After a security update Microsoft Office Web Components KB947319 finds its way into Microsoft Security Essentials. If you are an IT pro, it is not difficult to see how this can be problematic. Microsoft Security Essentials is responsible for checking the validity of computer certificates on Windows operating systems. It is vital that the computers running on the Windows operating system have valid certificates.
Once the « Full Version » component is loaded, the installation path is changed to C:WindowsSystem32 as opposed to the C:WindowsSystem32X. This happens automatically when the Windows Service Manager is first run. The flaw in this routine, however, is that some Windows Script Host (WSH) scripts are executed on the non-full version of Windows. Even if these are unprivileged, they have the capacity to modify the registry keys. In order to bypass the checks in order to install this component, one has to change the installation path using the Registry Editor.
A windows service named msiexec.exe is also used by Microsoft Security Essentials to perform its functions. This service has been responsible for executing any of the MS Office « helpers ». This is why its name is MSExeHelpHelp, it is the main program that allows an administrator to control the « helpers ». It does not matter whether a user is logged on or not, since the Helpers cannot execute without administrative permission. As the MSExeHelpHelp service is already disabled, the next step is to remove the associated keys from the HKCUSoftwareMicrosoftMSExeHelpHelp registry key. The files containing the keys can be found in the following directory: C:Program Files (x86) Microsoft OfficeOffice12*. It will be necessary to load the registry key with the regedit command in order to remove the entries.
, le il y a 1 année et 11 mois.