Last Windows update creates C:\inetpub

(infosec.exchange)

57 points | by N19PEDL2 8 days ago ago

32 comments

  • olyjohn 8 days ago ago

    I haven't used Windows in years. But one of the main things that pushed me away was how they constantly just shit all over your hard drive. I used to keep a really, really clean Windows filesystem, but I wasn't able to keep it up after I started getting tons of folders called C:\fli32uf09823f0u32fj3209f8u. Total disrespect to your users.

    Don't get me started on the services control panel. Where it used to be clear what was running and what wasn't. Now the whole OS just looks like Malware.

    • karmakaze 8 days ago ago

      I especially remember that Windows CE (or Pocket PC) carried this over to handhelds, a shitshow of random/temp files.

      • klank 8 days ago ago

        Small correction, Windows CE and Pocket PC weren't Windows so we didn't "bring it over". That mess didn't come later until windows phone.

        In the defense of ce/ppc, we weren't really thinking about the fs as user visible so didn't give it much thought. Also, while I'm not shifting all of the blame, lots of that cruft was driven by OEMs as well. Our internal images were pretty clean on the fs from what I can remember.

        • karmakaze 8 days ago ago

          Appreciate the clarification. It may not have literally been ported over, but it certainly felt like it was culturally imported. Anytime I used one of these devices it made me wince feeling like having a little messy desktop os in a piece of consumer electronics seeming more complex and fragile than it ought to be.

          • klank 7 days ago ago

            Yeah, I think you're right, it was cultural. For me, rather than the influence from Windows what I see is the focus on what we called "enterprise customers" at the time and leadership was obsessed about them because they were guaranteed huge orders for large numbers of devices. They largely don't exist as a thing anymore, BYOD killed them.

            Enterprise customers and operators didn't view the fs of a mobile device as a thing the end user should manage or care about. So neither did we, or our OEMs (for the most part).

            Of course, this is all just the opinions of one guy decades after the fact. For reference, I was a dev, lead, dev manager in the CE/mobile/phone teams from ~00-08 and contributed to ActiveSync, device PIM sync, device stability, and later worked directly with OEMs to design and build new phones (things like the Samsung BlackJack).

    • luckman212 8 days ago ago

      Agree 100%

      Quick... "AarSvc_86dfc" service- malware or not?

      • olyjohn 8 days ago ago

        Yeah not to mention everything now runs under svchost.exe. So when it spikes to 100% CPU usage, you can't actually figure out what's causing it easily.

        • dizhn 8 days ago ago

          But you know it has something to do with Windows Update.

    • stronglikedan 8 days ago ago

      After multiple decades of using Windows almost exclusively, I have never seen a folder named like that in the root of any drive, which leads me to conclude that your problem was cause by malware rather than Windows.

      • windexh8er 8 days ago ago

        Going to go out on a limb and say that you must use it in a vacuum. I only have used Windows over the last decade in VMs and have seen this often with Windows tooling and updates. A quick search on the topic will confirm a lot of end users have experienced this sloppy system maintenance by Microsoft. [0]

        [0] https://answers.microsoft.com/en-us/windows/forum/all/window...

      • EvanAnderson 8 days ago ago

        No, the OP is correct. Windows updates totally did that. For the most part that stopped when Component Based Servicing got rolled out (Windows Vista).

      • cadamsdotcom 8 days ago ago

        Sorry, no, Windows always has and still does generate garbage all over your hard drive.

        Most won’t notice or care. For those who do it’s infuriating.

    • nunez 8 days ago ago

      That looks like a folder created by malware. Crazy if Windows created folders like that on the regular. (I stopped using Windows regularly after Windows 7.)

  • threesevenths 8 days ago ago

    I’d be willing to bet some internet karma that this was a simple mistake during packaging and an errant folder create was accidentally included. I’d be incredibly surprised if any IIS components are activated by this update or if anything beyond the folder existing is out of the ordinary for the system.

  • pentagrama 8 days ago ago

    For anyone else who didn’t know (like me):

    > inetpub is a system folder on Windows that gets created when you install IIS (Internet Information Services) — which is Windows’ built-in web server.

    • matttproud 2 days ago ago

      IIS: Talk about a throwback.

    • Grum9 8 days ago ago

      [dead]

  • bastard_op 8 days ago ago

    This sounds like some marketing stunt so microsoft can claim to be the most widely deployed website in the world, mostly by virtue of it installing itself to every windoze 11 desktop like most malware/potentially unwanted programs (pup).

    It wouldn't be the first time they pull some shenanigans like that such as when they paid GoDaddy to switch their web parking from Apache to IIS circa 2005, and suddenly IIS was the most-used web server across (mostly parked) domains on the internet overnight as their marketing team quickly disseminated.

    • kotaKat 8 days ago ago

      > This sounds like some marketing stunt so microsoft can claim to be the most widely deployed website in the world

      If we wanted to play semantics like that Microsoft can technically claim one of the world's largest hypervisor deployments by sheer number of Xbox Ones and above all running Hyper-V in the living room? ;)

  • therein 8 days ago ago

    Don't be surprised if Microsoft deploys a Tailscale-like setup to implicitly stay connected to a fleet of Windows machines and then use this IIS setup to exfiltrate CoPilot logs when CoPilot receives a prompt and locally decides you are doing bad things.

  • mschuster91 8 days ago ago

    Good god. And Microsoft wonders why people are so reluctant to install updates or upgrade to Windows 11.

    MS, get your shit in order, and stop forcing AI slop, advertising and untested updates down our throats.

    • akimbostrawman 8 days ago ago

      Why would they care. Like with every profit maximizing enshitification change since the end of 7 user will forget about it after a week of complaining instead of switching to alternatives.

      At this point it's the 5 stages of a new windows version.

  • DeathArrow 8 days ago ago

    So what are we serving?

  • rekttrader 8 days ago ago

    Now every computer is a web server, and as a bonus you run IIS.

    • acuozzo 8 days ago ago

      This is the case with OpenBSD. It doesn't come with Apache turned on by default, of course, but it's a part of the base install as httpd.

      • icepush 8 days ago ago

        The apache based httpd was removed and briefly (For two releases I think?) replaced with an nginx one, and is now a custom written web server.

        • acuozzo 7 days ago ago

          Didn't they fork Apache 1.x?

      • dvektor 8 days ago ago

        at least we all know what apache is, what it does and doesn't do, when it's running and how to start/stop/remove it :)

        god knows what a microsoft webserver is doing.

    • olyjohn 8 days ago ago

      IIS came with Windows years ago. I think it was even an optional component in Windows 98.

      • mepian 8 days ago ago

        Yeah, the component was called "Personal Web Server", I poked it recently in 86Box.

      • DrillShopper 8 days ago ago

        It was a terrible idea then and it remains a terrible idea now.

  • on_the_train 8 days ago ago

    Some manager just had to use the opportunity to pull some bullshit