Network Security, Patch/Configuration Management, Vulnerability Management

Silent Microsoft update blamed for Windows Update issue

A Windows expert has blamed the silent support update that Microsoft deployed in the past two months for PCs running Windows XP with Windows Update being unable to download updates correctly.

Scott Dunn, associate editor of the Windows Secrets newsletter, said on Thursday that the update, deployed during July and August, has switched off updates for XP users who have repaired their PCs from CD-ROMs.

Microsoft's most recent 80 patches are marked as undeliverable if a user has repaired XP system files from a CD-ROM, thus setting Internet Explorer to the version shipped with the PC.

Microsoft Product Manager Nick White said on Thursday, posting on the Windows Vista Team Blog, that the issue appears to be rare.

“The issue does not look to be widespread and occurs in rather exceptional circumstances. It occurs because the Windows XP Repair CD replaces all system files, including Windows Update, with older versions of those files,” he said. “Meanwhile, the most current version of Windows Update (which is already present on the system) includes a file that is not present in the Windows Update image on the Repair CD. After performing the repair, the new file remains on the system and creates a registry mismatch, causing subsequent installation of some updates to fail.”

Nate Clinton, Windows Update program manager, said on the Microsoft Update Product Team Blog today that the issue results from a file installed in the latest update.

“Here's what we found: when an XP repair CD is used, it replaces all system files (including Windows Update) on your machine with older versions of those files and restores the registry. However, the latest version of Windows Update includes wups2.dll that was not originally present in Windows XP," he said. "Therefore, after the repair install of the OS, wups2.dll remains on the system, but its registry entities are missing. This mismatch causes updates to fail installation.”

Clinton recommended that users employ workarounds, including manual registration of files.

A Microsoft spokesperson said today that customers experiencing the issue are urged to contact customer service or visit support.microsoft.com/security.  

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.