KB 923980 will not install and keeps being reoffered

From a thread in the Windows Update newsgroup =

Date: 11/15
Subject : KB 923980 wants to be installed ever and ever again ?
Author : Crazy-Chris

Why is this update being offered for systems that do not have the
Client Service for NetWare ?
One of the posters checked the registry for the entries as described in
the Sec Bulletin and the only file that is actually being installed is
nwprovau.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
XP\SP3\KB923980\Filelist]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
XP\SP3\KB923980\Filelist\0]
"FileName"="nwprovau.dll"
"Version"="5.1.2600.3015"
"BuildDate"="Fri Oct 13 09:35:12 2006"
"BuildCheckSum"="24239"
"Location"="C:\\WINDOWS\\system32"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
XP\SP3\KB923980\Filelist\1]
"FileName"="nwprovau.dll"
"Version"="5.1.2600.3015"
"BuildDate"="Fri Oct 13 09:35:12 2006"
"BuildCheckSum"="24239"
"Location"="C:\\WINDOWS\\system32\\DllCache"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
XP\SP3\KB923980\Filelist\2]
"FileName"="nwrdr.sys"
"Version"="5.1.2600.3015"
"BuildDate"="Fri Oct 13 07:39:12 2006"
"BuildCheckSum"="37811"
"Location"="c:\\windows\\$hf_mig$\\KB923980\\SP2QF E"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
XP\SP3\KB923980\Filelist\3]
"FileName"="nwwks.dll"
"Version"="5.1.2600.3015"
"BuildDate"="Fri Oct 13 09:41:39 2006"
"BuildCheckSum"="1417e"
"Location"="c:\\windows\\$hf_mig$\\KB923980\\SP2QF E"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
XP\SP3\KB923980\Filelist\4]
"FileName"="nwprovau.dll"
"Version"="5.1.2600.3015"
"BuildDate"="Fri Oct 13 09:41:38 2006"
"BuildCheckSum"="2ccee"
"Location"="c:\\windows\\$hf_mig$\\KB923980\\SP2QF E"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
XP\SP3\KB923980\Filelist\5]
"FileName"="nwapi32.dll"
"Version"="5.1.2600.3015"
"BuildDate"="Fri Oct 13 09:41:38 2006"
"BuildCheckSum"="1a991"
"Location"="c:\\windows\\$hf_mig$\\KB923980\\SP2QF E"


IMO, this update is erroneously being offered.

Mow

Try the following:

Rename nwapi32.dll to nwapi.old in C:\Windows\System32.

Then, download and install manually this update from
http://www.microsoft.com/downloads/d...DisplayLang=en

Restarts and verify if the installation of this update is right.

Ariel Monaco

MCP

"MowGreen [MVP]" wrote:

> From a thread in the Windows Update newsgroup =
>
> Date: 11/15
> Subject : KB 923980 wants to be installed ever and ever again ?
> Author : Crazy-Chris
>
> Why is this update being offered for systems that do not have the
> Client Service for NetWare ?
> One of the posters checked the registry for the entries as described in
> the Sec Bulletin and the only file that is actually being installed is
> nwprovau.dll
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
> XP\SP3\KB923980\Filelist]
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
> XP\SP3\KB923980\Filelist\0]
> "FileName"="nwprovau.dll"
> "Version"="5.1.2600.3015"
> "BuildDate"="Fri Oct 13 09:35:12 2006"
> "BuildCheckSum"="24239"
> "Location"="C:\\WINDOWS\\system32"
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
> XP\SP3\KB923980\Filelist\1]
> "FileName"="nwprovau.dll"
> "Version"="5.1.2600.3015"
> "BuildDate"="Fri Oct 13 09:35:12 2006"
> "BuildCheckSum"="24239"
> "Location"="C:\\WINDOWS\\system32\\DllCache"
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
> XP\SP3\KB923980\Filelist\2]
> "FileName"="nwrdr.sys"
> "Version"="5.1.2600.3015"
> "BuildDate"="Fri Oct 13 07:39:12 2006"
> "BuildCheckSum"="37811"
> "Location"="c:\\windows\\$hf_mig$\\KB923980\\SP2QF E"
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
> XP\SP3\KB923980\Filelist\3]
> "FileName"="nwwks.dll"
> "Version"="5.1.2600.3015"
> "BuildDate"="Fri Oct 13 09:41:39 2006"
> "BuildCheckSum"="1417e"
> "Location"="c:\\windows\\$hf_mig$\\KB923980\\SP2QF E"
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
> XP\SP3\KB923980\Filelist\4]
> "FileName"="nwprovau.dll"
> "Version"="5.1.2600.3015"
> "BuildDate"="Fri Oct 13 09:41:38 2006"
> "BuildCheckSum"="2ccee"
> "Location"="c:\\windows\\$hf_mig$\\KB923980\\SP2QF E"
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows
> XP\SP3\KB923980\Filelist\5]
> "FileName"="nwapi32.dll"
> "Version"="5.1.2600.3015"
> "BuildDate"="Fri Oct 13 09:41:38 2006"
> "BuildCheckSum"="1a991"
> "Location"="c:\\windows\\$hf_mig$\\KB923980\\SP2QF E"
>
>
> IMO, this update is erroneously being offered.
>
> Mow
>

I'm having the same issue. Windows update constantly
prompts to install the same update over and over.
Even though the update was already installed several
times successfully.

Is it that windows update is not recognizing the
update is already on my system?

Who can I contact to resolve this problem?

EggHeadCafe.com - .NET Developer Portal of Choice
http://www.eggheadcafe.com

Did this work on a system that would not install KB923980 properly and
the update was offered up again or is this 'theory' ?

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============

Ariel Monaco wrote:

> Try the following:
>
> Rename nwapi32.dll to nwapi.old in C:\Windows\System32.
>
> Then, download and install manually this update from:
> http://www.microsoft.com/downloads/d...DisplayLang=en
>
> Restarts and verify if the installation of this update is right.
>
> Ariel Monaco
>
> MCP
>

I've just tested this, (uninstalled the update, renamed file, installed from
automatic update) then rebooted several times and run Windows Update manually
to check. For now it appears to have worked. My registry entry's still the
same as the one above, but Windows Update has stopped offering KB923980.
Hurrah!

I'll keep an eye on it until tomorrow just in case, but hopefully this is
the end of it.

Only question remaining is was anything depending on or using that
nwapi32.dll file I've now renamed? (which has not been replaced with the
newer version)

"MowGreen [MVP]" wrote:

> Did this work on a system that would not install KB923980 properly and
> the update was offered up again or is this 'theory' ?
>
> MowGreen [MVP 2003-2007]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============

I've also tried this and so far KB... is not being repeatly offered.
I deleted KB912980 from control panel
I renamed the newapi32.dll in ...\system32 to *.old (The was another I
didn't touch in and other folder)
I was about to reinstall when I saw from the webpage update page that it was
no longer needed so I did not have to reinstall.
Autoupdate is on and I manuallly scanned for updates a few times and all is
well so far.
XP Home SP2
IE7
Zone Aware
AVG
phishing on in ie7
No NW services listed.
So if this works, could I later clean out all regedit entried classes,
values, files and dlls, etc. for KB923980 or just leave everything as is?

Spybot
Ad Adare


"MowGreen [MVP]" wrote:

> Did this work on a system that would not install KB923980 properly and
> the update was offered up again or is this 'theory' ?
>
> MowGreen [MVP 2003-2007]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>
> Ariel Monaco wrote:
>
> > Try the following:
> >
> > Rename nwapi32.dll to nwapi.old in C:\Windows\System32.
> >
> > Then, download and install manually this update from:
> > http://www.microsoft.com/downloads/d...DisplayLang=en
> >
> > Restarts and verify if the installation of this update is right.
> >
> > Ariel Monaco
> >
> > MCP
> >
>

I'm still waiting for Ariel to post back. FWIW, here's 2 MSKB articles
on error messages with Nwapi32.dll -
http://support.microsoft.com/kb/109086
http://support.microsoft.com/kb/161733

HTH,
MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


Aia wrote:

> I've just tested this, (uninstalled the update, renamed file, installed from
> automatic update) then rebooted several times and run Windows Update manually
> to check. For now it appears to have worked. My registry entry's still the
> same as the one above, but Windows Update has stopped offering KB923980.
> Hurrah!
>
> I'll keep an eye on it until tomorrow just in case, but hopefully this is
> the end of it.
>
> Only question remaining is was anything depending on or using that
> nwapi32.dll file I've now renamed? (which has not been replaced with the
> newer version)
>
> "MowGreen [MVP]" wrote:
>
>
>>Did this work on a system that would not install KB923980 properly and
>>the update was offered up again or is this 'theory' ?
>>
>>MowGreen [MVP 2003-2007]
>>===============
>> *-343-* FDNY
>>Never Forgotten
>>===============

> I was about to reinstall when I saw from the webpage update page that it was
> no longer needed so I did not have to reinstall.

Hmmm ... try installing the update from here -

http://www.microsoft.com/downloads/d...displaylang=en

The update not being offered because of the lack of Nwapi32.dll being
resident does not mean that the files needed to mitigate the
vulnerability are present. So, I'd install the update anyway.

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


deltaseq0 wrote:

> I've also tried this and so far KB... is not being repeatly offered.
> I deleted KB912980 from control panel
> I renamed the newapi32.dll in ...\system32 to *.old (The was another I
> didn't touch in and other folder)
> I was about to reinstall when I saw from the webpage update page that it was
> no longer needed so I did not have to reinstall.
> Autoupdate is on and I manuallly scanned for updates a few times and all is
> well so far.
> XP Home SP2
> IE7
> Zone Aware
> AVG
> phishing on in ie7
> No NW services listed.
> So if this works, could I later clean out all regedit entried classes,
> values, files and dlls, etc. for KB923980 or just leave everything as is?
>
> Spybot
> Ad Adare
>
>
> "MowGreen [MVP]" wrote:
>
>
>>Did this work on a system that would not install KB923980 properly and
>>the update was offered up again or is this 'theory' ?
>>
>>MowGreen [MVP 2003-2007]
>>===============
>> *-343-* FDNY
>>Never Forgotten
>>===============
>>
>>Ariel Monaco wrote:
>>
>>
>>>Try the following:
>>>
>>>Rename nwapi32.dll to nwapi.old in C:\Windows\System32.
>>>
>>>Then, download and install manually this update from:
>>>http://www.microsoft.com/downloads/d...DisplayLang=en
>>>
>>>Restarts and verify if the installation of this update is right.
>>>
>>>Ariel Monaco
>>>
>>>MCP
>>>
>>

Check these files to see if the system needs the update applied -

Nwapi32.dll
Nwprovau.dll
Nwwks.dll
Nwrdr.sys

They should all be at version 5.1.2600.3015
The .dll files are located in WINDOWS\system32
The .sys is located in WINDOWS\system32\drivers
( You should enable show hidden files, folders, and system files to view
them - http://www.xtra.co.nz/help/0,,4155-1916458,00.html )

Right click the files, choose Properties, then click the Version tab to
confirm that the correct files are present.
If the files are not the correct version, download the update for
Microsoft Windows XP Service Pack 2 —
http://www.microsoft.com/downloads/d...2-e4dbfc050667


Save it, close the browser, install the update, and restart the system.
Revisit Windows or Microsoft Update to see if it's reoffered.


MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


deltaseq0 wrote:

> I've also tried this and so far KB... is not being repeatly offered.
> I deleted KB912980 from control panel
> I renamed the newapi32.dll in ...\system32 to *.old (The was another I
> didn't touch in and other folder)
> I was about to reinstall when I saw from the webpage update page that it was
> no longer needed so I did not have to reinstall.
> Autoupdate is on and I manuallly scanned for updates a few times and all is
> well so far.
> XP Home SP2
> IE7
> Zone Aware
> AVG
> phishing on in ie7
> No NW services listed.
> So if this works, could I later clean out all regedit entried classes,
> values, files and dlls, etc. for KB923980 or just leave everything as is?
>
> Spybot
> Ad Adare
>
>
> "MowGreen [MVP]" wrote:
>
>
>>Did this work on a system that would not install KB923980 properly and
>>the update was offered up again or is this 'theory' ?
>>
>>MowGreen [MVP 2003-2007]
>>===============
>> *-343-* FDNY
>>Never Forgotten
>>===============
>>
>>Ariel Monaco wrote:
>>
>>
>>>Try the following:
>>>
>>>Rename nwapi32.dll to nwapi.old in C:\Windows\System32.
>>>
>>>Then, download and install manually this update from:
>>>http://www.microsoft.com/downloads/d...DisplayLang=en
>>>
>>>Restarts and verify if the installation of this update is right.
>>>
>>>Ariel Monaco
>>>
>>>MCP
>>>
>>

You were right. After a few hours, I was proppted to update again so I
reinstalled the update. So far, so good.
All the files seem to be correct marked modified 10/13/2006 and all have the
correct version numbers but they are all scattered throughtout c:\windows\...
For instance, I have 3 identical nwprovau.dll files, 1 in ...system32, 1 in
windows and 1 in windows\softwaredistribution\download. All the other files
are in the ...\download folder. The only nw files I have in the system
subfolder are nwlnk*.* files. But like I said, so far so good and thanks also
to Ariel Monaco.
Mike







"MowGreen [MVP]" wrote:

> > I was about to reinstall when I saw from the webpage update page that it was
> > no longer needed so I did not have to reinstall.
>
> Hmmm ... try installing the update from here -
>
> http://www.microsoft.com/downloads/d...displaylang=en
>
> The update not being offered because of the lack of Nwapi32.dll being
> resident does not mean that the files needed to mitigate the
> vulnerability are present. So, I'd install the update anyway.
>
> MowGreen [MVP 2003-2007]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>
>
> deltaseq0 wrote:
>
> > I've also tried this and so far KB... is not being repeatly offered.
> > I deleted KB912980 from control panel
> > I renamed the newapi32.dll in ...\system32 to *.old (The was another I
> > didn't touch in and other folder)
> > I was about to reinstall when I saw from the webpage update page that it was
> > no longer needed so I did not have to reinstall.
> > Autoupdate is on and I manuallly scanned for updates a few times and all is
> > well so far.
> > XP Home SP2
> > IE7
> > Zone Aware
> > AVG
> > phishing on in ie7
> > No NW services listed.
> > So if this works, could I later clean out all regedit entried classes,
> > values, files and dlls, etc. for KB923980 or just leave everything as is?
> >
> > Spybot
> > Ad Adare
> >
> >
> > "MowGreen [MVP]" wrote:
> >
> >
> >>Did this work on a system that would not install KB923980 properly and
> >>the update was offered up again or is this 'theory' ?
> >>
> >>MowGreen [MVP 2003-2007]
> >>===============
> >> *-343-* FDNY
> >>Never Forgotten
> >>===============
> >>
> >>Ariel Monaco wrote:
> >>
> >>
> >>>Try the following:
> >>>
> >>>Rename nwapi32.dll to nwapi.old in C:\Windows\System32.
> >>>
> >>>Then, download and install manually this update from:
> >>>http://www.microsoft.com/downloads/d...DisplayLang=en
> >>>
> >>>Restarts and verify if the installation of this update is right.
> >>>
> >>>Ariel Monaco
> >>>
> >>>MCP
> >>>
> >>
>