News: 1674302175

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Microsoft is checking everyone's bags for unsupported Office installs

(2023/01/21)


Microsoft wants to know how many out-of-support copies of Office are installed on Windows PCs, and it intends to find out by pushing a patch through Microsoft Update that it swears is safe, not that you asked.

Quietly mentioned in a support post this week, update [1]KB5021751 is targeting versions of Office "including" 2007 and 2010, both of which have been out of service for several years. Office 2013 is also being asked after as it's due to lose support [2]this coming April .

"This update will run one time silently without installing anything on the user's device," Microsoft said, followed by instructions on how to download and install the update, which Microsoft said has been scanned to ensure it's not infected by malware.

[3]

"Microsoft scanned this file for viruses by using the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to it," the Windows giant said on the update notice page.

[4]

[5]

No restart is needed after installation, Microsoft said.

Are you ready for your mystery update?

[6]

Microsoft's description of its out-of-support Office census update leaves much to the imagination, including whether the paragraph describing installation of the update, directly contradicting the paragraph above, is simply misplaced boilerplate language that doesn't apply to KB5021751.

Also missing is any explanation of how the update will gather info on Office installations, whether it is collecting any other system information or what exactly will be transmitted and stored by Microsoft.

Because the nature of the update is unclear, it's also unknown what may be left behind after it runs. Microsoft said that it is a single-run, silent process, but left off mention of traces of the update that may be left behind.

[7]

Ultimately, it's expected to phone home to Microsoft to let the mothership know if you're running an old Office.

[8]Gonna run System Restore in Windows 11? Microsoft says some of its apps won't

[9]Microsoft axes 10,000, already breaking bad news to staff

[10]Microsoft locks door to default guest authentication in Windows Pro

[11]Microsoft to offer ChatGPT-as-a-service from Azure real soon now

Microsoft also failed to mention what it intends to do with the data it collects from the update, though [12]one can guess .

We've posed all those questions to Microsoft, and we'll update this story if they respond.

Opting out

Those uncomfortable running an update that's gathering and transmitting unknown system info to Microsoft aren't out of luck, provided you're comfortable doing some Windows troubleshooting. Microsoft's Show or Hide Updates troubleshooter for Windows 10 and 11 is available as a [13]download from Microsoft , and while designed to disable updates that repeatedly fail to install or are causing issues, it can also be used to disable undesired ones from being installed.

Disabling any update can have unforeseen consequences so this, obviously, is done at your own risk. The Register isn't recommending you disable Windows updates if you normally routinely or automatically install them – we're only pointing out that it's an option.

We know that a lot of you go through a cycle of testing updates before deploying them, anyway, for reasons obvious to any Windows admin. ®

Get our [14]Tech Resources



[1] https://support.microsoft.com/en-au/topic/january-17-2023-update-for-office-2013-office-2010-and-office-2007-kb5021751-f4a23c1d-4d1f-44ba-a43a-7a5528afb4ea

[2] https://support.microsoft.com/en-us/office/end-of-support-for-office-2013-90e4b0d1-098f-4656-b6e7-8b13b67ed62f#:~:text=Support%20for%20Office%202013%20will,apps%20will%20continue%20to%20function.

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y8waMaQC0yvVZY61gjQdWQAAAE8&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y8waMaQC0yvVZY61gjQdWQAAAE8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y8waMaQC0yvVZY61gjQdWQAAAE8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y8waMaQC0yvVZY61gjQdWQAAAE8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y8waMaQC0yvVZY61gjQdWQAAAE8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[8] https://www.theregister.com/2023/01/19/microsoft_windows_apps_restore/

[9] https://www.theregister.com/2023/01/18/microsoft_job_cuts/

[10] https://www.theregister.com/2023/01/17/microsoft_windows_pro_guest/

[11] https://www.theregister.com/2023/01/17/azure_openai_chatgpt/

[12] https://www.theregister.com/2022/11/08/windows_tests_ads_in_windows_11/

[13] https://download.microsoft.com/download/f/2/2/f22d5fdb-59cd-4275-8c95-1be17bf70b21/wushowhide.diagcab

[14] https://whitepapers.theregister.com/



Paul Crawford

Good job I use windows 7 in a VM for my out-of-date copy of Office. Far more reliable and private and not much chance of this sort of thing appearing.

Death to subscriptions

neilo

Maybe - just maybe - they will discover that people are sick of subscriptions. And maybe they will learn that we want something that will run stabily and not subject to constant change. Like, for example, Outlook 365 seems to have UI changes on a daily basis: the calendar button is at the bottom of the Accounts / mailbox tree - nope; it's now taking up room in it's own column on the LH side - wait a minute, it's back at the bottom of the screen. Etc.

Re: Death to subscriptions

LDS

Maybe they could spend some time having Outlook to show appointments notifications using the Windows notification mechanism, instead of using its own - which if you use multiple desktops won't show on a different one. That's something you never understand through telemetry - although the very reason for telemetry is not improving products.

Re: Death to subscriptions

I could be a dog really

Not to mention doesn't cope with monitor changes (e.g. switching between home and office where the monitors are different), so it's easy for it to "appear" underneath the windows you're working in and then you completely miss a mtg ...

As to using the windows notifications, I don't think that would work well as (AFAIK) that doesn't have the options for joining a mtg, or sleeping the alert (I tend to set up events for things like mandatory training with a 4 week reminder, so sleeping for a week if it's not convenient now).

Apart from all the above, the thing that really pees me off is that while I'm struggling to cope with different keyboard shortcuts between Mac (home use) and Windows (work) - Outlook has it's own shortcuts that bear no resemblance to those Windows ones I've managed to learn.

"I don't think that would work well"

LDS

I don't really know how much the notification windows is customizable - but if there is someone who could make that more customizable is exactly the company that writes the OS . But under Nadella I'm afraid the orders are to make Windows dumber and dumber so dumber (and cheaper) developers can work on it.

Still the notification message could be clicked to bring you to the full notification window - instead of seeing nothing especially if you're somewhere where you can't keep audio notification on and don't wear headphones.

Seeking out competition

b0llchit

Would it not be obvious that it also seeks to find any (unauthorized) copy of LibreOffice in the same process?

Then they can bombard you with more boilerplate how much you are jeopardizing your computer with programs that are not designed for and not authorized by Microsoft. It will also direct you to the Microsoft solution to all your needs and will ensure future adworks directed at your convenience to convince you that you misbehaved by preventing Microsoft from providing you with the proper Solutions to all your problems.

Virus free...

MatthewSt

So you're telling me that Microsoft's antivirus scanner using Microsoft's signature definitions hasn't detected any viruses in a utility... That Microsoft has written/built/deployed?

Microsoft said has been scanned to ensure it's not infected by malware.

Andy Non

An odd thing for Microsoft to say. Kinda like going into a cake shop and being told the cream cakes have been checked for salmonella.

mark l 2

Of course they will never use the information gathered by that update looking for people using cracked Office versions, alternative Office suites etc to push you ads to sign up for Office 365, This is Microsoft, they are the good guys now.

tangentialPenguin

I'm really confused. They want to know how many people are using old versions of Office, so they want people to go to their website to download an utility that will scan their computer for Office. Why not just ask them what version they're using?

This is like Jehovah's Witnesses coming to your house and asking to install webcams in your house to see if you pray.

cookieMonster

only creepier

More to follow

Pete 2

> Ultimately, it's expected to phone home to Microsoft to let the mothership know if you're running an old Office.

While this may not fall under MS's definition of "malware" it is undoubtedly spyware.

We should also expect that there will be consequences!

Once this has detected old - and legitimate - versions of Office, that will not be the end of it. I can reasonably expect that it will be followed by more probes for other legal but old software. Maybe MS will even sell the ability to detect out of date software to third parties, so (for example) my old version of Photoshop might get flagged, if Adobe pays for a similar payload to be installed.

And after that, will come the inevitable nags, telling me I *have* to upgrade. Maybe getting more urgent and annoying as time goes on.

My only hope is that the biggest benefit of running out-of-support versions of Windows: no more unwelcome updates, means that my VM's W7 and earlier instances will not fall foul of this surveillance.

Re: More to follow

ThatOne

> While this may not fall under MS's definition of "malware" it is undoubtedly spyware.

Not for Microsoft. For them it's certainly considered totally legal and justifiable self-defense: Hard times are coming, you have to crack down on those potentially criminal egoists who don't give you as much money as they should.

WTF gives them the right to do so?!?

Anonymous Coward

What on Earth gives them the right to audit your software use? I'd say that's a grade one privacy violation - it is absolutely none of their business.

It has a very "thin edge of the wedge" feel to it IMHO.

I suspect

Boris the Cockroach

theres a couple of things here

1. its looking for old copies of office with the idea of spamming you with "Subscribe to 363&3/4 office" ads

2. Its looking for old copies of office licence keys that are invalid/duplicates/not paid for............. and then it will disable office on that machine.

Looking for libre office or versions thereof so to spam you with office 362&5/8 ads.... you never know but I doubt it

Wonder what happens when its run on a Linux box?

nobody who matters

I would not be surprised in the least if, having detected an out-of-support version of Office, it subsequently, discreetly disrupts or disables it.

Or is this perhaps actually designed and stated publicly to be looking for out-of-support versions as a smoke screen, and is actually to detect and disable all the copies of Office Plus currently infesting eBay listings (as well as many other online outlets) which are being sold to and run by people who don't realise it is a volume licence subscription version, and not the standalone lifetime licence that they are being conned into thinking it is?

Network failure - call NBC