KB908531 (MS06-015) & HP hardware devices - FYI

From a post in IE6 Browser newsgroup by Stephen Hui [MSFT] (13 Apr-06):

<QP>
We've determined that the majority of the issues people are having with
MS06-015 / KB908531 are due to a bad interaction between the security update
and a software component included with various HP hardware devices,
including but not limited to printers, scanners, and cameras.

Here are two fixes which should fix problems caused by the interaction with
the HP software:

Option 1 - Modify the registry
------------------------------

- (If you have multiple user accounts set up) Log onto the computer using an
account with Administrator privileges

- Click the Start button, then click Run and type "regedit" at the prompt,
without the quotes; this will start Registry Editor

- Locate the
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Shell
Extensions\Cached key in Registry Editor

- Right click on the key and select New / DWORD Value

- Rename the resulting value "{A4DF5659-0801-4A60-9607-1C48695EFDA9}
{000214E6-0000-0000-C000-000000000046} 0x401", without the quotes

- Right click the value, select Modify, and type "1" into the Value Data
field

- Close Registry Editor


Option 2 - Kill the HP process
------------------------------

- Wait until Internet Explorer, Windows Explorer, or whichever component is
encountering problems is in an unresponsive state

- Click the Start button, then select Run and type "taskmgr" at the prompt,
without the quotes; this will start Task Manager

- Locate any instances of hpgs2wnd.exe or hpgs2wnf.exe in Task Manager, then
right click on them and select End Process

Notes:

- Option 2 this may disable some HP device-specific functionality until you
restart your computer.

- Option 2 will correct the problem for the logged-in user, but not for all
users on a computer with multiple user accounts. For that reason, Option 1
is the preferred option.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
If your computer is not currently unresponsive, you should only have to do
Option 1 or Option 2, not both. If your computer is currently unresponsive,
you should be fixed by doing Option 2.

I'm very sorry about the inconvenience this has caused you all; hopefully
this will get things back on track. Please note that MS06-015 fixes a
critical security vulnerability, so it's very important that you reinstall
it as soon as possible if you've uninstalled it. Please also keep in mind
that disabling Auto Update will leave your computer unprotected even after
we release security updates. I understand that this experience has been
very frustrating for many of you, but I really must still strongly recommend
that you leave [Automatic Updates] enabled for your own safety.
</QP>
Source:
http://groups.google.com/group/micro...4143b42d0c3ca2
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org

"PA Bear" wrote:

> From a post in IE6 Browser newsgroup by Stephen Hui [MSFT] (13 Apr-06):
>
> <QP>
> We've determined that the majority of the issues people are having with
> MS06-015 / KB908531 are due to a bad interaction between the security update
> and a software component included with various HP hardware devices,
> including but not limited to printers, scanners, and cameras.
>
> Here are two fixes which should fix problems caused by the interaction with
> the HP software:
>
> Option 1 - Modify the registry
> ------------------------------
>
> - (If you have multiple user accounts set up) Log onto the computer using an
> account with Administrator privileges
>
> - Click the Start button, then click Run and type "regedit" at the prompt,
> without the quotes; this will start Registry Editor
>
> - Locate the
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Shell
> Extensions\Cached key in Registry Editor
>
> - Right click on the key and select New / DWORD Value
>
> - Rename the resulting value "{A4DF5659-0801-4A60-9607-1C48695EFDA9}
> {000214E6-0000-0000-C000-000000000046} 0x401", without the quotes
>
> - Right click the value, select Modify, and type "1" into the Value Data
> field
>
> - Close Registry Editor
>
>
> Option 2 - Kill the HP process
> ------------------------------
>
> - Wait until Internet Explorer, Windows Explorer, or whichever component is
> encountering problems is in an unresponsive state
>
> - Click the Start button, then select Run and type "taskmgr" at the prompt,
> without the quotes; this will start Task Manager
>
> - Locate any instances of hpgs2wnd.exe or hpgs2wnf.exe in Task Manager, then
> right click on them and select End Process
>
> Notes:
>
> - Option 2 this may disable some HP device-specific functionality until you
> restart your computer.
>
> - Option 2 will correct the problem for the logged-in user, but not for all
> users on a computer with multiple user accounts. For that reason, Option 1
> is the preferred option.
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> If your computer is not currently unresponsive, you should only have to do
> Option 1 or Option 2, not both. If your computer is currently unresponsive,
> you should be fixed by doing Option 2.
>
> I'm very sorry about the inconvenience this has caused you all; hopefully
> this will get things back on track. Please note that MS06-015 fixes a
> critical security vulnerability, so it's very important that you reinstall
> it as soon as possible if you've uninstalled it. Please also keep in mind
> that disabling Auto Update will leave your computer unprotected even after
> we release security updates. I understand that this experience has been
> very frustrating for many of you, but I really must still strongly recommend
> that you leave [Automatic Updates] enabled for your own safety.
> </QP>
> Source:
> http://groups.google.com/group/micro...4143b42d0c3ca2
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org
>
> Perhaps MS should read a few more posts????
Try looking at DSLR(DSL reports) the posts there show that the problem
exists on MANY machines that have NEVER had any HP software.

Paint shop Pro and Acronis are affected.
I have a machine that has no HP software,my neighbour has 3 PC's and NO HP
software ,they simply cannot be used with this update installed.
Clearly the problem lies with the update,it did not exist prior to install.

Adrian,

I TOTALLY!!!! agree with your post. I think alot of people in these forums
have been focusing only on HP software. I agree it could/is partially HP
related but as MS said themselves in the conversations I have had with them.
It is NOT!!!!!!! only happening with HP software/devices. I agree with you
none of these problems existed before the update. Can anyone guess what
caused the problem?? I also don't believe or agree with the post from Steven
(Msft) who gace the 2 options for fising the problem. Why should we be making
these "fixes" and workarounds for something MS broke.

"Adrian UK" wrote:

>
>
> "PA Bear" wrote:
>
> > From a post in IE6 Browser newsgroup by Stephen Hui [MSFT] (13 Apr-06):
> >
> > <QP>
> > We've determined that the majority of the issues people are having with
> > MS06-015 / KB908531 are due to a bad interaction between the security update
> > and a software component included with various HP hardware devices,
> > including but not limited to printers, scanners, and cameras.
> >
> > Here are two fixes which should fix problems caused by the interaction with
> > the HP software:
> >
> > Option 1 - Modify the registry
> > ------------------------------
> >
> > - (If you have multiple user accounts set up) Log onto the computer using an
> > account with Administrator privileges
> >
> > - Click the Start button, then click Run and type "regedit" at the prompt,
> > without the quotes; this will start Registry Editor
> >
> > - Locate the
> > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Shell
> > Extensions\Cached key in Registry Editor
> >
> > - Right click on the key and select New / DWORD Value
> >
> > - Rename the resulting value "{A4DF5659-0801-4A60-9607-1C48695EFDA9}
> > {000214E6-0000-0000-C000-000000000046} 0x401", without the quotes
> >
> > - Right click the value, select Modify, and type "1" into the Value Data
> > field
> >
> > - Close Registry Editor
> >
> >
> > Option 2 - Kill the HP process
> > ------------------------------
> >
> > - Wait until Internet Explorer, Windows Explorer, or whichever component is
> > encountering problems is in an unresponsive state
> >
> > - Click the Start button, then select Run and type "taskmgr" at the prompt,
> > without the quotes; this will start Task Manager
> >
> > - Locate any instances of hpgs2wnd.exe or hpgs2wnf.exe in Task Manager, then
> > right click on them and select End Process
> >
> > Notes:
> >
> > - Option 2 this may disable some HP device-specific functionality until you
> > restart your computer.
> >
> > - Option 2 will correct the problem for the logged-in user, but not for all
> > users on a computer with multiple user accounts. For that reason, Option 1
> > is the preferred option.
> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > If your computer is not currently unresponsive, you should only have to do
> > Option 1 or Option 2, not both. If your computer is currently unresponsive,
> > you should be fixed by doing Option 2.
> >
> > I'm very sorry about the inconvenience this has caused you all; hopefully
> > this will get things back on track. Please note that MS06-015 fixes a
> > critical security vulnerability, so it's very important that you reinstall
> > it as soon as possible if you've uninstalled it. Please also keep in mind
> > that disabling Auto Update will leave your computer unprotected even after
> > we release security updates. I understand that this experience has been
> > very frustrating for many of you, but I really must still strongly recommend
> > that you leave [Automatic Updates] enabled for your own safety.
> > </QP>
> > Source:
> > http://groups.google.com/group/micro...4143b42d0c3ca2
> > --
> > ~Robear Dyer (PA Bear)
> > MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org
> >
> > Perhaps MS should read a few more posts????
> Try looking at DSLR(DSL reports) the posts there show that the problem
> exists on MANY machines that have NEVER had any HP software.
>
> Paint shop Pro and Acronis are affected.
> I have a machine that has no HP software,my neighbour has 3 PC's and NO HP
> software ,they simply cannot be used with this update installed.
> Clearly the problem lies with the update,it did not exist prior to install.

Yes, that works!!
I do control+alt+del to open "windows task manager" and I stop the 2 process
"hpgs2wnd.exe" and "hpgs2wnf.exe" and then...
....the explorer in word or excel don't hangs, the URL in IE auto complete
and the right clik is ok!
....Sorry my English :-))
RS

"Adrian UK" wrote:

>
>
> "PA Bear" wrote:
>
> > From a post in IE6 Browser newsgroup by Stephen Hui [MSFT] (13 Apr-06):
> >
> > <QP>
> > We've determined that the majority of the issues people are having with
> > MS06-015 / KB908531 are due to a bad interaction between the security update
> > and a software component included with various HP hardware devices,
> > including but not limited to printers, scanners, and cameras.
> >
> > Here are two fixes which should fix problems caused by the interaction with
> > the HP software:
> >
> > Option 1 - Modify the registry
> > ------------------------------
> >
> > - (If you have multiple user accounts set up) Log onto the computer using an
> > account with Administrator privileges
> >
> > - Click the Start button, then click Run and type "regedit" at the prompt,
> > without the quotes; this will start Registry Editor
> >
> > - Locate the
> > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Shell
> > Extensions\Cached key in Registry Editor
> >
> > - Right click on the key and select New / DWORD Value
> >
> > - Rename the resulting value "{A4DF5659-0801-4A60-9607-1C48695EFDA9}
> > {000214E6-0000-0000-C000-000000000046} 0x401", without the quotes
> >
> > - Right click the value, select Modify, and type "1" into the Value Data
> > field
> >
> > - Close Registry Editor
> >
> >
> > Option 2 - Kill the HP process
> > ------------------------------
> >
> > - Wait until Internet Explorer, Windows Explorer, or whichever component is
> > encountering problems is in an unresponsive state
> >
> > - Click the Start button, then select Run and type "taskmgr" at the prompt,
> > without the quotes; this will start Task Manager
> >
> > - Locate any instances of hpgs2wnd.exe or hpgs2wnf.exe in Task Manager, then
> > right click on them and select End Process
> >
> > Notes:
> >
> > - Option 2 this may disable some HP device-specific functionality until you
> > restart your computer.
> >
> > - Option 2 will correct the problem for the logged-in user, but not for all
> > users on a computer with multiple user accounts. For that reason, Option 1
> > is the preferred option.
> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > If your computer is not currently unresponsive, you should only have to do
> > Option 1 or Option 2, not both. If your computer is currently unresponsive,
> > you should be fixed by doing Option 2.
> >
> > I'm very sorry about the inconvenience this has caused you all; hopefully
> > this will get things back on track. Please note that MS06-015 fixes a
> > critical security vulnerability, so it's very important that you reinstall
> > it as soon as possible if you've uninstalled it. Please also keep in mind
> > that disabling Auto Update will leave your computer unprotected even after
> > we release security updates. I understand that this experience has been
> > very frustrating for many of you, but I really must still strongly recommend
> > that you leave [Automatic Updates] enabled for your own safety.
> > </QP>
> > Source:
> > http://groups.google.com/group/micro...4143b42d0c3ca2
> > --
> > ~Robear Dyer (PA Bear)
> > MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org
> >
> > Perhaps MS should read a few more posts????
> Try looking at DSLR(DSL reports) the posts there show that the problem
> exists on MANY machines that have NEVER had any HP software.
>
> Paint shop Pro and Acronis are affected.
> I have a machine that has no HP software,my neighbour has 3 PC's and NO HP
> software ,they simply cannot be used with this update installed.
> Clearly the problem lies with the update,it did not exist prior to install.

> Adrian UK scribbled:
> Try looking at DSLR(DSL reports) the posts there show that the problem
> exists on MANY machines that have NEVER had any HP software.
> Paint shop Pro and Acronis are affected.
> I have a machine that has no HP software,my neighbour has 3 PC's and
> NO HP software ,they simply cannot be used with this update installed.
> Clearly the problem lies with the update,it did not exist prior to
> install.

I have both Paintshop pro and Acronis True image on my computer and I DONT
have any problems with this or the other 4 updates I downloaded and
installed on the 13th April....

HELP!!!!!!!!!!!!!!!!!!!!!!!!!!

What have I done wrong?????????????????????????

;-)

A little bit of planning, and knowing when and how Microsoft releases the
updates goes a LONNNNGGG WAAAYYY towards avoiding these problems, even for
home users (like myself) with one computer.
--

Replace the obvious with paradise.net to email me
Found Images
http://homepages.paradise.net.nz/~mlvburke

"Max Burke" wrote:

> > Adrian UK scribbled:
> > Try looking at DSLR(DSL reports) the posts there show that the problem
> > exists on MANY machines that have NEVER had any HP software.
> > Paint shop Pro and Acronis are affected.
> > I have a machine that has no HP software,my neighbour has 3 PC's and
> > NO HP software ,they simply cannot be used with this update installed.
> > Clearly the problem lies with the update,it did not exist prior to
> > install.
>
> I have both Paintshop pro and Acronis True image on my computer and I DONT
> have any problems with this or the other 4 updates I downloaded and
> installed on the 13th April....
>
> HELP!!!!!!!!!!!!!!!!!!!!!!!!!!
>
> What have I done wrong?????????????????????????
>
> ;-)
>
> A little bit of planning, and knowing when and how Microsoft releases the
> updates goes a LONNNNGGG WAAAYYY towards avoiding these problems, even for
> home users (like myself) with one computer.
> --
>
> Replace the obvious with paradise.net to email me
> Found Images
> http://homepages.paradise.net.nz/~mlvburke
>
>
WHAT A THOROUGHLY STUPID AND POINTLESS REPLY !!!!!!!!!!!!

FACT....there are thousands of machines worldwide, affected by these
problems that do NOT have HP software.

FACT.....Internet Explorer,Explorer,Outlook Express ,Paint Shop Pro ,Acronis
and dozens of other applications are affected.

FACT....security and IT/PC professionals are having these problems,companies
are having to restore their machines.

FACT... Microsoft introduced the problem,they must be aware that people use
third party software. It is VERY clear that the updates were not tested
correctly.

FACT... they are suggesting a VERY unsafe remedy, telling people to edit the
registry.

FACT....The supposed cure (adding new values to the registry) DOES NOTHING!

If you took a little more time to read around the different sites you might
understand the scale of the problem.

It is also becoming clear that on some machines the problems are caused by
more than one of the updates.....IE. removing KB908531 does not "FIX" the
fault
and 2 other updates also have to be removed.

I am a memeber of a group that is advised of updates @2 weeks prior to
release,
BUT no-one knows the exact content or what will happen when they are
installed.

Perhaps you can enlighten us as to the mysterious powers you possess that
allows you to PLAN or prepare anything on your machine????

Adrian: Good response, IMO.
I am from the school (of thought) that believes Anti-Virus auto-protect has
a bearing on problems when automatic updating occurs.

Tom
> WHAT A THOROUGHLY STUPID AND POINTLESS REPLY !!!!!!!!!!!!
>
> FACT....there are thousands of machines worldwide, affected by these
> problems that do NOT have HP software.
>
> FACT.....Internet Explorer,Explorer,Outlook Express ,Paint Shop Pro
> ,Acronis
> and dozens of other applications are affected.
>
> FACT....security and IT/PC professionals are having these
> problems,companies
> are having to restore their machines.
>
> FACT... Microsoft introduced the problem,they must be aware that people
> use
> third party software. It is VERY clear that the updates were not tested
> correctly.
>
> FACT... they are suggesting a VERY unsafe remedy, telling people to edit
> the
> registry.
>
> FACT....The supposed cure (adding new values to the registry) DOES
> NOTHING!
>
> If you took a little more time to read around the different sites you
> might
> understand the scale of the problem.
>
> It is also becoming clear that on some machines the problems are caused by
> more than one of the updates.....IE. removing KB908531 does not "FIX" the
> fault
> and 2 other updates also have to be removed.
>
> I am a memeber of a group that is advised of updates @2 weeks prior to
> release,
> BUT no-one knows the exact content or what will happen when they are
> installed.
>
> Perhaps you can enlighten us as to the mysterious powers you possess that
> allows you to PLAN or prepare anything on your machine????

"Adrian UK" <> schrieb:

> I have a machine that has no HP software,my neighbour has 3 PC's and NO HP
> software ,they simply cannot be used with this update installed.

Could you do me a favour and mail me the content of the
registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Shell Extensions

Export the key, ZIP the REG file and mail it to me, please. Thanks!

> Clearly the problem lies with the update,it did not exist prior to install.

ACK,
Freudi

> Adrian UK scribbled:

>> Max Burke wrote:

> Try looking at DSLR(DSL reports) the posts there show that the
> problem exists on MANY machines that have NEVER had any HP
> software.
> Paint shop Pro and Acronis are affected.
> I have a machine that has no HP software,my neighbour has 3 PC's
> and NO HP software ,they simply cannot be used with this update
> installed. Clearly the problem lies with the update,it did not
> exist prior to install.

>> I have both Paintshop pro and Acronis True image on my computer and
>> I DONT have any problems with this or the other 4 updates I
>> downloaded and installed on the 13th April....
>> HELP!!!!!!!!!!!!!!!!!!!!!!!!!!
>> What have I done wrong?????????????????????????
>> ;-)
>> A little bit of planning, and knowing when and how Microsoft
>> releases the updates goes a LONNNNGGG WAAAYYY towards avoiding
>> these problems, even for home users (like myself) with one computer.


> WHAT A THOROUGHLY STUPID AND POINTLESS REPLY !!!!!!!!!!!!

No. it isn't. And there's no need to shout.....

> FACT....there are thousands of machines worldwide, affected by these
> problems that do NOT have HP software.

[OK since you want to play]
FACT....
There are MILLIONS of machines worldwide, NOT affected by these problems
that do AND do not have HP software.


> FACT.....Internet Explorer,Explorer,Outlook Express ,Paint Shop Pro
> ,Acronis and dozens of other applications are affected.


FACT
Internet Explorer,Explorer,Outlook Express ,Paint Shop Pro,Acronis and
dozens of other applications are NOT affected on every computer that have
had the updates installed on them.

> FACT....security and IT/PC professionals are having these
> problems,companies are having to restore their machines.

FACT....NOT EVERY security and IT/PC professionals are having these
problems, NOT ALL companies are having to restore their machines.

In FACT MOST IT/PC professionals and companies are NOT having problems with
these updates.

> FACT... Microsoft introduced the problem,they must be aware that
> people use third party software. It is VERY clear that the updates
> were not tested correctly.

FACT... Microsoft *MAY NOT HAVE* introduced the problems, however they are
aware that *SOME* people use third party software are having problems. It is
NOT clear that the updates
were not tested correctly.

> FACT... they are suggesting a VERY unsafe remedy, telling people to
> edit the registry.

FACT... they are suggesting a possible remedy, telling people to edit the
registry with VERY CLEAR and SIMPLE instructions on how to do that, along
with the very clear caveat about editing the registry..
If you dont know what you're doing then DONT DO IT......

> FACT....The supposed cure (adding new values to the registry) DOES
> NOTHING!

FACT....The fix (adding new values to the registry) DOES work.

> If you took a little more time to read around the different sites you
> might understand the scale of the problem.

If you took a little more time to read around the different sites you might
understand the scale of the problem is NOT as bad as you claim it is.

> It is also becoming clear that on some machines the problems are
> caused by more than one of the updates.....IE. removing KB908531 does
> not "FIX" the fault
> and 2 other updates also have to be removed.

The esentail point being that it's on SOME COMPUTERS. It is NOT on every
computer that the updates have been installed on, in FACT the majority of
computers these updates have been installed on do NOT have the problems
complained of by SOME users in this forum.

> I am a memeber of a group that is advised of updates @2 weeks prior to
> release,
> BUT no-one knows the exact content
> or what will happen when they are
> installed.

Microsoft DOES publish what is in each patch, and what the patch fixes, IN
DETAIL. I get several emails listing the patchs being released along with
URLs to MS Tech Web where I can study IN DETAIL what the patch is for and
what it fixes BEFORE I install it. IOW I can decide what *I* need to do to
ensure the patch will work and be safe to install on my computer(s) BEFORE
*I* install it. How come you dont know (how to do) that?

> Perhaps you can enlighten us as to the mysterious powers you possess
> that allows you to PLAN or prepare anything on your machine????

No special powers are needed. Surely you know what is installed on your
computers, how it works, and that you do REGULAR 'housekeeping?' Or are
your computers a complete mystery to you that you dont have a clue about how
and why they work.....

To know what is in the monthly updates that microsoft releases, and (most
importantly) if you need to install them, subscribe to the following:

http://www.microsoft.com/downloads/s...displaylang=en

Microsoft Security Bulletin Summary for April 2006
Issued: April 11, 2006 , Version Number: 1.0
http://www.microsoft.com/technet/sec.../ms06-apr.mspx

http://www.microsoft.com/athome/secu...ns/200604.mspx

http://www.microsoft.com/technet/security/current.aspx

Dont want to rely soley on Microsoft for information about the monthly
updates, security risks and advisories?

Try these independant third party subscription email notifications....

http://www.sans.org/newsletters/

http://secunia.com/mailing_lists/

http://secunia.com/

http://www.windowsitpro.com/windowssecurity

http://langa.com/join_langalist.htm

http://www.networkworld.com/

http://www.networkworld.com/newsletters/

http://www.mcafee.com/us/threat_center/default.asp

http://www.eeye.com/html/resources/n...subscribe.html

http://www.trendmicro.com/subscriptions/default.asp



--

Replace the obvious with paradise.net to email me
Found Images
http://homepages.paradise.net.nz/~mlvburke

"Ottmar Freudenberger" <> schrieb:
> "Adrian UK" <> schrieb:
>
>> I have a machine that has no HP software,my neighbour has 3 PC's and NO HP
>> software ,they simply cannot be used with this update installed.
>
> Could you do me a favour and mail me the content of the
> registry key
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Shell Extensions
>
> Export the key, ZIP the REG file and mail it to me, please. Thanks!

Received both mails of you and answered already. Did you receive them
Adrian? Any result yet to publish?

TIA,
Freudi