Re: Missing Windows update reported as a vulnerability by TMH and
- From: "mae" <agrannie@xxxxxxxxxxxxxxxx>
- Date: Tue, 23 Oct 2007 17:43:25 -0500
As you had the correct jscript file at the time you installed ie7,
(as shown in your registry and the "C:\WINDOWS\ie7" folder)
"something" - has caused some corruption or older version to be installed.
(maybe ie7 does not install jscript 5.7 for everyone- I don't know)
If ie7 installed properly, you should have :
C:\WINDOWS\ie7.log
C:\WINDOWS\ie7_main.log
(assuming you use "c" )
ie7updates folder are the updates to IE applied after installing ie7
and that are available for uninstallation. They show replaced files.
I would follow Mr. Green's instruction (and hereafter)
to download and install KB917344 then the cumulative IE update
If everything working properly, then update to this:
"Windows Script 5.7 for Windows XP"
http://www.microsoft.com/downloads/details.aspx?familyid=47809025-D896-482E-A0D6-524E7E844D81&displaylang=en
--
mae
"Hugo_Pt" <Hugo_Pt@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D81E1E9B-B268-4E18-AB3B-2731548FC4EE@xxxxxxxxxxxxxxxx
| To mae:
|
| I followed the instructions on
| http://www.bleepingcomputer.com/tutorials/tutorial62.html#winxp , then
| searched for ie7.log using the Windows search tool. The only file found in C:
| containing 'ie7.log' in the filename was KB939653-IE7.log, located in
| C:\WINDOWS. I opened it and searched for 'IECUSTOM' and 'jscript.dll' using
| 'CTRL+F', but found none of those words.
|
| In "C:\WINDOWS\ie7updates", there is a subfolder "KB939653-IE7". In there, i
| looked version number of 'Iexplore.exe', 'Advpack.dll', and 'Dxtrans.dll',
| and none of them is v. 7.0.6000.16544, which is the right version number of
| 'Iexplore.exe', 'Advpack.dll', and 'Dxtrans.dll' contained in the
| KB939653-IE7 update ("for Internet Explorer 7 for all supported 32-bit
| editions of Windows XP"), according to Microsoft MS07-057 Bulletin. So, I
| suppose that the files in "C:\WINDOWS\ie7updates\KB939653-IE7" are the ones
| to be restored, replacing my present files in the case i uninstall KB939653.
| Is that right ?
|
| Likewise: In "C:\WINDOWS\ie7", I have a jscript.dll file and it is
| v.5.6.0.8831. So, if i uninstalled IE7, my jscript.dll file in
| "C:\WINDOWS\system32" would be replaced by this version, right ? But if you
| say that the installation of IE7 updates jscript.dll to 5.7, then how would
| you explain that presently, and having IE7 installed, my version of
| jscript.dll in "C:\WINDOWS\system32" is only v.5.6.0.8825 ? Your jscript.dll
| is version 5.7, right ?
|
| I believe my situation is different than yours...
|
| And your post raises yet another problem: If i reinstall manually KB917344
| as i intended, then my jscript.dll would become v.5.6.0.8831, but since i
| have IE7 installed, it should be v.5.7. Isn't that so ?
|
| "mae" wrote:
|
| > For your information, with my IE7:
| > KB917344 does not show in the add/remove under Windows Updates.
| > That is because installation of IE7 hides it, as it updates the jscript.dll
to
| > 5.7.
| > Belarc does show for me as installed properly.
| >
| >
| > Check it here:
| >
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB917344]
| > "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows
| > XP\\SP3\\KB917344"
| > "HiddenByIE7Setup"=dword:00000001
| >
| > Also examine the ie7.log and see if you have something like this:
| > IECUSTOM: Hiding update 'KB917344' MS06-023: Vulnerability in Microsoft
JScript
| > Copied file: C:\WINDOWS\system32\jscript.dll
| > Copied file (delayed): C:\WINDOWS\system32\SET73.tmp
| > Source:C:\WINDOWS\system32\SET73.tmp (5.7.0.5730)
| > Destination:C:\WINDOWS\system32\jscript.dll (5.6.0.8831)
| >
| > The "C:\WINDOWS\ie7" folder is the uninstall IE7 information.
| > They represent your files they would restore.
| > They also show the jscript.dll that they would restore (should be
v.5.6.08831)
| > The "C:\WINDOWS\ie7updates" folder shows current ie7updates.
| >
| > I don't know what caused your problem but maybe this will help explain.
| > --
| > mae
| >
| > "Hugo_Pt" <Hugo_Pt@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
| > news:7120113E-4D54-4875-9495-B2032ABE671E@xxxxxxxxxxxxxxxx
| > | CORRECTED in post #1: In Windows Control Panel>Add and remove programs, i
| > | searched through all of my Windows updates installed and didn't found
| > | KB917344. I also went to Microsoft Update Website and it doesn't detect
any
| > | priority update missing in my system.
| > | ADDED to post #1: Don't know if it's relevant to this thread, but my OS is
| > | Windows XP Home, Service Pack 2 (Build 2600), and i have Internet Explorer
7.
| > | _______________________________________________
| > | Thank you, MowGreen. I was glad to see your reply. I believe it will be
| > | meaningfull for the resolution of this problem.
| > | I searched and found the file jscript.dll in WINDOWS\system32. I
| > | rick-clicked it, selected properties, and checked its version: it’s V.
| > | 5.6.0.8825, not V. 5.6.0.8831.
| > | However, I think that the Windows registry does not match my jscript.dll
| > | version. I checked HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows
| > | XP\SP3\KB917344\Filelist. Under Filelist, I have 3 subfolders: 0, 1, and
2.
| > | If I click each of this subfolders, I see in the last line of the right
pane:
| > | Version REG_SZ 5.6.0.8831
| > | I exported the registry branch, opened it with Notepad, and copied it. I’m
| > | pasting it here:
| > |
| > | «Windows Registry Editor Version 5.00
| > |
| > | [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows
| > | XP\SP3\KB917344\Filelist]
| > |
| > | [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows
| > | XP\SP3\KB917344\Filelist\0]
| > | "FileName"="jscript.dll"
| > | "Version"="5.6.0.8831"
| > | "BuildDate"="Thu May 18 06:31:27 2006"
| > | "BuildCheckSum"="74cd3"
| > | "Location"="C:\\WINDOWS\\system32"
| > |
| > | [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows
| > | XP\SP3\KB917344\Filelist\1]
| > | "FileName"="jscript.dll"
| > | "Version"="5.6.0.8831"
| > | "BuildDate"="Thu May 18 06:31:27 2006"
| > | "BuildCheckSum"="74cd3"
| > | "Location"="C:\\WINDOWS\\system32\\DllCache"
| > |
| > | [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows
| > | XP\SP3\KB917344\Filelist\2]
| > | "FileName"="jscript.dll"
| > | "Version"="5.6.0.8831"
| > | "BuildDate"="Thu May 18 06:46:54 2006"
| > | "BuildCheckSum"="73b06"
| > | "Location"="c:\\windows\\$hf_mig$\\KB917344\\SP2QFE"»
| > |
| > | I believe that my Windows registry keys correspond to version 5.6.0.8831,
| > | and not to the version I have, and perhaps that’s the reason why the
| > | Microsoft Update website doesn’t prompt me to install KB917344. Is this
right
| > | ? Should I download and reinstall manually KB917344 ?
| > |
| > | There’s another thing I haven’t told in post#1: Belarc Advisor but not TM
| > | Housecall failed also the verification of the last IE7 cumulative update
| > | KB939653. However, I searched in Control Panel>Add/Remove Programs and I
| > | found it under ‘Windows Internet Explorer 7 – Software Updates’. I think
it’s
| > | probably a false detection of security vulnerability by Belarc. But how
can I
| > | confirm if KB939653-IE7 is correctly installed in my system ?
| > |
| > | Finally, and answering to your last question, I didn’t delete any folders
| > | from nor have deleted WINDOWS\$hf_mig$.
| > | Any help is appreciated.
| > |
| > | Hugo_Pt
| > |
| > |
| >
| >
.
- Follow-Ups:
- References:
- Re: Missing Windows update reported as a vulnerability by TMH and Bela
- From: MowGreen [MVP]
- Re: Missing Windows update reported as a vulnerability by TMH and B.A.
- From: Hugo_Pt
- Re: Missing Windows update reported as a vulnerability by TMH and B.A.
- From: mae
- Re: Missing Windows update reported as a vulnerability by TMH and
- From: Hugo_Pt
- Re: Missing Windows update reported as a vulnerability by TMH and Bela
- Prev by Date: Re: 84 downloaded , none installed
- Next by Date: Re: Failed installation of Windows updates - me too.
- Previous by thread: Re: Missing Windows update reported as a vulnerability by TMH and
- Next by thread: Re: Missing Windows update reported as a vulnerability by TMH and BA
- Index(es):
Relevant Pages
|