Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Re: IE7 cumulative updates, KB944533

6 views
Skip to first unread message

Robert Aldwinckle

unread,
Mar 13, 2008, 1:20:21 PM3/13/08
to
"markjoy" <mar...@discussions.microsoft.com> wrote in message
news:ADD863FB-A6C0-4F1F...@microsoft.com...
> Over the past month, I have been issued with a total of six of these updates,
> all with the same number.
> 1) Is this normal?


It could be. Are you switching back to IE6? Trying the IE8 beta?


> 2) If so, what gives? By that I mean it would be far easier to track updates
> if the number were revised each time.


The most likely explanation is that one or more of the modules listed here
either aren't changing during the required boot or are somehow being changed later.

http://support.microsoft.com/kb/944533

>
> Out here in semi-ignorant user-land, I'm left with the impression that
> somehow this update is mysteriously vanishing, and continually needs
> re-applying.
>
> Thanks for any answers.


HTH

Robert Aldwinckle
---


markjoy

unread,
Mar 13, 2008, 3:36:00 PM3/13/08
to

"Robert Aldwinckle" wrote:

> No, I'm not using IE6, nor IE8B. There is no indication of a requirement to reboot followong this update being applied.
Can you give me a hint as to how the KB article you linked to might assist,
here?

Interesting that 4 people rated the OP as useful, that could mean it's not
an isolated ocurrence.

Robert Aldwinckle

unread,
Mar 13, 2008, 7:08:56 PM3/13/08
to
"markjoy" <mar...@discussions.microsoft.com> wrote in message
news:ABBC3EF6-ABAC-4FA1...@microsoft.com...

>
>
> "Robert Aldwinckle" wrote:
>
>> "markjoy" <mar...@discussions.microsoft.com> wrote in message
>> news:ADD863FB-A6C0-4F1F...@microsoft.com...
>> > Over the past month, I have been issued with a total of six of these updates,
>> > all with the same number.
>> > 1) Is this normal?
>>
>>
>> It could be. Are you switching back to IE6? Trying the IE8 beta?
>>
>>
>> > 2) If so, what gives? By that I mean it would be far easier to track updates
>> > if the number were revised each time.
>>
>>
>> The most likely explanation is that one or more of the modules listed here
>> either aren't changing during the required boot or are somehow being changed later.
>>
>> http://support.microsoft.com/kb/944533
>>
>>
>>
>> >
>> > Out here in semi-ignorant user-land, I'm left with the impression that
>> > somehow this update is mysteriously vanishing, and continually needs
>> > re-applying.
>> >
>> > Thanks for any answers.
>>
>>
>> HTH
>>
>> Robert Aldwinckle
>> ---
>>
>>
>> No, I'm not using IE6, nor IE8B.

> There is no indication of a requirement to reboot followong this update being applied.


You should have been prompted at the end of the install.
The relevant button may be labeled Restart, (implies reboot.)
If you didn't even see a prompt it could mean that your administrator
is going to handle this for you or it could mean that the install didn't complete. Etc.


> Can you give me a hint as to how the KB article you linked to might assist,
> here?

Find the list of modules which applies to your version of the OS.
Then check the version of each one after the reboot.

To save you some time here is the list of modules which were definitely delayed
from update until the reboot in my case:

<KB944533-IE7.log>
67.717: IsRebootRequiredForFileQueue: f:\windows\system32\wininet.dll was delayed; reboot is required.
67.717: IsRebootRequiredForFileQueue: f:\windows\system32\webcheck.dll was delayed; reboot is required.
67.717: IsRebootRequiredForFileQueue: f:\windows\system32\urlmon.dll was delayed; reboot is required.
67.717: IsRebootRequiredForFileQueue: f:\windows\system32\url.dll was delayed; reboot is required.
67.717: IsRebootRequiredForFileQueue: f:\windows\system32\mshtml.dll was delayed; reboot is required.
67.717: IsRebootRequiredForFileQueue: f:\windows\system32\msfeedsbs.dll was delayed; reboot is required.
67.717: IsRebootRequiredForFileQueue: f:\windows\system32\msfeeds.dll was delayed; reboot is required.
67.717: IsRebootRequiredForFileQueue: f:\windows\system32\iertutil.dll was delayed; reboot is required.
67.717: IsRebootRequiredForFileQueue: f:\windows\system32\ieframe.dll was delayed; reboot is required.
67.717: IsRebootRequiredForFileQueue: f:\windows\system32\ieapfltr.dll was delayed; reboot is required.
67.717: IsRebootRequiredForFileQueue: f:\windows\system32\icardie.dll was delayed; reboot is required.
67.717: IsRebootRequiredForFileQueue: f:\windows\system32\advpack.dll was delayed; reboot is required.
67.717: DoInstallation: A reboot is required to complete the installation of one or more files.

</KB944533-IE7.log>

So you could check those or find your own log and check the ones that it lists.


>
> Interesting that 4 people rated the OP as useful, that could mean it's not
> an isolated ocurrence.


What it means is that people misuse that feature of the ratings and treat it
as a vote for interest in the discussion, not whether there is anything useful there.
I wish that an opening post, especially a question, could not be voted on.
It would improve the value of the Helpful post search filter.


HTH

Robert
---


PA Bear [MS MVP]

unread,
Mar 13, 2008, 9:36:58 PM3/13/08
to
Windows version? What anti-virus application or security suite is
installed? What anti-spyware applications (other than Defender)? What
third-party firewall (if any)? What happens when you try to install
KB944533? Does windowsupdate.log list any Errors associated with the failed
installs?
======================
Tip: Temporarily disable real-time protection by your anti-virus and/or
anti-spyware applications (e.g., CounterSpy, Spysweeper, Spybot, AVG
Anti-Spyware) and/or any third-party firewall (e.g., ZA) before attempting
to install the update(s). If you disable a third-party firewall, do NOT
connect to the internet without having the Windows Firewall enabled!
======================
Start a free Windows Update support incident request:
https://support.microsoft.com/oas/default.aspx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates. When you call, clearly state that your problem is related
to a Security Update and cite the update's KB number (e.g., KB123456).

!!! => If your problem relates to a Cumulative Security Update for IE, call
the above number and ask to be transferred to the Consumer IE7 queue (which
is 47830). <= !!!

For more information about how to contact your local Microsoft subsidiary
for security update support issues, visit the International Support Web
site: http://support.microsoft.com/common/international.aspx

For enterprise customers, support for security updates is available through
your usual support contacts.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.net


markjoy wrote:
> Over the past month, I have been issued with a total of six of these
> updates, all with the same number.
> 1) Is this normal?

> 2) If so, what gives? By that I mean it would be far easier to track
> updates
> if the number were revised each time.
>

markjoy

unread,
Mar 14, 2008, 1:35:00 AM3/14/08
to

> Thank you PAbear, shall try ringing MS should it happen again, and the restart fails to remedy the situation.
>
>

markjoy

unread,
Mar 14, 2008, 1:40:00 AM3/14/08
to

"markjoy" wrote:

>
>
> "PA Bear [MS MVP]" wrote:
>
> > Windows version?

XP home SP2.


What anti-virus application or security suite is
> > installed?

Avast home


What anti-spyware applications (other than Defender)?

Threatfire, Spywareterminator, the former a recent installation.


>What third-party firewall (if any)?

Comod 2.4


What happens when you try to install
> > KB944533?

It downloads, prompts to install, installs, then gives the message
"instalation complete", or words to that effect. No hint of trouble. It does
not prompt a restart.


Does windowsupdate.log list any Errors associated with the failed
> > installs?

No, none, it records six successful installations of the same update.

PA Bear [MS MVP]

unread,
Mar 14, 2008, 1:24:10 PM3/14/08
to
>> What third-party firewall (if any)?
>
> Comod 2.4

See if upgrading to Comodo v3.0.15.277 or higher (i.e., v3.0.19.318)
resolves the issues.

See
http://groups.google.com/group/microsoft.public.security/msg/71770624ef809651

Comodo Firewall Pro - Release Notes
http://www.personalfirewall.comodo.com/release_notes.html


--
~Robear Dyer (PA Bear)

MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Robert Aldwinckle

unread,
Mar 14, 2008, 6:49:39 PM3/14/08
to
"markjoy" <mar...@discussions.microsoft.com> wrote in message
news:8778249A-12D7-4D0A...@microsoft.com...
> Thanks, Robert, that answers the question.
> No network admin, here, it's a home desktop PC, standalone.
> There has been no "restart/reboot" prompt at any stage following this
> update. (I have come to expect a prompt when this is required) in future I
> shall reboot and see what happens.


I wonder if a Home version doesn't get a prompt then?
I know that there are other Administrator-related features which
are not present in that OS.

Did you look at your log, e.g. see if you had lines in it similar to the ones
I showed you? To be clear about what is happening you could post it.
FWIW mine is only 350 lines.


HTH

Robert
---


markjoy

unread,
Mar 14, 2008, 8:57:01 PM3/14/08
to

"PA Bear [MS MVP]" wrote:

> >> What third-party firewall (if any)?
> >
> > Comod 2.4
>
> See if upgrading to Comodo v3.0.15.277 or higher (i.e., v3.0.19.318)
> resolves the issues.
>
> See
> http://groups.google.com/group/microsoft.public.security/msg/71770624ef809651
>
> Comodo Firewall Pro - Release Notes
> http://www.personalfirewall.comodo.com/release_notes.html

> -- .
>
> I've used CFP version 3, and not so keen. It needs an element of it's "defense+" (a form of HIPS) active to pass the leaktests. Without that, it's not quite as secure as 2.4. So I've gone back to 2.4, because I'm currently using a different HIPS.
Thanks, though.

PA Bear [MS MVP]

unread,
Mar 15, 2008, 2:25:35 AM3/15/08
to

Uninstall Comodo v2.4 | Reboot & enable the Windows Firewall | Attempt to
install KB944533 and any other critical updates offered.
--
~PA Bear

markjoy

unread,
Mar 15, 2008, 2:56:01 AM3/15/08
to

> KB944533 is showing as installed in "add remove programs". And in Windows update history.
All other updates are installed; (They installed problem free on the last
"patch Tuesday) XP is up to date, Secunia software inspector confirms this.
So as of now, there are no problems.
Should the problem recur, I'll try the steps suggested, but am not convinced
that CFP 2.4 is the issue...the article you linked to referred to failed
updates by a Vista user.

PA Bear [MS MVP]

unread,
Mar 15, 2008, 10:52:41 AM3/15/08
to
markjoy wrote:
> "PA Bear [MS MVP]" wrote:
>> markjoy wrote:
>>> "PA Bear [MS MVP]" wrote:
>>>>>> What third-party firewall (if any)?
>>>>>
>>>>> Comod 2.4
>>>>
>>>> See if upgrading to Comodo v3.0.15.277 or higher (i.e., v3.0.19.318)
>>>> resolves the issues.
>>>>
>>>> See
>>>> http://groups.google.com/group/microsoft.public.security/msg/71770624ef809651
>>>>
>>>> Comodo Firewall Pro - Release Notes
>>>> http://www.personalfirewall.comodo.com/release_notes.html
>>>> -- .
>>>>
>>>> I've used CFP version 3, and not so keen. It needs an element of it's
>>>> "defense+" (a form of HIPS) active to pass the leaktests. Without that,
>>>> it's not quite as secure as 2.4. So I've gone back to 2.4, because I'm
>>>> currently using a different HIPS. Thanks, though.
>>
>> Uninstall Comodo v2.4 | Reboot & enable the Windows Firewall | Attempt to
>> install KB944533 and any other critical updates offered.
>> --
> KB944533 is showing as installed in "add remove programs". And in Windows
> update history.
>
> All other updates are installed; (They installed problem free on the last
> "patch Tuesday) XP is up to date, Secunia software inspector confirms
> this.
> So as of now, there are no problems.
> Should the problem recur, I'll try the steps suggested, but am not
> convinced
> that CFP 2.4 is the issue...the article you linked to referred to failed
> updates by a Vista user.

http://support.microsoft.com/kb/942818 applies to IE7 running in WinXP,
Vista, and Windows 2003.
=====================================
If KB944533 is listed in Add/Remove Programs and it's still being offered,
follow this edited version of the instructions I posted earlier in the
thread:

1. Stop the Automatic Updates service:

Start > Run > (type in) services.msc > [OK]
Double-click Automatic Updates > Click on Stop
(Stopping the service will take a moment)

2. Delete the contents of the Download folder:

Start > Run > (type in) %windir%\SoftwareDistribution > [OK]
Open the Download folder and delete its contents
Close the window.

3. Disable your anti-virus application, any real-time protection provided by
an anti-spyware application (except for Windows Defender; includes Spybot
Tea Timer, SpySweeper Guards, AVG AS guard.exe, etc.), [uninstall Comodo
v2.4] AND enable the Windows Firewall.

NB: You're "working without a net" now: Don't to ANYTHING else online (e.g.,
browsing; reading email; chatting) except #4 below until your anti-virus
application has been re-enabled!

4. Uninstall "Security Update for Windows Internet Explorer 7 (KB944533)"
via Add/Remove Programs (make sure Show Updates box is checked at top right)
and reboot.

5. Redo everything in #3 above.

6. Go to http://windowsupdate.microsoft.com and install any Critical Updates
offered. If "Root Certificates" update is listed in the Optional Updates
category, you might install it, too, to take full advantage of IE7's
additional security.

7. Reboot > Make sure everything in #1 above is enabled again; disable the
Windows Firewall and reinstall your preferred third-party firewall.

8. Start the Automatic Updates service:

Start > Run > (type in) services.msc > [OK]
Double-click Automatic Updates > Click on Start
(Starting the service will take a moment)
=============================================
If still no joy, open a free support incident online or by telephone.
Repost:

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/default.aspx?gprid=6527

For home users, no-charge support is available by calling 1-866-PCSAFETY in

the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates. When you call, clearly state that your problem is related

to a Security Update and cite the update's KB number (e.g., KB944533).

***NB: As your problem relates to a Cumulative Security Update for IE, call

the above number and ask to be transferred to the Consumer IE7 queue (which

is 47830).***

markjoy

unread,
Mar 15, 2008, 7:32:00 PM3/15/08
to
> Thank you very much for your diligence and willingness to make sure this is put right.

I followed the procedure above. Only issues were that after stopping the
update service, it restarted itself following reboot. (Workaround: stop it
again, the yellow shield vanished, only to reappear after windows update was
loaded. Suggestion: temporarily set the service to "disabled" after stopping,
reverse at end of procedure.)
After uninstalling Comodo firewall, a reboot was commanded. I allowed the
reboot prior to activating the windows firewall. (Workaround: removed the
internet cable during reboot and plugged it in again after the firewall was
turned on.)

I also installed the root certificates, as you suggested, and another
optional update to do with MSXML.
So far so good. Thanks again.

PA Bear [MS MVP]

unread,
Mar 16, 2008, 2:17:08 AM3/16/08
to

YW & thanks for your feedback. Now it looks like we're dealing with
another, possibly related, issue on the same machine:

http://groups.google.com/group/microsoft.public.security.homeusers/browse_frm/thread/9a1e03139d48af53
--
~PA Bear

markjoy

unread,
Mar 16, 2008, 3:07:00 AM3/16/08
to
Hmm. Hadn't thought it was related, hence the new thread. Should I stop
posting in this thread?
Mark.

"PA Bear [MS MVP]" wrote:

PA Bear [MS MVP]

unread,
Mar 16, 2008, 12:53:11 PM3/16/08
to
Please post any/all follow-up to the new thread, Mark. I've crossposted my
last reply to WU newsgroup. Thanks for asking.
--
~PA Bear

sherrydine

unread,
Apr 2, 2008, 1:48:01 PM4/2/08
to
I am a home user with some experience. however, using exporer 7 I don't even
get to the point of rebooting. The update simply fails. Obviously there are
others with this problem. I could really use some help here.

--
sherry


"PA Bear [MS MVP]" wrote:

PA Bear [MS MVP]

unread,
Apr 2, 2008, 3:17:29 PM4/2/08
to
Sharry, please begin a new thread about /your/ problem. Please see this
page http://dts-l.net/goodpost.htm for the information we'd need in your
first post in the new thread to be able to assist you properly.
=============================

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/default.aspx?gprid=6527

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates. When you call, clearly state that your problem is related

to a Security Update and cite the update's KB number (e.g., KB944533).

!!! => If your problem relates to a Cumulative Security Update for IE, call
the above number and ask to be transferred to the Consumer IE7 queue (which
is 47830). <= !!!

--
~Robear Dyer (PA Bear)

MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/


sherrydine wrote:
> I am a home user with some experience. however, using exporer 7 I don't
> even get to the point of rebooting. The update simply fails. Obviously
> there are others with this problem. I could really use some help here.

<snip>

0 new messages