Windows Update Installs An "Upgrade" That Acts Like A Trojan

WARNING TO WINDOWS UPDATE USERS

Just noticed this when I was trying to install "recommended" updates from
the website. You are no longer allowed to use Windows Update unless you
install an "upgrade" to Windows Update. Now pay VERY careful attention to the
description of this update.

----------------------------------------------------------------------------------------------

To use this latest version of Windows Update, you will need to upgrade some
of its components. This version provides you with the following enhancements
to our service:


Express and custom installation: Choose only the most recent critical
updates or pick and choose from all available updates.
Smarter downloads: If downloading is interrupted, the process will start up
where it left off the next time you download that update.
Smaller downloads: Only the files your computer needs are downloaded,
saving download time and connection-speed costs.
One version: Only the most recent updates are offered to you.
Less clutter: You can now hide updates you don't want to see.
Update news: A News from Microsoft section on the Windows Update home page
displays tips and the latest information.

-----------------------------------------------------------------------------------------

Details

Windows Genuine Advantage Validation Tool (KB892130)
734 KB , less than 1 minute
The Windows Genuine Advantage Validation Tool enables you to verify that
your copy of Microsoft Windows is genuine. The tool validates your Windows
installation by checking Windows Product Identification and Product
Activation status.


Total: 734 KB , less than 1 minute

-----------------------------------------------------------------------------------------

By the way, that part marked "details" DOES NOT show by default. In other
words, the average person will read the top part, and accept the installation
of the "upgrade" since according to Microsoft, this will add significant
functionality to Windows Update. You have to specifically open up the details
on the page to see that the "upgrade" has ABSOLUTELY NOTHING TO DO with
Windows Update. It is an entirely new program running on your computer...
using up CPU power, RAM, harddrive space, and internet bandwidth.

Personally, I KNOW my copy of Windows is legitimate, so this program serves
absolutely no useful purpose to me. However, this is what the program does:

1. Constantly uses system resources such as CPU and RAM since it is always
running.
2. Uses internet bandwidth on a regular basis since it communicates with
Microsoft regularly. Some of us don't have much bandwidth to begin with.
3. Is difficult to delete/uninstall once it is installed.
4. Does not install itself, but entices you to install it by masquerading as
an ENTIRELY DIFFERENT PROGRAM (it asks you to install a Windows Update
Upgrade, but you get Windows Genuine Advantage Validation Tool instead).
5. Will most likely lead to security flaws in the future (there has never
really been a new Windows component added that has not caused some sort of
security flaw, they have a BAD track record with that sort of thing).

This meets all the major definitions of a trojan as far as I know.

By the way, it appears that you cannot use the Windows Update website to
update your computer without installing this trojan.

<yawn> Haven't updated in a while, have you? Wait till you see KB905474!
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Security, Shell/User)


springshades wrote:
> WARNING TO WINDOWS UPDATE USERS
>
> Just noticed this when I was trying to install "recommended" updates from
> the website. You are no longer allowed to use Windows Update unless you
> install an "upgrade" to Windows Update. Now pay VERY careful attention to
> the description of this update.
<snip>

"springshades" <> wrote in message
news:6ACD151F-883A-4848-8F68-...
> WARNING TO WINDOWS UPDATE USERS
>
> Just noticed this when I was trying to install "recommended" updates from
> the website. You are no longer allowed to use Windows Update unless you
> install an "upgrade" to Windows Update. Now pay VERY careful attention to
> the
> description of this update.
>
> ----------------------------------------------------------------------------------------------
>
> To use this latest version of Windows Update, you will need to upgrade
> some
> of its components. This version provides you with the following
> enhancements
> to our service:
>
>
> Express and custom installation: Choose only the most recent critical
> updates or pick and choose from all available updates.
> Smarter downloads: If downloading is interrupted, the process will start
> up
> where it left off the next time you download that update.
> Smaller downloads: Only the files your computer needs are downloaded,
> saving download time and connection-speed costs.
> One version: Only the most recent updates are offered to you.
> Less clutter: You can now hide updates you don't want to see.
> Update news: A News from Microsoft section on the Windows Update home
> page
> displays tips and the latest information.
>
> -----------------------------------------------------------------------------------------
>
> Details
>
> Windows Genuine Advantage Validation Tool (KB892130)
> 734 KB , less than 1 minute
> The Windows Genuine Advantage Validation Tool enables you to verify that
> your copy of Microsoft Windows is genuine. The tool validates your Windows
> installation by checking Windows Product Identification and Product
> Activation status.
>
>
> Total: 734 KB , less than 1 minute
>
> -----------------------------------------------------------------------------------------
>
> By the way, that part marked "details" DOES NOT show by default. In other
> words, the average person will read the top part, and accept the
> installation
> of the "upgrade" since according to Microsoft, this will add significant
> functionality to Windows Update. You have to specifically open up the
> details
> on the page to see that the "upgrade" has ABSOLUTELY NOTHING TO DO with
> Windows Update. It is an entirely new program running on your computer...
> using up CPU power, RAM, harddrive space, and internet bandwidth.
>
> Personally, I KNOW my copy of Windows is legitimate, so this program
> serves
> absolutely no useful purpose to me. However, this is what the program
> does:
>
> 1. Constantly uses system resources such as CPU and RAM since it is always
> running.
> 2. Uses internet bandwidth on a regular basis since it communicates with
> Microsoft regularly. Some of us don't have much bandwidth to begin with.
> 3. Is difficult to delete/uninstall once it is installed.
> 4. Does not install itself, but entices you to install it by masquerading
> as
> an ENTIRELY DIFFERENT PROGRAM (it asks you to install a Windows Update
> Upgrade, but you get Windows Genuine Advantage Validation Tool instead).
> 5. Will most likely lead to security flaws in the future (there has never
> really been a new Windows component added that has not caused some sort of
> security flaw, they have a BAD track record with that sort of thing).
>
> This meets all the major definitions of a trojan as far as I know.
>
> By the way, it appears that you cannot use the Windows Update website to
> update your computer without installing this trojan.


Where have you been since MS introduced their spyware?
Here is a selection of articles etc for bedtime reading and to help you get
the 'flavour' of WGA/WGAN

http://blogs.zdnet.com/Bott/?p=89

http://windowssecrets.com/comp/060615/

http://www.groklaw.net/article.php?s...60608002958907

http://www.malwarehelp.org/news/article-3991.html

http://www.microsoft.com/presspass/f...6-08wgaqa.mspx

http://www.informationweek.com/inter...leID=188703441

http://news.zdnet.com/2100-3513_22-6...ml?tag=nl.e589

http://www.computerworld.com/action/...icleId=9001540

http://news.com.com/Microsoft+Heres+...l?tag=nefd.pop

http://news.com.com/Microsoft+Heres+...l?tag=nefd.pop

http://forums.microsoft.com/Genuine/...=444&SiteID=25

I think new people are sooo cute!!!!!

"springshades" <> wrote in message
news:6ACD151F-883A-4848-8F68-...
> WARNING TO WINDOWS UPDATE USERS
>
> Just noticed this when I was trying to install "recommended" updates from
> the website. You are no longer allowed to use Windows Update unless you
> install an "upgrade" to Windows Update. Now pay VERY careful attention to
> the
> description of this update.
>
> ----------------------------------------------------------------------------------------------
>
> To use this latest version of Windows Update, you will need to upgrade
> some
> of its components. This version provides you with the following
> enhancements
> to our service:
>
>
> Express and custom installation: Choose only the most recent critical
> updates or pick and choose from all available updates.
> Smarter downloads: If downloading is interrupted, the process will start
> up
> where it left off the next time you download that update.
> Smaller downloads: Only the files your computer needs are downloaded,
> saving download time and connection-speed costs.
> One version: Only the most recent updates are offered to you.
> Less clutter: You can now hide updates you don't want to see.
> Update news: A News from Microsoft section on the Windows Update home
> page
> displays tips and the latest information.
>
> -----------------------------------------------------------------------------------------
>
> Details
>
> Windows Genuine Advantage Validation Tool (KB892130)
> 734 KB , less than 1 minute
> The Windows Genuine Advantage Validation Tool enables you to verify that
> your copy of Microsoft Windows is genuine. The tool validates your Windows
> installation by checking Windows Product Identification and Product
> Activation status.
>
>
> Total: 734 KB , less than 1 minute
>
> -----------------------------------------------------------------------------------------
>
> By the way, that part marked "details" DOES NOT show by default. In other
> words, the average person will read the top part, and accept the
> installation
> of the "upgrade" since according to Microsoft, this will add significant
> functionality to Windows Update. You have to specifically open up the
> details
> on the page to see that the "upgrade" has ABSOLUTELY NOTHING TO DO with
> Windows Update. It is an entirely new program running on your computer...
> using up CPU power, RAM, harddrive space, and internet bandwidth.
>
> Personally, I KNOW my copy of Windows is legitimate, so this program
> serves
> absolutely no useful purpose to me. However, this is what the program
> does:
>
> 1. Constantly uses system resources such as CPU and RAM since it is always
> running.
> 2. Uses internet bandwidth on a regular basis since it communicates with
> Microsoft regularly. Some of us don't have much bandwidth to begin with.
> 3. Is difficult to delete/uninstall once it is installed.
> 4. Does not install itself, but entices you to install it by masquerading
> as
> an ENTIRELY DIFFERENT PROGRAM (it asks you to install a Windows Update
> Upgrade, but you get Windows Genuine Advantage Validation Tool instead).
> 5. Will most likely lead to security flaws in the future (there has never
> really been a new Windows component added that has not caused some sort of
> security flaw, they have a BAD track record with that sort of thing).
>
> This meets all the major definitions of a trojan as far as I know.
>
> By the way, it appears that you cannot use the Windows Update website to
> update your computer without installing this trojan.

Errr, Antioch, this is the WGA Tool being offered, not the WGA
NOTIFICATION Tool. The latter is the one in question and is NOT
required, as of yet, to do updates @ Windows or Microsoft Update.

MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============

antioch wrote:


> Where have you been since MS introduced their spyware?
> Here is a selection of articles etc for bedtime reading and to help you get
> the 'flavour' of WGA/WGAN
>
> http://blogs.zdnet.com/Bott/?p=89
>
> http://windowssecrets.com/comp/060615/
>
> http://www.groklaw.net/article.php?s...60608002958907
>
> http://www.malwarehelp.org/news/article-3991.html
>
> http://www.microsoft.com/presspass/f...6-08wgaqa.mspx
>
> http://www.informationweek.com/inter...leID=188703441
>
> http://news.zdnet.com/2100-3513_22-6...ml?tag=nl.e589
>
> http://www.computerworld.com/action/...icleId=9001540
>
> http://news.com.com/Microsoft+Heres+...l?tag=nefd.pop
>
> http://news.com.com/Microsoft+Heres+...l?tag=nefd.pop
>
> http://forums.microsoft.com/Genuine/...=444&SiteID=25
>
>

Why a warning?.
I installed WGA 18 months ago.
--
mae

"springshades" <> wrote in message
news:6ACD151F-883A-4848-8F68-...
| WARNING TO WINDOWS UPDATE USERS
|
| Just noticed this when I was trying to install "recommended" updates from
| the website. You are no longer allowed to use Windows Update unless you
| install an "upgrade" to Windows Update. Now pay VERY careful attention to
the
| description of this update.

snip

"MowGreen [MVP]" <> wrote in message
news:...
> Errr, Antioch, this is the WGA Tool being offered, not the WGA
> NOTIFICATION Tool. The latter is the one in question and is NOT required,
> as of yet, to do updates @ Windows or Microsoft Update.
>
> MowGreen [MVP 2003-2006]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>
To me they are one and the same - interconnected.
Rgds
Antioch

18 months ago? - what date was it installed?
I didn't realise it was that old.
Antioch


"mae" <> wrote in message
news:...
> Why a warning?.
> I installed WGA 18 months ago.
> --
> mae
>
> "springshades" <> wrote in message
> news:6ACD151F-883A-4848-8F68-...
> | WARNING TO WINDOWS UPDATE USERS
> |
> | Just noticed this when I was trying to install "recommended" updates
> from
> | the website. You are no longer allowed to use Windows Update unless you
> | install an "upgrade" to Windows Update. Now pay VERY careful attention
> to
> the
> | description of this update.
>
> snip
>

It was elective. (March 2005)
--
mae
"antioch" <> wrote in message
news:eq$...
| 18 months ago? - what date was it installed?
| I didn't realise it was that old.
| Antioch
|
|
| "mae" <> wrote in message
| news:...
| > Why a warning?.
| > I installed WGA 18 months ago.
| > --
| > mae
| >
| > "springshades" <> wrote in message
| > news:6ACD151F-883A-4848-8F68-...
| > | WARNING TO WINDOWS UPDATE USERS
| > |
| > | Just noticed this when I was trying to install "recommended" updates
| > from
| > | the website. You are no longer allowed to use Windows Update unless
you
| > | install an "upgrade" to Windows Update. Now pay VERY careful attention
| > to
| > the
| > | description of this update.
| >
| > snip
| >
|
|

Well I didn't 'elect' it onto my system until about March/April 2006
Time flies :-)
Antioch


"mae" <> wrote in message
news:...
> It was elective. (March 2005)
> --
> mae
> "antioch" <> wrote in message
> news:eq$...
> | 18 months ago? - what date was it installed?
> | I didn't realise it was that old.
> | Antioch
> |
> |
> | "mae" <> wrote in message
> | news:...
> | > Why a warning?.
> | > I installed WGA 18 months ago.
> | > --
> | > mae
> | >
> | > "springshades" <> wrote in message
> | > news:6ACD151F-883A-4848-8F68-...
> | > | WARNING TO WINDOWS UPDATE USERS
> | > |
> | > | Just noticed this when I was trying to install "recommended" updates
> | > from
> | > | the website. You are no longer allowed to use Windows Update unless
> you
> | > | install an "upgrade" to Windows Update. Now pay VERY careful
> attention
> | > to
> | > the
> | > | description of this update.
> | >
> | > snip
> | >
> |
> |
>