Windows Update

[Baresi]

Originally Posted by Baresi

Hi Marcos.

I have that module 1041, but i still get error number [0x8024404]
when i try to run windows updates.

I use 5.2.9.1 ESS on xp workstation.

Come on Eset, i still need some help whit this problem.

[foneil]

We are not seeing any reports of users still experiencing this issue with the new module. Can you confirm that pre-release updates are reset to normal (deselected), restart your computer, verify that you have the new module, and then update again.

Enabling Pre-Release Updates

[siljaline]

Does any of this help ?

[Marcos]

Originally Posted by Baresi

I have that module 1041, but i still get error number [0x8024404]
when i try to run windows updates.
I use 5.2.9.1 ESS on xp workstation.

You are right. The problem appears to be caused by the older version of SSL used by Windows Update in Windows XP. We are working on a fix. Will keep you updated.

[Baresi]

Originally Posted by Marcos

You are right. The problem appears to be caused by the older version of SSL used by Windows Update in Windows XP. We are working on a fix. Will keep you updated.

That sounds great, then i just have to wait

[bwb1]

Module 1041 has resolved my problem with Windows update, but has done nothing to clear up the certificate problems if I restore HTTPS protocol filtering- is it meant to? (Wont allow me to log in to my Yahoo webmail )

[Marcos]

Originally Posted by bwb1

Module 1041 has resolved my problem with Windows update, but has done nothing to clear up the certificate problems if I restore HTTPS protocol filtering- is it meant to? (Wont allow me to log in to my Yahoo webmail )

The module update was meant to solve only the Windows Update issue caused by security changes in the Windows Update Agent. If you're having issues with logging in to Yahoo webmail, most likely it's because your browser doesn't recognize / accept the ESET root certificate as a certification authority.

[rcdailey]

Originally Posted by Marcos

The module update was meant to solve only the Windows Update issue caused by security changes in the Windows Update Agent. If you're having issues with logging in to Yahoo webmail, most likely it's because your browser doesn't recognize / accept the ESET root certificate as a certification authority.

I was wondering why the poster had a problem with Yahoo mail when I have a similar setup and no problems. However, I discovered that although Firefox and Chrome connect fine using https for login to Yahoo web mail, Internet Explorer 8 does not. It fails in a way very similar to the way it failed in association with Windows Update before the internet protection module update. Perhaps the poster uses IE and not Chrome or Firefox or another browser. He could switch to one of those or, I suppose, exclude the certificate for yahoo mail.

[bwb1]

I am using Firefox 13.0.1. The oddity is my desktop with HTTPS protocol scanning enabled accepts the certificate, BUT my laptop with the same set up (FF 13/ESS5.2) will not and I have to disable the scanning to log in. I just want something simple without all this faffing around!!

[rcdailey]

Originally Posted by bwb1

I am using Firefox 13.0.1. The oddity is my desktop with HTTPS protocol scanning enabled accepts the certificate, BUT my laptop with the same set up (FF 13/ESS5.2) will not and I have to disable the scanning to log in. I just want something simple without all this faffing around!!

Well, so much for thinking this is IE-related only. I guess you could exclude the Yahoo certificate on the laptop, but that's not the ideal solution. I know some users simply don't use SSL protocol checking, which seems to solve the problem globally.

[Baresi]

Originally Posted by Marcos

You are right. The problem appears to be caused by the older version of SSL used by Windows Update in Windows XP. We are working on a fix. Will keep you updated.

Hi Marcos.

The fix is still not done, do you know if it will be in the near future !

[Marcos]

Originally Posted by Baresi

Hi Marcos.
The fix is still not done, do you know if it will be in the near future !

I'm not sure, probably withing 1-2 weeks. If you don't have many computers running Windows XP that you'd need to update, exclude the MS certificate from SSL scanning manually.

[reddice]

All of our Windows 7 64 bit machines updated fine.

[MongrelCat]

Had the problem with Windows update this morning. After reading forum enabled pre-released updates. Worked great, ran all the new updates released yesterday.

However, after installing the new Windows updates, the problem has returned (error 80244004). None of the fixes (including disabling HTTPS or SSL scanning) mrntioned earlier will work. Apparently one of the latest security fixes has changed the problem?

[Marcos]

Originally Posted by MongrelCat

However, after installing the new Windows updates, the problem has returned (error 80244004). None of the fixes (including disabling HTTPS or SSL scanning) mrntioned earlier will work. Apparently one of the latest security fixes has changed the problem?

What ESET product, its version and OS / Service pack are you using?

[MongrelCat]

Sorry! ESET 5.2.9.1, Windows 7 32 bit SP1.

Update 7/13/12 - Windows Update mysteriously started working again. I supsect some sort of certificate issue with corporate infrastructure was the issue. The module update or disabling HTTPS scanning appears curative. Thanks!

[Baresi]

My Windows update works fine now

[diskonekted]

Hi all,

I too am having this problem. I'm running Win 7 SP1 x64, ESS 5.2.9.1.

I've enabled pre-release updates and some product modules were updated, but the problem still remains....

I also tried to disable different components of ESS but to no avail...

Thoughts?

[diskonekted]

Confirmed on 2 other computers in the house which run the same OS and ESS version.

[Marcos]

We are investigating it, apparently something has changed recently on Microsoft's part. As a workaround, you can disable SSL scanning or setting the SSL scanner to ask about non-visited sites and define an exception for the Microsoft's certificate when prompted during an attempt to update.

Update: Internet protection module will be updated to address this issue caused by a change on Microsoft's part.

[stanr]

The last time my system (Win7 64 bit - sp1) was able to check for updates was 9/20/12.

I see that a updated module will be released but no mention of when it will be released.

Is there any idea of the release date?

[Marcos]

Originally Posted by stanr

The last time my system (Win7 64 bit - sp1) was able to check for updates was 9/20/12.
I see that a updated module will be released but no mention of when it will be released.
Is there any idea of the release date?

Most likely tomorrow for those updating from pre-release servers and 2-3 days later for all users.

[bwb1]

Internet module 1047 seems to have resolved my problems with certificates on such as BTYahoo log in, as I can now run with HTTPS scanning. At last!!

[Marcos]

Originally Posted by bwb1

Internet module 1047 seems to have resolved my problems with certificates on such as BTYahoo log in, as I can now run with HTTPS scanning. At last!!

The latest update only addresses the issue with Windows Updates and it's impossible that the change made could affect SSL communications with other servers.

[diskonekted]

Hi Marcos,

I can confirm, in my case at least, that this has corrected the issue. Thanks for the fast turn-around; the work you and the other Eset employee's do is greatly appreciated!

Cheers,
Diskonekted