• Home
  • About 404TS
  • Contact
  • Shop

404 Tech Support

Where IT Help is Found

  • Articles
    • Code
    • Entertainment
    • Going Green
    • Hardware, Gadgets, and Products
    • Management
    • Network
    • News
    • Operating Systems
    • Security and Privacy
    • Software
    • System Administration
    • Talking Points
    • Tech Solutions
    • Web
    • Webmaster
  • Reviews
  • Media
    • Infographics
    • Videos
  • Tech Events
  • Tools
    • How do I find my IP address?
    • Browser and plugin tests
  • Get a Technical Consultation
You are here: Home / Articles / Software / Test update through Windows Updates causes concern

Test update through Windows Updates causes concern

2015-09-30

Microsoft accidentally published a test update to Windows Update today. A few users posted details of the updates with long gibberish names to a Microsoft Community thread and many grew concerned that Windows Update had been compromised. The update details for what appeared to be a 4.3MB language pack included:

gYxseNjwafVPfgsoHnzLblmmAxZUiOnGcchqEAEwjyxwjUIfpXfJQcdLapTmFaqHGCFsdvpLarmPJLOZYMEILGNIPwNOgEazuBVJcyVjBRL

Download size: 4.3 MB

You may need to restart your computer for this update to take effect.

Update type: Important

qQMphgyOoFUxFLfNprOUQpHS

More information:
https://hckSLpGtvi.PguhWDz.fuVOl.gov
https://jNt.JFnFA.Jigf.xnzMQAFnZ.edu

Help and Support:
https://IIKaR.ktBDARxd.plepVV.PGetGeG.lfIYQIHCN.mil

winupdate_testpatch

The odd URLs certainly seem unusual for updates from Microsoft. Another user posted the details of an update that they saw today:

SjXyXBBRruIsrRKigWTXppLlWhbqTNMZkKHYPfZiADgDWElHqxZxcjUjWuUssdmOYHZsOWybEUZjzNVTpnpTfNlJlkbHObmKv

Размер загрузки: 4,3 МБ

Чтобы обновление вступило в силу, может потребоваться перезапуск компьютера.

Способ обновления: Важное

qQMphgyOoFUxFLfNprOUQpHS

Дополнительные сведения:
https://hckSLpGtvi.PguhWDz.fuVOl.gov
https://jNt.JFnFA.Jigf.xnzMQAFnZ.edu

Справка и поддержка:
http://qPhnIf.CrSNYrve.tZjjsLk.iJw.QFPVvoE.LoKj.svQSjg.feOXkVeoJ.gov

The initial thread was created at 6:04 AM and it was not until 11:50 that the first official answer from Redmond seemed to come through a ZDNet article. The answer: A human mistake.

A spokesperson said that the company had “incorrectly published a test update” and is in the process of removing it.

The updates appear to have been published for Windows 7 only and a WSUS server could pick up the bad update if it synced in the window of time that the bad updates were live. If this happened to you, you may decline the update in WSUS to keep the rest of your organization from seeing the update. There has been one report that installing the update causes Explorer.exe to repeatedly crash.

This is certainly alarming to see a core component of Microsoft’s infrastructure become the victim of a an accident, let alone the initially thought compromise. If capable, the attackers would be able to reach hundreds of millions of devices. Signed updates from Microsoft help prevent this scenario from happening but it does not mean it’s not a first irrational fear as your stomach drops out from under you.

A known test update is better than an explanation never given. We’ll assume a Microsoft employee is in a little hot water for the ruckus they have caused today. Beyond the quoted spokesperson referenced in articles, I have been unable to find an official response from Microsoft posted anywhere with any authority. Given the Internet’s attention span and the company’s closed approach, this will likely be the last we hear of this issue unless it happens again.

Share this:

  • Facebook
  • Twitter
  • Reddit
  • Google
  • Print

Related

Filed Under: Software

Trending

  • Product Review: Flip Video
    In Entertainment, Hardware, Gadgets, and Products, Reviews
  • No Wireless Networks Detected After Reimaging
    In Code, Network, Software, System Administration, Tech Solutions
  • Happy Earth Day! – A Green Compilation
    In Going Green, Media, Talking Points, Tech Solutions

Latest Media Posts

Multifunctional Video Conversion Tools – Wondershare Video Converter

Multifunctional Video Conversion Tools – Wondershare Video Converter

The WannaCry Post-Mortem

The WannaCry Post-Mortem

  • Popular
  • Latest
  • Today Week Month All
  • Microsoft Word: “This modification is not allowed because the selection is locked.” Microsoft Word: "This modification is not allowed because the selection is locked."
  • How to edit the message subject in Outlook 2016 How to edit the message subject in Outlook 2016
  • What is the AllJoyn Router Service on Windows 10? What is the AllJoyn Router Service on Windows 10?
  • Increase IIS Private Memory Limit to improve WSUS availability Increase IIS Private Memory Limit to improve WSUS availability
  • Scan-To-Email with Office 365 from a multifunction copier or printer Scan-To-Email with Office 365 from a multifunction copier or printer
  • You Can Use A VPN To Unlock Regional Content on the Amazon Fire Stick You Can Use A VPN To Unlock Regional Content on the Amazon Fire Stick
  • 3 Common Online Scams People Still Fall For In 2018 3 Common Online Scams People Still Fall For In 2018
  • Methods of Network Transition from IPv4 to IPv6 Methods of Network Transition from IPv4 to IPv6
  • Deleted Partition Recovery – Using Disk Drill File Recovery Tool for Windows Deleted Partition Recovery – Using Disk Drill File Recovery Tool for Windows
  • Securing Open Source Components (it’s different)                                   Securing Open Source Components (it’s different)                                  
Ajax spinner

Upcoming Tech Events

  1. Red Hat Summit 2018

    May 8 - May 10

View All Events

Elevator Pitch

404 Tech Support documents solutions to IT problems, shares worthwhile software and websites, and reviews hardware, consumer electronics, and technology-related books.

Subscribe to 404TS articles by email.

Follow Us

  • Facebook
  • Google+
  • RSS
  • Twitter
  • YouTube

Recent Posts

  • You Can Use A VPN To Unlock Regional Content on the Amazon Fire Stick
  • 3 Common Online Scams People Still Fall For In 2018
  • Methods of Network Transition from IPv4 to IPv6

Search

FTC Disclaimer

404TechSupport is an Amazon.com affiliate; when you click on an Amazon link from 404TS, the site gets a cut of the proceeds from whatever you buy. This site also uses Skimlinks for smart monetization of other affiliate links.
Use of this site requires displaying and viewing ads as they are presented.

Copyright © 2018 · 404TechSupport.com