Microsoft Offers Manual Fix to 'Stealth' Windows Update Bug

By Scott M. Fulton, III | Published September 28, 2007, 11:10 AM

It turned out to be an insignificant problem after all, rather than something on the order of a rootkit: the discovery that Microsoft's Windows Update feature updates itself even when users turn off "automatic updates" - a fact that Microsoft had actually documented quite well, but which few had apparently read. But now, a claim that the self-updating update subsequently unregistered Microsoft's Windows Update drivers in XP-based systems forced its own drivers to become unregistered.

The claim comes from Windows Secrets writer Scott Dunn, who wrote the initial article about what he called a "stealth update." After using an XP install disk to roll the operating system back to a previous state, he discovered the system's capability to install updates retrieved from the Internet would fail.

The solution, Dunn discovered, was to re-register the drivers replaced by the self-updating update feature manually, using the regsvr32 utility from the command line.

BetaNews experienced similar behavior on two occasions in August, on separate XP-based systems where upgrades to our hard drives triggered failures in our system activation - this on fully-licensed, separately purchased copies of XP Professional SP1. Both times, I found myself rolling back Windows to the original SP1 state, then upgrading Windows Update to "Microsoft Update" - the new version that (supposedly) works well in Firefox. Then I downloaded once again several security rollups and patches, only to find they would not install.

While the discovery gave me headaches, I declined to write a story about it...since, to tell you the truth, if I did stories every time I had something foul up for us in Windows XP, I'd never get anything else published. In any event, with the aid of available MSDN documentation, I was able to solve the problem in about 90 minutes' time, having been inspired to unregister and re-register drivers - which I'd done before in similar circumstances. It worked, and I put away my aspirin bottle.

Early this morning, Microsoft Windows Update program manager Nate Clinton stated on his team blog that he had found the culprit: Naturally when re-installing an older version of the operating system on top of the newer version, the newer updates driver (WUPS2.DLL) remains behind. After the program that's supposed to use the newer updates driver ("Microsoft Update," as opposed to "Windows Update") is re-installed, it sees the newer driver and leaves it alone...not realizing that its registry entries are missing.

Clinton's solution was simple - even more so than the one I was satisfied with: First stop the Windows Update service (WUAUSERV), which you can do either from the command line (net stop wuauserv) or from the Computer Management window. Then from the command line, re-register the newer updates driver with one instruction: regsvr32 wups2.dll. Restart the Update Service, and it's done.

It's not the type of solution that a novice or even general Windows user would be comfortable with doing by himself, so Microsoft will have to work out a better method. Still, with as many everyday glitches as XP is known to have - and with Vista even more so - astonishingly few have been traced back to evidence of conspiracies. More often, it's someone having overlooked an instruction in an installation script, which appears to have been the case here.

Now if Microsoft can solve the problem of its keyboard driver insisting on uninstalling Logitech mouse drivers in mid-session, I could cut down on my first aid expenses, and maybe lower my blood pressure.

Comments

Dial-a-fix probably fixes any side effects these updates caused.

http://wiki.djlizard.net/Dial-a-fix

Score: 0

|

Its really quite simple: Block all MS IPs with your router and only allow them access when YOU choose to update. OPPS forgot Vista will cripple itself if you do that.... Guess that's reason number 127 for not using Vista isn't it?

Score: 0

|

More like reason #1270

Score: 0

|

Score: 0

|

This issue got way blown out of proportion, ie. making a mountain out of a molehill.

Score: 0

|

Score: 0

|

Have you ever even tried a Repair operation on a Windows install? It's a crap-shoot any way you look at it since there is rarely a reliable registry backup and a high risk of system file mismatches.

If a system restore point isn't available,it's almost always better to clean install.

Anyway, the point the other poster made is that the issue isn't a bug, it's an expected function, and it's attempts to circumvent it that is causing problems.

Score: 0

|

It's not a bug, it is by design.

Score: 0

|

Yeah, the pretty much summarizes the entire M$ OS line-up. Bug-ware by design.

Score: 0

|

I for one, dont care if the update service updates itself .. as for the unfounded acusations ... dont care.

Now if Firefox would only not freeze when i see flash and would not eat up 200000 mb of memory.

Score: 0

|

That happened to me with latest Flash release, then i rolled back version... things back to normal....

Score: 0

|

Careful with the rolling back of things. Look how it messed up the Windows Update.

Score: 0

|

Yah, real funny.

Score: 0

|

Before it can tackle Windows, Chrome must leave Safari in the dust

It's a little browser with dreams of becoming a bigger operating system some day. But while it's chasing Microsoft's dreams, Chrome's tail is being chased by Apple.

Silverlight 3 goes live on Microsoft's servers

Microsoft's answer to Adobe's Flash is (unofficially) here, with prospects of higher-speed, higher-resolution video and for the first time, 3D.

Best Buy-brand TVs to get TiVo

A new alliance will place the retailer's own brand alongide the manufacturers, and could also lead to future partnerships on services.

Three Android phones on the way from T-Mobile in 2009

T-Mobile's myTouch 3G, launched Wednesday, will be followed by two more Android phones later this year, but neither of them will be HTC's Hero.

LTE still lacks a voice

The 4G Wireless standard that Verizon hopes to show off before this year is out is still at a loss for (spoken) words.

T-Mobile's strategy to combat Apple's iPhone with Android

With a trio of Android phones now in the pipeline for 2009, T-Mobile hopes to break the iPhone's emerging stranglehold.

EC's Reding: Government should act as broker for media downloads

If Internet media services don't step up and build an attractive way for users to start paying for downloads, a commissioner says, government may do the job instead.

Sony TVs get Netflix, still no PS3

Though it's coming in behind LG, Samsung, and Microsoft, Sony will begin to offer Netflix streaming, too.

Google Chrome OS: Too little, too early

Carmi Levy: Wide Angle Zoom Don't start the revolution just yet, says Carmi, who isn't so certain Chrome OS will be the "Windows Killer."

GAO pen test brings the hammer down on federal rent-a-cops

But are the computers to blame for the contract-guard fiasco at FPS?

What's Next: Chrome OS will have at least some friends in high places

Also: South Korea takes another round of DDoS abuse, and Neelie Kroes and Steve Ballmer may shake hands before she exits stage left.

Data sharing among online advertisers: Is sanity in sight?

Lockdown with Angela Gunn In the middle of a 15-page plea not to get regulated, a spark of smart thinking.

PST Recovery Software 12.0

July 9 - 11:34 PM ET

Unistal Data Recovery 12.08.06

July 9 - 11:09 PM ET

BKF Repair 3.0

July 9 - 10:54 PM ET

Vuze for Windows 4.2.0.4

July 9 - 6:26 PM ET

UltraVNC 1.0.6.4

July 9 - 6:05 PM ET

WildBit Viewer 5.5 Beta 3.0

July 9 - 5:44 PM ET