ɹəuəllıʍ ʇɐb Posted August 10, 2005 Report Share Posted August 10, 2005 I recently found xpsp2blocker.exe on my C:\ drive. I have no idea how it got there - I certainly haven't put it there, so I deleted it.When I did some exploring today, to my astonishment, xpsp2blocker.exe was there again! With today's date.Who places that there, and why? I have SP2 since the early beta versions, and the final version since Aug 10, 2004. Any ideas?P.S. I did run http://update.microsoft.com/ today; any connection, perhaps? Quote Link to comment Share on other sites More sharing options...
scuzzman Posted August 10, 2005 Report Share Posted August 10, 2005 My advice would be a HJT log for starters. Quote Link to comment Share on other sites More sharing options...
-pops- Posted August 10, 2005 Report Share Posted August 10, 2005 Did the updates earlier and just done a search for the thing you describe. Nothing found on any of my 3 machines.Something fishy, I think. Quote Link to comment Share on other sites More sharing options...
Scarecrow Man Posted August 10, 2005 Report Share Posted August 10, 2005 I believe this is a program for administrators to block the install of SP2 until it is ready for implementation... I had to use a similar program earlier this year, but cannot remember if that was it or not...http://www.microsoft.com/technet/prodtechn...n/sp2aumng.mspx Quote Link to comment Share on other sites More sharing options...
ɹəuəllıʍ ʇɐb Posted August 11, 2005 Author Report Share Posted August 11, 2005 I am sure that it is the genuine (now expired) Microsoft XP-SP2 blocker.Found that HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotAllowXPSP2 was set to 1. I must have experimented with it at some stage and forgotten about it. This setting may prevent xpsp2blocker.exe from being deleted, or automatically recreate it in order to allow unblocking.I have now run xpsp2blocker /u (DoNotAllowXPSP2 is gone) and deleted xpsp2blocker.exe. I have the impression that it will not come back. I'll report on it in a few days. Quote Link to comment Share on other sites More sharing options...
ɹəuəllıʍ ʇɐb Posted August 12, 2005 Author Report Share Posted August 12, 2005 This is strange :blink: xpsp2blocker.exe is back, and also the DoNotAllowXPSP2 registry entry (=0x00000001) is back.More strange: a Google search for xpsp2blocker and DoNotAllowXPSP2 returns numerous results, in Japanese, Chinese, Hungarian, and other languages, but not a single one in English...A search of my C: drive does not uncover another instance of xpsp2blocker.exe, so where the hell does it keep coming from? (Always dated 2004-08-10, the release date of XP-SP2 and xpsp2blocker). :ninja: Quote Link to comment Share on other sites More sharing options...
ɹəuəllıʍ ʇɐb Posted August 17, 2005 Author Report Share Posted August 17, 2005 Ah :P the mystery is resolved! It came from a network login script. It has been removed now after my complaint. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.