Re: Missing Windows update reported as a vulnerability by TMH and



As you had the correct jscript file at the time you installed ie7,
(as shown in your registry and the "C:\WINDOWS\ie7" folder)
"something" - has caused some corruption or older version to be installed.
(maybe ie7 does not install jscript 5.7 for everyone- I don't know)

If ie7 installed properly, you should have :
C:\WINDOWS\ie7.log
C:\WINDOWS\ie7_main.log
(assuming you use "c" )

ie7updates folder are the updates to IE applied after installing ie7
and that are available for uninstallation. They show replaced files.

I would follow Mr. Green's instruction (and hereafter)
to download and install KB917344 then the cumulative IE update

If everything working properly, then update to this:
"Windows Script 5.7 for Windows XP"
http://www.microsoft.com/downloads/details.aspx?familyid=47809025-D896-482E-A0D6-524E7E844D81&displaylang=en
--
mae

"Hugo_Pt" <Hugo_Pt@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D81E1E9B-B268-4E18-AB3B-2731548FC4EE@xxxxxxxxxxxxxxxx
| To mae:
|
| I followed the instructions on
| http://www.bleepingcomputer.com/tutorials/tutorial62.html#winxp , then
| searched for ie7.log using the Windows search tool. The only file found in C:
| containing 'ie7.log' in the filename was KB939653-IE7.log, located in
| C:\WINDOWS. I opened it and searched for 'IECUSTOM' and 'jscript.dll' using
| 'CTRL+F', but found none of those words.
|
| In "C:\WINDOWS\ie7updates", there is a subfolder "KB939653-IE7". In there, i
| looked version number of 'Iexplore.exe', 'Advpack.dll', and 'Dxtrans.dll',
| and none of them is v. 7.0.6000.16544, which is the right version number of
| 'Iexplore.exe', 'Advpack.dll', and 'Dxtrans.dll' contained in the
| KB939653-IE7 update ("for Internet Explorer 7 for all supported 32-bit
| editions of Windows XP"), according to Microsoft MS07-057 Bulletin. So, I
| suppose that the files in "C:\WINDOWS\ie7updates\KB939653-IE7" are the ones
| to be restored, replacing my present files in the case i uninstall KB939653.
| Is that right ?
|
| Likewise: In "C:\WINDOWS\ie7", I have a jscript.dll file and it is
| v.5.6.0.8831. So, if i uninstalled IE7, my jscript.dll file in
| "C:\WINDOWS\system32" would be replaced by this version, right ? But if you
| say that the installation of IE7 updates jscript.dll to 5.7, then how would
| you explain that presently, and having IE7 installed, my version of
| jscript.dll in "C:\WINDOWS\system32" is only v.5.6.0.8825 ? Your jscript.dll
| is version 5.7, right ?
|
| I believe my situation is different than yours...
|
| And your post raises yet another problem: If i reinstall manually KB917344
| as i intended, then my jscript.dll would become v.5.6.0.8831, but since i
| have IE7 installed, it should be v.5.7. Isn't that so ?
|
| "mae" wrote:
|
| > For your information, with my IE7:
| > KB917344 does not show in the add/remove under Windows Updates.
| > That is because installation of IE7 hides it, as it updates the jscript.dll
to
| > 5.7.
| > Belarc does show for me as installed properly.
| >
| >
| > Check it here:
| >
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB917344]
| > "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows
| > XP\\SP3\\KB917344"
| > "HiddenByIE7Setup"=dword:00000001
| >
| > Also examine the ie7.log and see if you have something like this:
| > IECUSTOM: Hiding update 'KB917344' MS06-023: Vulnerability in Microsoft
JScript
| > Copied file: C:\WINDOWS\system32\jscript.dll
| > Copied file (delayed): C:\WINDOWS\system32\SET73.tmp
| > Source:C:\WINDOWS\system32\SET73.tmp (5.7.0.5730)
| > Destination:C:\WINDOWS\system32\jscript.dll (5.6.0.8831)
| >
| > The "C:\WINDOWS\ie7" folder is the uninstall IE7 information.
| > They represent your files they would restore.
| > They also show the jscript.dll that they would restore (should be
v.5.6.08831)
| > The "C:\WINDOWS\ie7updates" folder shows current ie7updates.
| >
| > I don't know what caused your problem but maybe this will help explain.
| > --
| > mae
| >
| > "Hugo_Pt" <Hugo_Pt@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
| > news:7120113E-4D54-4875-9495-B2032ABE671E@xxxxxxxxxxxxxxxx
| > | CORRECTED in post #1: In Windows Control Panel>Add and remove programs, i
| > | searched through all of my Windows updates installed and didn't found
| > | KB917344. I also went to Microsoft Update Website and it doesn't detect
any
| > | priority update missing in my system.
| > | ADDED to post #1: Don't know if it's relevant to this thread, but my OS is
| > | Windows XP Home, Service Pack 2 (Build 2600), and i have Internet Explorer
7.
| > | _______________________________________________
| > | Thank you, MowGreen. I was glad to see your reply. I believe it will be
| > | meaningfull for the resolution of this problem.
| > | I searched and found the file jscript.dll in WINDOWS\system32. I
| > | rick-clicked it, selected properties, and checked its version: it’s V.
| > | 5.6.0.8825, not V. 5.6.0.8831.
| > | However, I think that the Windows registry does not match my jscript.dll
| > | version. I checked HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows
| > | XP\SP3\KB917344\Filelist. Under Filelist, I have 3 subfolders: 0, 1, and
2.
| > | If I click each of this subfolders, I see in the last line of the right
pane:
| > | Version REG_SZ 5.6.0.8831
| > | I exported the registry branch, opened it with Notepad, and copied it. I’m
| > | pasting it here:
| > |
| > | «Windows Registry Editor Version 5.00
| > |
| > | [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows
| > | XP\SP3\KB917344\Filelist]
| > |
| > | [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows
| > | XP\SP3\KB917344\Filelist\0]
| > | "FileName"="jscript.dll"
| > | "Version"="5.6.0.8831"
| > | "BuildDate"="Thu May 18 06:31:27 2006"
| > | "BuildCheckSum"="74cd3"
| > | "Location"="C:\\WINDOWS\\system32"
| > |
| > | [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows
| > | XP\SP3\KB917344\Filelist\1]
| > | "FileName"="jscript.dll"
| > | "Version"="5.6.0.8831"
| > | "BuildDate"="Thu May 18 06:31:27 2006"
| > | "BuildCheckSum"="74cd3"
| > | "Location"="C:\\WINDOWS\\system32\\DllCache"
| > |
| > | [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows
| > | XP\SP3\KB917344\Filelist\2]
| > | "FileName"="jscript.dll"
| > | "Version"="5.6.0.8831"
| > | "BuildDate"="Thu May 18 06:46:54 2006"
| > | "BuildCheckSum"="73b06"
| > | "Location"="c:\\windows\\$hf_mig$\\KB917344\\SP2QFE"»
| > |
| > | I believe that my Windows registry keys correspond to version 5.6.0.8831,
| > | and not to the version I have, and perhaps that’s the reason why the
| > | Microsoft Update website doesn’t prompt me to install KB917344. Is this
right
| > | ? Should I download and reinstall manually KB917344 ?
| > |
| > | There’s another thing I haven’t told in post#1: Belarc Advisor but not TM
| > | Housecall failed also the verification of the last IE7 cumulative update
| > | KB939653. However, I searched in Control Panel>Add/Remove Programs and I
| > | found it under ‘Windows Internet Explorer 7 – Software Updates’. I think
it’s
| > | probably a false detection of security vulnerability by Belarc. But how
can I
| > | confirm if KB939653-IE7 is correctly installed in my system ?
| > |
| > | Finally, and answering to your last question, I didn’t delete any folders
| > | from nor have deleted WINDOWS\$hf_mig$.
| > | Any help is appreciated.
| > |
| > | Hugo_Pt
| > |
| > |
| >
| >

.



Relevant Pages

  • Re: Since January 18th, no high-priority updates...
    ... Since I do not intend to install NIS 2006 again, I thought it does not matter ... I checked about what you say (time of the Automatic Updates) and changed it ... I uninstalled NIS 2006... ... 2 February 2006 Windows Update Agent Unable to Connect: ...
    (microsoft.public.windowsupdate)
  • Re: no signal error
    ... from biosupdate to the other updates. ... And also when i finally get into windows and just doing regular tasks as ... Select "review and install updates" and "install ... If you removed any softwares in step 7, restart computer. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Latest Update Wreaked Havok - Cannot Restore
    ... track of what you install in order to be able to uninstall it. ... been diligent with your critical updates, ... Windows Update ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Windows updates fail after install of SP2
    ... I'm sure I didn't delete any log files since my last update though; especially anything to do with Windows Update. ... Are the updates now showing in Add/Remove Programs in the Control ... I thought I would turn automatic updates on so that it would automatically download and install updates but that didn't seem to do anything either. ... The issue of updates not being offered after the application of SP2 is a new twist on an old theme ... ...
    (microsoft.public.windowsupdate)
  • Re: Windows 98 box is "owned"
    ... Microsoft officially is no longer issuing *new* updates for Windos 98, ... on Windows update, although you will find all the "critical" (as defined ... Perhaps it is time to say screw it and install ... You noted that your mother has ZA. ...
    (Security-Basics)