Security Update, February 13, 2002 (MSXML 4.0)

[James L Szatkowski, PE]

I keep getting a windows update alert (right hand tray) saying I have an
update to install. It's the subject one (4.5MB "
This update resolves the "XMLHTTP Control Can Allow Access to Local Files"
security vulnerability in Microsoft XML (MSXML) 4.0 and is discussed in
Microsoft Security Bulletin MS02-008. Download now to help prevent a
malicious user from reading the files on your computer when you visit a
specially malformed Web site.

More information for this update can be found at
http://www.download.windowsupdate.com/msdownload/update/v3/static/RTF/en/5255.htm)

Problem is - that it keeps coming back, installing itself and rebooting!
Every time I shut it down, it shows up saying an update was recently
installed - I click the balloon, acknowledging the install and within
seconds comes back and says it needs to be installed again!

Help please....

Thanks!
Jim Szatkowski

(e-mail address removed)

 

[Guest]

I am experiencing the same problem with one of 6 windows 2000 machines. Very
frustrating and this update requires a restart and annoys the user with a pop
up message until they comply. The user is now highly distrustful of Windows
Updates and so this negates the investment in trust and reliability I had
built up previously. ...looking for a solution.

 

[Sky King]

Hi, Dale (and James);

For whatever reasons, it seems that update isn't being completely installed
on the systems showing this error. Cause could be various items, ranging
from an overly aggressive antivirus scanning program to network/proxy
settings to a seldom-used unregistered supporting file, etc., etc. Rather
than spend the time trying to investigate (assuming this is and will be a
one time condition) it is likely easiest and fastest to just manually
download and install that particular update. You can download it from
http://www.microsoft.com/windows/ie/downloads/critical/q317244/download.asp
(the top item for version 4.0 is apparently the one causing the problem).

As for the user losing confidence in Windows Update, I'd recommend showing
him/her all the updates that have been already safely installed and
reminding that user that this one-time event shouldn't cloud the entire sky.


BTW, I am a bit curious as to why this update from 2002/2003 is just now
arriving on those two systems. Recently rebuilt? Just wondering if the
reason why this update wasn't already installed could be contributing to why
those two computers are having issues with it now.

--

....Sky

Tom "Sky" King
============

 

[Guest]

Hi Sly,

Don't know why and honestly I'm not going to be paid from a small business
to find out; there just isn't a cache of dollars to chase out such things.
Next week when I'm on site I'll do the install and report back what the
result was.

BTW if you scroll down the list of threads here you will find multiple
examples of unnanswered threads on this very same update.

If you've ever worked with end users, and especially a woman receptionsist,
their loyalties change with the wind. Unfortunately this same stereotypical
person is highly influential as someone who gabbs frequently and so spreads
the bad news to the entire staff and owner. This is why this problem has
been so frustrating to deal with. If you have any more of the koolaid please
send some our way and the stuff I'm drinking doesn't magically convince
people that problems aren't reallly problems.

Regards - Dale