Which security patch NOT to install

K

Kim Kruse

Hi,

I'm having serious problems with one or more of the security... here goes:

Last week I installed all suggested "important updates and servivepacks"
through windows update. After doing so I couldn't reboot. Well the PC
rebooted just to the end of "windows is starting" and then it hung and
rebooted... over and over again.

So I did a "repair install" (3 times) and then it finally rebooted. Then I
had to reinstall IE, office etc.

Yesterday I tried to update my machine again and this time I didn't select
Microsoft VM for virtual machine and the mediaplayer but installed the rest.
Same s***. Had to do a repair install (only 2 times this time).

So now I wonder... are there any known issues with one or more of the KB's?

Here is a list of the available updates through windows update:

KB828026, KB832483, KB828028, KB828749, Q329115, KB828035, KB825119,
KB826232, KB824105, KB823182, KB824141, KB824146, 816093

I would really really like some help on this problem. I hate my computer is
not secured and it's very annoying that I can't just use Windows update.

Any help appreciated.

Best regards
Kim
 
A

Alias

When you downloaded and installed the updates, did you have your anti virus
file scan enabled? If so, try it with it disabled.

Alias
 
K

Kim Kruse

Hi,

Thanks for your reply. Shouldn't my AV (PC-Cillin) give me some kind of
warning if it did anything to the downloads? It's not that I don't trust you
but I rather not have to do all the repair install and reinstalling and
programs that doesn't work after the reinstall. It's my working machine with
all my work on and I'm really afraid to loose my work (lot's of web sites
and programming)

Thanks
Kim
 
A

Alias

Kim Kruse said:
Hi,

Thanks for your reply. Shouldn't my AV (PC-Cillin) give me some kind of
warning if it did anything to the downloads? It's not that I don't trust you
but I rather not have to do all the repair install and reinstalling and
programs that doesn't work after the reinstall. It's my working machine with
all my work on and I'm really afraid to loose my work (lot's of web sites
and programming)

Thanks
Kim

Think about what your AV does. It checks *every* single file you download
and this can lead to the effects you are getting. I have been downloading
updates for years with my AV file scan disabled with no problems at all.

If you are afraid of losing your work, back it up. This is something you
should routinely do anyway. Back up is a computer user's best friend. You do
need all the security updates on Windows Update if you want to have a secure
computer.

Alias
 
K

Kim Kruse

Hi Alias,

You're probably right but I've been doing updates with my AV set to real
time scan for years without problems. It's just lately I'm having this VERY
annoying problem which lead me to think something is wrong with my W2K
installation (SP4 BTW)

As a curriosity my "set program access and defaults" aren't working
anymore... don't know why.

Anyway... I know which updates I need and I wondred... what if I install one
at the time. If I get into trouble shouldn't I be able to log on in "safe
mode" and from there uninstall an update causing problems?

Kim
 
A

Alias

Kim Kruse said:
Hi Alias,

You're probably right but I've been doing updates with my AV set to real
time scan for years without problems. It's just lately I'm having this VERY
annoying problem which lead me to think something is wrong with my W2K
installation (SP4 BTW)

As a curriosity my "set program access and defaults" aren't working
anymore... don't know why.

Anyway... I know which updates I need and I wondred... what if I install one
at the time. If I get into trouble shouldn't I be able to log on in "safe
mode" and from there uninstall an update causing problems?

Kim

Do what you want. I have already told you what I would do. If one of your
updates didn't install correctly, updating again (with your AV file scan
disabled) should fix it.

Alias
 
K

Kim Kruse

Alias,

"Update again"... You seem to forgot about my original post. If one of
updates don't install I'm prevented from doing anything but HOPING a repair
install will work and reinstall IE, Office etc. That's exactly what I'm
trying to avoid. (I've backed up my data... on different drive) It's not
that much fun reinstalling OS and programs not to mention the huge numbers
of patches, extensions etc for the different programs. Anyway... I "used" to
be able to update my machine without problems but that's not the case now.
Else I wouldn't be posting here, would I?

So I'm sorry to have bothered you with my stupid questions and (maybe
healthy) doubt. I'm mean it works for you.

Thanks
Kim
 
A

Alias

Another thing I thought of: what date does your computer say it is?

If you do what I told you to do, you should have no problems downloading all
the updates. If you want to "debate" me, sorry, I'm not interested.

Alias
 
C

Colon Terminus

Hi Kim,

You need to do several things. First of all, you don't need to install the
patch the very day it comes out. Wait a few days.

Read the knowledge base articles for each patch.
Ask yourself "Does this pertain to my system?"
Ask yourself "Is this going to fix a problem I have?"

If the answer to both questions is "Yes.", then explore the Google
Newsgroups searching for others' experience with the patch. If all looks
good, then download and install that individual patch. Use your system the
way you normally do and if it exhibits erratic behaviour, then uninstall the
patch.

Never just blanketly install every patch issued by Microsoft. Doing so will
inevitably lead to problems; and when problems arise you won't know which
patch created the problem.

Keep your anti-virus software up to date and run it frequently.
Keep your scumware removal software up to date and run it frequently.
 
K

Kim Kruse

Alias,
Another thing I thought of: what date does your computer say it is?

My date says march 24 year 2004...?
If you do what I told you to do, you should have no problems downloading all
the updates.
my only question to your solution is "what if it doesn't work"... (well, I
know the drill. Repair install with all the work included or worst case
scenario... a complete reinstall) So what I'd like to know is:

If it fails and my computer won't reboot (or plain boot) will I be able to
remove updates through a "safe mode" logon. BTW will that work if a normal
boot don't?
If you want to "debate" me, sorry, I'm not interested.
I apologise. I was just the "do what you want" that tickled my fingers a bit
:blush:). I'm just looking for answers and usable solutions and as little
problems as possible. I really don't need reinstalling. Last time it took me
all my sparetime for a week before everything was as I wanted it to be.

Kim
 
A

Alias

Colon Terminus said:
Hi Kim,

You need to do several things. First of all, you don't need to install the
patch the very day it comes out. Wait a few days.

Read the knowledge base articles for each patch.
Ask yourself "Does this pertain to my system?"
Ask yourself "Is this going to fix a problem I have?"

Terrible advice. *All* security patches are necessary. IOW, all "critical
updates" are necessary. Critical updates are not for any problem you have,
nor to fix same.

Alias
 
A

Alias

None of the critical updates are unnecessary. None. If you turn off your AV
scanner, you should have no problem.

I asked about the date cause if it was, say, 2010, Windows Update won't
work. That happened to a client's computer.

Alias
 
K

Kim Kruse

Hi Terminus,
You need to do several things. First of all, you don't need to install the
patch the very day it comes out. Wait a few days.
OK. I'm not really into windows. I just use it as my web dev platform
(Dreamweaver and Photoshop + PHP) so I try to keep windows up to date using
the auto functions like windows update. I really thought that I could depend
on it... I mean, "keep your computer up to date". But it make sense what you
say.
Read the knowledge base articles for each patch.
Ask yourself "Does this pertain to my system?"
Ask yourself "Is this going to fix a problem I have?"
Good approach. I'll give it a try. But when MS write stuff like "a hacker
can blah blah" I get a little scared and figures " I better install right
away".
If the answer to both questions is "Yes.", then explore the Google
Newsgroups searching for others' experience with the patch. If all looks
good, then download and install that individual patch. Use your system the
way you normally do and if it exhibits erratic behaviour, then uninstall the
patch.

Never just blanketly install every patch issued by Microsoft. Doing so will
inevitably lead to problems; and when problems arise you won't know which
patch created the problem.
Hmmm... maybe that the culprit. I'm updating too much :blush:)
Keep your anti-virus software up to date and run it frequently.
Keep your scumware removal software up to date and run it frequently.
My PC-Cillinn is great. It auto update almost every day. I've Lavasoft
Adware and Spybot with latest definitions etc. Run them a least once a week.
Besides that I don't have Kazaa etc, games, players installed on my system.
It's a working machine and I like it that way.

That's also why I get rather upset when something like updating through the
"right channels" causes a machine that won't reboot.

Anyway... thanks for your explanation and time.

Kim
 
C

Colon Terminus

Alias said:
Terrible advice. *All* security patches are necessary. IOW, all "critical
updates" are necessary. Critical updates are not for any problem you have,
nor to fix same.

Alias

I'm going to follow your earlier statement and "not debate you". I'm simply
going to add your ID to the list of "Unhelpful Idiots who speak with
authority about things which they know little or nothing".

You need to accumulate some "real world" experience before you are qualified
to give advice to people whose computers are broken beyond repair by the
installation of unnecessary, for them, Microsoft patches.

Good luck in your endeavors.
 
A

Alias

Colon Terminus said:
I'm going to follow your earlier statement and "not debate you". I'm simply
going to add your ID to the list of "Unhelpful Idiots who speak with
authority about things which they know little or nothing".

You need to accumulate some "real world" experience before you are qualified
to give advice to people whose computers are broken beyond repair by the
installation of unnecessary, for them, Microsoft patches.

Good luck in your endeavors.

All I can say is that you provided her no solution for her problem and I
did.

If you think some critical updates are necessary and some are not, that's
your perogative. Notice I said "critical updates" not *all* updates.

Alias
 
A

Alias

If you had your computer set up to do automatic updates whilst your AV file
scanner was enabled ... what happened? The situation you're in now?

Alias

:

I just use it as my web dev platform
 
K

Kim Kruse

Hi Alias,

I'm sorry... maybe I didn't express myself clearly. I use Windows update but
I run it manually by clicking start>windows update and the select
(translated from Danish) "important updates and service packs".

I've done that with my AV set to real time scan. No problems in the past and
no problems now... apparently! I just have this holdnig back as I've already
did repair install twice in a week and I rather not again... or even worse a
complet reinstall if things go completly wrong.

Right now I'm wondering if I'll be able to repair... both times one repair
install didn't work. I had to do it 2 and 3 times before I "got through"
That's also why I wonder if I could delete from "safe mode".

Thanks
Kim

BTW... I'm a male... just Danish :blush:)
 
A

Alias

At this point I don't know what to say. Does Windows Update show this
updates as already downloaded? Is the update in your Add/Remove in the
Control Panel?

Alias
 
C

Charles Otstot

Kim Kruse said:
Hi Alias,

I'm sorry... maybe I didn't express myself clearly. I use Windows update but
I run it manually by clicking start>windows update and the select
(translated from Danish) "important updates and service packs".

I've done that with my AV set to real time scan. No problems in the past and
no problems now... apparently! I just have this holdnig back as I've already
did repair install twice in a week and I rather not again... or even worse a
complet reinstall if things go completly wrong.

Right now I'm wondering if I'll be able to repair... both times one repair
install didn't work. I had to do it 2 and 3 times before I "got through"
That's also why I wonder if I could delete from "safe mode".

Thanks
Kim
<snip>
Kim,

At this point, it looks like you have a couple of issues you're concerned
about:

1) Downloading updates safely.
2) Installing those same updates safely.

Accomplishing the above is relatively straightforward, albeit a bit
cumbersome. As Alias has suggested, make a full-system backup (if possible)
prior to starting. This will minimize any headaches in the event you do have
problems.

1) Review the updates shown for your system (as suggested by Colonis). Note
which updates apply to your situation.

2) If an update applies to your system, do a quick google to see what issues
you might encounter if you install that particular update.
This includes "critical updates". Make sure to try and determine whether
there are any known issues with your currently installed
applications (i.e. Dreamweaver and PhotoShop).

3) Determine whether it is safe to install the researched update. Note: If
you determine that a critical update is not safe to install
in your environment, or does not apply to you...*don't* install it.
*If* the critical update is security-related, applies to you
and appears unsafe to install, either contact MS at 1-888-PCSAFETY
(their Security and AV free support center) or read the
associated Security Bulletin to determine what workarounds may be
available to you. If there is no workaround and MS (or
an application vendor) deems the update unsafe for your environment,
only you can make a real determination of your own
vulnerbality and determine whether installing the update poses less
risk to *you* than not installing. If the update is not
security-related, wait until you have received some assurance from MS
(email support) or the conflicting SW vendor as to how
this update can be safely installed. Since the update will not be
security-related, you can safely assume that you are not leaving
your system vulnerable to hackers in the interim.

4) Download (with AV running) the updates you have deemed necessary and
safe. Do NOT elect to download and install.
Select "Save to disk" and only download the update (or in some
cases, the installer for the update). This will permit you
to verify that your downloads are virus-free.

5) Once you have all the updates downloaded, shutdown and disable your AV
(you can disconnect from the network if you are
concerned about viruses or worms getting to you in the the interim)
and install the updates individually, rebooting between
updates. Disable any screensavers you have configured. Shutdown any
unnecessary services you may have running
(unnecessary means any service not required to keep the PC up and
running). Close any open applications (check the
System Tray as well, lots of little things like to semi-hide in the
S.T.). These are long-standing Microsoft recommendations
for installing software (you can verify this to a degree whenever
you perform an install, the admonitions for shutting down
unnecessary software are in the welcome screen for virtually every
install you'll ever perform) and should be followed
whenever possible. Doing so will provide you with the best chance of
installing a given software package (including hotfixes)
without incident. Since the inception of Windows 3.1 (and later NT
and 95), I've had fewer than 50 system crashes when
installing software in this manner (I don't know how many 1000's of
installs that would be, guessing an average of 6-8 a day
for about 13 years, so the percentage is very low).
It is generally safest to install the updates chronologically, but
occasionally updating component "B" of component "A" will
cause problems. Note and plan for any dependencies. This will help
ensure that you can install the updates safely.

6) Once you have installed all the updates (and successfully rebooted
after each), you can reenable your antivirus and continue to
work safely.

You asked about uninstalling updates in safe mode. This will be possible for
some updates but not others. Make certain you determine what (if any)
uninstall procedures apply to a given update. Generally, if the update
includes an uninstall (not all do, for example, Java Machine updates cannot
be uninstalled), you can uninstall in safe mode if necessary. NOTE: This is
a general rule of thumb only, read,read, read the information provided with
the update to see what you can glean.

I know this may seem unwieldy, but it will give you the absolute best chance
of successfully installing the updates you need.

Charlie
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top