" which are basically ad-hoc processes for which the operating system offers relatively little support.

    Everything depends on everything else. After a few years of updates and software installation, whether on Windows or Mac OS X (no, I can't speak to Linux so if Linux solves all these problems I plead ignorance), almost every system is in a slightly broken state, and you just hope it isn't intolerably broken. Talk to any average mom 'n dad and they'll say "Things that used to work fine on our computer aren't working any more, I guess it's just time to buy a new computer."

    Some new way of building operating systems is needed that reduces the interdependence of its components.

    1. Re:Have to get away from the "patch" concept by i.r.id10t · · Score: 1

      I've been stuck in RPM hell, but I've never had an issue upgrading Slackware from one version to the next, or Debian. Of the two, Debian is my choice for the nice things that apt does for me...

      --
      Don't blame me, I voted for Kodos
    2. Re:Have to get away from the "patch" concept by themassiah · · Score: 1

      By doing this, unfortunately, you will also reduce the interoperability of the systems or introduce great gobs of bloat. These interoperability hooks assume certain things that can only (easily) be ascertained by precognition of the sytem at hand.

      --
      - Sometimes you're the pidgeon, sometimes you're the statue.
    3. Re:Have to get away from the "patch" concept by MobyDisk · · Score: 2, Interesting

      IMHO, this is what package managers solve, and Microsoft still hasn't gotten the idea right. In the Windows world, applications just drop files wherever they want and that's an install. In Linux using rpm or deb packages, every file on the system is part of a master database that indicates what package it is a part of, and what the interdependencies are. So long as everyone creates proper packages, these problems go away.

      The down side is that many packages aren't created properly, which results in rpm hell like as-in dll hell. But done properly, it is utopia. (Properly -- No source code packages, no packages with incorrect version numbering like "2.0alpha" comes before "2.0", no "this package depends on a dozen files in some absurd directory that only appears in my distro")

    4. Re:Have to get away from the "patch" concept by vtcodger · · Score: 1
      ***Everything depends on everything else.***

      I can see why you would think that, but I'm not sure that it is true. It is true that the user interface level in graphical software is an intricate structure whose interactions are complex and difficult to follow. It might be just barely possible to untangle Windows 95 and see how the parts fit together. I spent a couple of years trying and I think I was making progress. Windows 98, NT, and (from what I can see Apple software) are simply beyond my comprehensiojn and I think beyond most people's.

      After a few years of updates and software installation, whether on Windows or Mac OS X ... almost every system is in a slightly broken state, and you just hope it isn't intolerably broken. Talk to any average mom 'n dad and they'll say "Things that used to work fine on our computer aren't working any more, I guess it's just time to buy a new computer."

      Ayupp. That's a problem OK. Example, A little utility program on Windows called Neutron that reads time from a network time server and sets the computer clock simply quit working a few weeks ago -- apparently for all users anywhere -- on all versions of Windows -- and with all NTP servers not just time-nw.nist.gov. No one seems to have the slightest idea why. Other similar programs for Windows or Linux still work.

      Problem is that buying a new computer doesn't necessarily fix the problems.

      ***(no, I can't speak to Linux so if Linux solves all these problems I plead ignorance), ***

      It has the same problems (and worse), but the layering and interactions of the programs are more visible. Bad documentation (and some Unix documentation gives new meaning to the word awful) trumps no documentation every time.

      --
      You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey
    5. Re:Have to get away from the "patch" concept by mollymoo · · Score: 3, Interesting

      Package managers do not solve the problem, they just handle most of the hassle for you. If anything, they exacerbate the problem by encouraging the very interdependencies they are necessary to handle. I'm not much of a fan of the shared library concept for anything other than "system" files (for a fairly broad definition of "system") because of the installation and "maintenance" hassles they create. You may have a dozen programs which use a particular library, but do you ever run them all at once? Probably not. So just keep a dozen copies on disk; that way they can all be different versions if needs be. Occasionally you'll get two copies of essentially the same code in RAM, but library code generally isn't usually the bulk of your RAM usage. Once you get rid of the idea of sharing files between programs your software installation worries cease to exist, because installation ceases to exist. You just have one executable blob which you can copy anywhere. A good proportion of Mac applications work this way and trust me, it beats the shit out of apt, portage or any other package manager I've tried. It takes almost zero user effort. Zero maintenance. It is hugely reliable.

      --
      Chernobyl 'not a wildlife haven' - BBC News
    6. Re:Have to get away from the "patch" concept by cupcakewalk · · Score: 1

      Talk to any average mom 'n dad and they'll say "Things that used to work fine on our computer aren't working any more, I guess it's just time to buy a new computer."
      That's what I see with my clients. It's cheaper and easier to just buy a new computer. As most of us know, the average XP user doesn't need a new computer. But Microsoft needs sales. Screw up the old one so that people will buy the new one? Doesn't work for me.
      I'm switching to Mac and skipping the Vista of today.
      --
      -J
    7. Re:Have to get away from the "patch" concept by DrgnDancer · · Score: 1

      It's also part of the reason that my Mac is forever short of space. I won't claim that the gigabytes of music aren't part of it too, but my Applications folder is nearly 15G, along with over 2G for the Xcode folder (why that's not an "application" I've never figured out). I'm willing to bet that a good portion of that is in libraries that could be shared.

      --
      I don't need a million points of light, just two points of multi-mode fiber and a 10 Gig-E router.
    8. Re:Have to get away from the "patch" concept by baadger · · Score: 1

      Yeah thats a great idea, so when there is a critical remotely exploitable vulnerability in say... OpenSSL which is used by hundreds of projects and compiled statically I may have to download hundreds upon hundreds of megabytes to fix the problem and wait for 100's of developers to wake up and patch the issue in their tree.

      No thanks.

      Shared libraries work as long as developers document and think carefully before publishing their API's and are open to patches from downstream users.

    9. Re:Have to get away from the "patch" concept by MobyDisk · · Score: 2, Interesting
      This is interesting - I've wanted to have this discussion with someone. While I agree with your reasoning on shared -vs- static libraries, I don't agree your estimation of the impact of static libraries.

      because of the installation and "maintenance" hassles they create. One big savings of shared libraries is that if a vulnerability is fixed in libpng, you don't have to update 25 apps. And the authors of those apps don't have to repackage their app. And old projects that aren't in active development can still take advantage of the security fixes. Same with performance improvements and bug fixes. It saves a lot of redundant updating.

      This is also why I preface the discussion with "proper" packaging. I encounter lots of packages that have incorrectly stated dependencies. If I recall, every rpm/apt problem I ever had could be traced down to some package that stated a dependency incorrectly. Like it requires an exact version of a particular library when it really didn't. Or a library was made incompatible in an update, but the version number was not incremented by a whole number (Ex: version 1.02 is not compatible with 1.01 so all apps saying they need 1.0 or above break).

      You may have a dozen programs which use a particular library, but do you ever run them all at once? Probably not. My guess is "most of the time" -- I'm using Windows right now, but let' see what I'm running: Firefox, Mozilla, Trillian, Notepad, Skype, Virtual PC, Zone-Alarm, a VPN client, a volume meter, an anti-virus program, Visual Studio, RapidSVN, Photoshop, a SQL server... My guess is that all of those share at least the C/C++ runtimes. Probably also share 2 dozen Windows API DLLs. COM libraries are common. Half of them use libpng, libjpg, etc. There's a lot of re-used libraries there.

      So just keep a dozen copies on disk; that way they can all be different versions if needs be. I agree that disk space isn' t really a big deal. Graphics and icons usually take more space than code. But the packaging solutions we are discussing allow you to have multiple different versions in place at once. In Windows with DLLs, this is hard, but on Linux it is very easy since the library version is in the file name and symlinks + intelligence in ld can make things bind to whatever version they need.

      Overall, I think you underestimate the number of shared libraries each application uses. That measurement is really what would make the tipping point on this point. If the memory savings is minimal, and I didn't require updating too many apps when a bug was fixed, and if old apps could somehow be magically updated... then yeah, static libraries would be better.
  12. Only repaired? by Aladrin · · Score: 1

    If I'm reading this right, the problem is that the patch gets applied out of sequence if you 'repair' from the original CD.

    Would the same issue not happen if you just installed from the CD from scratch? What prevents it from installing out of order when you do it that way?

    Seems pretty serious either way, and it has me wishing I'd turned off the automatic update service on my only Windows PC. It's too late now, but you can bet it won't get internet access until after that's disabled when I format that machine next.

    --
    "If you make people think they're thinking, they'll love you; But if you really make them think, they'll hate you." - DM
    1. Re:Only repaired? by Anonymous Coward · · Score: 0

      You're not reading it right. Maybe you should RTFA before posting.

    2. Re:Only repaired? by Sczi · · Score: 0

      Seems pretty serious either way, and it has me wishing I'd turned off the automatic update service on my only Windows PC. It's too late now, but you can bet it won't get internet access until after that's disabled when I format that machine next.

      I think part of the compaint with this one is that it installs even with the update service was off.. well, depending on how far you go with turning it off. If you literally disable the service instead of just telling it not to update, that might do it. I seem to recall reading in the thread that it was a fairly persistent update.

      Here's the original in case you missed it.. lots of info in the thread: http://it.slashdot.org/article.pl?sid=07/09/15/2040259

  13. I've run into this and the fix isn't hard. by domatic · · Score: 4, Informative

    I ran into this a couple of weeks ago. When the attempt to use update.microsoft.com fails, the "troubleshooter" will direct you to a Knowledge Base article that advises you to do the following:

    At the command prompt, type the following commands, press ENTER after each command, and then click OK every time that you receive a verification message: regsvr32 wuapi.dll
    regsvr32 wuaueng1.dll
    regsvr32 wuaueng.dll
    regsvr32 wucltui.dll
    regsvr32 wups2.dll
    regsvr32 wups.dll
    regsvr32 wuweb.dll


    Once that is done, you'll be able to use Microsoft Update again.

    1. Re:I've run into this and the fix isn't hard. by ColdWetDog · · Score: 2, Funny

      Oh good and thanks. I'll call up my mom and tell her to do just that to her machine.

      --
      Faster! Faster! Faster would be better!
    2. Re:I've run into this and the fix isn't hard. by Anonymous Coward · · Score: 0

      I guess the point is that the user shouldn't have to do this after an update.

    3. Re:I've run into this and the fix isn't hard. by Anonymous Coward · · Score: 0

      So will Windows weenies stop complaining about Unix
      having obscure command-lines and plain text configuration
      files now?

      Thought not.

    4. Re:I've run into this and the fix isn't hard. by domatic · · Score: 1

      If you want to make it really easy for her, cut and paste those into a fix_update.cmd file. Tell her to run that and to just keep pressing OK until it is done.

    5. Re:I've run into this and the fix isn't hard. by radarsat1 · · Score: 5, Funny

      "But at least Windows doesn't require you to go to the terminal and type cryptic and scary commands just to fix little problems..."
      - oft-heard criticism of Linux

    6. Re:I've run into this and the fix isn't hard. by Anonymous Coward · · Score: 0

      But you don't have to go to the terminal (command prompt). Just create a batch file for family or friends, give it to them, have them double click, done. If someone is concerned that it might be blocked as an email attachment, just rename it with a DOC extension, and it is easy to do a Save As from the E-mail client once it has been received.

    7. Re:I've run into this and the fix isn't hard. by mcmonkey · · Score: 2, Informative

      I ran into this a couple of weeks ago. When the attempt to use update.microsoft.com fails, the "troubleshooter" will direct you to a Knowledge Base article [microsoft.com] that advises you to do the following:

      Go to http://windizupdate.com/ with a supported (non-IE) browser.

      Once that is done, you'll never have to use Microsoft Update again.

      That's something you can tell your grandmother over the phone.

    8. Re:I've run into this and the fix isn't hard. by Anonymous Coward · · Score: 0

      Create a file called fix.bat, paste the following into it then save the changes:

      @echo off
      regsvr32 /s wuapi.dll
      regsvr32 /s wuaueng1.dll
      regsvr32 /s wuaueng.dll
      regsvr32 /s wucltui.dll
      regsvr32 /s wups2.dll
      regsvr32 /s wups.dll
      regsvr32 /s wuweb.dll

      Now simply double click the file to apply the fix. No prompts, no confusing messages, just a brief view of the command prompt.

    9. Re:I've run into this and the fix isn't hard. by berashith · · Score: 2, Funny

      wow, what a great idea. I think I am going to find a way to create list of commands that can be run instead of having users type the commands themselves. I will call this scripting. You windows people think of everything.

    10. Re:I've run into this and the fix isn't hard. by z0idberg · · Score: 5, Funny
      reminds em of this little ditty:

      from here: http://bash.org/?464385
       

      @insomnia >>it only takes three commands to install Gentoo

      @insomnia >>cfdisk /dev/hda && mkfs.xfs /dev/hda1 && mount /dev/hda1 /mnt/gentoo/ && chroot /mnt/gentoo/ && env-update && . /etc/profile && emerge sync && cd /usr/portage && scripts/bootsrap.sh && emerge system && emerge vim && vi /etc/fstab && emerge gentoo-dev-sources && cd /usr/src/linux && make menuconfig && make install modules_install && emerge gnome mozilla-firefox openoffice && emerge grub && cp /boot/grub/grub.conf.sample /boot/grub/grub.conf && vi /boot/grub/grub.conf && grub && init 6

      @insomnia >>that's the first one
    11. Re:I've run into this and the fix isn't hard. by Anonymous Coward · · Score: 0

      Wow, I think just about everyone on Slashdot knows what scripting is. I believe the GP point was to show that you don't have to go to a command prompt, as the GGP was trying to insinuate.

    12. Re:I've run into this and the fix isn't hard. by Corporate+Troll · · Score: 1

      Just hope she doesn't use hotmail or some other email service that removes anything that looks remotely like an executable.

    13. Re:I've run into this and the fix isn't hard. by Anonymous Coward · · Score: 0

      If you want to make it really easy for her, just cough up for a Mac. Or try Kubuntu or Xubuntu.

    14. Re:I've run into this and the fix isn't hard. by Spy+der+Mann · · Score: 1

      "But at least Windows doesn't require you to go to the terminal and type cryptic and scary commands just to fix little problems..." - oft-heard criticism of Linux

      Yeah, but this isn't a "little problem" so your criticism doesn't apply. HAH! See? One point for Microsoft! oh, wait...

    15. Re:I've run into this and the fix isn't hard. by Ephemeriis · · Score: 3, Interesting

      "But at least Windows doesn't require you to go to the terminal and type cryptic and scary commands just to fix little problems..."
      - oft-heard criticism of Linux

      Yeah... At least with Linux you know you're probably going to be messing around at the command prompt. I don't know how many times I've had a Windows machine do something odd, gone looking through the GUI for the magic checkbox that will fix things, only to eventually discover (through technical support or a KB article) that there's a command-line fix that isn't documented anywhere.

      Frankly... These days I'm using the command prompt on my Windows machine just as often as I do on my Linux machine.
      --
      "Work is the curse of the drinking classes." -Oscar Wilde
    16. Re:I've run into this and the fix isn't hard. by Alari · · Score: 1

      So this problem with Windows Update is new? Because my "fix fucking windows update.bat" file on my thumb drive is dated June 2007... I had a few more in mine:

      regsvr32 wuapi.dll
      regsvr32 wuaueng.dll
      regsvr32 wuaueng1.dll
      regsvr32 wucltui.dll
      regsvr32 wups.dll
      regsvr32 wups2.dll
      regsvr32 wuweb.dll
      regsvr32 msxml3.dll

      --
      I use Windows... like a two dollar wh.. why don't I just go ahead and not finish that sentence.
    17. Re:I've run into this and the fix isn't hard. by Anonymous Coward · · Score: 0

      The solution would work equally well to solve these CLI issues in Linux as well as Windows, not?

    18. Re:I've run into this and the fix isn't hard. by wezeldog · · Score: 1

      Also: Be sure to change the subject to something like "A Mate Has Sent You A Greeting Card"...

    19. Re:I've run into this and the fix isn't hard. by ColdWetDog · · Score: 1

      If you want to make it really easy for her, cut and paste those into a fix_update.cmd file. Tell her to run that and to just keep pressing OK until it is done.

      Yeah, I could do that. That would ruin the joke though (as lame as it was). I would have better success if I integrated it into a new cursor or toolbar.

      --
      Faster! Faster! Faster would be better!
    20. Re:I've run into this and the fix isn't hard. by ozmanjusri · · Score: 1
      Go to http://windizupdate.com/ with a supported (non-IE) browser.

      What does it do? I have NoScript, and there's no way I'm turning it on for a site that doesn't explain itself.

      --
      "I've got more toys than Teruhisa Kitahara."
    21. Re:I've run into this and the fix isn't hard. by Anonymous Coward · · Score: 0

      What's this extension thingie you're talking about? All I see is a word file.

      (Windows hides file extensions by default)

    22. Re:I've run into this and the fix isn't hard. by Ticklemonster · · Score: 1

      ... huh. It just dawned on me that in all actuality there's no operating system that "just works".

      --
      Karma: Bad is the liberal way of saying this guy won't drink the kool aid here on slash dot. I wear my Karma with pride
    23. Re:I've run into this and the fix isn't hard. by lordtoran · · Score: 1

      That's what shell scripts are for (or at least one of their many possible uses).

      --
      Want to hear the voice of GOD? cat /boot/vmlinuz > /dev/dsp
    24. Re:I've run into this and the fix isn't hard. by Anonymous Coward · · Score: 0

      Well that answers one of my questions.

      About ~2 weeks ago, a WinXP machine in our domain failed to run Windows Update. Gave me errors to search on, but ultimately had to report it to Microsoft and open a trouble ticket. Turns out it required to run 'regsvr32' on several of the dll's you listed above, to get it back to functional.

      From my POV, their 'silent patch' broke Windows Update, something they tout as the MUST ALL HAVE to keep windows safe on the big bad internets.

      With so many different windows config's that exist in the computing world today, you'd think they would do a bit more testing on a patch they plan on 'silently' distributing. Or perhaps, the point was NOT TO.

    25. Re:I've run into this and the fix isn't hard. by Anonymous Coward · · Score: 0

      Until they sign their browser plugin and anything else they install, I'm staying way the hell away from them.

      No sane person would use this service in a business. MS's update service is not perfect, but its a lot easier to claim due diligence should some IT disaster happen than use a no-name third party service. Those two words "due diligence" can mean the difference in having accounting write off a tax loss, versus IT and corporate officers facing prison time, and major lawsuits by shareholders.

    26. Re:I've run into this and the fix isn't hard. by wanderingknight · · Score: 1

      Yeah! There is no such thing as bash scripts in the Linux world! Oh wait...

    27. Re:I've run into this and the fix isn't hard. by archen · · Score: 1

      Just be thankful you didn't have to endure the "Enter random binary crap into regedit" type fix =P

    28. Re:I've run into this and the fix isn't hard. by wanderingknight · · Score: 1

      In my experience, the Windows command line (and the DOS commands in general) is kind of clunky. Not to mention the fact that backslashes suck.

    29. Re:I've run into this and the fix isn't hard. by shr3k · · Score: 1

      If you use the "/s" flag, then you won't need to hit 'ok' everytime. It will apply the changes without needing confirmation, so it should go a little faster.

      e.g., regsvr32 /s file.dll

    30. Re:I've run into this and the fix isn't hard. by fritsd · · Score: 1
      I think you missed a 't' on line 2

      On the other hand, I've never used Gentoo (how many days does that "emerge gnome mozilla-firefox openoffice" take?)

      --
      To be, or not to be: isn't that quite logical, Slashdot Beta?
    31. Re:I've run into this and the fix isn't hard. by Anonymous Coward · · Score: 0

      Doesn't regsvr have a /q option for no notification? That would make it a simple 'run this'. Assuming you can email her the batch file anyway

      Posted anon as I have mod points

    32. Re:I've run into this and the fix isn't hard. by gutnor · · Score: 1

      "only to eventually discover (through technical support or a KB article) that there's a command-line fix that isn't documented anywhere"

      If you find it in the KB, that means it is documented at the place where it should be documented

      Well - was just nitpicking :-) As a developer, I also spent a fair amount of time in the (archaic) command prompt. I had to use some of those mysterious fixes that were (god knows why) never rolled out in a patch or SP.

    33. Re:I've run into this and the fix isn't hard. by mcmonkey · · Score: 1
      No sane person would use this service in a business.

      I agree 110%. But for personal use, it's a way to keep my XP systems patched without installing WGA.

  14. Re: Broken Process by TaoPhoenix · · Score: 5, Funny

    Maybe they forgot to rinse.

    The lather-repeat caused a buffer overflow.

    --
    My first Journal Entry ever, in 8 years! http://slashdot.org/journal/365947/aphelion-scifi-fantasy-horror-poetry-webzine
  15. I got bitten by this by arkhan_jg · · Score: 4, Interesting

    I'm actually in the process of upgrading a windows 2000 image to XP Pro (no, it can't be a clean install, it's a long and dull story), and got bit by this bug. When I searched for the error number associated with the windows update failure on technet, I did come up with technet article explaining how to register the windows update dll's to fix it (as also listed in the linked article). I just assumed it was an odd bug because of all the cruft in the windows 2000 install.

    Now I find out it's because of a broken secret mandatory update to the DRM that breaks windows update altogether. Nice one Microsoft!

    I had another bug after that windows update, http://support.microsoft.com/kb/883821
    That took a lot longer to fix, as none of those listed fixed it. Perhaps that was also related? Lovely.

    --
    Remember kids, it's all fun and games until someone commits wholesale galactic genocide.
  16. Microsoft XP updates....same old story. by CodeShark · · Score: 3, Interesting
    We remember how the Win9X upgrade fiascoes resulted in so many new breakages that ultimately MS pulled the plug and went completely with the NT code base for Windows. So I am very cautious using MS supplied updates at all.

    But earlier this year I had to allow a client's machine to use an XP service patch or be have to tell the user that the machine would be out of warranty both from the OEM and Microsoft.

    The patch (SP2) froze the computer completely after an aborted install that the screen recorded as having been successfully uninstalled. It took nearly 20 hours of non-stop attempts plus two service calls to avoid having to wipe the disk -- which was not an option -- and afterwards the "Genuine Advantage" program still wants more updates.


    Not surprisingly, I won't be recommending Microsoft on their next desktops. Ubuntu will be fine.

    --
    ...Open Source isn't the only answer -- but it's almost always a better value than the alternatives...
    1. Re:Microsoft XP updates....same old story. by Anonymous Coward · · Score: 0

      We remember how the Win9X upgrade fiascoes resulted in so many new breakages that ultimately MS pulled the plug and went completely with the NT code base for Windows.

      Er, what? I'm pretty sure things like security and stability were a little higher on Microsoft's 'reasons to move to NT' list than upgrade breakage.

    2. Re:Microsoft XP updates....same old story. by Corporate+Troll · · Score: 1

      We remember how the Win9X upgrade fiascoes resulted in so many new breakages that ultimately MS pulled the plug and went completely with the NT code base for Windows.

      Revisionist history. The 9x line was scheduled for death long before that...

      Windows 9x = 32 bit extensions and a graphical shell for a 16 bit patch to an 8 bit operating system originally coded for a 4 bit microprocessor, written by a 2 bit company, that can't stand 1 bit of competition. ;-)

    3. Re:Microsoft XP updates....same old story. by jimicus · · Score: 1

      We remember how the Win9X upgrade fiascoes resulted in so many new breakages that ultimately MS pulled the plug and went completely with the NT code base for Windows.

      You need to go a little further back than that. MS had planned to pull the plug for years - Windows ME was never meant to happen, and Windows '98 lasted rather longer than originally planned.

    4. Re:Microsoft XP updates....same old story. by vtcodger · · Score: 1
      ***Er, what? I'm pretty sure things like security and stability were a little higher on Microsoft's 'reasons to move to NT' list than upgrade breakage.***

      Not to mention the reduced cost of supporting only one code base.

      I have to agree with you. Too bad that the "better" security in NT turned out to be a fantasy.

      The only major bad update I can recall in Windows 98 Windows Update was an Intel originated patch that broke IDE disk access on many machines. Fortunately, automatic update wasn't all that widely used at the time, so the bad update was not the total disaster that it might be today. Still and all, you'd think that some people might have taken that as a warning to only use automatic update for really critical patches.

      --
      You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey
    5. Re:Microsoft XP updates....same old story. by Devistater · · Score: 1

      Yeah, virtually all SP2 upgrades I've seen and experianced have had issues...
      Which is why its much better to integrate SP2 into the install CD and do a fresh install of it. Never seen any problems from doing it this way, besides the normal MS crap you go through.

      I know you say it wasn't an option, but just throwing my 2 cents out there.

  17. My experience by bogaboga · · Score: 3, Interesting
    In addition to Kubuntu, I am using WIndows XP professional and was not really sure my woes with the system were because of these stealth updates. But I can say that sound would automatically mute itself whether Windows Media Player or any other media player was playing or not.

    I thought this was because of Skype, Windows Media Player, VLC Player or Real Player. I installed new versions of all of these apps but this did not help. I struggled with this problem and found little help, even from Microsoft itself. The good thing is that Windows XP has a [neat] feature that rolls the system back to its previous configuration. This is what I used and had this problem solved.

    But I then wondered whether we in the Linux world have anything comparable to the feature that helped me roll back my settings in Windows XP Professional. I haven't found one! Have I looked hard enough of am I looking in the wrong places?

    1. Re:My experience by pintpusher · · Score: 2, Informative

      I'm not trolling, seriously.

      I can't speak to the internal reasons behind windows decision to include that feature (though I have a couple good guesses), but based on the number of people I know who think a backup is when the white lights come on at the back of the car, its a much needed feature. This is what backups are for people. No matter what OS. a proper backup scenario would allow recovery from any problem like this. In the linux world, due to plaintext config files and the modular nature of the system, you can even restore selective parts of the system and get back to a usable state pretty easily.

      SO to answer your question about system restore in linux, just keep good backups of /etc, multiple kernels installed, and if you're really worried, or don't understand how to manually tweak your update system to allow rollbacks, then back up /[s]bin, and /usr/[s]bin and you're probably good. Its not that hard.

      --
      man, I feel like mold.
    2. Re:My experience by jack_csk · · Score: 1

      In Linux, this "System Restore" feature is not as demanding as Windows. Basically, the configuration files are pretty obvious on Linux (mostly rested in /etc and your home directories), and the installed applications are pretty much modularized. People just have to backup the configuration file before they make the change.

      On Windows, however, the idea of registry hives make it difficult to backtrack which file has been changed. The difference in philosophy behind may be the reason why you don't see the "System Restore" feature.

      Surely, one would be able to roll his/her own with tar / cpio and crontab (regardless of the user-friendliness).

    3. Re:My experience by lordtoran · · Score: 1

      This is exactly what I do before I upgrade or switch distributions. I tar the /etc and home directories and unpack all configuration files I need afterwards. Just as simple and hassle-free as it can get.

      --
      Want to hear the voice of GOD? cat /boot/vmlinuz > /dev/dsp
    4. Re:My experience by steelfood · · Score: 1

      But is there app to say, automatically do this in an easy, hands-off, user-friendly way? Can I press a button, and have it save the system's state that I can restore back to later on, with another press of a button? Can I press a button to bring up a scheduler do schedule this? Can I boot from another device (like from CD or USB) and easily access the restore feature for the primary, or any drive with the OS installed?

      Those are the kinds of questions linux devs need to be asking, if they want to see wider linux adoption. Otherwise, answering GP's question with "back up" some files won't help anyone with less than expert knowledge of the OS's internals. By not even providing methods of backing up, i.e. software that might automate the task, reliable hardware suggestions, etc., you practically blew the GP's question off with a run-around. It isn't trolling, but it's something politicians and salesmen would do, not intellectuals.

      And for the record, your answer is effectively: No, such a program does not exist for linux, to the best of your knowledge.

      But maybe it should?

      --
      "If a nation expects to be ignorant and free in a state of civilization, it expects what never was and never will be."
  18. Are They Serious? by ThinkFr33ly · · Score: 3, Insightful

    Do these people realize that the ENTIRE POINT of Microsoft forcing the Windows Update patch was to make sure that future updates would trigger whatever policies the user had selected for the machine?

    In other words, if Microsoft had not updated Windows Update automatically, and a user had chosen to be notified of future updates, these notifications would not work. The only way to ensure that the user's settings were properly respected was to update Windows Update.

    So now this article says that the silent update wasn't harmless because Windows Update was broken after they did a restore. Do they realize that without this update, Windows Update *definitely* wouldn't work, and that the fact that this update may have a bug in it regarding restoration is completely besides the point?

    Should Microsoft have made it more clear that they were doing an update? Yes. Is this update proof of Microsoft's desire to ignore user preferences and do whatever the hell they want? Obviously not.

    1. Re:Are They Serious? by sqlrob · · Score: 2, Interesting

      So it warns that Windows Update is the one needing update. They've done it before.

    2. Re:Are They Serious? by Ant+P. · · Score: 1

      Do they realize that without this update, Windows Update *definitely* wouldn't work It's been working fine for the past 5 years. Or are you saying it's always been broken?
    3. Re:Are They Serious? by kbg · · Score: 1

      What the hell are you talking about? Windows Update worked before the update, why the hell did it need to be updated?
      And even if it needed to be updated it should have asked the user, not silently installing and mess up a perfectly
      working computer.

      The number one rule of software development is that you don't fix something that isn't broken.
      Especially something critical as the update for windows update itself, because if you mess that up
      you can't update the machine any longer, and this is exactly what happened. The users that have used
      restore are now unable to update the machine, so even if Microsoft fixes this problem with windows update
      the computers that have installed this and used restore are now sitting ducks for viruses.

      Microsoft has no excuse here they are just really stupid and don't give a damn about anything except money.

    4. Re:Are They Serious? by ThinkFr33ly · · Score: 1

      What the hell are you talking about? Windows Update worked before the update, why the hell did it need to be updated? They were obviously changing something on Windows Update's servers that required a client side update in order for things to function properly. That's what the hell I'm talking about. Software is never perfect. Sometimes it needs updating. Even the code that normally does the updating.

      And even if it needed to be updated it should have asked the user, not silently installing and mess up a perfectly
      working computer. If you finished reading my comment, you would see that I stated exactly that. They should have asked. Regardless, the update didn't "mess up a perfectly working computer". The update that was sent out was *REQUIRED* for Windows Update to continue to work. The fact that there was an oversight with regards to a CD-based restore is actually mitigated by the fact that, without this update, Windows Update would not have worked anyway! I'm sorry you don't understand this.

      The number one rule of software development is that you don't fix something that isn't broken. Uh... right. How insightful.

      The users that have used restore are now unable to update the machine, so even if Microsoft fixes this problem with windows update the computers that have installed this and used restore are now sitting ducks for viruses. Right, just as they would have been if the update wasn't installed. Do you really not understand this? Regardless, there is already a very easy fix that Microsoft will undoubtedly make available for the small number of people that are effected by this.

      Microsoft has no excuse here they are just really stupid and don't give a damn about anything except money. Again, very insightful. Thank you.

      Sigh...
    5. Re:Are They Serious? by steelfood · · Score: 1

      Two questions:

      If Windows Update needs to be updated before it can work, then how did these updates get through without Windows Update being updated?
      And, if Windows Update is capable of updating itself through this means, why does this method not query the user for permission first? That is, why wasn't the querying built into this secondary means in the first place?

      Either way, it looks like a backdoor, through and through.

      Besides, it doesn't matter what Microsoft's intentions are. It doesn't matter that Windows Update was the one needing the update. It doesn't even matter that this update was broken. What matters is that an update happened without the user being able to stop or forestall it. In a production environment, that is unacceptable, for a myriad of reasons that have been discussed. In a casual environment, that is getting very close to invasion of privacy.

      And EULA's aren't going to help much. The hardware is still mine, and it is still my choice what software gets put on it.

      --
      "If a nation expects to be ignorant and free in a state of civilization, it expects what never was and never will be."
    6. Re:Are They Serious? by kbg · · Score: 1

      Right, just as they would have been if the update wasn't installed. Do you really not understand this? Regardless, there is already a very easy fix that Microsoft will undoubtedly make available for the small number of people that are effected by this.
      So are you telling me that if you install Windows XP from an original disk, the original update will not work because it doesn't have this new update? I do not think so, therefore this update was not needed as a silent update it could have been just a regular update.

      Regardless, there is already a very easy fix that Microsoft will undoubtedly make available for the small number of people that are effected by this.
      Ah yes that's just great, except how will these people know about this update to fix their suddenly broken computer? I mean it's not like Microsoft told them about the update. If I don't want to update my computer then it is my decision, Microsoft has no business using my computer without my permission.

      Look it doesn't matter how much you try to defend Microsoft it is obvious they made a serious error in judgement.
  19. Leave Microsoft alone. by Anonymous Coward · · Score: 5, Funny

    How fucking dare anyone out there make fun of Microsoft after all it has been through?

    Its stock price has stagnated. Google made Steve Ballmer mad. He threw two fucking chairs.

    Ray Ozzie turned out to be a blogger, and now he's posting a bunch of comments. All you people care about is readers and making money off of them.

    It's a corporation! What you don't realize is that Microsoft is making you all this money and all you do is write a bunch of crap about it.

    It hasn't made a good OS in years. Its spreadsheet is called "excel" for a reason because all you people want is EXCELLENCE! EXCELLENCE! EXCELLENCE!

    LEAVE IT ALONE! You are lucky it even makes products for you bastards! LEAVE MICROSOFT ALONE!

    Please!

    CmdrTaco talked about professionalism and said if Steve Ballmer was a professional he would've monkey danced no matter what.

    Speaking of professionalism, when is it professional to publicly bash a company who is going through a hard time?

    Leave Microsoft alone, please.

    LEAVE MICROSOFT ALONE RIGHT NOW. I MEAN IT.

    Anyone that has a problem with it you deal with me, because it is not well right now.

    LEAVE IT ALONE!

    1. Re:Leave Microsoft alone. by lena_10326 · · Score: 1

      OK.. Chris Cracker. By the way, can I borrow your eye liner?

      --
      Camping on quad since 1996.
    2. Re:Leave Microsoft alone. by Ambiguous+Coward · · Score: 1

      Best. Comment. Ever.

      Damnit, I just ran out of mod points, too. :(

      -G

      --
      Their may be a grammatical error, misspeling, or evn a typo in this post.
    3. Re:Leave Microsoft alone. by Anonymous Coward · · Score: 0

      Fucking hilarious!

      ROFLMAO!

      Thanks for thaT! =D

  20. Re:microsoft == evil no matter what they do? by changling+bob · · Score: 1

    I think its more:

    don't update -> evil
    do update but break the OS at the same time -> evil

    if it updated without any problems, I'm sure people wouldn't have any issues with it. Well, less issues anyway.

  21. Conspira-cynic's speculation... by dermusikman · · Score: 1

    Maybe MS is trying to goad people (like IT professionals) into upgrading to Vista...

    TRUST NO ONE

  22. No one saw this coming... by Loosifur · · Score: 2, Interesting

    The thing about this "stealth update" that riles me up is that it's indicative of the patronizing, "we know better than you" attitude that Microsoft has towards its customers. They just decided that anyone running Windows would get this update and that's that. Now, wonder of wonders, it's causing problems. Does anyone really think that they'll address this problem in a reasonable, responsible way? Or will they just release ANOTHER patch at 3:00 in the morning to fix the first one?

    --
    This unbiased moderation brought to you by the Porcine Aviation Group!
    1. Re: No one saw this coming... by blueZhift · · Score: 2, Insightful

      Sadly, for the vast majority of Windows users, the patronizing attitude is probably the least painful approach. Like most here on /., I don't take too kindly to MS slipping unauthorized patches onto my systems. But for mom, pop, and grandma, well what they don't know might be good for them. Telling them too much would just confuse them and result in expensive tech support calls. So MS rolls the dice that most won't have a problem with the update and won't care to know the details anyway.

      I'm not saying people should be like this, but it is often the case.

  23. what we don't know is gooed for us by Anonymous Coward · · Score: 0

    that includes the whoreabull behaviours of both the corepirate nazis, & their hired goons, the southern baptist life0cide movement.

  24. Re:microsoft == evil no matter what they do? by wwmedia · · Score: 1

    but this is slashdot, what would we complain about?

    slashdot'ers need an "Evil empire" in the same way as US needed the Soviet "Evil empire" to keep population in control thru fear (same thing they are doing now with terrorism)

  25. Following your train of thought by laing · · Score: 3, Interesting

    Then wouldn't it be in Microsoft's best interest to ship all installable releases with deliberately deficient code? This way they virtually guarantee that the end user will connect for an update. In a way they are already doing this with manditory activation (some features turn off if Windows is never "activated").

    1. Re:Following your train of thought by 192939495969798999 · · Score: 1

      or worse, deliberately ship with a critical security hole. What's the incentive to patch only the genuine machines if you have a huge contingency of non-legit installs that are being used in a bot-net to assault the genuine machines for new deficiencies at all times?

      --
      stuff |
    2. Re:Following your train of thought by Pharmboy · · Score: 4, Funny

      Then wouldn't it be in Microsoft's best interest to ship all installable releases with deliberately deficient code?

      Are you saying they aren't?

      --
      Tequila: It's not just for breakfast anymore!
    3. Re:Following your train of thought by Anonymous Coward · · Score: 1, Informative

      Probably not. If word ever got out that Microsoft was intentionally shipping defective software, there would be legal hell to pay (antitrust lawsuits, consumer class-action lawsuits, shareholder lawsuits, etc.). And, as far as I can tell, Microsoft leaks memos like a sieve.

      More to the point, they don't need to. Software design being what it is, a project of even moderate complexity is guaranteed to have bugs. If it is in C++, it will most likely have buffer overflows or memory leaks. If it touches the network, there will be security issues. And if you have refined your product to the point where all obvious defects are eradicated, you can easily introduce more by adding a few features, supporting more or newer standards, or merging with another product.

      So Microsoft can keep shipping updates indefinitely, even without intentionally introducing malicious code. And that won't change without a major improvement in software engineering or a major shift in consumer interest from new software to stable software.

    4. Re:Following your train of thought by sg_oneill · · Score: 2, Insightful

      Well it wouldn't be the first time. See the (early) Windows deliberately crashing on DR-Dos fiasco.

      --
      Excuse the Unicode crap in my posts. That's an apostrophe, and slashdot is busted.
    5. Re:Following your train of thought by Anonymous Coward · · Score: 0

      yeah, and microsoft has never walked away from an antitrust lawsuit...

  26. Update Fix by techintexas · · Score: 1

    At the good ole Tarleton State IT department we have seen this problem a lot this link has the best fix we have found so far: http://www.updatexp.com/0x80248011.html Give it a whirl. P.S. - Everyone hates the bully on the playground (Microsoft)

  27. Re:Please? by Maxo-Texas · · Score: 0, Offtopic

    blah

    --
    She was like chocolate when she drank... semi-sweet at first and then increasingly bitter.
  28. That explains the trouble I had! by TheRealBurKaZoiD · · Score: 2, Informative

    FTFA:

    "This, in turn, prevents Microsoft's 80 latest patches from installing -- even if the patches successfully downloaded to the PC."

    That the trouble I had recently! A few weeks ago, a friend asked me to clean up three of her family computers that were crawling with spyware/adware, and trojans, as well as upgrade them from WinXP Home to WinXP Pro. I got them cleaned up fine, and did the upgrade. After booting to the desktop the first time, I ran Windows Update to grab the latest patches. On all three machines, WU would install some needed components, reboot, download all outstanding patches (approximately 80+), and then fail on the install on every single update.

    Windows Update would NOT run without erroring out. It took me a few hours to realize I had to manually re-register all of the components for windows update, after which I also had to delete ALL of the downloaded patches, as well as all of the $NTUninstallKBXXXXX stuff.

    Then again, maybe I just did the update wrong three times in a row?

    1. Re:That explains the trouble I had! by Anonymous Coward · · Score: 0

      Then again, maybe I just did the update wrong three times in a row?

      Yeah that's just what you did, you dumb white-ass muthafucka!
      Damn you faggot-ass linux crackas is wack!

  29. They already have a solution to this. by InfinityWpi · · Score: 3, Insightful

    And it should be obvious to anyone who knows the company... upgrade to Vista, and you won't have to worry about repairing your XP installation anymore!

    Who says this is an -unintended- side effect?

    1. Re:They already have a solution to this. by Anonymous Coward · · Score: 0

      Who, the f**k, modded this as insightful? I've laughed my ass off!

  30. More likely a deliberate strategy by Anonymous Coward · · Score: 0

    Subconscious or stealth push to Vista?

    More likely a deliberate strategy to get people to buy Vista: "Oh, are you having problems with Windows XP? It's obsolete. Pay us more for something new, with it's own problems."

  31. complex systems==problems by martin · · Score: 1

    Like all complex systems any change will have 'interesting' side-effects.

    And that (IMHO) is MS-Mindows main problem. It's too complex, and this is why there are so many issues with it.

    End of story.

    1. Re:complex systems==problems by jimicus · · Score: 1

      Show me a modern OS that isn't complex.

      I mean sure, Linux systems are more built around the concept of "let each task do one small job and do it well", but without a fair bit of knowledge and experience, it's quite possible to screw a system so hard that you can't easily repair it. Particularly once you start getting into the minefield of "install this proprietary app which doesn't come with source, install that binary driver which comes as a kernel module, install the other program from an RPM intended for a completely different distribution".

    2. Re:complex systems==problems by PlusFiveTroll · · Score: 1

      Linux is far easier to repair if broken. It isn't actively thinking your hacking/copying/pirating it and trying to lock your ass out. I can always boot off a live CD and relocate the glibc/kernel rpms if I jack the system libraries. Most times you'll never need to go that far.

      On the other notes, open source good, proprietary bad. Yes, I know it's not that simple in practice.

    3. Re:complex systems==problems by PlusFiveTroll · · Score: 1

      I should have stated it this way in the first place....

      Windows adds the unnecessary complexity of protectionism.

  32. Re:microsoft == evil no matter what they do? by sconeu · · Score: 1

    Wrong. It's

    they do update their product without asking or telling you => microsoft == evil.

    --
    General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
  33. a necessary starting point for troubleshooting... by Anonymous Coward · · Score: 0

    Do people who don't disable the automatic updates have the intelligence to "shoot trouble"?

    I mean... either you install windows patches because you're a 08/15 user who doesn't know better... ...or you blacklisted all IP's from Microsoft long ago when your Windows installation reached the point where everything worked and you lost interest in changing a running system.

    I don't know... maybe Microsoft updates are the worst kind of spam one can receive...

  34. interesting, but... by Anonymous Coward · · Score: 0

    I just ran a repair on an XP machine last friday and ran into no such problem. Windows Update ran just fine for me.

  35. This will spur the Vista sales by 140Mandak262Jamuna · · Score: 2, Insightful

    The stealth "upgrade" will make XP quite unstable. And MS will just say, XP has been end-of-lifed and Vista upgrade will fix the problems. Then Wall Street will get comfortable numbers about Vista sales. Things will continue as normal.

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    1. Re:This will spur the Vista sales by TheRealBurKaZoiD · · Score: 1

      I've three WinXP Pro machines that have been running fine for quite some time prior to this "stealth update", and continue to run fine afterwards. And, technically speaking, I've several other WinXP Pro installs that are fine as well (although they are running in virtual environments).

      I've yet to see an exact date on when this "stealth update" was applied, but I've also a short attention span and never finished any of the articles regarding it. >:^)

      Anyone know the exact date?

    2. Re:This will spur the Vista sales by n0dna · · Score: 1

      You make a good point except for being wrong.

      Products Released Windows XP Home Edition
      General Availability Date 12/31/2001
      Mainstream Support Retired 4/14/2009
      Extended Support Retired 4/8/2014

      http://support.microsoft.com/lifecycle/?LN=en-us&x=11&y=14&p1=3221

      Things will continue as normal.

  36. two words by josepha48 · · Score: 1
    class action

    Yeah, I think this opens the door to a class action lawsuit, because someone could argue that they accessed their computer, without their permission, thus violating the computer abuse and fraud act.

    --

    Only 'flamers' flame!
    Does slashdot hate my posts?

  37. AVG usually does by Solandri · · Score: 1

    But because Microsoft updates system files so often, AVG just flags them as "changed" and notifies you as such. Also, most anti-virus tools are probably checking against a blacklist, not blocking any and all suspicious activity.

  38. Re:microsoft == evil no matter what they do? by mattgreen · · Score: 1

    The kids need a lunch lady to hate. Otherwise they do not feel they fit in.

    Groupthink is quite amusing when you think about it. I just love seeing the vehement rants against a software company. So much wasted passion for a mostly inept, overly corporate software company. You'd think they were out killing babies or clubbing baby seals. Twitter is the most extreme example of this, and one of those people who I don't believe really exists.

  39. Re:Are They Serious? Nope. by canuck57 · · Score: 2, Insightful

    What a long winded way to say the Windows update is such a horrible mess it isn't funny.

    Me, I like rolled up file based updates. Download it and save it off. When the beta testers say it is OK, I apply. I have earned with over 20 OSes behind me that you patch to point in time from proven groups of patches. This idea of "auto" update is so fundamentally flawed...

  40. Re:use Dial-A-Fix by Marbleless · · Score: 1

    I've been seeing this problem for years and been using Dial-A-Fix to fix it up.

    This problem with repair reinstalls isn't new.

    --
    --I thought I was wrong once, but I was mistaken.
  41. of course microsoft wants to cause problems for XP by FudRucker · · Score: 1

    nothing better than a borked XP box to herd the sheeple to a new purchase of Vista, i seen this coming as soon as vista started taking hits from critics that mostly proved valid...

    --
    Politics is Treachery, Religion is Brainwashing
  42. Nothing new. KB555615. by Marbleless · · Score: 1

    Nothing new here.

    KB555615 documented this in May 06.

    Come to think of it, 16 months is about the usual time lag for a /. story nowdays ;)

    --
    --I thought I was wrong once, but I was mistaken.
    1. Re:Nothing new. KB555615. by PlusFiveTroll · · Score: 1

      Evidently you have not read the KB article and the problem that users (and I) have had. From the KB: "To resolve the Automatic Updates problem (and to protect your computer against vulnerabilities) go to either the Windows Update or Microsoft Update web sites and install any needed Windows Service Packs or updates. Once you have downloaded and installed at least one critical update from the Windows Update or Microsoft Update web site, Automatic Updates will once again correctly detect, download or install Windows Service Packs or security updates depending on what settings you have selected for Automatic Updates on your computer." The problem is this does not occur. I've seen issues where windows update will not load, either a blank page after some time or the little bar scrolls forever. Without deleting certain system directories and re-registering system files will will not be able to receive automatic updates again.

    2. Re:Nothing new. KB555615. by Anonymous Coward · · Score: 0

      So you're basically saying that Microsoft has already pointed out in clear language that the problem exists and is caused by the update, that it will not cause any visible changes except for not autodownloading, and that anyone reading about the problem will also be told they can run Windows Updater and fix it by downloading any critical update?

      Troll.

  43. Bug in slashcode? by Anonymous Coward · · Score: 0

    "Just let us patch the systems
    (Score:5, Insightful)
    by 192939495969798999 (58312) on Thu Sep 27, '07 08:16 PM (#20768587)
    (http://www.devinmoore.com/ | Last Journal: Thu May 24, '07 04:46 PM)"

    is a reply to:

    "Microsoft 'Stealth Update' Proving Problematic
    Posted by Zonk on Thu Sep 27, '07 08:11 PM
    from the we're-all-learning-together dept."

    The post #20768587 appears at the top when the setting is for "Highest Scores First".

    The content of that post seems to be some kind of a 'styrofoam peanut' response, that got modded +5 Insightful. More insightful responses posted prior to this reply are drowned below, because of this intersting 'timestamp' bug.

    Some astroturfing, and playing with Slashcode, perhaps?

    1. Re:Bug in slashcode? by somersault · · Score: 1

      Why are you highlighting his blog date rather than the date of his post, unless you are suggesting that being able to display your last blog date is an exploit is a bug, which I doubt.

      --
      which is totally what she said
  44. Damn Microsoft. by JustNiz · · Score: 1

    The thing that really gets my goat is their totally arrogant presumption that its ok to put files on my box without asking me in the first place.

    1. Re:Damn Microsoft. by jimicus · · Score: 1

      Vista fixes that nicely, right the way from the start of the installation process:

      "Windows installation wants to install the following file: NTOSKRNL. Cancel or allow?"

      "Windows installation wants to install the following file: rundll32.exe. Cancel or allow?"

      "Windows installation wants to install the following file: cmd.exe. Cancel or allow?"

      "Windows installation wants to install the following file: notepad.exe. Cancel or allow?"

      "Windows installation wants to install the following file: mspaint.exe. Cancel or allow?"

      "Windows installation wants to install the following file: randomthing.dll. Cancel or allow?"

    2. Re:Damn Microsoft. by Anonymous Coward · · Score: 0

      Right click on the command window icon, select "run as administrator", click "Allow", then run your batch files. The only UAC prompt you will get is the one before the command window pops up.

      Folks, UAC is just sudo sporting a drool cup. Any UNIX based OS will prompt for privilege elevation too if doing a similar task.

  45. The real problem is ... by vtcodger · · Score: 5, Interesting
    ***Duh. Undocumented updates cause problems.***

    Whereas documented updates are magically OK?

    OK, OK, that's not really what you meant, and it's not your point

    =====

    If you ask me, the real problem is updates. Let's say that one update in 50 is significantly defective -- which is, IMHO, quite optimistic. Let us further guess that 50% of the defective updates introduce new unexpected problems rather than failing to (fully) fix the existing problem -- they do test these things. At least I hope they do. What is likely to get past testing is errors in areas that no one thought would be affected. Lets assume that there are 10 updates a week on average, and that the average time from first report to fix is four weeks.

    If you just uncritically load updates, you'll download new grief every 10 weeks or so and take four weeks to get it fixed. that means that five times a year, you'll unwittingly install a significant new problem and that about 40% of the time you'll be living with one or more of these things.

    IMO, the best strategy -- at least for larger operations -- is to evaluate each and every patch, and to load only those which seem absolutely necessary. Even that is not going to work all the time.

    As for updates that you aren't asked about... A truly bad idea. Hopefully Microsoft and other operations that believe in automatic updates will learn their lesson from this relatively modest (we hope) fiasco and will never ever do THAT again. Memo to organizations that do that. If your QA -- who are overworked, underpaid, and probably need a vacation -- screws up at the wrong time and you put an important business sector offline for days or weeks, you are looking at a major league class action suit. Don't expect the shrinkwrap EULA to protect you.

    --
    You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey
    1. Re:The real problem is ... by kiracatgirl · · Score: 1

      Good lord, 10 updates a week? I don't think I even get 10 updates a month.

    2. Re:The real problem is ... by jvkjvk · · Score: 5, Insightful

      . Memo to organizations that do that. If your QA -- who are overworked, underpaid, and probably need a vacation -- screws up at the wrong time and you put an important business sector offline for days or weeks, you are looking at a major league class action suit. Don't expect the shrinkwrap EULA to protect you. And why not? How many times have there already been problems that put important business sectors offline for days or weeks and not one software vendor has suffered a class action suit, or even any repercussions beyond ultimately (and most times not even then) having to say "Oops! My bad!" ?

      I have no idea what is "protecting" these software vendors other than the halo that we are dealing with software and everyone expects things to go very bad once and a while in the field but the threat of lawsuits at this point is laughable.

      Note: I am merely reporting on the actual state of things, this does not mean I agree with it.

    3. Re:The real problem is ... by Ajehals · · Score: 1

      I get hundreds a month on one of my machines, this Debian *Sid* lark, its really quite unstable where packages are concerned. ;)

    4. Re:The real problem is ... by mpe · · Score: 1

      Memo to organizations that do that. If your QA -- who are overworked, underpaid, and probably need a vacation -- screws up at the wrong time and you put an important business sector offline for days or weeks, you are looking at a major league class action suit. Don't expect the shrinkwrap EULA to protect you.

      Except that this has never actually happened. Unless it does and the effects of such a lawsuit actually hurt the software company concenred this is just so much angry retoric.

    5. Re:The real problem is ... by defuse3388 · · Score: 1

      I second you on this. But I would go a step ahead and say that instead of 50%, 85%- 90% issues occur due to the windows updates. I have turned off my Updates since couple of years. No issues at all with my PC.

      --
      Complete Web Hosting Solutions at eUKhost.com
  46. I am even happier now by Kazymyr · · Score: 1

    ... for doing what I did http://it.slashdot.org/comments.pl?sid=299057&cid=20619703

    Not that I really had any doubts to begin with.

    --
    I hadn't known there were so many idiots in the world until I started using the Internet -Stanislaw Lem
  47. Euthanasia by cmacb · · Score: 1

    If Microsoft were a racehorse it would have been put down by now.

    It is a drag on our society, on our culture, on our economy, not to mention the rest of the world's.

    I wish something could be done about them, but we just have to wait for them to blow all their own limbs off and bleed to death I guess.

  48. Re:microsoft == evil no matter what they do? by walt-sjc · · Score: 1

    What about the option:

    Notify about update - allow user to approve or deny -> not evil

    If MS would have pushed this update out in the normal way, this whole issue wouldn't have come up.

  49. These WU are 'breaking' other apps...? (FFox) by capnkr · · Score: 1

    I've been having customers call with all sorts of odd problems since the 'stealth' updates, in particular Firefox quits working.

    It even happened on my Vista Basic, post-last-update.

    WTF, micorSoft? Trying to get those IE numbers up or something?

    Thank Deity that I use Linux for my work and personal computing habits...

    --
    "...there are some things that can beat smartness and foresight. Awkwardness and stupidity can." ~ Mark Twain
  50. Reasonable expectation by SuperKendall · · Score: 1

    You seem to think that every time a system file gets updated by whatever process, that should be flagged and prevented

    Actually yes, coming from a UNIX standpoint this is exactly what programs like Tripwire do.

    If I have AV software I would love to have it notify me system files had been altered, whatever the cause - perhaps not prevent but at least issue a warning at some point.

    Since viruses can potentially modify trusted executables there's no reason to trust any program running as any user more than anything else.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
  51. Kind of dupe - Posted before by yours truly by Anonymous Coward · · Score: 0

    Here.
    Most people seemd to think that it was not a big deal at that time.

  52. What about WSUS? by permaculture · · Score: 1

    Many companies use WSUS to deliver Windows updates.

    http://technet.microsoft.com/en-us/wsus/default.aspx

    Did the stealth updates install on PCs that don't have WGA installed, and don't update from the Windows web site? If not, what effect will that have?

    --
    Environmentalism is the new Victorianism. Everyone ties on a green corset and pretends we're virtuous.
    1. Re:What about WSUS? by Lxy · · Score: 1

      In the original article (sorry, don't have the link handy) it specifically mentioned that WSUS servers/clients did NOT receive the update. If you were thinking of running WSUS at home, here's another good reason :-)

      --

      There is no reasonable defense against an idiot with an agenda
      :wq
    2. Re:What about WSUS? by CompMD · · Score: 1

      Yep, I am running WSUS on a Server 2003 box with a bunch of XP workstations in a small company. I push out all Critical Updates and Security Updates for Windows and Office automatically. Still running version 7.0.6000.374 of wuapi.dll here, and no problems.

    3. Re:What about WSUS? by permaculture · · Score: 1

      What does this update do, that it's needed for PCs that use WGA, but not PCs that use WSUS?

      --
      Environmentalism is the new Victorianism. Everyone ties on a green corset and pretends we're virtuous.
  53. This is way we need xp sp3 or a update roll up.... by Joe+The+Dragon · · Score: 1

    This is way we need windows xp sp3 or a update roll up so we can have the newer windows update files and other updates on the install disk.

    80+ updates for a new xp sp2 install is a lot.

  54. Get a Mac by Anonymous Coward · · Score: 0

    Sigh

  55. Freaking Dillinger! by Anonymous Coward · · Score: 0

    You know, this wouldn't have happened if Alan's access wasn't cut off and the TRON program was up and running. It would have been watchdogging the MCP and shut it down. If things got bad enough, Flynn could have jumped in to help.

  56. 95 to 98 compared to XP to Vista by CritterNYC · · Score: 4, Insightful

    I believe the reference is to how well Windows 98 (and 98 SE) was received by Windows 95 users (98 offered lots of good fixes and new features over 95) as opposed to how poorly Windows Vista is being received by Windows XP users (since it doesn't really offer any must-have features or bug fixes).

    1. Re:95 to 98 compared to XP to Vista by Bearhouse · · Score: 1

      You're right. It's hard to feel sorry for M$, but as software improves with each release, it's more difficult to differentiate from previous versions. Like many people, I was delighted with 98SE, since 95 was so crap. What's compelling in Vista for me? Nothing...since XP does the job fine.

  57. Re:microsoft == evil no matter what they do? by vtcodger · · Score: 1
    ***yee people are never happy are yee? they dont update their product => microsoft == evil they do update their product => microsoft == evil seems its a no win situation no matter what they do***

    You're right to some extent. This being Slashdot, Microsoft would be blamed for something even if they brokered a lasting peace between Isreal and the Palestinians, cured cancer, or brought global worming to a screeching halt.

    But in this specific case, what they did was quietly load updates onto computers whose owners naively believed that they had turned automatic updates off. (Not so easy to kill a Microsft automatic update mate. Not only do you have to shoot it at least twice with silver -- not lead -- bullets, but you need to drive a cedar stake impregnated with garlic through its pancreas). And they exacerbated that because the update was defective. Just maybe they deserve a bit of criticism on this one.

    --
    You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey
  58. Re: windows and linux problems by Medievalist · · Score: 2, Informative

    I've set it to default to Windows, because windows boots over and over, sometimes for hours, before it finally relents and comes to life. I've suspected a BIOS setting it doesn't like, or that Windows wants its own FAT instead of LILO, but could it be that Windows is trying to phone home, even though my internet access has been shut off for a couple of months? Even though it's a fresh install and the PC hasn't been connected to the internet since before the install? Sounds like a hardware problem, to be honest. Like a bad bit or two in low memory, for example... do you have memory testing turned on in your BIOS? If it's set to "fast boot" it will skip nearly all useful testing, fast boot is just a way to generate money for PC repair shops. :)

    And do thay have any idea what a pain in the ass it is to "register" that God damned OS without internet access? Don't remember if I've tried it with Windows, but for most windows programs that nag for registration you just tell it you'll register by snail mail, when it asks for a printer tell it to print the registration page to a file, and delete the file at your leisure.

    If I could get the S-Video out to work with Linux, XP would be history on my PC. If you've got a Hauppage card, ivtv will probably do the job for you. If not, post your card type (preferably including video output chipset information, if you can figure out how to get that... sometimes it's in dmesg) in a MythTV forum. The myth guys are generally pretty helpful, if you are even minimally polite.
  59. enterprise ready operating system by number6x · · Score: 5, Insightful

    You have zeroed in on the heart of this problem with laser like precision. I couldn't agree more.

    If you run a business on an OS you need to know the details of upgrades. You need to test all upgrades against your production machines before applying the upgrade.

    I am not talking about a home desktop, or even a corporate desktop system here. Think about computers used to control water or fuel delivery. Maybe a system that reconciles ATM transactions at a bank, or adjusts inventory databases from sales at retail locations, or the automated system that routes calls to a city's 911 emergency center.

    Businesses and Governments depend on many customized pieces of software day in and day out. All software changes must be tested and shown to have no ill effects before thay are applied to enterprise production systems.

    Any OS that does not allow the user to control the application of patches and updates, and instead updates systems by stealth, is not ready for the enterprise.

    Think about the problems that could result if people use an OS like Windows in misssion critical applications that involve lives.

    Even if lives are not involved businesses cannot tolerate amateur stunts like stealth patches from an OS vendor. They could lose billions of dollars trying to find out the cause of a problem.

    This highlights how out of touch Microsoft is with the needs of enterprise level customers.

    1. Re:enterprise ready operating system by smellsofbikes · · Score: 4, Funny

      It seems like there's an obvious way of doing this, already organized with Windows distribution: Windows Beginner, Windows Home Edition, Windows Water Wings And Training Wheels edition, Windows For Dummies, and Windows-Cheapo-Walmart-Box come with updates enabled; Windows Ultimate, Windows Business, Windows Corporate, and Windows Damn I Paid A Lot For This License come with updates disabled but a little pop-up informs users that new updates are available, and Windows Yes I Do Actually Know What I'm Doing lets users update the patches themselves.

      --
      Nostalgia's not what it used to be.
    2. Re:enterprise ready operating system by Afrosheen · · Score: 1

      While I believe you're right in your assertion, most system-critical servers and workstations are wholly divorced from the Internet. At least, that's best practice for most places. Whether or not things are implemented that way is ultimately up to the staff/contractors that handle IT.

    3. Re:enterprise ready operating system by Khyber · · Score: 1

      I am not talking about a home desktop, or even a corporate desktop system here. Think about computers used to control water or fuel delivery. Maybe a system that reconciles ATM transactions at a bank, or adjusts inventory databases from sales at retail locations, or the automated system that routes calls to a city's 911 emergency center.

      Well, those industries/companies listed in the above statement know Microsoft's unreliability pretty well - hence they run something UNIX-based to control those machines. (I know our gas pumps around here run off of a tiny embedded UNIX kernel, my stepbrother repairs the pumps, and even though he knows NOTHING about computers, he knows "It runs UNIX.")

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    4. Re:enterprise ready operating system by Anonymous Coward · · Score: 0

      Sad to say, I've seen a number of ATMs wearing blue. Posting as AC because I just know I'll be downmodded for such a short comment.

    5. Re:enterprise ready operating system by cloakable · · Score: 1

      I don't know, the target market of Windows Yes I Do Actually Know What I'm Doing has already been filled with a superior contender in that niche: GNU/Linux.

      GNU/Linux: For computer users who know their computers.
      Mac OSX: For computer users who don't know their computers, but do like stability, regardless of cost.
      Windows: Duh, where is the any key? I broke my coffee holder.

      --
      No tyrant thrives when every subject says no.
    6. Re:enterprise ready operating system by smellsofbikes · · Score: 1

      I was going to say something very like that in my original post, but was hoping that people would actually find it a good suggestion rather than just a funny one. (no luck there.)
      There *are* people who know what they're doing, and are using Windows. Many of them are busily engaged *hacking* Windows machines, though, which is why the whole problem of requiring updates arises.

      --
      Nostalgia's not what it used to be.
    7. Re:enterprise ready operating system by cloakable · · Score: 1

      I would hope the crackers would be smart enough to use BSD or GNU/Linux. OTOH, cracking Windows has a low barrier to entry, at least on the intelligence front. So perhaps you're right ;)

      --
      No tyrant thrives when every subject says no.
    8. Re:enterprise ready operating system by smellsofbikes · · Score: 1

      And one assumes that most crackers are going to be most familiar with Windows, especially if they're developing new cracks, so will probably use Win machines just out of familiarity and availability, kind of like how most older mechanics drive big American cars made in the '70's and '80's.

      --
      Nostalgia's not what it used to be.
  60. Not to go all conspiracy here..... by fool2046 · · Score: 1

    ....but has anyone considered that this is was something they wanted to happen? Vista isn't selling as planned, xp is still selling well. Maybe some bad publicity for xp and some less well informed users switching to Vista as their repair didn't work would help things? I did the whole repair thing, and there wasn't a single page about it from MS, just had to go to the forums. Just ended up re-installing completely, hardly ideal, but couldn't have done a thing about it.

  61. Re:microsoft == evil no matter what they do? by mapsjanhere · · Score: 1

    I'm always amazed how people assume wast conspiracies and evil thoughts in anything Microsoft does. I bet, 99% of the time organized incompetence of a bloated corporation is the better explanation.

    --
    I'm aging rapidly, I bought a new game and had no idea if my machine was good for it.
  62. Windows is going backwards... by Anonymous Coward · · Score: 0

    They never had this problem with DOS...

  63. Suddenly Broken? by pembo13 · · Score: 1

    How did Windows Update just suddenly break on every copy of Windows any ways?

    --
    "Thanks for all the money you paid to us. We've used it to buy off ISO among other things" -Microsoft
  64. Re:microsoft == evil no matter what they do? by shotgunefx · · Score: 1

    "This being Slashdot, Microsoft would be blamed for something even if they brokered a lasting peace between Isreal and the Palestinians, cured cancer, or brought global worming to a screeching halt."

    I don't know if they'd be blamed, but I'm sure a lot of people would be suspicous ;)

    There is truth to a lot of it though, they have done a lot of shady things over the last couple decades and there is really no reason to believe they've changed. It's not exactly undeserved.

    They're a business and their goal is to stay dominant and extract as much money out of people as possible. Not a problem in itself, they are just too big and have too much leverage. A smaller company wouldn't have that much money to sway (so many anyway) politicians, committees, etc, or dictate the market to such a degree.

    An OS is pretty much a commodity. So to not be a commodity, they need to bundle things tight, squash or embrace and extend alternatives, then use their lock in as leverage to generate new revenue streams. I think it's obvious the end-game is to be a toll collector for everything. You always make more money renting then selling something once. But people aren't buying a OS to have it spy on what they're listening to for 10% of the time (or whatever it is) or to have it prevent them from making a screen cap, etc.

    The whole net neutrality issues is pretty much the same. A Packet is a packet. A dumb pipe (as an OS should be). We want more money without adding any value. Hmm, let's start hitting up the end producers and consumers depending on what they want to do. You want to work well with our service? You pay us more or your services won't work well with out users.

    They are just utilities whether they like it or not. Picture your electric company telling people what kind of appliances you could use or how you could use them, or that to use certain brands or types of appliances will cost more than others even though they use the same amount of power, then at the same time going back to Maytag and saying, "You need to pay us extra if you want your users to have the best washing experience". People would riot.

    Then there are people who just hate them because they don't want to pay for anything at all and are pissed it's become so hard (comparatively) to pirate. But I think most people who are zealots about it fall into the former category.

    --

    -William Shatner can be neither created nor destroyed.
  65. Re:microsoft == evil no matter what they do? by ValHolla · · Score: 1

    Of Course MS is Evil! see the following article:
    http://www.bbspot.com/News/2000/4/MS_Buys_Evil.html

  66. Let me see if I've got this right by Whuffo · · Score: 1
    So these people access your computer without your permission and secretly install software that damages the operation of the computer.

    I think that just about covers it; IANAL but I suspect a crime has been committed.

    1. Re:Let me see if I've got this right by Grail · · Score: 1

      No crime. You accepted a EULA that says they're perfectly allowed to do this.

      Now all you need to do is prove that continuing to use Windows after being told that the EULA gives Microsoft the right to do this, doesn't make the EULA valid.

    2. Re:Let me see if I've got this right by Whuffo · · Score: 1
      This might make a good test case for those shrink-wrap EULAs. At best, they're a contract of adhesion - but since you can't see the contract terms until after you've bought the product there's a question about their legitimacy; they very well may not be valid at all.

      But since you brought it up, where in the EULA does it say that Microsoft has the right to secretly install software on your PC that will impair its operation? They covered a lot of bases in their EULA, but this isn't one of them.

  67. Got a little bigger problem by Gr8Apes · · Score: 1

    How about this situation with the Yorktown?

    --
    The cesspool just got a check and balance.
  68. oh man... that is why i wasted hour + by atarione · · Score: 1

    2weeks ago trying to figure out why the Fuck windows update wasn't working after repair install... i managed to fix it with the Window update agent 3.0 technique myself... but could have saved me an hour if this had come out two weeks ago.. oh well.

    --
    actually I am happy to see you, however that is in fact a banana in my pocket.
  69. Virus Helper by gerf · · Score: 1

    Yep, this is just one more help .doc for virus makers. "Remember, always unregister the .dll's, and you'll be good to go."

  70. You already can. by Anonymous Coward · · Score: 0
  71. One way to increase Vista sales.... by Anonymous Coward · · Score: 0

    ...I guess, is to screw up XP installations worldwide :)

  72. Re: Broken Process by Anonymous Coward · · Score: 0

    Or perhaps foot-in-mouth disease.

  73. Update Tasser by garyedwards · · Score: 1

    All i have to do is look at the Windows Update button and my computer starts screaming,
    "DON'T TASE ME, BRO.....DON'T TASE ME!"

    ~ge~

  74. two seperate issues... by impactor · · Score: 1

    I think there are two seperate issues here. I think the fact that the update broke windows-update and that the update was done without the consent of the user should be considered seperately and don't really have a bearing on each other.

    I doupt that this was the first time a windows udpate has broken something, and i doupt it will be the last. I think what is special about this particular update is that it made changes to windows-update itself. In the result that a detail is overlooked, you could damage alot of systems with no way of easily fixing the problem. When patching a critical part of the operating system (i believe the ability to update is critical) more time and money should be spent ensuring no mistakes have been made. Given the large userbase microsoft has and the nature of the patch, i think it's irresponsible to let a bug like this get overlooked. Clearly by the number of "Oh, i had that happen to me" responses i've read on /., this is probably something that should have been picked up on early on.

    Now to the question of the 'stealth' update. Alot has been said on the subject, so ill keep it short. A few things concern me:

    Microsoft's relative silence in explaining why this specific update had to be done in this manner (I dont' buy the 'technical impossibility' argument). I can't see a reasonable reason to do this.

    I think that something as critical as window's update should never have had a backdoor built into it. From the very start the system should have been built so that this was an impossibility. One person with the right know-how could do alot of damage if they wanted too.

  75. I think I understand the strategy... by r_jensen11 · · Score: 1

    Rather than quitting support for XP, Microsoft plans on breaking everyone's XP systems, thus forcing them to either:

    1) "Update" to Vista
    2) Switch to Mac
    3) Switch to Linux

    If I bought something that's being intentionally broken by a company, how often would I want to buy something from that company again?

  76. This helped me... by Hazclan13 · · Score: 0
    Running the following commands helped me install the updates:

    regsvr32 wuweb.dll

    regsvr32 wups2.dll

    regsvr32 wups.dll

    regsvr32 wucltui.dll

    regsvr32 wuaueng1.dll

    regsvr32 wuaueng.dll

    regsvr32 wuapi.dll

    http://wisdom.jambohosting.com/viewtopic.php?t=11

    --
    Harry McLaren - Hazclan13 http://www.kumahosting.co.uk
  77. Maybe I'm nitpicking but... by Torodung · · Score: 1
    Regarding the "silent update," the article says this:

    If AU is not turned on, you'll be prompted to let Windows Update upgrade itself before you can installing any other updates. Consequently, users are forced to get the silent update before they can attempt to install Microsoft's latest security patches. In other words, if you haven't yet accepted this update, you will be PROMPTED to update your WU before you can accept more updates.

    My understanding of a "silent update" is that the user is never prompted, yet the article seems to state that the user is prompted unless full automatic updates are turned on, in which case, all updates are promptless because the user has chosen that method of update.

    I don't think that passes muster for a "stealth" or "silent" update? Do you?

    --
    Toro
  78. Re: windows and linux problems by toddestan · · Score: 1

    Sounds like a hardware problem, to be honest. Like a bad bit or two in low memory, for example... do you have memory testing turned on in your BIOS? If it's set to "fast boot" it will skip nearly all useful testing, fast boot is just a way to generate money for PC repair shops. :)

    It's really rare to see any useful testing from the BIOS. I've seen the BIOS give a clean bill of health to SIMMS and DIMMS only half seated in their sockets. I would try memtest86 if you think there is something wrong with the memory.

  79. So THAT'S what the problem was by FCKGW · · Score: 1

    I actually saw this problem myself just the other day, but didn't know that it came from the stealth update before seeing this article. Ironically, I had actually convinced my parents to buy a legitimate copy of Windows XP Pro. They were using the infamous Corporate Edition, and I was tired of having to work around the product key changes and other bullshit like WGA, plus every time it came to install updates they would whine to me because they forgot what not to install (WGA). I did a repair install so they could keep all their programs and settings. After that, no updates would install. The help on the Windows Update site actually suggested the same fix to the problem explained in the linked articles (and it works).

    Anyway, I am royally pissed off at Microsoft because the move from a bootleg install to a legitimate one broke Windows because of Microsoft's malice and stupidity. Fuck you, Bill. This is how you repay me for going legit? I have already tried a move to Ubuntu (bad support for laptop docking stations, funky video settings, and wireless networks) and Mac (way too restrictive, few hardware choices), but maybe I should try again. I already have Debian on my file and backup servers, plus Ubuntu on my test-bed computer. Microsoft does not deserve any more of my money.

    --
    It's an operating system, not a religion.
  80. Re:microsoft == evil no matter what they do? by rdoger6424 · · Score: 1

    Microsoft would be blamed for something even if they brokered a lasting peace between Isreal and the Palestinians, Peace = prosperity = more $ for MS

    cured cancer Bill gates wants Windows to be the only disease affecting millions

    or brought global worming to a screeching halt. That's just cause Redmond is close to the ocean
    --
    "Hello 911? I just tried to toast some bread, and the toaster grew an arm and stabbed me in the face!"
  81. This is no big surprise by ScrewMaster · · Score: 1

    Microsoft 'Stealth Update' Proving Problematic

    Their regular updates often prove problematic.

    --
    The higher the technology, the sharper that two-edged sword.
  82. It's already being fixed by Meorah · · Score: 1

    http://blogs.technet.com/mu/archive/2007/09/28/issues-installing-updates-after-repairing-xp.aspx

    its cool. you can take the tinfoil hats off again... just don't let them out of your sight, you might need them again shortly.

    --
    Protector of Capitalist views,
    Meorah
  83. It's true. by Almahtar · · Score: 1

    When I first started using Linux I couldn't code for crap. I used it because it was fun learning something new. Once I started to learn to code (because I was curious, not because I had a special need to code) I started delving into things like patches.

    People like 'me 6 years ago' benefit from work submitted by 'me now' types. Yes, there are people out there that scrutinize updates. Only one person has to come up with a fix for a whole world of people to benefit.

  84. Re: windows and linux problems by Culture20 · · Score: 1

    Don't remember if I've tried it with Windows, but for most windows programs that nag for registration you just tell it you'll register by snail mail, when it asks for a printer tell it to print the registration page to a file, and delete the file at your leisure.
    MS was wise to that trick a while back. Unless you've got a corporate license version of XP or Vista, for the OS to _work_ you have to phone Microsoft support and answer some challenge-response questions. Sometimes you have to go through interrogations of why you're reinstalling Windows for the third time in a week, etc.
  85. This could be a ploy to up Vista adoption by Anonymous Coward · · Score: 0

    I am really thinking out loud here, as I've not done any research... call me a bit paranoid.

    This could be Microsoft trying to destabilize XP installations so that people might actually start using Vista more.

    It would make sense.. make XP as unstable, and people might opt to try Vista in order to gain the stability they've enjoyed with XP for the last several years.

    I certainly hope I'm way off the mark!