Trojan.WSUS and KB963707

Microsoft has used its trojan to install (ok, to trick me into approving for
install) an add-on to Firefox as part of a .Net Framework SP1. Now I am a
..Net developer but I wasn't aware that FireFox was written in .Net or was a
Microsoft product to be updated by WSUS or Windows Update.

Now I have KB963707 update to, hopefully, let me uninstall this unwanted
update but I cannot get the installation to run on some XP PCs.

Error messages I get include:
----------------------------------------------------------------
Event Type: Information
Event Source: HotFixInstaller
Event Category: None
Event ID: 5001
Date: 6/27/2009
Time: 5:13:02 PM
User: N/A
Computer: MYPCName
Description:
Bucket 619463613, bucket table 5, EventType visualstudio8setup, P1 microsoft
..net framework 3.5-kb963707, P2 1033, P3 1635, P4 msi, P5 f, P6 9.0.31211.0,
P7 install, P8 x86, P9 xp, P10 0.
------------------------------------------------------------------------

Event Type: Error
Event Source: Windows Update Agent
Event Category: Installation
Event ID: 20
Date: 6/27/2009
Time: 6:47:59 PM
User: N/A
Computer: DP2K9
Description:
Installation Failure: Windows failed to install the following update with
error 0x80070643: Update to .NET Framework 3.5 Service Pack 1 for the .NET
Framework Assistant 1.0 x86 (KB963707).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 57 69 6e 33 32 48 52 65 Win32HRe
0008: 73 75 6c 74 3d 30 78 38 sult=0x8
0010: 30 30 37 30 36 34 33 20 0070643
0018: 55 70 64 61 74 65 49 44 UpdateID
0020: 3d 7b 38 32 36 36 41 31 ={8266A1
0028: 38 38 2d 38 46 30 36 2d 88-8F06-
0030: 34 32 45 44 2d 41 42 44 42ED-ABD
0038: 37 2d 35 45 34 36 37 45 7-5E467E
0040: 39 41 41 44 38 31 7d 20 9AAD81}
0048: 52 65 76 69 73 69 6f 6e Revision
0050: 4e 75 6d 62 65 72 3d 31 Number=1
0058: 30 31 20 00 01 .
-------------------------------------------------------------------------

Any suggestions about what might be causing this failure? I'm anxious to
uninstall this update from FireFox as soon as possible.

Regards,

Dale

http://support.microsoft.com/kb/963707

"Dale" wrote:

> Microsoft has used its trojan to install (ok, to trick me into approving for
> install) an add-on to Firefox as part of a .Net Framework SP1. Now I am a
> .Net developer but I wasn't aware that FireFox was written in .Net or was a
> Microsoft product to be updated by WSUS or Windows Update.
>
> Now I have KB963707 update to, hopefully, let me uninstall this unwanted
> update but I cannot get the installation to run on some XP PCs.
>
> Error messages I get include:
> ----------------------------------------------------------------
> Event Type: Information
> Event Source: HotFixInstaller
> Event Category: None
> Event ID: 5001
> Date: 6/27/2009
> Time: 5:13:02 PM
> User: N/A
> Computer: MYPCName
> Description:
> Bucket 619463613, bucket table 5, EventType visualstudio8setup, P1 microsoft
> .net framework 3.5-kb963707, P2 1033, P3 1635, P4 msi, P5 f, P6 9.0.31211.0,
> P7 install, P8 x86, P9 xp, P10 0.
> ------------------------------------------------------------------------
>
> Event Type: Error
> Event Source: Windows Update Agent
> Event Category: Installation
> Event ID: 20
> Date: 6/27/2009
> Time: 6:47:59 PM
> User: N/A
> Computer: DP2K9
> Description:
> Installation Failure: Windows failed to install the following update with
> error 0x80070643: Update to .NET Framework 3.5 Service Pack 1 for the .NET
> Framework Assistant 1.0 x86 (KB963707).
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 57 69 6e 33 32 48 52 65 Win32HRe
> 0008: 73 75 6c 74 3d 30 78 38 sult=0x8
> 0010: 30 30 37 30 36 34 33 20 0070643
> 0018: 55 70 64 61 74 65 49 44 UpdateID
> 0020: 3d 7b 38 32 36 36 41 31 ={8266A1
> 0028: 38 38 2d 38 46 30 36 2d 88-8F06-
> 0030: 34 32 45 44 2d 41 42 44 42ED-ABD
> 0038: 37 2d 35 45 34 36 37 45 7-5E467E
> 0040: 39 41 41 44 38 31 7d 20 9AAD81}
> 0048: 52 65 76 69 73 69 6f 6e Revision
> 0050: 4e 75 6d 62 65 72 3d 31 Number=1
> 0058: 30 31 20 00 01 .
> -------------------------------------------------------------------------
>
> Any suggestions about what might be causing this failure? I'm anxious to
> uninstall this update from FireFox as soon as possible.
>
> Regards,
>
> Dale
>

"Dale" <> wrote in message news:E959E347-AEA1-4E1B-BBFF-...


> Now I have KB963707 update to, hopefully, let me uninstall this unwanted
> update but I cannot get the installation to run on some XP PCs.

> Error messages I get include:

> Installation Failure: Windows failed to install the following update with
> error 0x80070643: Update to .NET Framework 3.5 Service Pack 1 for the .NET
> Framework Assistant 1.0 x86 (KB963707).


You're going to have to dig deeper for the real problem symptom.
This code just says...

<cmd_output OS="XPsp3">
E:\>set /a c = 0x643
1603
E:\>net helpmsg %c%

Fatal error during installation.
</cmd_output>


Not too informative. ; }


Good luck

Robert Aldwinckle
---

[How is he supposed to uninstall something he cannot install in the first
place, Engel?]

Ǝиçεl wrote:
> http://support.microsoft.com/kb/963707
>
> "Dale" wrote:
>
>> Microsoft has used its trojan to install (ok, to trick me into approving
>> for install) an add-on to Firefox as part of a .Net Framework SP1. Now I
>> am a .Net developer but I wasn't aware that FireFox was written in .Net
>> or
>> was a Microsoft product to be updated by WSUS or Windows Update.
>>
>> Now I have KB963707 update to, hopefully, let me uninstall this unwanted
>> update but I cannot get the installation to run on some XP PCs.
>>
>> Error messages I get include:
>> ----------------------------------------------------------------
>> Event Type: Information
>> Event Source: HotFixInstaller
>> Event Category: None
>> Event ID: 5001
>> Date: 6/27/2009
>> Time: 5:13:02 PM
>> User: N/A
>> Computer: MYPCName
>> Description:
>> Bucket 619463613, bucket table 5, EventType visualstudio8setup, P1
>> microsoft .net framework 3.5-kb963707, P2 1033, P3 1635, P4 msi, P5 f, P6
>> 9.0.31211.0, P7 install, P8 x86, P9 xp, P10 0.
>> ------------------------------------------------------------------------
>>
>> Event Type: Error
>> Event Source: Windows Update Agent
>> Event Category: Installation
>> Event ID: 20
>> Date: 6/27/2009
>> Time: 6:47:59 PM
>> User: N/A
>> Computer: DP2K9
>> Description:
>> Installation Failure: Windows failed to install the following update with
>> error 0x80070643: Update to .NET Framework 3.5 Service Pack 1 for the
>> .NET
>> Framework Assistant 1.0 x86 (KB963707).
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>> Data:
>> 0000: 57 69 6e 33 32 48 52 65 Win32HRe
>> 0008: 73 75 6c 74 3d 30 78 38 sult=0x8
>> 0010: 30 30 37 30 36 34 33 20 0070643
>> 0018: 55 70 64 61 74 65 49 44 UpdateID
>> 0020: 3d 7b 38 32 36 36 41 31 ={8266A1
>> 0028: 38 38 2d 38 46 30 36 2d 88-8F06-
>> 0030: 34 32 45 44 2d 41 42 44 42ED-ABD
>> 0038: 37 2d 35 45 34 36 37 45 7-5E467E
>> 0040: 39 41 41 44 38 31 7d 20 9AAD81}
>> 0048: 52 65 76 69 73 69 6f 6e Revision
>> 0050: 4e 75 6d 62 65 72 3d 31 Number=1
>> 0058: 30 31 20 00 01 .
>> -------------------------------------------------------------------------
>>
>> Any suggestions about what might be causing this failure? I'm anxious to
>> uninstall this update from FireFox as soon as possible.
>>
>> Regards,
>>
>> Dale

Hi Robert,

More information here:

http://support.microsoft.com/kb/923100
-=-

"Robert Aldwinckle" wrote:

>
> "Dale" <> wrote in message news:E959E347-AEA1-4E1B-BBFF-...
>
>
> > Now I have KB963707 update to, hopefully, let me uninstall this unwanted
> > update but I cannot get the installation to run on some XP PCs.
>
> > Error messages I get include:
>
> > Installation Failure: Windows failed to install the following update with
> > error 0x80070643: Update to .NET Framework 3.5 Service Pack 1 for the .NET
> > Framework Assistant 1.0 x86 (KB963707).
>
>
> You're going to have to dig deeper for the real problem symptom.
> This code just says...
>
> <cmd_output OS="XPsp3">
> E:\>set /a c = 0x643
> 1603
> E:\>net helpmsg %c%
>
> Fatal error during installation.
> </cmd_output>
>
>
> Not too informative. ; }
>
>
> Good luck
>
> Robert Aldwinckle
> ---
>
>
>

"??ç?l" <> wrote in message news:B622A77D-FE73-4AE3-B9B5-...
> Hi Robert,
>
> More information here:
>
> http://support.microsoft.com/kb/923100

<extracts>
Method 1: Manually remove and reinstall .NET Framework

Method 2: Use the .NET Framework automatic cleanup tool
</extracts>


Those are "blunt hammer" approaches IMO. ; )
I have found that if you look at the associated messages
a much simpler, more elegant solution may be possible.

E.g. in my own personal case, an MSI log contained messages
(which would normally be presented to a user doing a manual install
in a message window), which when interpreted correctly, implied that
in order for the install to succeed I would have to first uninstall some beta
versions of the associated components (that I wasn't even aware
that I still had.) Indeed, after I uninstalled those the install worked properly,
without all the hassle of starting .NET installs from scratch.


FYI

Robert
---


> -=-
>
> "Robert Aldwinckle" wrote:
>
>>
>> "Dale" <> wrote in message news:E959E347-AEA1-4E1B-BBFF-...
>>
>>
>> > Now I have KB963707 update to, hopefully, let me uninstall this unwanted
>> > update but I cannot get the installation to run on some XP PCs.
>>
>> > Error messages I get include:
>>
>> > Installation Failure: Windows failed to install the following update with
>> > error 0x80070643: Update to .NET Framework 3.5 Service Pack 1 for the .NET
>> > Framework Assistant 1.0 x86 (KB963707).
>>
>>
>> You're going to have to dig deeper for the real problem symptom.
>> This code just says...
>>
>> <cmd_output OS="XPsp3">
>> E:\>set /a c = 0x643
>> 1603
>> E:\>net helpmsg %c%
>>
>> Fatal error during installation.
>> </cmd_output>
>>
>>
>> Not too informative. ; }
>>
>>
>> Good luck
>>
>> Robert Aldwinckle
>> ---
>>
>>
>>

Hi Robert,

Thank you for the time to explain to me. Is always reading your answers a
well of educative information. Nothing is more frustrating than supplying a
fix and having the outcome just go off into a bit bucket. This is a learning
process for everyone here.

Thank again


Ǝиçεl
-=-


"Robert Aldwinckle" wrote:

>
> "??ç?l" <> wrote in message news:B622A77D-FE73-4AE3-B9B5-...
> > Hi Robert,
> >
> > More information here:
> >
> > http://support.microsoft.com/kb/923100
>
> <extracts>
> Method 1: Manually remove and reinstall .NET Framework
>
> Method 2: Use the .NET Framework automatic cleanup tool
> </extracts>
>
>
> Those are "blunt hammer" approaches IMO. ; )
> I have found that if you look at the associated messages
> a much simpler, more elegant solution may be possible.
>
> E.g. in my own personal case, an MSI log contained messages
> (which would normally be presented to a user doing a manual install
> in a message window), which when interpreted correctly, implied that
> in order for the install to succeed I would have to first uninstall some beta
> versions of the associated components (that I wasn't even aware
> that I still had.) Indeed, after I uninstalled those the install worked properly,
> without all the hassle of starting .NET installs from scratch.
>
>
> FYI
>
> Robert
> ---
>
>
> > -=-
> >
> > "Robert Aldwinckle" wrote:
> >
> >>
> >> "Dale" <> wrote in message news:E959E347-AEA1-4E1B-BBFF-...
> >>
> >>
> >> > Now I have KB963707 update to, hopefully, let me uninstall this unwanted
> >> > update but I cannot get the installation to run on some XP PCs.
> >>
> >> > Error messages I get include:
> >>
> >> > Installation Failure: Windows failed to install the following update with
> >> > error 0x80070643: Update to .NET Framework 3.5 Service Pack 1 for the .NET
> >> > Framework Assistant 1.0 x86 (KB963707).
> >>
> >>
> >> You're going to have to dig deeper for the real problem symptom.
> >> This code just says...
> >>
> >> <cmd_output OS="XPsp3">
> >> E:\>set /a c = 0x643
> >> 1603
> >> E:\>net helpmsg %c%
> >>
> >> Fatal error during installation.
> >> </cmd_output>
> >>
> >>
> >> Not too informative. ; }
> >>
> >>
> >> Good luck
> >>
> >> Robert Aldwinckle
> >> ---
> >>
> >>
> >>
>
>
>

Dale wrote:

> Microsoft has used its trojan to install (ok, to trick me into approving for
> install) an add-on to Firefox as part of a .Net Framework SP1. Now I am a
> .Net developer but I wasn't aware that FireFox was written in .Net or was a
> Microsoft product to be updated by WSUS or Windows Update.

An add-on isn't an update, Dale. Firefox itself has not been modified.

> Now I have KB963707 update to, hopefully, let me uninstall this unwanted
> update but I cannot get the installation to run on some XP PCs.

Have you tried downloading KB963707 from the Microsoft Download Center and
installing it manually? If this still doesn't work, have you tried installing
it manually in Safe Mode?

> Any suggestions about what might be causing this failure? I'm anxious to
> uninstall this update from FireFox as soon as possible.

No need for anxiety; assuming the add-on is already disabled, the only
difference uninstalling it will make is to remove it from the add-ons list.
There is no functional difference at all between a disabled add-on and an
uninstalled one.

Harry.