Just received the following that is related to the SVCHOST issues that I’ve written about in the past…

MS has released “Microsoft Security Advisory (927891) - Fix for Windows Installer (MSI)” that’s not really a direct security concern, but actually addresses concerns that might prevent people from getting critical security or other updates.

As previously mentioned, it involves MS KB 927891 - “You receive an access violation error and the system may appear to become unresponsive when you try to install an update from Windows Update or from Microsoft Update“, and the current revision of the article (8.0) states “This fix is one component of a two-part fix that includes a Windows Update client software update. These updates will be deployed automatically using Windows Update in May 2007 and June 2007.”

Again, this update is one of two that need to be applied to fully address the issue. The other update is version 3.0 of the Windows Update Client Software, available from MS KB 932494, “When you use Automatic Updates to scan for updates or to apply updates to applications that use Windows Installer, you experience issues that involve the Svchost.exe process“.

One

…

Acer Ferrari 5000

While we were busy migrating the website Microsoft Released Windows Server 2003 SP2. This update had a few interesting features, among them:

A new XMLlite engine. This is an XML parser that is a low XML parsing Engine. This feature is more interesting for developers looking to use XML for system management tools, howeve admins will probably see some indirect benefits of this as more tools standardize on XML as their input and output formats.

An example of the use of XML is the updated DCDiag tool that now supports outputting information into XML tagged reports.

There is an update to the CACLS.exe tool. In fact there is an all new tool called ICACLS.exe This tool can backup ACLS, and has better support for propagation of inherited permissions.

IPSec configurations are simplified to allow you to quickly and easily create secre server isolations deployments.

There is native support for WPA2 one of the most secure wireless protocols released to date.

And finally WDS (Windows Deployment Services) is installed in the event that your server is running RIS. Take note if your server is running RIS you may need to configure WDS to work in legacy or Mixed mode if you install SP2.

To Get more info and to download SP2 check out the

…

Initially, I was going to start off by saying that I’ve been reading more books and less content online, but that wouldn’t be accurate. I’ve actually picked up more online reading, but I’m also more frequently finding myself with a good book in hand before bed. Currently, I’m finding my way through Eldad Eilam’s Reversing: Secrets of Reverse Engineering. It’s a good read so far and I hope to learn a lot.

I’ve ALWAYS got Russinovich & Solomon’s Windows Internals open, and I’ve been through it cover to cover a few times as well. There’s just so much good stuff there, and I’ve got a memory like a goldfish… =8->

Recently, I also read Hoglund and Butler’s Rootkits: Subverting the Windows Kernel for the second time. The chapter on DKOM is probably my favorite.

I just finished Raymond Chen’s The Old New Thing: Practical Development Throughout the Evolution of Windows. The anecdotes range from light to heavy, and the lessons to be learned are well presented. I like Raymond’s writing style and it is good to hear his perspectives on why things are the way they are. For whatever reason I hadn’t picked up Raymond’s

…