Microsoft will release on Nov. 1 a new architecture for WSUSscan.cab, an archive file that contains security metadata, which is used for scanning updates that are available on Microsoft Update.
The bug is in a Microsoft Update scan engine that debilitates performance when a client is undergoing a routine scan. The problem occurs with the Systems Management Server (SMS) 2003 Service Pack 1 or later using the Inventory Tool for Microsoft Updates (ITMU) and on machines that are running the Windows Update agent.
The problem can cause Microsoft Update and Windows Software Update Services (WSUS) to take up to five minutes per scan on a client. As Microsoft releases updates, the number of files in the scan tool grows. When the scan tool grows large, it takes more processing power to continue to scan each system for updates.
The ITMU tool is designed to help customers update their managed systems replacing a multitude of legacy scan tools with one scan tool, Microsoft said. The tool shares the same security update, update rollup and service pack data as offered by WSUS.
Microsoft said support for the current WSUSscan architecture will cease in March 2007. SMS ITMU customers can download and deploy an updated version of SMS ITMU in November. Microsoft Baseline Security Analyzer 2.0 offline scan customers will also get an updated version of MBSA 2.0 in November, the company said.