RE: Help with MS07-042 - will not seem to install on this one laptop

["Jeff Dinger" <jeff.dinger () e4e com>]

I was able to solve this by removing any trace of XML on the laptop,
then allowing (after a clean boot), the patch to be applied.

Fortunately removing on Vista appears to be cleaner than XP, as fewer
orphaned files were left wandering around on the uninstall.

Best Regards,
Jeff 


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Murda Mcloud
Sent: Thursday, January 01, 2009 9:07 PM
To: 'Lape, Steve'; Jeff Dinger
Cc: security-basics () securityfocus com
Subject: RE: Help with MS07-042 - will not seem to install on this one
laptop

I wonder if you guys(Steve and Jeff) have some similarities,
machine-wise
that may shed some light on this.
I had problems a while back with a run of HP machines that had the Intel
AMT
agent running. Updates would download but then the install would fail.
Not
sure if it has anything to do with your problem.



> > -----Original Message-----
> > From: Lape, Steve [mailto:steve.lape () wsms com]
> > Sent: Thursday, January 01, 2009 1:38 AM
> > To: Stephen Thornber; Jeff Dinger
> > Cc: Murda Mcloud; security-basics () securityfocus com
> > Subject: RE: Help with MS07-042 - will not seem to install on this
one
> > laptop
> >
> > I had the same problem with my laptop a couple of weeks ago.  I went
> > into Add/Remove Programs and uninstalled all instances of Microsoft
XML.
> > Did a reboot of the machine and then installed XML Core Services 4.0
> > Service Pack 2 (KB954430).  It installed just fine at that point.
> >
> > Steve
> >
> > -----Original Message-----
> > From: listbounce () securityfocus com
[mailto:listbounce () securityfocus com]
> > On Behalf Of Stephen Thornber
> > Sent: Wednesday, December 31, 2008 10:25 AM
> > To: Jeff Dinger
> > Cc: Murda Mcloud; security-basics () securityfocus com
> > Subject: Re: Help with MS07-042 - will not seem to install on this
one
> > laptop
> >
> > Try running secunia (FREE) PSI tool against your PC.
> > This shows all out of date unpatched items and gives good advice on
> > fixing.
> >
> > Stephen
> >
> >
> > On 31 Dec 2008, at 15:13, Jeff Dinger wrote:
> >
> > > No error messages, that is what I found odd.  You can have the
> > > auto-updater install the "patch", but it doesn't take, as the
> > > auto-installer and the scanner still see the vulnerability.  No
error
> > > message in any log, auto-update installer.
> > >
> > > If I try to manually install any of the other "patches" for this
> > > bulletin, it indicates that it's not needed or that codec is not
> > > supported. ( I tried the XP and all Vista drivers just to be
certain)
> > > What I am thinking is this is installed somewhere by some toolset
> > > other
> > > then where it thinks it should be, so am hunting for it...just not
> > > certain which items to search for. :)
> > >
> > > Best Regards,
> > > Jeff
> > >
> > >
> > > -----Original Message-----
> > > From: listbounce () securityfocus com
> > [mailto:listbounce () securityfocus com
> > > ]
> > > On Behalf Of Murda Mcloud
> > > Sent: Tuesday, December 30, 2008 6:17 PM
> > > To: security-basics () securityfocus com
> > > Subject: RE: Help with MS07-042 - will not seem to install on this
one
> > > laptop
> > >
> > > Error messages?
> > >
> > > > > -----Original Message-----
> > > > > From: listbounce () securityfocus com
> > > [mailto:listbounce () securityfocus com]
> > > > > On Behalf Of Jeff Dinger
> > > > > Sent: Wednesday, December 31, 2008 3:42 AM
> > > > > To: security-basics () securityfocus com
> > > > > Subject: Help with MS07-042 - will not seem to install on this
one
> > > laptop
> > > > > Hello the List!
> > > > >
> > > > >  I happen to have a laptop, that does not seem to want to take
the
> > > > > automatic security update for Microsoft XML Core Services 4.0
> > > > > Service
> > > > > Pack 2 (KB954430).   Several scanners confirms I still have this
one
> > > > > vulnerability left (I originally had 2), and went to the MS site,
> > > > > and
> > > > > installed manually (and successfully) on patch that removed the
twin
> > > > > vulnerability, however this one remains.  Manually attempting to
> > > install
> > > > > any of the other similar patches fails.
> > > > >
> > > > > Any ideas what services might be running that would cause this
not
> > > > > to
> > > > > sync/apply? I'm actually considering asking MS for help, which I
> > > would
> > > > > prefer not to do, simply b/c it'll waste 4 - 5 hours of my time
> > > > > doing
> > > > > everything I've already done.
> > > > >
> > > > > Thoughts?
> > > > >
> > > > > Best Regards,
> > > > > Jeff