Page 1 of 2 12 LastLast
Results 1 to 15 of 25
  1. #1
    New Lounger
    Join Date
    May 2010
    Location
    Washington State USA
    Posts
    15
    Thanks
    6
    Thanked 0 Times in 0 Posts

    Question Microsoft Click-to-Run update: Is it legitimate?

    On my little ASUS Win7 notebook, I've been getting a pop-up offering an online update for my Office 2010 Starter Edition (click-to-run). I've used the notebook for about 3 years and Office 2010 has been on it since the beginning. I've never seen any message like this before; it doesn't look "Microsoft-ish". I keep the notebook updated with the latest updates from Microsoft and other applications. I did full scans with MalwareBytes and Microsoft Security Essentials, which showed no problems.

    Here's an image of the pop-up:

    CTR-popup.png

    Is this thing legitimate? I did an online chat with Microsoft and the only thing they offered was a link on how to uninstall Office 2010! Not something I want to do.

    Thanks in advance for any info.

    Ron Hodges

  2. #2
    4 Star Lounger
    Join Date
    Dec 2009
    Location
    Hillsborough (San Francisco Bay area), California, USA
    Posts
    596
    Thanks
    5
    Thanked 61 Times in 60 Posts
    Ron,

    Certainly sounds fishy to me. You could try running it in a Virtual Machine.

    Zig
    Last edited by Zig; 2014-08-18 at 20:34.

  3. #3
    Administrator
    Join Date
    Jun 2010
    Location
    Portugal
    Posts
    10,406
    Thanks
    131
    Thanked 1,167 Times in 1,071 Posts
    Click to Run is a type of virtualization technology used both on Office 2010 and Office 2013. Here is more info on what it is: http://office.microsoft.com/en-us/pr...101868855.aspx

    I suggest that you check the running processes to see what is running. With Office 2013, there is a process identified as Click to Run whenever there is an Office update.

    Without further info, I would risk that it can perfectly be a legitimate offering, but only further checking can ensure that it is.
    Rui
    -------
    R4

  4. The Following User Says Thank You to ruirib For This Useful Post:

    rjhodges (2014-08-18)

  5. #4
    2 Star Lounger Calimanco's Avatar
    Join Date
    Dec 2009
    Location
    UK
    Posts
    184
    Thanks
    1
    Thanked 20 Times in 19 Posts
    Office 2010 has an auto update facility. This is what you are seeing in operation. If you go to Control Panel, Windows updates and check for updates, you will probably see it offered as an optional update.

  6. #5
    New Lounger
    Join Date
    May 2010
    Location
    Washington State USA
    Posts
    15
    Thanks
    6
    Thanked 0 Times in 0 Posts
    Thanks to everyone for their responses! I did some more research and have the following additional info:

    1 - The Click-to-Run window only shows up after a cold boot or restart. It doesn't pop up immediately; only after starting another app such as browser, game, e-mail, etc.

    2 - I close the window with the red X in the upper right corner. It does not show up again until I restart/reboot the system.

    3 - The windows shows up the Task Manager with an Applicatin name of "Click to Run". The process associated with the window is "csrss.exe". A search for this program shows up two instances, one in \Windows\System32 and one in a subfolder of \Windows\Winsxs. Both instances are the same size and date (07/13/2009).

    4 - I have received other updates to Office 2010, but always they showed up in Windows Update. The Click-to-Run window has never shown up prior to a few days ago. There are no updates waiting in Windows Update, either recommended or optional.

    5 - Some virus cases have exploited csrss.exe in the past but always shows massive CPU utilization or odd-ball versions of csrss.exe in other directories. Not so in my case (so far).

    6 - Zig suggested running the program in a virtual machine. I don't know how to do this and there doesn't appear to be a specific program associated with the pop-up window other than the normal Windows process csrss.exe .

    One thought I had was that maybe this is some sort of update to the Click-to-Run feature itself and not a regular Office update? That raises the question whether it's legitimate or not.

    If it persists, I'll probably just uninstall Office 2010 Starter Edition. I'm happy with LibreOffice on my big computer and Wordpad is adequate for quick documents on the laptop.

    Any other thoughts/info are welcome. Thanks again for the input so far!

    Ron

  7. #6
    Administrator
    Join Date
    Jun 2010
    Location
    Portugal
    Posts
    10,406
    Thanks
    131
    Thanked 1,167 Times in 1,071 Posts
    Is your Office 2010 a click to run version? See if the info here helps to determine that: http://www.onenotegem.com/blog/category/office%20tips
    Rui
    -------
    R4

  8. The Following User Says Thank You to ruirib For This Useful Post:

    rjhodges (2014-08-18)

  9. #7
    New Lounger
    Join Date
    May 2010
    Location
    Washington State USA
    Posts
    15
    Thanks
    6
    Thanked 0 Times in 0 Posts
    Quote Originally Posted by ruirib View Post
    Is your Office 2010 a click to run version?
    Thanks ruirib - Yes, it's Office 2010 Starter Edition - click to run.

    Thanks also for the link! I looked it over and explored the Help area of my Word 2010 program and found the information on updates.

    I now tend to agree with your earlier comment that it's probably a legitimate update. But, I'm not sure why I'm getting the pop-up now and not over the past 3 years. Maybe it's a really important update.

    There apparently was one or more updates to Office on Aug 12-13 and that's about when I started seeing the pop-up. I'll dig a bit further and maybe I can apply the update in some manner that does not use the pop-up window. I'm still suspicious.

    Thanks again...
    Ron

  10. #8
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    2,914
    Thanks
    91
    Thanked 356 Times in 320 Posts
    Further discussion of this issue:

    Why is "Click to Run" message suddenly popping up after years of Office 2010?

    Official Word Starter update?

    I would click OK (or uninstall it).

    Bruce
    Last edited by BruceR; 2014-08-19 at 09:13. Reason: link page

  11. The Following User Says Thank You to BruceR For This Useful Post:

    rjhodges (2014-08-18)

  12. #9
    Administrator
    Join Date
    Jun 2010
    Location
    Portugal
    Posts
    10,406
    Thanks
    131
    Thanked 1,167 Times in 1,071 Posts
    I am not sure if it is the same in Office 2010, but in Office 2013, if you click the Update Options (shown below), the first option available is Update Now. That option will make Office check if there are updates and will apply them. This will be a safe way to check it and if it completes, the "problem" dialog should go away.

    CaptureClickToRun.JPG
    Rui
    -------
    R4

  13. #10
    New Lounger
    Join Date
    May 2010
    Location
    Washington State USA
    Posts
    15
    Thanks
    6
    Thanked 0 Times in 0 Posts
    Ruirib - I was looking for the same thing, but apparently Office 2010 Starter does NOT have the Update Now option.

    And, thanks to BruceR for the links. Looks like others are starting to see the problem and report it also. It will be interesting to see what the "official" Microsoft response to this issue is, if any.

    Ron

  14. #11
    Administrator
    Join Date
    Jun 2010
    Location
    Portugal
    Posts
    10,406
    Thanks
    131
    Thanked 1,167 Times in 1,071 Posts
    It seems unlikely that quite a few Office users would get this if it was not a legitimate popup. At the end of one of the threads, someone said they had clicked to install and it seemed to be ok.
    Rui
    -------
    R4

  15. #12
    New Lounger
    Join Date
    Aug 2014
    Posts
    1
    Thanks
    0
    Thanked 0 Times in 0 Posts
    When the popup first appeared a few days ago, I started running through many of the considerations and checks others in the thread have also done. What's been bothering me about the popup is that there are several red flags that would make me suspicious about any such message: poor grammar/typing ("internet" is not capitalized; a blank space appears before the question mark) and there's nothing the least bit "official-looking" to indicate Microsoft Corporation had anything to do with the message, other than the words "Microsoft" and "Office." The message itself looks borderline amateurish and unofficial. And the update not appearing in the list of pending (optional or otherwise) Microsoft updates (yes, that was the first thing I checked) added to my skepticism. But I've yet to see a definitive consensus on the Web on this issue. Where is Microsoft on this one? You'd think the update notice has popped up on enough computers that Microsoft would have publicly declared "yes, we're making this message pop up and it's legitimate" (and "[yes/no], it [will/won't] affect other versions of Office installed on the computer). Or "no, don't believe the popup--it's not from us." I'm going to need some more convincing before I click "yes."

  16. #13
    Administrator
    Join Date
    Jun 2010
    Location
    Portugal
    Posts
    10,406
    Thanks
    131
    Thanked 1,167 Times in 1,071 Posts
    Quote Originally Posted by PKP View Post
    When the popup first appeared a few days ago, I started running through many of the considerations and checks others in the thread have also done. What's been bothering me about the popup is that there are several red flags that would make me suspicious about any such message: poor grammar/typing ("internet" is not capitalized; a blank space appears before the question mark) and there's nothing the least bit "official-looking" to indicate Microsoft Corporation had anything to do with the message, other than the words "Microsoft" and "Office." The message itself looks borderline amateurish and unofficial. And the update not appearing in the list of pending (optional or otherwise) Microsoft updates (yes, that was the first thing I checked) added to my skepticism. But I've yet to see a definitive consensus on the Web on this issue. Where is Microsoft on this one? You'd think the update notice has popped up on enough computers that Microsoft would have publicly declared "yes, we're making this message pop up and it's legitimate" (and "[yes/no], it [will/won't] affect other versions of Office installed on the computer). Or "no, don't believe the popup--it's not from us." I'm going to need some more convincing before I click "yes."
    With Office 2013, updates come through Click and Run, so updates not being in the Windows Update list is not surprising. The Click to Run dialogs in Office 2013 are professional looking though.

    With some many people having the same dialog, I have now little doubts about this being legitimate.
    Rui
    -------
    R4

  17. #14
    Silver Lounger
    Join Date
    Oct 2012
    Posts
    2,147
    Thanks
    12
    Thanked 248 Times in 241 Posts
    It doesn't trigger any alarms for me. Office Starter 2010 is extremely low priority for Microsoft except where it pertains to advertising for upgrading to some form of subscription service, so I make some allowances for method of informing that there is an update.

    Specifically, the message does not come up on any system that does not have Starter 2010 installed as far as I know. That's giving a virus writer waaay to much credit for targeted specificity, although not beyond very remote possibility. My fear is more to the possibility that the click to run update purposely cripples something in Starter 2010!

  18. #15
    New Lounger
    Join Date
    Dec 2009
    Location
    Europe
    Posts
    17
    Thanks
    0
    Thanked 1 Time in 1 Post

    Beware; if you regularly update anyway, and it ain't broke, don't fix it !

    you regularly update anyway, and it ain't broke, don't fix it !
    Quote Originally Posted by rjhodges View Post
    On my little ASUS Win7 notebook, I've been getting a pop-up offering an online update for my Office 2010 Starter Edition (click-to-run). I've used the notebook for about 3 years and Office 2010 has been on it since the beginning. I've never seen any message like this before; it doesn't look "Microsoft-ish". I keep the notebook updated with the latest updates from Microsoft and other applications. I did full scans with MalwareBytes and Microsoft Security Essentials, which showed no problems.

    Here's an image of the pop-up:

    CTR-popup.png

    Is this thing legitimate? I did an online chat with Microsoft and the only thing they offered was a link on how to uninstall Office 2010! Not something I want to do.

    Thanks in advance for any info.

    Ron Hodges

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •