To answer the OP's original question; You should already have MSXML6 on your system, I'll explain later.
I've run into the same Secunia situation, here's an excerpt from my thread on SevenForums, post #4: What's going to happen with Microsoft XML Core Services (MSXML) 4.x ??
In reading the whole thread you can decide for yourself how Joyce feels about Secunia's help in resolving this situation.Quote:
I've been reading a very informative Secunia thread here: Secunia | MSXML 4.0 Thread
The one respondent (Maurice Joyce, that name sounds familiar) seems very knowledgeable on what is going on with this situation.
It is a good read especially when you get to the 17th post (his). I wish the Secunia forum had a way to copy the thread link like SevenForums has.
As I said earlier I'm good to go with the version I already have, I set PSI to ignore the file and I'm going to check and see what exactly needs MSXML4.x If I'm not using it it will be uninstalled.
I'm also going to check into Joyce's suggestion of trying: https://heimdalsecurity.com/en/products that he mentions in post #28. There is a free version that would do the same as PSI.
Now about that version6; Open Explorer and navigate to: C:\Windows\SysWOW64 scroll down beyond the Folders where the alphabetical Files start, then down to MSXML.
- You should see: two MSXML versions of 3, 4, and 6. i.e. 3 - 3r, 4 - 4r, and 6 - 6r. Right click on version4, then Properties >Details Tab.
- You should see: 4.30.2117.0 as the File Version, and MSXML 4.0 SP3 as the Product Name.
- In the properties/details of 4r; You should see: 4.30.2100.0 and MSXML 4.0 SP3 respectively.
As long as you have those two file versions/product names, your okay. If you don't you can go to post #22 (Joyce's) and follow his instructions to update to MSXML4.0 SP3.
I have installed the Heimdalsecurity Updater Program (free) and am happy with it. Don't be alarmed when you do not see all of your programs listed like PSI. Heimdal only lists the programs that are vulnerable to attack, I have four; Two for Adobe Flash (IE and FF) and two for Microsoft's Core Programs.
In order to test Heimdal I stopped the Secunia PSI Agent from startup and disabled it in Services.msc . If Heimdal proves worthy I will be uninstalling Secunia PSI.
I'm still looking into what program uses version4.