KB911280 affects After Dial Terminal

Hi:

Yesterday (tuesday 13th), many users "religously" updated their Win XP
SP2 and unfortunately their PPP conexion using terminal after dial does
not work!!

We are ISP for 100 users that connect using PPP typing their Username
in the "After Dial Terminal" window.

If the PC is updated with the patches from Tuesday 13th (bad day!),
specially the KB911280 (Microsoft Security Bulletin MS06-025) the After
Terminal Dial kept "blocked" ans it is impossible to wite anything!

After tests, I found that the hotfix (KB911280 ) is the problem...

Does anyone have the same porblem?

Anyone knows how to contact Microsoft Tech Support to inform about this
situation and the solution?

I need to inform my users to disable Update from Microsoft
automatically and after that, remove the patch!!

Roberto

> Yesterday (tuesday 13th), many users "religously" updated their Win XP
> SP2 and unfortunately their PPP conexion using terminal after dial does
> not work!!
>
> We are ISP for 100 users that connect using PPP typing their Username
> in the "After Dial Terminal" window.
>
> If the PC is updated with the patches from Tuesday 13th (bad day!),
> specially the KB911280 (Microsoft Security Bulletin MS06-025) the After
> Terminal Dial kept "blocked" ans it is impossible to wite anything!
>
> After tests, I found that the hotfix (KB911280 ) is the problem...
>
> Does anyone have the same porblem?

Roberto,

Yes. See my post, "KB911280 update problem" posted earlier. No resolution
has been posted as yet. All I can suggest for now is to uninstall KB911280
from those computers, if you haven't already.

Are you running a logon script in the Network Connection? I have the
terminal window up when I log on, and in my case, I can *see* it's failing at
the logon script (for Compuserve).

If this appears to be a logon script problem, try checking the
"C:\WINDOWS\system32\ras\" folder for a "script.log" file. If there is one,
note the file date, open it in a text editor, and have a look at it. Then
perhaps, too, report any relevant entries you find there?

MzM

wrote:

> If the PC is updated with the patches from Tuesday 13th (bad day!),
> specially the KB911280 (Microsoft Security Bulletin MS06-025) the
> After Terminal Dial kept "blocked" ans it is impossible to wite
> anything!
>
> After tests, I found that the hotfix (KB911280 ) is the problem...

Call Microsoft for free support, (1-(866) PC-SAFETY if you are in USA), and
reference case number SOX060615700008.

--
Robin Walker [MVP Networking]

Hi Robin,

> Call Microsoft for free support, (1-(866) PC-SAFETY if you are in USA), and
> reference case number SOX060615700008.

Did that. Bad case number, won't come up. Tried using a zero for the "o"
in SOX, still no go.

Of course, I provide my personal info first (name, phone, etc), give the
case number, then to details (when case number not found), then told to call
support and/or go to KB911280's details page, use that, and/or provide
"feedback" there.

In other words, I just got the runaround.

Can you double-check that number and confirm?

(....while I'm perfectly happy not installing KB911280 myself, I realize
this issue may very well be larger than it appears, and yet one of those you
won't hear too much about here... exactly because affected users can't get
online to ask for help, get info, etc. I pity those who will not be able to
figure out that it's even KB911280 doing it...)

Thanks for your help, Robin. I would like to get a good number just to see
what they have to say, eh.

MzM

"MzM" <> schrieb:

>> Call Microsoft for free support, (1-(866) PC-SAFETY if you are in USA), and
>> reference case number SOX060615700008.
>
> Did that. Bad case number, won't come up. Tried using a zero for the "o"
> in SOX, still no go.
>
> Of course, I provide my personal info first (name, phone, etc), give the
> case number, then to details (when case number not found), then told to call
> support and/or go to KB911280's details page, use that, and/or provide
> "feedback" there.
>
> In other words, I just got the runaround.
>
> Can you double-check that number and confirm?

Well, I think Robin got the number from
http://isc.sans.org/diary.php?storyid=1419

Maybe you could point the support personal to that site.

Bye,
Freudi

MzM <> wrote:

>> Call Microsoft for free support, (1-(866) PC-SAFETY if you are in
>> USA), and reference case number SOX060615700008.
>
> Did that. Bad case number, won't come up. Tried using a zero for
> the "o" in SOX, still no go.

See http://isc.sans.org/diary.php?storyid=1419

--
Robin Walker [MVP Networking]

Robin Walker [MVP] <> wrote:
> wrote:
>
>> If the PC is updated with the patches from Tuesday 13th (bad day!),
>> specially the KB911280 (Microsoft Security Bulletin MS06-025) the
>> After Terminal Dial kept "blocked" ans it is impossible to wite
>> anything!
>>
>> After tests, I found that the hotfix (KB911280 ) is the problem...
>
> Call Microsoft for free support, (1-(866) PC-SAFETY if you are in
> USA), and ...

Please see http://isc.sans.org/diary.php?storyid=1419

The recommendation has changed.

--
Robin Walker [MVP Networking]

MzM <> wrote:

>> Call Microsoft for free support, (1-(866) PC-SAFETY if you are in
>> USA), and reference case number SOX060615700008.
>
> Did that. Bad case number, won't come up. Tried using a zero for
> the "o" in SOX, still no go.

Please see http://isc.sans.org/diary.php?storyid=1419 again.

The recommendation has changed.

--
Robin Walker [MVP Networking]

Ottmar Freudenberger <> wrote:

> there's an new article in the MSRC blog announcing the
> according MSKB article http://support.microsoft.com/kb/911280/en-us
> to be updated soon reflecting these issues with KB911820 (MS06-025):
> http://blogs.technet.com/msrc/archiv...17/436882.aspx

Has 911280 been pulled? Two of my PCs (which were a bit late being allowed
to automatically pull the June updates) do not list 911280 amongst the
updates. Ten other updates are listed normally.

--
Robin Walker [MVP Networking]

"Robin Walker [MVP]" <> schrieb:

> Has 911280 been pulled? Two of my PCs (which were a bit late being allowed
> to automatically pull the June updates) do not list 911280 amongst the
> updates. Ten other updates are listed normally.

KB911280 is still offered via Windows/Microsoft/Auto Update here, at
least for the German versions. Uninstalled KB911280, rebooted system,
visited Windows/Microsoft Update and KB911280 is offered again for
download as an Critical Update.

So, no, KB911280 (v1) hasn't been pulled (yet?).

Bye,
Freudi