Welcome to codesecurely.org Sign in | Join | Help

codesecurely.org

Rudolph Araujo's ramblings on the world, my life, my work and oh yeah security!
Patch Tuesday Blues

Today my friends is Patch Tuesday and like any good security professional (J) I went up to Microsoft Update to get my monthly dose of patches. 9 of them installed fine however one just would not install despite repeated tries. Specifically this was Security Update for Microsoft .NET Framework, Version 1.1 Service Pack 1 (KB928366). The same update applied to my .NET 2.0 installation without any trouble but with .NET 1.1 I was consistently getting this error in the Microsoft Update History.

Anyways I proceeded to manually download the hotfix using the link for Windows Service Pack 2 and .NET 1.1 Service Pack 1. Now when I proceeded to run this hotfix, it prompted me for the file netfx.msi which it couldn't find. Now netfx.msi is actually part of the original .NET install but gets deleted when the install completes successfully. So to get a hold of it I went back to the Microsoft website and downloaded the .NET 1.1 Service Pack 1 installer – only problem is this file is called dotnetfx.exe. Well contained within it though is netfx.msi, so all I had to do was extract netfx.msi out using the following command "dotnetfx.exe /t:c:\temp /c" and then point the waiting hotfix installer to the recently extract netfx.msi. In a couple of seconds the installation completes and I am fully patched waiting for the next Patch Tuesday J.

If anyone runs into this issue, hopefully this will help you.

UPDATE: Since I posted this I have received well over 100 responses, some thanking me and others asking for help with other errors. Unfortunately I am not going to be able to figure out every error message out. Bear in mind that Microsoft does provide free support for any security updates related issues so this might be an opportunity to take them up on that.

 

Posted: Tuesday, July 10, 2007 5:00 PM by rudolph
Filed under:

Comments

Statue said:

Thankyou very much for sharing this info - I had been searching through Microsoft's KB for an hour trying to find out why Microsoft's auto-updater couldn't install this security update (I had less information provided to me than you did, as all I had was "The following updates were not installed: Security Update for Microsoft .NET Framework, Version 1.1 Service Pack 1 (KB928366)" which I'd kind of gathered myself when it had said "install...failed" during the auto-update!

Did exactly what is posted here (downloaded the two linked files, right clicked dotnetfx.exe and selected extract, then ran hotfix and when it cried that it couldn't find a necessary file, browsed to the extracted netfx.msi. Afterwards, to keep auto-updater happy, I let it think it was installing the update and it actually believed it, giving the thumbs up of the "update... done!" message. Nice of it to let us fix the installation for it and then take the credit for updating. Roll on next patch tuesday (or will it be a roll-back)!

# July 11, 2007 6:05 AM

admin said:

Glad it helped :)

# July 11, 2007 6:18 AM

Jon said:

Thanks for this. I had the same problem as 'Statue' so I googled it, found this site and all is now solved :)

# July 11, 2007 6:31 AM

Huwy said:

I worked. Great. Thanks

# July 11, 2007 7:29 AM

Steve said:

Hey!  Nice piece of work.  Stupid M$

# July 11, 2007 7:56 AM

Softlion said:

Thanks !!

I've had got the problem because the DotNet language installed was english, but my system is not.

I think your too ;-)

So I download the english manual patch, and with your trick it installed correctly (using the localized patch won't work).

# July 11, 2007 10:07 AM

TeknoMonkey said:

I tried this fix, but unfortunately I don't get the same result.  I followed the directions up to the point of install of the actual hotfix, but it doesn't prompt me to point to netfx.msi file.  As it attempts to try to do the install, the progress bar will go up and then eventually it will go reduce and then shutdown the program itself.  Any recommendations are appreciated.  Thanks for your time.

# July 11, 2007 10:09 AM

Sea Hero said:

TeknoMonkey,

Ditto for me... Anyone else having this issue and having any success fixing it?

Thanks.

# July 11, 2007 10:32 AM

Mark said:

Didn't work for me either.

Did the two downloads - but the "extract this file out using "dotnetfx.exe /t:v:\temp /c" and then point the hotfix installer to this file" - instruction left me flummoxed!!

# July 11, 2007 10:44 AM

Dave said:

I ended up running the extracted netfx.msi, reinstalling 1.1 SP1 (kb867460), then hotfixs kb886903 and kb928366.

# July 11, 2007 10:56 AM

DBD said:

I got the patch to work by downloading the dotnetfx.exe as Rudolph suggested then extracting it to a new folder I created to get the netfx.msi file(windows installer package).  I then clicked on netfx.msi file to "install" it, then ran the Security Update for .Net 1.1 KB928366.  Patch then installs.

# July 11, 2007 11:02 AM

Carputers said:

I couldn't extract the netfx.msi file from dotnetfx.exe either.  I finally did it using IzArc, but I couldn't do it directly.

I went to the folder where I downloaded the dotnetfx.exe file, right-clicked on it, and used IzArc to convert the .exe to a .7z archive, which was subsequently created in the same folder.  I then right-clicked on the newly-created archive and extracted it in the same place, which revealed the netfx.msi file.

I was then able to run the hotfix and point it to the extracted netfx.msi file.

# July 11, 2007 12:01 PM

Srikanth Bhakthan said:

Great article and thanks for the tip.

One additional note,

dotnetfx.exe /t:c:\temp /c

as most of the people will be using 'C' drive.

# July 11, 2007 1:32 PM

Srikanth Bhakthan said:

Digg'd your article..

# July 11, 2007 1:40 PM

Mark said:

Sorry guys, this one has completely lost me.

With respect to NDP1.1sp1-KB928366-X86.exe and dotnetfx.exe - I've pressed run. But now where do I go to, to right click, extract & run hotfix?

# July 11, 2007 3:28 PM

rudolph said:

Mark,

I have updated the post a little to make things more clear hopefully that will help. You only run the hotfix not the dotnetfx.exe. The latter is only needed to get access to netfx.msi which is a file the hotfix installer will prompt you for.

Hope this helps,

Rudolph

# July 11, 2007 4:23 PM

Mike said:

Thanks. I tried the windows xp news group to no avail. Your directions worked. The .Net 1.1 patch took.

# July 12, 2007 12:02 AM

Jeff said:

Worked for me...thanks SO much!

After following your instructions, I could install the Security Update

Why Microsoft couldn't provide this info on their KB928366 page on is beyond me.

# July 12, 2007 12:56 PM

rk said:

you are a lifesaver.....i love google

# July 13, 2007 12:28 AM

Carole said:

Thank you so much regarding the KB928366.  Microsoft update could not install.  I even reinstalled from Microsoft but it asked me for the netfx.msi which I could not find.     I had to abandon the procedure.   Looking at your website gave me the answer.   I installed the 'Installer Service Pack 1' and got the dotnetfx.exe.   After that I simply clicked on my icon Shield (which had been there since Tuesday unable to install the update !) and hey presto, update completed.    MANY THANKS as I certainly would never have thought of doing it this way.

# July 13, 2007 3:08 AM

Dale said:

Worked great

Thanks for post

had 3 pc that need this fix

# July 13, 2007 1:04 PM

Colin_M said:

Thanks for the advice....but it didn't work.

Like Tecknomonkey & Seahero, if I run the patch, it fails without giving me a chance to use the netfx.msi I've extracted.

I've tried running netfx.msi (which just installs .NET 1.1 again), then running the patch - it still fails.

Any ideas?

# July 14, 2007 5:55 AM

Liah said:

I dont under stand WHERE to put this so called command "dotnetfx.exe /t:c:\temp /c" Dos Prompt? Run? How and where do you USE this command?

# July 14, 2007 6:08 AM

Liah said:

Here's the message I get trying to use the Ndp1.1sp1-... program.

Microsoft .NET Framework 1.1

Info 9006. This patch cannot be installed because it requires Microsoft .NET Framwork 1.1 Service Pack 1 (SP1). NO Microsoft. NET Framwork 1.1 SP can be detected on this computer.

And yet when I run the dotnetfx file it say's this afterwards:

Microsoft. NET Framwork 1.1 Setup

Installation of Microsoft .NET Framwork 1.1 is complete.

Is that a catch 22 or what? :) help? :P

# July 14, 2007 6:17 AM

Liah said:

I'm such a tool ... *hangs head in shame* ... I did a serch for NET 1.1 Service Pack 1 SP1 downloaded it and everything when smothly ... Thanks this site kicked some serious ars... *bows* you are the man!!

# July 14, 2007 6:23 AM

Mark said:

Well I went to the two links and downloaded the files and selected 'RUN'.

But where do I go now to find dotnetfx.exe and extract out netfx.msi?

I tried "dotnetfx.exe /t:c:\temp /c" but it would not run.

Any help, most welcome.

# July 14, 2007 9:25 AM

rudolph said:

Liah,

Open a command window and run that command.

# July 14, 2007 2:09 PM

rudolph said:

Mark,

Dont hit RUN but Save to a location on your hard drive - let's say C:\. Then open a command window and change drive (cd C:\) to the C:\. Then run the command.

Good luck.

Rudolph

# July 14, 2007 2:11 PM

rudolph said:

Colin_M

Not sure what error it fails with.

Rudolph

# July 14, 2007 2:12 PM

rudolph said:

Liah,

It does sound like you dont have v1.1 on your machine. Perhaps you need to download the patch for .NET 2.0. You shouldnt need run dontnetfx.exe since that will actually install .NET 1.1.

Rudolph

# July 14, 2007 2:18 PM

Tek_ said:

When running the command "dotnetfx.exe /t:c:\temp /c" the beginning part must point to the .exe file. Easiest way to do it is to copy the file over to the C: drive, then Start->Run-> "c:\dotnetfx.exe /t:c:\temp /c"

# July 14, 2007 3:44 PM

Indy said:

I just uninstalled .net 1.1  This software constantly has had issues since it's introduction.

# July 14, 2007 8:21 PM

Bobby said:

Worked great Thanks for detailed post

# July 15, 2007 3:26 PM

Liah said:

Worked like a charm tahnks rudolph :) And thanks to the host!! Everything is perfect!!!

# July 15, 2007 8:10 PM

Foxy said:

I did everything you suggested, and still have a problem.  When the hot fix installer asks to be pointed to the netfx.msi file, I browse and do the pointing to the extracted file, but hot fix returns with an error mesage saying that this file is not part of the intended installation package.

HELP !

what am I doing wrong?

# July 15, 2007 10:44 PM

rudolph said:

Foxy,

My guess is you need the netfx.msi for a different version of the .NET framework. Make sure you download both the patch and the dotnetfx.exe file for the appropriate version.

Rudolph

# July 15, 2007 10:57 PM

rudolph said:

Liah,

Glad it worked :).

Rudolph (who is also your host :) on this website)

# July 15, 2007 11:00 PM

ecar said:

Thanks Rudolph!!! I did everything you said and it worked perfect :)

E.

# July 16, 2007 9:04 PM

j said:

cheers

# July 17, 2007 11:50 AM

pm said:

Thanks for the tip. Extraction worked well. Launched the hotfix, point to the netfx.msi file, keep running and now asking me for tmp1A.tmp file ...... any clue where to find that one ?

# July 18, 2007 11:45 PM

admin said:

I would suggest saving the hotfix to a location on your hard drive before running the hotfix - thats all I can think of sorry :(

# July 18, 2007 11:53 PM

Doug said:

worked perfectly here!

# July 19, 2007 8:36 PM

Bob Ray said:

It didn't work for me but it got me on the road to something that did. Thanks!

I ran the install but it never asked me for the .msi file. It completed normally but didn't solve the problem.

I ended up uninstalling dotnet 1.1. It wouldn't uninstall using add/remove programs so I had to use a tool I found here:

http://blogs.msdn.com/astebner/archive/2005/04/08/406671.aspx

Then I installed dotnet 2.0 using Microsoft Update.

Removing 1.1 caused a bizarre endless loop of error messages with my HP printer driver but they went away when I installed 2.0.

Thanks again.

Bob

# July 20, 2007 2:05 AM

Mark said:

Thanks Bob Ray - none of the above solutions had worked for me either. I had these SL##.tmp and tmp36.tmp error messages - appearing at every turn.

Then I too was referred to Aaron Stebner's Weblog : How to fix .NET Framework install errors that ask for tmpXXXX.tmp. (http://blogs.msdn.com/astebner/archive/2005/09/15/468147.aspx)

I downloaded his .NET Framework cleanup tool, went back to the Microsoft Update page & reinstalled .Net 1.1 & 2.0.  And then bingo, both updates (KB928366 & KB928366) installed too. AT LAST!!!

# July 22, 2007 12:25 PM

Robert Fitzgerald said:

I was about to resort to calling Microsoft. Autoupdate was in a loop. It would keep trying and reboot my system every time even though nothing installed.

The intructions provided here worked fine. thanks

# July 25, 2007 3:14 PM

Karen B said:

Hi,

Really sorry but I am v inexperienced with this sort of thing. I also cannot install the update, but cannot install the 'NET 1.1 Service Pack 1 installer' (the Startup Guard Alert won't let me).

Could someone please let me have an idiot's step-by-step guide how to solve this problem?

Thanks a million.

# July 27, 2007 4:53 PM

admin said:

Karen,

It sounds like you will need to consult the documentation for Startup Guard and see how it can be disabled at least temporarily

Good luck

Rudolph

# July 27, 2007 5:21 PM

Peter said:

Thanks! (It was really starting to annoy me). Your solution worked perfectly for me!

# August 1, 2007 11:12 PM

admin said:

Peter,

Glad it helped.

Rudolph

# August 2, 2007 1:45 AM

Ashok said:

This is great !!!!!!!!!!!! Fantastic !!!!!!!!!!!!! Thanks so much !!!!!!!!!!!!!!!!!!

# August 2, 2007 10:58 AM

Ashok said:

This is great !!!!!!!!!!!! Fantastic !!!!!!!!!!!!! Thanks so much !!!!!!!!!!!!!!!!!!

# August 2, 2007 10:58 AM

Karen B said:

Hi Rudolph,

Thanks for your message. Have managed to disable Startup Guard, but when I try to install the 'NET 1.1 Service Pack 1 installer' I just get a message saying that 'Microsoft .NET Framework Setup Failed. If this problem continues, contact Product Support Services.'

Help!

Cheers

K

# August 3, 2007 3:37 PM

Jonny said:

I think some people are confused as to how to extract the file, so I'll try to shed some light.  If you are running XP, go to the Start Button, then click Run.  Type, CMD, then enter.

A command prompt should have opened.  Here you type in "dotnetfx.exe /t:c:\temp /c" (minus the quotes).  The file should extract.  This will extract the file to the Temp folder in your C drive, so you know where to find it when you need to point the orginal installer towards it.

# August 6, 2007 2:34 PM

Karen B said:

Hi Jonny,

Thanks for your message. Really sorry for being incredibly thick, but I still can't get it to work!

When I type in the 'dotnetfx....' in the command prompt, I get the following message: 'dotnetfx.exe is not recognised as an internal or external command, operable program or batch file'.

I know I'm probably (not) doing something incredibly obvious, so would appreciate an idiot's guide.

Many thanks, in advance, for everyone's help!

K

# August 6, 2007 4:43 PM

admin said:

Karen,

Before typing dotnetfx ... make sure you do a cd to whichever directory you saved that file to. So for example if you downloaded the file to your C:\Downloads then at the command prompt type "cd c:\downloads". Then run the command likeJonny suggests.

Good luck,

Rudolph

# August 6, 2007 6:11 PM

Karen B said:

I know, me again, I'm afraid.

At last I've extracted netfx.msi and pointed the hotfix to it, but it's still failed, with the same error code.

I am completely at a loss to know what to do now.

Should I contact Microsoft?

# August 8, 2007 4:35 PM

admin said:

That is probably best Karen.

# August 8, 2007 4:49 PM

Karen B said:

Thanks for all your help so far. Hopefully I can get this resolved...

# August 9, 2007 3:23 PM

Breanne said:

I have been trying to update for awhile now and decided to sit down and figure out the error.  Thank you for your time in this, much appreciated and it has helped me immensely.

# August 9, 2007 8:36 PM

Erynn said:

Just thought Id throw out another thankyou for your effort and explination. The erros they give (0x640) give no idea of what goes wrong even after some prying, and it always makes me happy when a human gets involved :)

I didnt even have to extract anything, jsut used the links provided to run each DL and the comp automaitcally threw them into the temp folders which the update used! So easy an issue...just had no idea what it was without your blurb!!

# August 13, 2007 6:18 PM

Hos said:

Worked *exactly* as you said.  Thank you, thank you, thank you for taking time to post your experience.

Unbelievable that MS expects users to keep their systems safe when they distribute patches in this fashion -- most users aren't going to take the time required to research and execute this!

The fact that there is no mention of the problem in their KB (as of 27 Aug '07) is inexcusable and frustrating beyond belief.

# August 27, 2007 8:59 PM

Doug said:

I got it to work a LOT more simply!  I just downloaded the .NET 1.1 Service Pack 1 installer FIRST, and then downloaded his first link... the Windows Service Pack 2 and .NET 1.1 Service Pack 1

After both were downloaded (I clicked "Run" on both), I THEN clicked on the Yellow thingy in the bar at the bottom right that has been there for 2 months on my computer!

It then began the installation progress as always, but this time, I got the message "Installation Complete" instead of the same error message that's been popping up.  Thanks a LOT!!!

# August 28, 2007 12:18 PM

Mary said:

Thanks so much! This was driving me crazy. For those not so computer savvy, make sure when you download the dotnetfix file, you SAVE it to your C drive and not to "my documents' or 'my downloads' or anywhere else. Then go to Start/Run and type in CMD and then at the command line you'll type in dotnetfx.exe /t:c:\temp /c

When you download the service pack file and it prompts you for the CD so that it can get the .msi file, click browse, go to your C drive and the file should be at the bottom. Click on it and you are good to go.

# September 2, 2007 3:33 PM

sparker101 said:

I just want to add my thanks to those above.  I am so imprssed with the generosity of people like you who are willing to take the time to helps others like the many of us who have been helped with this posting.  

Separately - and to let off a little steam -- I can't believe that Microsoft hasn't bothered to address this problem yet!!

# September 14, 2007 9:14 PM

admin said:

sparker101 you are most welcome. I am glad it helped.

# September 14, 2007 9:47 PM

Henry said:

It worked like clockwork. Thanks a MILLION!

# September 17, 2007 11:27 PM

Russa said:

Man that did it. You make it look easy. Thanks

# October 1, 2007 5:43 AM

Piers said:

Worked for me too!! You're an absolute hero.

Wish I'd found you solution 10 weeks ago, before

83 failed attempts to install.

Thanks

Piers

(England)

# October 8, 2007 4:05 PM

JK said:

THANK YOU! been just ignoring it for months....

# October 9, 2007 7:40 AM

BK said:

I've been ignoring it for months, and the above fix STILL didn't work for me. When attempting to run the service pack I got a message that the application had generated an exception that could not be handled. When I then attempted to 'cancel' to debug the operation, I got another error message that a 'registered JIT debugger is not available' and that 'an attempt to launch a JIT debugger' resulted in an error code of 0x2 (2) and that I should check computer settings, not to mention 'cordbg.exe !a 0x31c'. Funny, I could swear I had a debugger last time I looked. ;-)

# October 9, 2007 7:58 PM

Mike Valentino said:

Wow.  Great fix.  This damn bug has been bothering me for months and your fix was right on.  Thanks again, bro.

# October 12, 2007 6:58 PM

RM said:

IT FINALLY WORKED!!! Oh, thank you.  YOU ARE THE MAN!!!

# October 18, 2007 10:21 PM

John said:

You are so the man!!  Worked perfectly.  Thanks - John

# October 21, 2007 11:51 AM

Linda in Md said:

Rudolph,

Thank you for knowing, sharing, and explaining often enough for me to get it. (Had to do downloads, the extract, and then click on the netfx.msi file, the NDP1.1sp1-KB867460-X86.exe file, and the NDP1.1sp1-KB928366-X86.exe file.)  Thanks!!!!

Linda

# October 30, 2007 9:49 PM

Susan said:

It worked for me!!!!!!

Thanks so much!

# November 25, 2007 3:13 AM

lillian said:

Oh god THANK YOU. I love you. I have been ignoring that on three computers for months now.

# June 28, 2008 6:19 AM

Timm said:

Thanks Man! I finally updated what has been failing to update for months.

# July 2, 2008 2:15 AM

stray77 said:

Thanks for a simple and elegant solution to an irritating problem.  Microsoft should write you a cheque.

# July 8, 2008 3:09 AM
Leave a Comment

(required) 

(required) 

(optional)

(required) 

Comment Notification

If you would like to receive an email when updates are made to this post, please register here

Subscribe to this post's comments using RSS