Microsoft downplays stealth Windows Update file updates

By Robert Vamosi, CNET News.com
Friday, September 14, 2007 11:55 AM

Microsof has sought to downplay the recent, but unpublicized, automatic update of system files on Windows XP and Vista machines as "normal behavior."

ZDNet blogger Adrian Kingsley-Hughes has been writing the last two days about a "stealth" update that occurred on his and other machines in late August, even though those machines are set to not install automatic updates. "I just don't like the idea of having updates foisted upon systems without being aware that they are coming in and having the option to postpone them," he wrote.

A Microsoft spokesperson said, "Windows Update automatically updates itself from time to time to ensure that it is running the most current technology, so that it can check for updates and notify customers that new updates are available."

"The point of this explanation is not to suggest that we were as transparent as we could have been; to the contrary, people have told us that we should have been clearer on how Windows Update behaves when it updates itself," said Nate Clinton, Program Manager Windows Update, in a blog today.

Clinton went on to say, "WU does not automatically update itself when Automatic Updates is turned off, this only happens when the customer is using WU to automatically install upgrades or to be notified of updates." That would explain what happened on the machines that Adrian Kingsley-Hughes observed. According to his blog each were set to be notified of any updates.

For the curious, the updated files on Vista are:

  • wuapi.dll
  • wuapp.exe
  • wuauclt.exe
  • wuaueng.dll
  • wucltux.dll
  • wudriver.dll
  • wups.dll
  • wups2.dll
  • wuwebv.dll
And on XP SP2:
  • cdm.dll
  • wuapi.dll
  • wuauclt.exe
  • wuaucpl.cpl
  • wuaueng.dll
  • wucltui.dll
  • wups.dll
  • wups2.dll
  • wuweb.dll

All nine files are system files related to the XP and Vista versions of Windows Update (WU) itself.

This article was originally a blog post on News.com.


WORTHWHILE?

0

0 votes
Blog

Talkback 4 comments

It seems to me that it's just a lot of bashing against Microsoft, a problem came up and all those who hated Microsoft saw an opening to just bash them without questioning them or giving them the ability to speak. Do the same with Apple and everyone's all ears for an explanation, and everyone's ready to forgive, forget and rationalize Apple's decisions - but Microsoft gets put on the guillotine. I'm not defending them, but I hate the fanboyism.

Anyways it seems the problem only comes about when Windows live update is set to either "update automatically" or "don't download but notify me"
Posted by ChooseandWatch Alex on Saturday, September 15 2007 07:55 AM

well you cant trust a clinton
Posted by joey on Saturday, September 15 2007 08:25 AM

Finally, proof the Micro$oft software is Malware.

Any software which makes system changes without permission of the computer owner is Malware.
Posted by Frank Patton on Saturday, September 15 2007 02:37 PM

Chooseandwatch Alex
"It seems to me that...Do the same with Apple...but Microsoft gets put on the guillotine. I'm not defending them, but I hate the fanboyism...."

Now exactly how did a Microsoft screwup turn in to Apple bashing? Talk about (Microsoft) fanboyism...
Posted by payshunz on Saturday, September 15 2007 09:22 PM


Tech Jobs Now!

Search for your ideal tech job:

Reviewing scheduled task inventory for Windows Server 2008 R2

Windows Server

Default installations of Windows Server 2008 R2 enumerate a number of default scheduled tasks, many of which you may not need.


Read more »



Don't CC me, I'll CC you

Blog thumbnail

Carbon paper fascinated me when I was younger. Write once, get two copies. What a great invention and work tool, I thought.

Then came e-mail, and making carbon copies of important..... by Eileen Yu

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web