MS10-002 (KB978207) Killed out Internet Access

[pnlrogue1]

We just sent out the MS10-002 (KB978207) critical patch to our network via WSUS.

 

We have a Windows XP network using mostly IE7 and have found a substantial number of users now cannot browse the Internet through IE7.

 

This issue does not appear to affect any IE8 or IE6 users (though I can't verify that) and does not affect all IE7 users.

 

The only resolution we have found so far is to visit each computer and manually uninstall the patch but I can't do that to every computer with this problem - do you have any idea what is causing this and what can be done to fix it?

 

Thanks

[pnlrogue1]

Further to that, the MS09-072 patch has now started installing on our network (KB976325 - the one which the MS10-002 patch in my first post replaced) and is doing the same thing!

 

Starting to look at the network hardware and firewall systems as likely candidates now

[Michael]

Do other browsers such as Firefox work ok? Are you using a proxy? I haven't seen this behaviour at all and Google doesn't find anything either. You should temporarily unauthorise the update from WSUS.

[pnlrogue1]

Tried all of those things, thanks Michael

 

Turned out it was F-Secure. I had to go in to the Settings > Network Connections > Application Control > Settings and choose "Ask about new programs", run IE (also FireFox as it was also blocked by F-Secure) and then put the options back to where they were

 

It never actually popped up asking what to do with IE or FF when set to 'Ask...' but since then it's been fine. No idea why F-Secure likes the unpatched version or IE8 with the same update applied to it or why F-Secure is happy now, but there you have it!