XP/Vista Stealth Updated by Microsoft Without User Consent

September 12th, 2007 at 3:00 PM - News by John Martellaro

This week, some Windows users have noted that, even though they had the Auto-update option turned off, Microsoft accessed their system and made modifications, according to Windows Secrets on Thursday.

"Itis surprising that these files can be changed without the useris knowledge. The Automatic Updates dialog box in the Control Panel can be set to prevent updates from being installed automatically. However, with Microsoftis latest stealth move, updates to the WU executables seem to be installed regardless of the settings — without notifying users," Scott Dunn reported.

This isnit the first time this has happened, but previously when Microsoft updated svchost.exe, the Windows Update site notified user that the software needed to be installed. This time, it happend without notice.

The author noted, "These files are by no means viruses, and Microsoft appears to have no malicious intent in patching them. However, writing files to a useris PC without notice (when auto-updating has been turned off) is behavior thatis usually associated with hacker Web sites. The question being raised in discussion forums is, iWhy is Microsoft operating in this way?i "

In Microsoftis defense, the updates appear to be to the update system itself. If the updates were not installed, no further updates could be activated when the user turned on the Auto-update option. However, many corporate and government sites insist that no changes be made to their installations without prior testing by them. Microsoft could have notified the users that the update to the update system was mandatory, but let the IT Managers decide whther or not to proceed.

Microsoft, apparently, elected not to do that.