Microsoft MVP Patrick Barker, who spends a large portion of his life analysing, debugging, and helping other people troubleshoot Windows, has discovered that Samsung is actively disabling Windows Update on some of its PCs. Barker stumbled across the issue while trying to assist a user who found that Windows Update “kept getting disabled randomly.” By using Auditpol and registry security auditing, Barker discovered that a program called Disable_Windowsupdate.exe was being run every time the PC booted up—and that EXE file, unfortunately, belonged to Samsung’s SW Update suite. SW Update is exactly what it sounds like: it’s one of those bundled OEM tools that ostensibly keeps all of your PC’s software and drivers up-to-date. In this case, though, SW Update also installs a service that regularly downloads and executes a file called Disable_Windowsupdate.exe directly from Samsung’s servers. The file is even digitally signed by Samsung (but don’t run it unless you want to disable Windows Update). Read 4 remaining paragraphs | Comments
Read the original:
Samsung silently disabling Windows Update on some computers
