Belarc-Recommended Update Nowhere to Be Found

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

A Baffled User - 27 Sep 2004 13:26 GMT

Running Windows ME (with 256 MB of RAM and a 40 GB hard drive with more than
half the space free) on a Pentium III PC.

Ran the Belarc Advisor scan on my computer, as recommended in a post of a
few days ago. Only one "hotfix" was found to be missing, UPD329115. Went to
the Microsoft site and couldn't find that specific update, so I downloaded
and installed the five critical patches (or service packs) that Microsoft
told me I needed. I figured that UPD329115 would be somewhere in the mix,
but nay. When I ran the Belarc Advisor a second time, there was still a red
X next to UPD329115, which is supposed to eliminate a vulnerability to
identity spoofing. Since I've had that very problem, I would very much like
to install this update. But where is it?

Thanks!

Joan

Reply to this Message

Mike M - 27 Sep 2004 13:43 GMT

Joan,

You can download 329115 (MS02-050: Certificate validation flaw might
permit identity spoofing) from the Windows Update catalogue. The reason
that you aren't offered this patch from the regular Windows Update site is
that you had previously installed this patch and then reinstalled Win Me
over itself meaning that whilst the reinstall restored the earlier
vulnerable versions of the file the entry in the registry remains that
tells the Windows Update that the patch is installed.

To access the Windows Update Catalogue you will need to visit the
WindowsUpdate (http://windowsupdate.microsoft.com/) site and choose in the
left hand pane to "Personalize Windows Update" and then check the box in
the
right hand pane to "Display the link to the Windows Update Catalogue".
Save
Settings and now click the new link to the Catalogue that has been added
to
the left hand pane.

MS KB 323166 - "HOW TO: Download Windows Updates and Drivers from the
Windows Update Catalog" (http://support.microsoft.com?kbid=323166).

Signature

Mike Maltby MS-MVP [2001-2004]
mcmaltby@hotmail.com

> Running Windows ME (with 256 MB of RAM and a 40 GB hard drive with
> more than half the space free) on a Pentium III PC.
[quoted text clipped - 9 lines]
> spoofing. Since I've had that very problem, I would very much like to
> install this update. But where is it?

Reply to this Message

A Baffled User - 27 Sep 2004 14:11 GMT

Many thanks, Mike. But, to my knowledge, I never have reinstalled Windows
Me. I have, however, been having terrible performance trouble with that
operating system (see my post entitled "Totally Remove Items from Startup
List in MSCONFIG" if you think you might have any suggestions). I finished
carrying out Noel Paton's recommendations yesterday night and will have to
run the machine for a while before I know whether they helped.

Thanks again for the info re 329115.

Joan

> Joan,
>
[quoted text clipped - 35 lines]
> > spoofing. Since I've had that very problem, I would very much like to
> > install this update. But where is it?

Reply to this Message

Mike M - 27 Sep 2004 14:22 GMT

Joan,

That Belarc says you have to reinstall a patch and that Windows Update
site does not show it as being available is a pretty sure sign that at
some time or other Win Me has been reinstalled over itself since the patch
was first installed. Off the top of my head I can think of no other
reason.

Regards,

Signature

Mike Maltby MS-MVP [2001-2004]
mcmaltby@hotmail.com

> Many thanks, Mike. But, to my knowledge, I never have reinstalled
> Windows Me. I have, however, been having terrible performance trouble
[quoted text clipped - 5 lines]
>
> Thanks again for the info re 329115.

Reply to this Message

A Baffled User - 27 Sep 2004 14:33 GMT

Huh. Well, the important thing, no doubt, is to get the recommended patch
and take it from there.

All best,
Joan

> Joan,
>
[quoted text clipped - 18 lines]
> >
> > Thanks again for the info re 329115.

Reply to this Message