I thought I’d seen just about every dumb thing that a developer could do, but this latest one from MSI is a whopper..
I have an MSI Wind netbook that’s having some shutdown and sleep issues when running Windows 7, so my first thought was to ensure I was running the latest BIOS version. For some reason, MSI still provides a DOS-based utility for updating your BIOS. Not having any USB floppy drives laying around, I went looking for a Windows-based tool instead.
MSI supplies a Live Update application, which will provide users with the latest BIOS and driver updates for their MSI product. It sounded like a good idea to me at the time, so I downloaded the installer and fired it up, but that’s when it just got a little too scary.
For some reason that I can’t quite fathom, it appears that MSI has decided that User Account Control needs to be disabled for their application to run. After installing MSI Live Update and running the main application, you are presented with this dialog box:

Clicking the only option available to you – the OK button, results in a UAC prompt:

Hmm.. DUAC.EXE, I wonder what that does. Let’s cancel that prompt and try the another tool included with Live Updater – Live Monitor. This one not only requires elevation to initially execute, but you just will not get anything useful out of it with UAC enabled.
Here’s a video of the application in action (on Windows Vista) – running LMONITOR.EXE will in turn run DUAC.EXE to disable UAC and then reboot the machine – with little warning:
Not only is this a sad indictment of MSI’s support tool, but this could potentially put many of their users at risk. It’s a real shame to see developers taking the easy way out instead of doing a little research and doing things the right way.
Fortunately though, the online version of Live Update (which is really just an ActiveX implementation of the installed version) does not attempt to disable UAC. If you own an MSI product, my recommendation would be to steer well clear of their Live Update utility and download drivers and other updates manually instead.


{ 1 trackback }
{ 3 comments }
Hardware people always create shitty horrible software sadly (200mb printer drivers, bloated .NET config apps etc)
It’s a good thing it’s disabling UAC. UAC is nothing more than a nuisance to people who are not complete idiots when it comes to computers. And if you’re updating your BIOS, oh boy, you bet your butt you don’t want UAC to mess up the BIOS update and destroy your motherboard. I admit they could at least give a warning, but UAC should REALLY be turned off when updating BIOS.
Yeah I made the mistake of installing this “MSI Live Update 3″ thing — the developers should be prosecuted in The Hague for “Crimes Against Software.” After installing, it threw random error dialogs (“Invalid handle”), disabled UAC, displayed UGLY flashing banner ads in the dialogs, appeared to use SENDKEYS (…the hell?) to launch IE and pop up an ad in a tiny browser window telling me about their latest motherboard, eventually told me yeah there was a BIOS upgrade but the option to install it from Windows was greyed out so it told me I would need to make a boot floppy and copy the BIOS to that. Well, that was all I wanted to do in the first place! Except the MSI web page said, “MSI Reminds you: Please use MSI Live BIOS tool to upgrade BIOS of this product. ”
They can’t even get the name of the product right; it’s not “Live BIOS tool.”
UAC didn’t need to be disabled on my system because the BIOS update didn’t take place in Windows. Nor was there any sort of “Hey, would you like us to turn UAC back *on*?” prompt after the update was done. Where is the “Unfuck My PC” button?
I second the above suggestion: when asked to choose between “Live Update 3″ and “Live Update Online,” choose THE LATTER.
Comments on this entry are closed.