±Recent Visitors

Recent Visitors to Com-Central!

±User Info-big


Welcome Anonymous

Nickname
Password

Membership:
Latest: HighestAce
New Today: 0
New Yesterday: 0
Overall: 6648

People Online:
Members: 0
Visitors: 341
Total: 341
Who Is Where:
 Visitors:
01: Home
02: Home
03: Home
04: Community Forums
05: Community Forums
06: CPGlang
07: Home
08: Home
09: Downloads
10: News Archive
11: Community Forums
12: Community Forums
13: Community Forums
14: Home
15: Community Forums
16: Community Forums
17: Community Forums
18: Your Account
19: Photo Gallery
20: Community Forums
21: Home
22: Community Forums
23: News
24: Home
25: Community Forums
26: Community Forums
27: Downloads
28: Home
29: CPGlang
30: Community Forums
31: Downloads
32: Downloads
33: Downloads
34: Downloads
35: Photo Gallery
36: Photo Gallery
37: Photo Gallery
38: Home
39: Home
40: Downloads
41: Community Forums
42: Community Forums
43: Community Forums
44: Home
45: Home
46: Downloads
47: Community Forums
48: Photo Gallery
49: Community Forums
50: Community Forums
51: Home
52: Downloads
53: Community Forums
54: Home
55: CPGlang
56: Community Forums
57: Home
58: Downloads
59: Community Forums
60: Home
61: Downloads
62: CPGlang
63: Home
64: Community Forums
65: Home
66: Photo Gallery
67: CPGlang
68: Search
69: News
70: Community Forums
71: Home
72: CPGlang
73: Community Forums
74: Home
75: Home
76: Photo Gallery
77: CPGlang
78: Home
79: Home
80: Community Forums
81: Home
82: Downloads
83: Home
84: Member Screenshots
85: Home
86: Downloads
87: Home
88: Community Forums
89: CPGlang
90: Downloads
91: Downloads
92: Community Forums
93: Photo Gallery
94: Community Forums
95: Home
96: Home
97: Community Forums
98: Community Forums
99: Downloads
100: Community Forums
101: Community Forums
102: CPGlang
103: Home
104: Home
105: Community Forums
106: Community Forums
107: Community Forums
108: Community Forums
109: Member Screenshots
110: Community Forums
111: Community Forums
112: Home
113: Home
114: Home
115: Home
116: News
117: Downloads
118: Home
119: Home
120: Downloads
121: News Archive
122: Home
123: Community Forums
124: Community Forums
125: Community Forums
126: Community Forums
127: Community Forums
128: Community Forums
129: Community Forums
130: Home
131: CPGlang
132: CPGlang
133: Community Forums
134: Home
135: Community Forums
136: Downloads
137: Photo Gallery
138: Home
139: Photo Gallery
140: Community Forums
141: Home
142: Home
143: Downloads
144: Community Forums
145: Photo Gallery
146: Community Forums
147: Downloads
148: Downloads
149: Home
150: Community Forums
151: Home
152: Home
153: Home
154: Community Forums
155: Home
156: Home
157: Community Forums
158: Community Forums
159: Community Forums
160: News
161: Home
162: CPGlang
163: Community Forums
164: Home
165: Community Forums
166: CPGlang
167: Photo Gallery
168: Home
169: CPGlang
170: Home
171: Member Screenshots
172: Home
173: Community Forums
174: Community Forums
175: Community Forums
176: Community Forums
177: Community Forums
178: Community Forums
179: Statistics
180: Home
181: Downloads
182: Home
183: Home
184: Photo Gallery
185: Downloads
186: Home
187: Community Forums
188: Community Forums
189: Community Forums
190: Community Forums
191: Community Forums
192: Home
193: Home
194: Home
195: Community Forums
196: Home
197: Community Forums
198: Home
199: Home
200: Member Screenshots
201: Your Account
202: Your Account
203: Community Forums
204: Community Forums
205: Downloads
206: Treasury
207: Community Forums
208: Community Forums
209: Community Forums
210: Community Forums
211: Community Forums
212: Home
213: Photo Gallery
214: Community Forums
215: Home
216: CPGlang
217: Treasury
218: Downloads
219: Downloads
220: Downloads
221: Community Forums
222: CPGlang
223: Home
224: Community Forums
225: Community Forums
226: Community Forums
227: Home
228: Home
229: Community Forums
230: Community Forums
231: Community Forums
232: Community Forums
233: Member Screenshots
234: Community Forums
235: Search
236: Photo Gallery
237: CPGlang
238: Member Screenshots
239: CPGlang
240: Home
241: CPGlang
242: Community Forums
243: Community Forums
244: Home
245: Community Forums
246: Photo Gallery
247: News Archive
248: CPGlang
249: Community Forums
250: Downloads
251: News Archive
252: Downloads
253: Downloads
254: Downloads
255: Community Forums
256: Community Forums
257: Community Forums
258: Community Forums
259: Home
260: Photo Gallery
261: CPGlang
262: Community Forums
263: Community Forums
264: Community Forums
265: Community Forums
266: Home
267: Home
268: Home
269: Home
270: Community Forums
271: Community Forums
272: Home
273: Community Forums
274: Community Forums
275: Community Forums
276: Home
277: CPGlang
278: CPGlang
279: Home
280: Home
281: Community Forums
282: Home
283: Home
284: Photo Gallery
285: Community Forums
286: CPGlang
287: Community Forums
288: Community Forums
289: Home
290: Home
291: Home
292: Community Forums
293: Community Forums
294: Community Forums
295: Community Forums
296: Home
297: Home
298: Photo Gallery
299: News Archive
300: CPGlang
301: CPGlang
302: Home
303: Community Forums
304: Search
305: Community Forums
306: Community Forums
307: Home
308: Home
309: Home
310: Home
311: CPGlang
312: Home
313: CPGlang
314: Home
315: Community Forums
316: Community Forums
317: Community Forums
318: Home
319: Your Account
320: Home
321: Community Forums
322: Photo Gallery
323: Community Forums
324: Home
325: Home
326: CPGlang
327: Downloads
328: Community Forums
329: Community Forums
330: Home
331: News Archive
332: Community Forums
333: CPGlang
334: Home
335: Home
336: Community Forums
337: Home
338: Home
339: Downloads
340: Community Forums
341: News Archive

Staff Online:

No staff members are online!
Microsoft Changes files on your PC without permission :: Archived
A general meeting place for all pilots!
Post new topic    Revive this topic    Printer Friendly Page     Forum Index ›  Officer's Club

Topic Archived View previous topic :: View next topic  
Author Message
Uhu_Fledermaus
Aircraft Demolition Expert

Offline Offline
Joined: Nov 28, 2004
Posts: 4369
Location: Blaricum, The Netherlands ~GMT+1
PostPosted: Sat Sep 15, 2007 10:48 am
Post subject: Microsoft Changes files on your PC without permission

Microsoft updates Windows without users' consent

By Scott Dunn

Microsoft has begun patching files on Windows XP and Vista without users' knowledge, even when the users have turned off auto-updates.

Many companies require testing of patches before they are widely installed, and businesses in this situation are objecting to the stealth patching.


Files changed with no notice to users

In recent days, Windows Update (WU) started altering files on users' systems without displaying any dialog box to request permission. The only files that have been reportedly altered to date are nine small executables on XP and nine on Vista that are used by WU itself. Microsoft is patching these files silently, even if auto-updates have been disabled on a particular PC.

It's surprising that these files can be changed without the user's knowledge. The Automatic Updates dialog box in the Control Panel can be set to prevent updates from being installed automatically. However, with Microsoft's latest stealth move, updates to the WU executables seem to be installed regardless of the settings — without notifying users.

When users launch Windows Update, Microsoft's online service can check the version of its executables on the PC and update them if necessary. What's unusual is that people are reporting changes in these files although WU wasn't authorized to install anything.

This isn't the first time Microsoft has pushed updates out to users who prefer to test and install their updates manually. Not long ago, another Windows component, svchost.exe, was causing problems with Windows Update, as last reported on June 21 in the Windows Secrets Newsletter. In that case, however, the Windows Update site notified users that updated software had to be installed before the patching process could proceed. This time, such a notice never appears.

For users who elect not to have updates installed automatically, the issue of consent is crucial. Microsoft has apparently decided, however, that it doesn't need permission to patch Windows Updates files, even if you've set your preferences to require it.

Microsoft provides no tech information — yet

To make matters even stranger, a search on Microsoft's Web site reveals no information at all on the stealth updates. Let's say you wished to voluntarily download and install the new WU executable files when you were, for example, reinstalling a system. You'd be hard-pressed to find the updated files in order to download them. At this writing, you either get a stealth install or nothing.

A few Web forums have already started to discuss the updated files, which bear the version number 7.0.6000.381. The only explanation found at Microsoft's site comes from a user identified as Dean-Dean on a Microsoft Communities forum. In reply to a question, he states:

"Windows Update Software 7.0.6000.381 is an update to Windows Update itself. It is an update for both Windows XP and Windows Vista. Unless the update is installed, Windows Update won't work, at least in terms of searching for further updates. Normal use of Windows Update, in other words, is blocked until this update is installed."

Windows Secrets contributing editor Susan Bradley contacted Microsoft Partner Support about the update and received this short reply:


"7.0.6000.381 is a consumer only release that addresses some specific issues found after .374 was released. It will not be available via WSUS [Windows Server Update Services]. A standalone installer and the redist will be available soon, I will keep an eye on it and notify you when it is available."

Unfortunately, this reply does not explain why the stealth patching began with so little information provided to customers. Nor does it provide any details on the "specific issues" that the update supposedly addresses.

System logs confirm stealth installs

In his forum post, Dean-Dean names several files that are changed on XP and Vista. The patching process updates several Windows\System32 executables (with the extensions .exe, .dll, and .cpl) to version 7.0.6000.381, according to the post.

In Vista, the following files are updated:

1. wuapi.dll
2. wuapp.exe
3. wuauclt.exe
4. wuaueng.dll
5. wucltux.dll
6. wudriver.dll
7. wups.dll
8. wups2.dll
9. wuwebv.dll

In XP, the following files are updated:

1. cdm.dll
2. wuapi.dll
3. wuauclt.exe
4. wuaucpl.cpl
5. wuaueng.dll
6. wucltui.dll
7. wups.dll
8. wups2.dll
9. wuweb.dll

These files are by no means viruses, and Microsoft appears to have no malicious intent in patching them. However, writing files to a user's PC without notice (when auto-updating has been turned off) is behavior that's usually associated with hacker Web sites. The question being raised in discussion forums is, "Why is Microsoft operating in this way?"

How to check which version your PC has

If a system has been patched in the past few months, the nine executables in Windows\System32 will either show an earlier version number, 7.0.6000.374, or the stealth patch: 7.0.6000.381. (The version numbers can be seen by right-clicking a file and choosing Properties. In XP, click the Version tab and then select File Version. In Vista, click the Details tab.)

In addition, PCs that received the update will have new executables in subfolders named 7.0.6000.381 under the following folders:

c:\Windows\System32\SoftwareDistribution\Setup\ServiceStartup\wups.dll
c:\Windows\System32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll

Users can also verify whether patching occurred by checking Windows' Event Log:

Step 1. In XP, click Start, Run.

Step 2. Type eventvwr.msc and press Enter.

Step 3. In the tree pane on the left, select System.

Step 4. The right pane displays events and several details about them. Event types such as "Installation" are labeled in the Category column. "Windows Update Agent" is the event typically listed in the Source column for system patches.

On systems that were checked recently by Windows Secrets readers, the Event Log shows two installation events on Aug. 24. The files were stealth-updated in the early morning hours. (The time stamp will vary, of course, on machines that received the patch on other dates.)

To investigate further, you can open the Event Log's properties for each event. Normally, when a Windows update event occurs, the properties dialog box shows an associated KB number, enabling you to find more information at Microsoft's Web site. Mysteriously, no KB number is given for the WU updates that began in August. The description merely reads, "Installation Successful: Windows successfully installed the following update: Automatic Updates."

No need to roll back the updated files

Again, it's important to note that there's nothing harmful about the updated files themselves. There are no reports of software conflicts and no reason to remove the files (which WU apparently needs in order to access the latest patches). The only concern is the mechanism Microsoft is using to perform its patching, and how this mechanism might be used by the software giant in the future.

I'd like to thank reader Angus Scott-Fleming for his help in researching this topic. He recommends that advanced Windows users monitor changes to their systems' Registry settings via a free program by Olivier Lombart called Tiny Watcher. Scott-Fleming will receive a gift certificate for a book, CD, or DVD of his choice for sending in a comment we printed.

I'll report further on this story when I'm able to find more information on the policies and techniques behind Windows Update's silent patches. Send me your tips on this subject via the Windows Secrets contact page.

Scott Dunn is associate editor of the Windows Secrets Newsletter. He is also a contributing editor of PC World Magazine, where he has written a monthly column since 1992, and co-author of 101 Windows Tips & Tricks (Peachpit) with Jesse Berst and Charles Bermant.

source => windowssecrets.com/com...13/#story1

just tought to inform you all


fled
Back to top
View user's profile ICQ Number MSN Messenger Photo Gallery
Shades
Forum Tree-Rat

Offline Offline
Joined: Mar 07, 2005
Posts: 6475
Location: 3rd Branch up, 'Ye Olde Oak', Green Wood.
PostPosted: Sat Sep 15, 2007 1:23 pm
Post subject: Re: Microsoft Changes files on your PC without permission

Been watching this developing on BYO as well.
lolol
All the Linux guys have been like Cheshire Cats this week.
LOL

_________________
Skwerl's place.

Com-Central's cutest, fluffiest, twitchiest, tail.
CPU > Intel i9-9900k (o/c 4.9GHz); COOLING > BeQuiet! Dark Rock Pro 4;
MOBO > ASUS PRIME Z390-A; RAM > 2x32GB Corsair LPX 2666MHz;
GPU > Gigabyte GEFORCE GTX650Ti PCI-e 3.0 2Gb GDDR5;
AUDIO > Creative X-Fi Xtreme Music (plus - Universal Audio UAD2 Quad Custom accelerator);
HDD > 3x1TB+ M.2. SSDs; LCD > DELL - S2419HGF (1920x1080);
PSU > 650W be quiet Straight Power 11 - 80+ Gold;
CASE > BeQuiet! SILENT BASE 601; OS > Windows 11 Home Advanced (64-bit).
Back to top
View user's profile Visit poster's website ICQ Number
JG300-Stoopy
Power User

Offline Offline
Joined: Jan 05, 2005
Posts: 5840
Location: Group W bench
PostPosted: Sat Sep 15, 2007 1:34 pm
Post subject: Re: Microsoft Changes files on your PC without permission

Hey I was thinking of de-fraggin' my HD tonight but now that I think about it it would be COOL if they can just go ahead and do that bit of maintenance for me as well....

_________________
"Once your reputation is ruined, you can live quite freely."
Back to top
View user's profile Visit poster's website Photo Gallery
Uhu_Fledermaus
Aircraft Demolition Expert

Offline Offline
Joined: Nov 28, 2004
Posts: 4369
Location: Blaricum, The Netherlands ~GMT+1
PostPosted: Sat Sep 15, 2007 1:38 pm
Post subject: Re: Microsoft Changes files on your PC without permission

Just posted this to keep ya fella's updated, and your system in the same go as iut looks ..............alltough personally I don't think it's the right way to do by MS
Back to top
View user's profile ICQ Number MSN Messenger Photo Gallery
JG300-Stoopy
Power User

Offline Offline
Joined: Jan 05, 2005
Posts: 5840
Location: Group W bench
PostPosted: Sat Sep 15, 2007 1:41 pm
Post subject: Re: Microsoft Changes files on your PC without permission

Not defending this in the least...but thinking out loud, I'd say if it doesn't show up on the "Add/Remove Programs" list like other security patches, it would be a definite bad thing.....just in case someone had to troubleshoot a prgram or patch conflict and couldn't remove it to see if it's a cause of a problem.

_________________
"Once your reputation is ruined, you can live quite freely."
Back to top
View user's profile Visit poster's website Photo Gallery
HA_needacar
Power User

Offline Offline
Joined: Feb 13, 2005
Posts: 52
Location: Michigan
PostPosted: Sat Sep 15, 2007 8:47 pm
Post subject: Re: Microsoft Changes files on your PC without permission

Sony BMG got in trouble for this a while ago.....

_________________
Back to top
View user's profile AIM Address MSN Messenger
Shadow_Bshwackr
Janitor

Offline Offline
Joined: Jan 21, 2005
Posts: 7019
Location: Central Illinois, USA
PostPosted: Sun Sep 16, 2007 10:52 am
Post subject: Re: Microsoft Changes files on your PC without permission

- Shades
Been watching this developing on BYO as well.
lolol
All the Linux guys have been like Cheshire Cats this week.
LOL


I bet they are!...lol

I don't agree in no way shape or form to let anyone update any files without my permission. While MS updated with 'no harm' files, it's the principal of the situation that should be in the forefront of everyone's mind. How would you like it if the 'bank' moved funds of your's around because they thought 'it was needed and they didn't think you would mind' ?

Another reason to run Linux ( I use www.linuxmint.com ) for your everyday needs and run 'the other one' for Gaming... and yes, you CAN dual boot...lol Wink
Back to top
View user's profile Visit poster's website Photo Gallery
Shades
Forum Tree-Rat

Offline Offline
Joined: Mar 07, 2005
Posts: 6475
Location: 3rd Branch up, 'Ye Olde Oak', Green Wood.
PostPosted: Sun Sep 16, 2007 12:10 pm
Post subject: Re: Microsoft Changes files on your PC without permission

Totally agree with the general sentiment.
If I choose to disable auto-update it's for a reason, and I don't want anyone bypassing that without my knowledge and permission;
That's what we have hackers for.

_________________
Skwerl's place.

Com-Central's cutest, fluffiest, twitchiest, tail.
CPU > Intel i9-9900k (o/c 4.9GHz); COOLING > BeQuiet! Dark Rock Pro 4;
MOBO > ASUS PRIME Z390-A; RAM > 2x32GB Corsair LPX 2666MHz;
GPU > Gigabyte GEFORCE GTX650Ti PCI-e 3.0 2Gb GDDR5;
AUDIO > Creative X-Fi Xtreme Music (plus - Universal Audio UAD2 Quad Custom accelerator);
HDD > 3x1TB+ M.2. SSDs; LCD > DELL - S2419HGF (1920x1080);
PSU > 650W be quiet Straight Power 11 - 80+ Gold;
CASE > BeQuiet! SILENT BASE 601; OS > Windows 11 Home Advanced (64-bit).
Back to top
View user's profile Visit poster's website ICQ Number
Shadow_Banshee
Power User

Offline Offline
Joined: Feb 03, 2005
Posts: 575

PostPosted: Thu Sep 20, 2007 8:52 pm
Post subject: Re: Microsoft Changes files on your PC without permission

can we sue um? i'll accept a couple of k lol

_________________
Lay me place and bake me Pie
I'm starving for me Gravy
Back to top
View user's profile
Display posts from previous:   
Post new topic    Revive this topic    Printer Friendly Page    Forum Index ›  Officer's Club
Page 1 of 1
All times are GMT - 6 Hours

Archive Revive
Username:
This is an archived topic - your reply will not be appended here.
Instead, a new topic will be generated in the active forum.
The new topic will provide a reference link to this archived topic.