Apple’s sneaky iTunes 8 install
Image 1 of 11
Apple offers to update iTunes
Apple offers to update iTunes
Click image to display full-size
By Ed Bott
The description shown in Apple Software Update says this is an update to iTunes and QuickTime, it doesn’t mention any additional software, services, or drivers. But it turns out that the full package offers much, much more than it discloses, including the potential for Windows crashes.
For a more detailed discussion of this issue, see An inside look at Apple’s sneaky iTunes 8 upgrade.
An odd progress dialog box
An odd progress dialog box
Click image to display full-size
After you approve the installation using your administrator’s credentials, this download dialog box appears. The first sign that something is very odd is the discrepancy between the size shown at the top of the dialog box and the value shown alongside the progress bar. Which size is correct: 77 MB or 13.50MB?
For a more detailed discussion of this issue, see An inside look at Apple’s sneaky iTunes 8 upgrade.
What's really being downloaded?
What's really being downloaded?
Click image to display full-size
Opening this temporary folder shows what’s really going on. The downloader is actually pulling five separate installer packages plus a master setup program from Apple’s servers. Note that Apple Mobile Device Supprt, Bonjour, and MobileMe are being installed along with iTunes and QuickTime.
For a more detailed discussion of this issue, see An inside look at Apple’s sneaky iTunes 8 upgrade.
More evidence in the Programs folder
More evidence in the Programs folder
Click image to display full-size
If you open the Programs folder in Control Panel and sort the list of installed programs by vendor, you can see that all of the downloaded programs have now been installed. Remember, Apple never disclosed its intention (or asked permission) to install anything except iTunes and QuickTime.
For a more detailed discussion of this issue, see An inside look at Apple’s sneaky iTunes 8 upgrade.
A closer look at processes
A closer look at processes
Click image to display full-size
Using Process Explorer and sorting by company name, you can see that the installation has configured three system services and a user module to run automatically at startup, again, with no disclosure or request for permission. The three items in red are running with full system privileges.
For a more detailed discussion of this issue, see An inside look at Apple’s sneaky iTunes 8 upgrade.
A driver package too?
A driver package too?
Click image to display full-size
After completing the iTunes upgrade, I opened the System Restore dialog box and looked at the list of available restore points. I expected to see an entry for iTunes install. Instead, as you can see here, the installation is listed as a “Device Driver Package Install” of Apple-branded USB controllers. (This driver file, Usbaapl.sys on 32-bit systems, is installed in the Common Files\Apple folder.) Again, nothing in the documentation disclosed or asked for permission to install a device driver.
For a more detailed discussion of this issue, see An inside look at Apple’s sneaky iTunes 8 upgrade.
Using System Restore to compare system files
Using System Restore to compare system files
Click image to display full-size
I decided to use System Restore to roll back the iTunes upgrade and compare what had changed. Because this description makes no mention of iTunes or QuickTime, a user experiencing troubles after an upgrade might not realize that this is the restore point that needs to be used.
For a more detailed discussion of this issue, see An inside look at Apple’s sneaky iTunes 8 upgrade.
Where did this program come from?
Where did this program come from?
Click image to display full-size
Nothing in the description or license agreement mentioned anything about Apple’s MobileMe service. This machine has never had an iPod or iPhone connected to it. And yet a MobileMe icon now appears in Control Panel. Clicking it leads to this dialog box.
For a more detailed discussion of this issue, see An inside look at Apple’s sneaky iTunes 8 upgrade.
A mysterious auto-start program
A mysterious auto-start program
Click image to display full-size
I used the PC Explorer tool in Sunbelt Software’s VIPRE antispyware program to look for programs that were starting automatically on this system. This entry, AppleSyncNotifier, was one of three items from Apple, Inc. The other two were specifically related to iTunes and QuickTime.
For a more detailed discussion of this issue, see An inside look at Apple’s sneaky iTunes 8 upgrade.
MobileMe by another name
MobileMe by another name
Click image to display full-size
When I looked in the Common Files\Apple folder, I found the AppleSyncNotifier file. Using this view to enlarge the icon reveals that it’s actually the launcher program for Apple’s MobileMe service, and it’s being started automatically after the iTunes installation.
For a more detailed discussion of this issue, see An inside look at Apple’s sneaky iTunes 8 upgrade.
Could this be the problem driver?
Could this be the problem driver?
Click image to display full-size
Opening the Drivers folder and sorting by date revealed a brand-new file. GEARAspiWDM.sys is a file-system filter driver that is used with CD and DVD writing programs. It has a long and colorful history of causing STOP errors with Windows versions going back as far as Windows 2000. Using the Previous Versions dialog box reveals that this is actually an update; the previous driver file was dated January 2008.
For a more detailed discussion of this issue, see An inside look at Apple’s sneaky iTunes 8 upgrade.
