• MS-DEFCON 3: Patch, but avoid KB 2862330

    I hate to make you folks search through your patches, but this month Microsoft leaves me no choice.

    In general, the October patches are now working pretty well, but there is one exception:

    KB 2862330 doesn’t install properly on many Windows 7 systems. Microsoft has a long, convoluted series of steps in the KB article that should help you resolve the problem — but the fact is that the cure is worse than the disease. At this point, KB 2862330 is listed on the Automatic Update list, but it isn’t checked — which means it won’t install unless you specifically check the box and tell Windows Update to install it.

    Solution: don’t go checking anything that isn’t checked, even if it appears on Microsoft’s list of “Important” patches.

    The same patch has been blamed for endless installation repeats, on Windows XP systems.

    I’m moving us to MS-DEFCON 3: Patch reliability is unclear, but widespread attacks make patching prudent. Go ahead and patch, but watch out for potential problems.