KB833989 says it installed but does not appear to

On a Windows 2000 SP4 PC I have applied the recently
released KB833989 security update for IE6SP1 using Windows
Update, but when I rescan for updates it is still there!
I even downloaded the patch and ran it manually and it
says that it successfully installs, but KB833989 does not
appear in the Add/Remove Programs list, and Windows Update
continues to show it needing to be installed. What is the
deal? I installed the same patch on Windows XP SP2
machines with no problem, and I successfully installed it
on a Microsoft Virtual PC virtual machine running Windows
2000 SP4 (which was actually running on a host running XP
SP2).
Is there a way that I can remove IE6 and re-install or is
there some other way to fix it?

Thanks,
Conrad

Note that in Control Panel, Add/Remove Programs, this update will
appear as Microsoft VGX 833989.

" Registry Key Verification

You may also be able to verify the files that this security update
has installed by reviewing the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed
Components\{dc0d5f50-5f0b-46bf-8683-93ac61c67001}

Note Confirm that the IsInstalled DWORD value with a data value of 1
appears in the registry key.

• Program Version Verification

Confirm that Q833989 is listed in the Update Versions field in the
About Internet Explorer dialog box "

Source :
http://www.microsoft.com/technet/sec.../ms04-028.mspx "


MowGreen [MVP]
===============
*-343-* FDNY
Never Forgotten
===============



Conrad wrote:

> On a Windows 2000 SP4 PC I have applied the recently
> released KB833989 security update for IE6SP1 using Windows
> Update, but when I rescan for updates it is still there!
> I even downloaded the patch and ran it manually and it
> says that it successfully installs, but KB833989 does not
> appear in the Add/Remove Programs list, and Windows Update
> continues to show it needing to be installed. What is the
> deal? I installed the same patch on Windows XP SP2
> machines with no problem, and I successfully installed it
> on a Microsoft Virtual PC virtual machine running Windows
> 2000 SP4 (which was actually running on a host running XP
> SP2).
> Is there a way that I can remove IE6 and re-install or is
> there some other way to fix it?
>
> Thanks,
> Conrad

Thanks for the info. I checked all the things you
mentioned and they are all as they should be. It is also
in Add/Remove programs. I was looking at the end of the
list as I assumed it was a Windows 2000 Hotfix.

The only problem is that it still shows up in the Windows
Update page for critical updates after performing the scan.

I guess I will ignore it and always click "Remove" when I
am applying other critical updates in the future? Oh well.

Conrad

>-----Original Message-----
>Note that in Control Panel, Add/Remove Programs, this
update will
>appear as Microsoft VGX 833989.
>
>" Registry Key Verification
>
>You may also be able to verify the files that this
security update
>has installed by reviewing the following registry key:
>
>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active
Setup\Installed
>Components\{dc0d5f50-5f0b-46bf-8683-93ac61c67001}
>
>Note Confirm that the IsInstalled DWORD value with a data
value of 1
>appears in the registry key.
>
>. Program Version Verification
>
>Confirm that Q833989 is listed in the Update Versions
field in the
>About Internet Explorer dialog box "
>
>Source :
>http://www.microsoft.com/technet/sec...bulletin/ms04-
028.mspx "
>
>
>MowGreen [MVP]
>===============
> *-343-* FDNY
>Never Forgotten
>===============
>
>
>
>Conrad wrote:
>
>> On a Windows 2000 SP4 PC I have applied the recently
>> released KB833989 security update for IE6SP1 using
Windows
>> Update, but when I rescan for updates it is still there!
>> I even downloaded the patch and ran it manually and it
>> says that it successfully installs, but KB833989 does
not
>> appear in the Add/Remove Programs list, and Windows
Update
>> continues to show it needing to be installed. What is
the
>> deal? I installed the same patch on Windows XP SP2
>> machines with no problem, and I successfully installed
it
>> on a Microsoft Virtual PC virtual machine running
Windows
>> 2000 SP4 (which was actually running on a host running
XP
>> SP2).
>> Is there a way that I can remove IE6 and re-install or
is
>> there some other way to fix it?
>>
>> Thanks,
>> Conrad
>
>.
>

I have the same problem with the automatic updates. Everyday my computer
wants to install the update even though I installed it the day prior. If I
check on web's Windows Updates profile it listed every day as a successful
install. How do I stop this?

"MowGreen [MVP]" wrote:

> Note that in Control Panel, Add/Remove Programs, this update will
> appear as Microsoft VGX 833989.
>
> " Registry Key Verification
>
> You may also be able to verify the files that this security update
> has installed by reviewing the following registry key:
>
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed
> Components\{dc0d5f50-5f0b-46bf-8683-93ac61c67001}
>
> Note Confirm that the IsInstalled DWORD value with a data value of 1
> appears in the registry key.
>
> • Program Version Verification
>
> Confirm that Q833989 is listed in the Update Versions field in the
> About Internet Explorer dialog box "
>
> Source :
> http://www.microsoft.com/technet/sec.../ms04-028.mspx "
>
>
> MowGreen [MVP]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>
>
>
> Conrad wrote:
>
> > On a Windows 2000 SP4 PC I have applied the recently
> > released KB833989 security update for IE6SP1 using Windows
> > Update, but when I rescan for updates it is still there!
> > I even downloaded the patch and ran it manually and it
> > says that it successfully installs, but KB833989 does not
> > appear in the Add/Remove Programs list, and Windows Update
> > continues to show it needing to be installed. What is the
> > deal? I installed the same patch on Windows XP SP2
> > machines with no problem, and I successfully installed it
> > on a Microsoft Virtual PC virtual machine running Windows
> > 2000 SP4 (which was actually running on a host running XP
> > SP2).
> > Is there a way that I can remove IE6 and re-install or is
> > there some other way to fix it?
> >
> > Thanks,
> > Conrad
>
>

Check the registry key, confirm that it's listed in Add/Remove
Programs ... the issue may be related to what's installed on your
system in terms of software and explain why your successful
installation of KB833989 is not being detected by Windows Update,
thus , it's being reoffered.

Have a look at this page for affected software :
http://www.microsoft.com/technet/sec.../ms04-028.mspx

" Caveats: If you have installed any of the affected programs or
affected components listed in this bulletin, you should install the
required security update for each of the affected programs or
affected components. This may require the installation of multiple
security updates. See the FAQ section of this bulletin for more
information. "

It is MORE than a tad confusing !!!


MowGreen [MVP]
===============
*-343-* FDNY
Never Forgotten
===============


Gcrcyale wrote:

> I have the same problem with the automatic updates. Everyday my computer
> wants to install the update even though I installed it the day prior. If I
> check on web's Windows Updates profile it listed every day as a successful
> install. How do I stop this?
>
> "MowGreen [MVP]" wrote:
>
>
>>Note that in Control Panel, Add/Remove Programs, this update will
>>appear as Microsoft VGX 833989.
>>
>>" Registry Key Verification
>>
>>You may also be able to verify the files that this security update
>>has installed by reviewing the following registry key:
>>
>>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed
>>Components\{dc0d5f50-5f0b-46bf-8683-93ac61c67001}
>>
>>Note Confirm that the IsInstalled DWORD value with a data value of 1
>>appears in the registry key.
>>
>>• Program Version Verification
>>
>>Confirm that Q833989 is listed in the Update Versions field in the
>>About Internet Explorer dialog box "
>>
>>Source :
>>http://www.microsoft.com/technet/sec.../ms04-028.mspx "
>>
>>
>>MowGreen [MVP]
>>===============
>> *-343-* FDNY
>>Never Forgotten
>>===============
>>
>>
>>
>>Conrad wrote:
>>
>>
>>>On a Windows 2000 SP4 PC I have applied the recently
>>>released KB833989 security update for IE6SP1 using Windows
>>>Update, but when I rescan for updates it is still there!
>>>I even downloaded the patch and ran it manually and it
>>>says that it successfully installs, but KB833989 does not
>>>appear in the Add/Remove Programs list, and Windows Update
>>>continues to show it needing to be installed. What is the
>>>deal? I installed the same patch on Windows XP SP2
>>>machines with no problem, and I successfully installed it
>>>on a Microsoft Virtual PC virtual machine running Windows
>>>2000 SP4 (which was actually running on a host running XP
>>>SP2).
>>>Is there a way that I can remove IE6 and re-install or is
>>>there some other way to fix it?
>>>
>>>Thanks,
>>>Conrad
>>
>>

The only suggestion would be to do a search for Gdiplus.dll and
compare them to the chart on
http://www.microsoft.com/technet/sec.../ms04-028.mspx
under the " Frequently asked questions (FAQ) related to this
security update " heading, " Which versions of the Gdiplus.dll file
could cause applications to become vulnerable? ".
This may provide a clue as to what other software needs updating.
Hopefully, MS will have a tool soon to automate this .

MowGreen [MVP]
===============
*-343-* FDNY
Never Forgotten
===============


Seawheels wrote:

> Same problem here, 2 boxen with Win2K pro SP4 with office 2000 and IE 6 SP1.
> PC downloads and installs KB833989 daily from corporate SUS server or
> manually from windows update.
> Have verified existence of patch in IE help/about.
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed
> Components\{dc0d5f50-5f0b-46bf-8683-93ac61c67001} and correct dword value.
> Hotfix is listed in add/remove programs and as installed in about IE
> Have run active x control to id any vulnerable programs and manually
> compared programs with list in KB article with zero results.
> Event logs give nothing to sink teeth into. Googling led me here. Any other
> ideas? Tried upgrading Netscape on one box with no change. Tried upgrading to
> office 2003 SP1 on the other PC with no change.
>
> "MowGreen [MVP]" wrote:
>
>
>>Check the registry key, confirm that it's listed in Add/Remove
>>Programs ... the issue may be related to what's installed on your
>>system in terms of software and explain why your successful
>>installation of KB833989 is not being detected by Windows Update,
>>thus , it's being reoffered.
>>
>>Have a look at this page for affected software :
>>http://www.microsoft.com/technet/sec.../ms04-028.mspx
>
>

On Thu, 23 Sep 2004 10:42:00 -0700, "MowGreen [MVP]" <>
wrote:

>The only suggestion would be to do a search for Gdiplus.dll and
>compare them to the chart on
>http://www.microsoft.com/technet/sec.../ms04-028.mspx
>under the " Frequently asked questions (FAQ) related to this
>security update " heading, " Which versions of the Gdiplus.dll file
>could cause applications to become vulnerable? ".
>This may provide a clue as to what other software needs updating.
>Hopefully, MS will have a tool soon to automate this .

Mow, Are you aware of this one (Win2K and higher):

<http://isc.sans.org/gdiscan.php>

--
dak

KB833989

This will occur if the Program Files and/or Program Files Common Files Dir
has been moved to another drive. (Using Tweakui or Manually editing Registry
ProgramFilesDir and Common Files)

Here is what I did to fix on both XP and Win 2000 ....

1)
Download the update to desktop
Start Run SFC /PURGECACHE
Click the UPdate install it
Start Shutdown Restart
Press F8 .... Safemode
Click the Update ... Install it
Start Shutdown Restart

Example if you have moved "Program Files and Program Files\Common Files to
drive E

2)
Go to C:\Program Files\Internet Explorer (See what is there that isn't in
E:\Program Files\Common Files

Go to C:\Program Files\Common Files\Shared\
Open My Computer a second time Go to E:\Program Files\Common Files\Shared\

(See what is there in C:\Program Files\Common Files\Shared\ that isn't in
E:\Program Files\Common Files\Shared\ .... Should be a VGX folder

Copy the VGX Folder (containing VGX.DLL) from the C:\Program Files\Common
Files\Shared\ to E:\Program Files\Common Files\Shared\


3)
Check your C:\Program Files\internet Explorer against E:\Program
Files\internet Explorer while you are there





"Conrad" wrote:

> On a Windows 2000 SP4 PC I have applied the recently
> released KB833989 security update for IE6SP1 using Windows
> Update, but when I rescan for updates it is still there!
> I even downloaded the patch and ran it manually and it
> says that it successfully installs, but KB833989 does not
> appear in the Add/Remove Programs list, and Windows Update
> continues to show it needing to be installed. What is the
> deal? I installed the same patch on Windows XP SP2
> machines with no problem, and I successfully installed it
> on a Microsoft Virtual PC virtual machine running Windows
> 2000 SP4 (which was actually running on a host running XP
> SP2).
> Is there a way that I can remove IE6 and re-install or is
> there some other way to fix it?
>
> Thanks,
> Conrad
>

Solved. Thanks to Dak and MowGreen as well as [[[```RB.
Had actually figured it out using the suggested SANS tool prior to reviewing
the latest post. These pc's were loaded from image files that created 3
partitions, the second partition in one case and the third partition in the
other case (not C: in either case) had office installed on it. There was a
program files directory on the partition that office was installed, path
\Program Files\Common Files\Microsoft Shared\VGX which held an old version of
the vgx.dll dating from the year 2002 (probably from the initial software
installation). The logic in the patch apparently can detect the dll on other
partitions but can't patch it , it would seem. RB's suggestion / method
works if anyone else encounters the problem.

"[[[```RB" wrote:

> KB833989
>
> This will occur if the Program Files and/or Program Files Common Files Dir
> has been moved to another drive. (Using Tweakui or Manually editing Registry
> ProgramFilesDir and Common Files)

<snipped>

Sometimes it takes a village to resolve an issue

[[[```RB, have you sent your resolution for this issue to MS ?

MowGreen [MVP]
===============
*-343-* FDNY
Never Forgotten
===============

Seawheels wrote:
> Solved. Thanks to Dak and MowGreen as well as [[[```RB.
> Had actually figured it out using the suggested SANS tool prior to reviewing
> the latest post. These pc's were loaded from image files that created 3
> partitions, the second partition in one case and the third partition in the
> other case (not C: in either case) had office installed on it. There was a
> program files directory on the partition that office was installed, path
> \Program Files\Common Files\Microsoft Shared\VGX which held an old version of
> the vgx.dll dating from the year 2002 (probably from the initial software
> installation). The logic in the patch apparently can detect the dll on other
> partitions but can't patch it , it would seem. RB's suggestion / method
> works if anyone else encounters the problem.
>
> "[[[```RB" wrote:
>
>
>>KB833989
>>
>>This will occur if the Program Files and/or Program Files Common Files Dir
>>has been moved to another drive. (Using Tweakui or Manually editing Registry
>>ProgramFilesDir and Common Files)
>
>
> <snipped>