Re: MS06-071 MSXML 4.0 SP2 Security Update (KB927978)

MikeMerc wrote:

> Ok, I know there have been numerous threads about this patch but, I cannot
> figure it out. It seems to have a mind of it's own. I installed all the
> security patches on our Windows 2003 servers and of course keep getting
> prompted to install MS06-071. So to fix the problem I uninstalled the patch
> by running add/remove programs. After the uninstall I rebooted the server
> even though none was specified. I then downloaded the patch and installed it
> manually. After the install I rebooted the server again. I then ran MBSA
> against the server and it reported stong security. Now a few days later
> without even rebooting the servers the MBSA scans are reporting the patch is
> missing but no changes were made to the server and it was not rebooted since
> it scanned clean approximately 2 days prior. This has happened on about 50
> Windows 2003 servers. What gives?
>
> -Mike


Mike,

Is the update being reoffered or is just MBSA reporting that the patch
is missing ?
Can you check to see if the update is installed properly:
http://www.microsoft.com/technet/sec.../MS06-071.mspx

> File Information
>
> The English version of this security update has the file attributes that are listed in
> the following table. The dates and times for these files are listed in coordinated
> universal time (UTC). When you view the file information, it is converted to local time.
> To find the difference between UTC and local time, use the Time Zone tab in the Date and
> Time tool in Control Panel.
>
> Microsoft XML Core Services 4.0:
> File Name Version Date Time Size
>
> MSXML4.dll 4.20.9841. 11-04-2006 2:14 1.18 MB

> Note This security update is installed in both the %SystemRoot%\System32 folder and the
> side-by-side folder %SystemRoot%\WinSxS.


MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============

Mike,

Yup, I suggested those steps back in November when this issue started to
pop up, pardon the expression

Glad to hear that everything is copacetic now. Nice work.

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


MikeMerc wrote:

> After reading through a number of posts here I think this is the problem:
>
> Under add/remove programs both KB927978 & KB925762 are showing up as
> installed. As a result under the %systemroot%\WinSXS there were 2 versions
> of the msxml4.dll file (4.20.9839.0 & 4.20.9841.0). It was suggested to:
>
> 1. Uninstall KB927978 and reboot.
> 2. Uninstall KB925762 and reboot.
> 3. Install KB927978 only and reboot.
>
> This seemed to resolve the problem. A scan of the server now reveals only
> the correct version of msxml4.dll which is 4.20.9841.0.
>
> -Mike
>
> "MowGreen [MVP]" wrote:
>
>
>>MikeMerc wrote:
>>
>>
>>>Ok, I know there have been numerous threads about this patch but, I cannot
>>>figure it out. It seems to have a mind of it's own. I installed all the
>>>security patches on our Windows 2003 servers and of course keep getting
>>>prompted to install MS06-071. So to fix the problem I uninstalled the patch
>>>by running add/remove programs. After the uninstall I rebooted the server
>>>even though none was specified. I then downloaded the patch and installed it
>>>manually. After the install I rebooted the server again. I then ran MBSA
>>>against the server and it reported stong security. Now a few days later
>>>without even rebooting the servers the MBSA scans are reporting the patch is
>>>missing but no changes were made to the server and it was not rebooted since
>>>it scanned clean approximately 2 days prior. This has happened on about 50
>>>Windows 2003 servers. What gives?
>>>
>>>-Mike
>>
>>
>>Mike,
>>
>>Is the update being reoffered or is just MBSA reporting that the patch
>>is missing ?
>>Can you check to see if the update is installed properly:
>>http://www.microsoft.com/technet/sec.../MS06-071.mspx
>>
>>
>>>File Information
>>>
>>>The English version of this security update has the file attributes that are listed in
>>>the following table. The dates and times for these files are listed in coordinated
>>>universal time (UTC). When you view the file information, it is converted to local time.
>>>To find the difference between UTC and local time, use the Time Zone tab in the Date and
>>>Time tool in Control Panel.
>>>
>>>Microsoft XML Core Services 4.0:
>>>File Name Version Date Time Size
>>>
>>>MSXML4.dll 4.20.9841. 11-04-2006 2:14 1.18 MB
>>
>>>Note This security update is installed in both the %SystemRoot%\System32 folder and the
>>>side-by-side folder %SystemRoot%\WinSxS.
>>
>>
>>MowGreen [MVP 2003-2007]
>>===============
>> *-343-* FDNY
>>Never Forgotten
>>===============
>>