A few months back, Microsoft released an update that drove some users crazy when it stopped their Internet Explorer from working. Jump forward to the patch release yesterday, and you find that another update is causing pain to a number of Vista users.
Update KB935807 is the one in question. This update patches a hole in the firewall, and is described by Microsoft as:
This moderate security update resolves a privately reported vulnerability. This vulnerability could allow incoming unsolicited network traffic to access a network interface. An attacker could potentially gather information about the affected host. This security update addresses the vulnerability by modifying the Windows Vista firewall default behavior to block unsolicited traffic communicating over the Teredo interface.
If you read the growing list of comments on my post about this update, you’ll see that some users are simply not able to install the update, receiving an 800070002 error, while others are given warnings by WGA, and some machines even go into a restarting loop. Users at Microsoft’s forum are reporting the same problem, and no resolution has been found yet.

Start
About
FAQ
Blogroll
Shop
Tips and Tricks
Windows Updates
Hotfixes
Fix It
Keyboard Shortcuts
Vista's Services
Vista's Commands
Product Reviews
Glossary
Videos
Web Links

Comments
DiGiTaL_MoNkEY
Jul 11, 2007 at 5:55 pm
Many people are having the issue with the KB935807 update, if this update is selected with all the other updates none will install, you have deselect the KB935807 update so the other updates can install without any issue. Currently there is NO fix that i can find to install KB935807.
Do a google search even Microsoft MVP’s have no idea.
mirk
Jul 12, 2007 at 3:54 am
My Windows Update installed all patches without problems.
NRMS
Jul 12, 2007 at 8:08 am
Seems to have installed OK for me on 3 separate Vista PC’s. It was installed in one go, along with all the rest. Guess I’m just lucky.
Jay
Jul 12, 2007 at 9:01 am
NRMS tell us your comp setting as far as firewalls and anti viruses are concerned also how are you connected to the internet wire/wireless laptop/desktop thanx…
Robert
Jul 12, 2007 at 11:15 pm
I have not been able to get KB935807 to install. As mentioned earlier, I had to deselect it in order to get the other updates and patches to install.
Andy
Jul 13, 2007 at 1:11 am
Is it only people that are connecting to a WSUS server having this problem?
NRMS
Jul 13, 2007 at 1:39 am
Internet via an ethernet router both wired & wirelesss connections on both desktop & notebooks. Router has a hardware firewall; I also rely on Vista built-in software firewall and am using Grisoft AVGSoft antivirus. Nothing else.
raffonsantos
Jul 13, 2007 at 5:03 am
Follow these steps below:
- Go to http://www.microsoft.com/downloads/details.aspx?FamilyId=e9b64746-6afa-4a30-833d-e058e000c821&displaylang=en and download Security Update for Windows Vista (KB935807)
manually
- Execute Windows6.0-KB935807-x86.msu downloaded file
- Restart your machine
I tryied like this and works !
Herb Tyson
Jul 13, 2007 at 5:22 am
I Installed kb935807 successfully, supposedly… but Windows Update keeps showing it as available each successive morning. I’ve even hidden it, but it keeps coming back, along with others I’ve hidden.
thebigo55
Jul 13, 2007 at 4:10 pm
Always fails after cleaning out the required areas in Windows …
Bill Veik
Jul 13, 2007 at 6:41 pm
this appears to be one bad patch of patches this time ’round. The updates for XP have also created problems for my machines at work. I had to uninstall and rebuild the .NET framework that had gone bad. The updates just kept re-cycling.
2 Vista Updates are doing the same to my home machine…
Fred Oliver
Jul 14, 2007 at 3:44 pm
Bad scene, update KB935807 won’t install properly and had to reinstall my new router DIR 655 due to internet stalls, whatever. And stupid me deleted my image just before the 6 updates. Oh well the wine never fails me!
DVD
Jul 14, 2007 at 5:37 pm
The above link is for 32-Bit only. For us x64ers, use this one:
http://www.microsoft.com/downloads/details.aspx?familyid=0DF5D190-3AD7-42D5-8629-43C47EC450CB&displaylang=en
Spyder
Jul 15, 2007 at 11:01 am
has anyone tried turning off the firewall before updating?, the firewall is still a running program/service.
Chris
Jul 15, 2007 at 12:29 pm
Here’s one possible solution to the problem that’s not been mentoined here yet: http://petesbloggerama.blogspot.com/2007/07/vista-kb935807-windows-update-woes.html . It sounds promising but they guy who posted it hasn’t tried it himself nor have I.
midgo
Jul 16, 2007 at 12:42 am
I have tried the suggestions that lead from Chris post above and neither worked for me.
I even tried deleting the folder mentioned manually installing the update kb 935807 and trying windows update again.
Even though after the manual install it says that kb 935807 is installed windows update still says it is not and keeps trying to install it and failing each time.
So at the moment nothing that I can find will make windows update install this update kb 935807.
Robert
Jul 16, 2007 at 8:46 am
Spyder – I have tried with the firewall service running and not running; makes no difference. I got a reply back from Microsoft Support with some things to try. I will post later with my results.
maxi
Jul 16, 2007 at 2:43 pm
I’ve been have the same trouble. Had updates set on auto, and now every time i restart or power down, it attempts to install that bloody updates. before it powers down spends 1 min installing, when it boots up it spend a min1 configuring updates – then restarts- only to say that it hasn’t install that bloody update……. every bloody time i POWER DOWN or RESTART……belive it.
and tried that downloading it from MS site and installing it – same thing!!!!
maxi
Jul 16, 2007 at 2:48 pm
p.s. im using free zone alarm fire wall and running vista on a note book…. just wondering if there’s a pattern.
Robert
Jul 16, 2007 at 3:38 pm
I tried the suggestions from Microsoft Support and it did not work. I am waiting for their reply and I will be sure to post the results.
In the mean time, here was the suggestions that I got from them – perhaps it will work for someone (I have edited some information out such as my case number and her actual email address):
Dear Robert,
Thank you for contacting Microsoft Online Support Service. My name is April, and I am glad to work with you. For your reference, the case ID for this service request is SRXxxxxxxxxxx. You can contact me directly by sending an email to @mssupport.microsoft.com with the case ID in the subject line.
First, I would like to apologize for your support request being unexpectedly delayed. Please be assured you have successfully contacted the correct support team and I will be working with you to address your concerns as quickly as possible.
From your description, I understand that the Security Update KB935807 cannot be installed and you have tried to download and install it manually. However, it keeps restarting. If there has been any misunderstanding, please let me know. Robert, I fully understand the inconvenience this issue has caused. Please be assured that I will do my best to assist you.
This issue can be caused by the following factors:
1. The Windows Update service has been stopped.
2. Corrupted Windows Update Temporary folder.
In order to narrow down the cause of this issue and resolve it, please refer to the following steps. After finishing each step, please check the result again on the Windows Update website.
NOTE: Some third party programs can affect the Windows Update service. If you are running any third party applications such as Spyblocker, Internet or web accelerators (programs designed to boost the speed of the Internet connection), security or anti-virus programs (Norton, McAfee, etc.), I recommend we temporarily disable or shut them down and then try accessing Windows Update later. Please understand that we are disabling these programs only for the purpose of troubleshooting and we can re-enable these programs after we finish troubleshooting.
Step 1: Verify the relevant Windows Update services
=======================================
1. Click the Start Button, in Start Search box, type: “services.msc” (without quotes) and press Enter. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
2. Double click the service “Windows Update”.
3. Click on the “Log On” tab, please ensure the option “Local System account” is selected and the option “Allow service to interact with desktop” is unchecked.
4. Check if this service has been enabled on the listed Hardware Profile. If not, please click the Enable button to enable it.
5. Click on the “General” tab; make sure the “Startup Type” is “Automatic” or “Manual”. Then please click the “Start” button under “Service Status” to start the service.
6. Please repeat the above steps with the “Background Intelligent Transfer Service” service.
You can also temporarily stop these services, restart the computer, and then start these services again. If any service is missing or cannot be stopped or restarted, please let me know.
Step 2: Rename the Windows Update Temporary folder
================================================
This problem may occur if the Windows Update Temporary folder has been corrupted. We can refer to the following steps to rename this folder. Please note that the folder will be re-created the next time we visit the Windows Update site.
1. Click Start, in Start Search item, type: “notepad” (without quotes) and press Enter.
2. Copy the following commands and then paste them into the opened Notepad window:
net stop wuauserv
net stop Cryptsvc
cd /d %windir%\SoftwareDistribution
rd /s /q DataStore
ren %windir%\system32\catroot2 catroot2.old
net start wuauserv
net start Cryptsvc
3. After pasting the above commands, please close the Notepad window. Choose Save when you are prompted to save the file. Type “register.bat” as the file name and choose Desktop from the left panel as the location.
4. Refer to the Desktop and right click the register.bat file, then choose Run as administrator.
5. You will see a DOS-like window processing.
If the issue persists, to clarify the issue and provide more accurate troubleshooting steps, please assist me in collecting the following information.
How to capture a screenshot when an error occurs
======================
1. Press the Print Screen key (PrtScn) on your keyboard.
2. Click the Start Button, type “mspaint” in the Search Bar and Press Enter.
3. In the Paint program, click the “Edit” menu, click “Paste”. Then click the “File” menu, and click “Save”.
4. The “Save As” dialogue box will appear. Type a file name in the “File name:” box, for example: “screenshot”.
5. Make sure “JPEG (*.JPG;*.JPEG;*.JPE;*.JFIF)” is selected in the “Save as type” box, click “Desktop” on the left pane and then click “Save”.
Please send this saved JPEG file to my email account at v-30aprs@mssupport.microsoft.com
How to collect the System Information
=============================
The System Information can provide us with more information about the current status of the system. I would like to check it for you. Please send it to me using the following steps:
1. Click the Start Button, type “MSINFO32″ in the Search Bar and press Enter to start System Information.
2. On the popup window, on the menu bar, click “File”, and click “Save”, type a file name and then choose NFO as “Save as type”, click “Desktop” on the left pane, and click Save.
Please send it as an attachment to @mssupport.microsoft.com. If the file is too large to be sent, please right-click on the exported file, choose “Send To” -> “Compressed (zipped) Folder”, and then send the zip file to @mssupport.microsoft.com for further research.
How to collect the WindowsUpdate.log file
================================
1. Click the Start Button, type “WindowsUpdate.log” (without the quotes) in the Search Bar and Press Enter. We will see a file named “WindowsUpdate.log”
2. Now click on the “File” menu and then click on the “Save As”.
3. From the left panel, click “Desktop” and click the Save button.
The file will be saved to your Desktop. Please send the file as an attachment in an email to @mssupport.microsoft.com.
Note: When attaching files to emails, the process will vary depending on the email application being used. While you are composing the email, most applications will provide you with either an “Attach” button or Paper Clip Icon to click in order to attach a file. After clicking this button/icon you must browse to the file you wish to attach and select it by either double clicking it or clicking it once and then clicking on the “Attach” button.
Please try my suggestion and let me know the results at your earliest convenience. If you have any other questions, please do not hesitate to let me know.
I look forward to hearing from you.
Best Regards,
April Shen
@mssupport.microsoft.com
Microsoft Windows Vista Support Professional
—————————————————-
Very satisfied customers are my top priority.
Satisfied customers are my top priority. Please let either myself or my manager know what you think of the level of service provided. You can send feedback to Microsoft Management at @microsoft.com?subject=WindowsOnlineSupportIncident or directly to my managers, @mssupport.microsoft.com
Chris
Jul 16, 2007 at 3:50 pm
Maxi,
Try hiding the update. How to info is here: http://www.tech-recipes.com/rx/2046/vista_update_how_to_hide_update
That’s what I did and it’s worked fine.. well.. pretty much: before hidnig it I took the steps listed in the link below and tried to install it again. That worked — my update history says that it installed correctly but — it doesn’t show up in the list of installed updates and Vista was telling me to install it — hence the reason why i hid it. I plan on keeping it like this until MS fixes it or I find a better solution on the web somewhere.
My situation was: 935807 failed to update several times and I was getting error # 8007002. I followed the steps outlined here: http://groups.google.com/group/microsoft.public.windowsupdate/browse_thread/thread/2f2d787f564588f2/4a6edaab81c51879 (in both posts — ie: I cleaned out my temp internet files).
midgo
Jul 16, 2007 at 11:00 pm
Today I tried to again install kb 935807 by un hiding it and letting windows update try again.
It worked!!!:)
The only thing that I have done differently since the other attemps was to return my network settings to default.
Whether this did anything or not I don’t know.
It is another thing to try for those that have not succeded yet.
Spyder
Jul 16, 2007 at 11:06 pm
Got a real stumper here, i thoguht possibly it could be permissions as well but when you download the file, there is no run as administrator, i forget how to give full rightd to something, but if someone can mess around with that and give the file full system rights, it may solve the issue, there was an update for vista ultimate 32bit a while ago that changed critical system process no to have access to system information, (it said my wireless was disconnected and it wouldnt show processor or ram specs in computer properties, i gace the services thier orginal permissions and it worked as a fix. its late or id work on this idea, it just happened to come to me before i went to sleep, ill investigate it more tomarrow, any help is apreciated.
maxi
Jul 17, 2007 at 12:29 pm
midgo,
thanks, i switch off my updates so i could have some “time out”. got round to hiding kb935807, sent it packing to room 101, seems to be going well so far……finger crossed…
maxi
Jul 17, 2007 at 2:07 pm
CORRECTION,
the last post was to Chris for the hint, not midgo, but prob give midgo’s suggestion a go when i’m felling brave and have lots of spare time to waste
mulperi
Jul 18, 2007 at 3:58 am
This working
http://petesbloggerama.blogspot.com/2007/07/vista-kb935807-windows-update-woes.html
1. Open an Administrator command prompt by right clicking on Start -> All Programs -> Accessories -> Command Prompt and selecting “Run as Administrator” and clicking “Allow” for the elevation prompt
2. In the command prompt, type the command below
a. fsutil resource setautoreset true C:\
Note: This assumes that C: is the drive in which Vista is installed. If it is installed on another drive like D: please change the drive letter appropriately
3. Reboot the machine
4. After reboot, please try to install the updates again and let me know if that resolves the issue.
Joe
Jul 18, 2007 at 8:35 am
Thanks Mulperi, anyone get a chance to try this one? Looking at the description of the command, it says it will “Set whether a default Transactional Resource Manager will clean its transactional metadata on next mount”. I don’t know what that means, so someone with this problem is going to have to try it and let us know!
Jack
Jul 19, 2007 at 3:29 am
I read somewhere that you should first make the following directory om your system-drive:
C:\windows\system32\logfiles\firewall
(when C: is your windows-drive).
After that you should be able to install KB935807
streetwolf
Jul 19, 2007 at 3:52 pm
The workaround worked for me.
I wonder if my disk cleaning program (Crap Cleaner) had anything to do with this missing folder????
Steve
Aug 1, 2007 at 1:22 am
IT WORKED!
Making sure the “firewall” folder is created is what did it.
The problem may be connected to running CCleaner before update is totally installed.
Heather
Aug 1, 2007 at 12:16 pm
I’ve tried this and other vista updates and keep getting the message that the update does not apply to my system. What’s that all about?
Chris
Aug 1, 2007 at 12:19 pm
Interesting.. I use CCleaner too
john
Aug 4, 2007 at 3:28 am
For people having trouble installing this, it could be that the firewall log file is missind or corrupt.
If so, create it using the command prompt, you’l need admin rights of course. Create the file in the systems32 folder.i.e. at system32\logfiles\firewall
Once the log file is created try agin the update, hopefully it should go through.
Joe
Aug 14, 2007 at 1:58 pm
Microsoft today re-released the update with a fix so it will properly install if you are missing the directory. There are no other changes, so if you did properly install it, you don’t need to redo it.
Jeff
Aug 17, 2007 at 3:51 am
Having problems downloading half of this Tuesday’s updates. Same symptoms as above. C’est la vie. I shouldn’t have to fight Windows to get it updated.
AnonyBishop
Jun 17, 2008 at 5:17 pm
Download and install it manually from Microsoft site. If you can see the updation warning even after the successful installation clean the temperory folder and restart the machine. Now chck for new updates. You can feel the difference.
Leave a Comment