Problem with KB908531 - MS06-015: Vulnerability in Windows Explore

After downloading and installing (KB908531) from Windows Update I am
experiencing various problems depending on OS.

1) On Windows 2000 Server SP4 Windows Explorer hangs when I click on My
Computer in the folders list (left pane). verclsid.exe launches as a service
(viewable in Windows Task Manager) when Windows Explorer is launched. If I
try to close Windows Explorer the instance will not close.

If I try to launch Internet Explorer (6.0.2800.1106) and type in an address
in to the address bar (such as www.google.com to search for verclsid.exe) the
brower hangs.

If I manually end the verclsid.exe process Windows Explorer will then close
properly. Also, I can then browse normally with Internet Explorer.

I have noticed similar "hanging" on some Windows XP SP2 systems. I have
also noticed that on the Windows XP systems that a directory
C:\WINDOWS\Prefetch is created by virtue of the KB908531 security patch. It
apparently takes some time to generate upon launching Windows Explorer (at
least for the first time).

On the Windows 2000 Server machine the Prefetch directory is NEVER BUILT.
The default directory for Windows is C:\WINNT not C:\WINDOWS. I'm wondering
if this is not a BUG in the KB908531 code for Windows 2000 Server.

It appears that the Prefetch directory is built with a listing of legitimate
executable files. Since the Prefetch directory is not built under Windows
2000 then Windows Explorer, etc. seem to hang, and multiple instances of
verclsid.exe are launched. If I manually kill the verclsid.exe processes in
Windows Task Manager then Windows Explorer and Internet Explorer function
properly (although I assume that I am then no longer protected by the
KB908531 Security Patch).

Is anyone else experiencing this problem?

How should I go about reporting the BUG to Microsoft without having to pay
$$$?

Thanks in advance for your help.

"vdm20" wrote:

> After downloading and installing (KB908531) from Windows Update I am
> experiencing various problems depending on OS.
>
> 1) On Windows 2000 Server SP4 Windows Explorer hangs when I click on My
> Computer in the folders list (left pane). verclsid.exe launches as a service
> (viewable in Windows Task Manager) when Windows Explorer is launched. If I
> try to close Windows Explorer the instance will not close.
>
> If I try to launch Internet Explorer (6.0.2800.1106) and type in an address
> in to the address bar (such as www.google.com to search for verclsid.exe) the
> brower hangs.
>
> If I manually end the verclsid.exe process Windows Explorer will then close
> properly. Also, I can then browse normally with Internet Explorer.
>
> I have noticed similar "hanging" on some Windows XP SP2 systems. I have
> also noticed that on the Windows XP systems that a directory
> C:\WINDOWS\Prefetch is created by virtue of the KB908531 security patch. It
> apparently takes some time to generate upon launching Windows Explorer (at
> least for the first time).
>
> On the Windows 2000 Server machine the Prefetch directory is NEVER BUILT.
> The default directory for Windows is C:\WINNT not C:\WINDOWS. I'm wondering
> if this is not a BUG in the KB908531 code for Windows 2000 Server.
>
> It appears that the Prefetch directory is built with a listing of legitimate
> executable files. Since the Prefetch directory is not built under Windows
> 2000 then Windows Explorer, etc. seem to hang, and multiple instances of
> verclsid.exe are launched. If I manually kill the verclsid.exe processes in
> Windows Task Manager then Windows Explorer and Internet Explorer function
> properly (although I assume that I am then no longer protected by the
> KB908531 Security Patch).
>
> Is anyone else experiencing this problem?
>
> How should I go about reporting the BUG to Microsoft without having to pay
> $$$?
>
> Thanks in advance for your help.



I think by now that they are probably aware of this!!

You are most definitely not alone.
I have had to use system restore on 2 machines after installing this update,
I have now re-downloaded and instaalled the updates MINUS KB908531.
My machines now appear to be working as before,hopefully Microsoft will
withdraw KB 908531 and replace it with something that works.

Getting same hang up on the address bar. All links and fav's work but if
the addy is typed in it just sits there. Have also noticed that it will
highlite the typed in addy like it's going to be cut/paste.

I have Windows XP Media Edition 2002 SP2. After Installing KB908531, when
running search from Start menu, any attempt to browse from the Look in
folders field results in the program hanging. Likewise, any help would be
appreciated.
_______________________________


> Is anyone else experiencing this problem?

I've spent a while getting to the cause of my new display problem with the
folders pane of my Explorer window on Windows 2000 SP4 system. The culprit -
908531 which I removed and all is well. I also had to remove 912812 which
appeared to rely on 908531.

So how do you tell Microsoft that a a security patch is flawed? I can't
find a way to get feedback to them. When do we know the patch is fixed?
Does the KB number change?

I have a new attitude about quickly installing patches with Windows Update.
--
Al Fikes


"Adrian UK" wrote:

>
>
> "vdm20" wrote:
>
> > After downloading and installing (KB908531) from Windows Update I am
> > experiencing various problems depending on OS.
> >
> > 1) On Windows 2000 Server SP4 Windows Explorer hangs when I click on My
> > Computer in the folders list (left pane). verclsid.exe launches as a service
> > (viewable in Windows Task Manager) when Windows Explorer is launched. If I
> > try to close Windows Explorer the instance will not close.
> >
> > If I try to launch Internet Explorer (6.0.2800.1106) and type in an address
> > in to the address bar (such as www.google.com to search for verclsid.exe) the
> > brower hangs.
> >
> > If I manually end the verclsid.exe process Windows Explorer will then close
> > properly. Also, I can then browse normally with Internet Explorer.
> >
> > I have noticed similar "hanging" on some Windows XP SP2 systems. I have
> > also noticed that on the Windows XP systems that a directory
> > C:\WINDOWS\Prefetch is created by virtue of the KB908531 security patch. It
> > apparently takes some time to generate upon launching Windows Explorer (at
> > least for the first time).
> >
> > On the Windows 2000 Server machine the Prefetch directory is NEVER BUILT.
> > The default directory for Windows is C:\WINNT not C:\WINDOWS. I'm wondering
> > if this is not a BUG in the KB908531 code for Windows 2000 Server.
> >
> > It appears that the Prefetch directory is built with a listing of legitimate
> > executable files. Since the Prefetch directory is not built under Windows
> > 2000 then Windows Explorer, etc. seem to hang, and multiple instances of
> > verclsid.exe are launched. If I manually kill the verclsid.exe processes in
> > Windows Task Manager then Windows Explorer and Internet Explorer function
> > properly (although I assume that I am then no longer protected by the
> > KB908531 Security Patch).
> >
> > Is anyone else experiencing this problem?
> >
> > How should I go about reporting the BUG to Microsoft without having to pay
> > $$$?
> >
> > Thanks in advance for your help.
>
>
>
> I think by now that they are probably aware of this!!
>
> You are most definitely not alone.
> I have had to use system restore on 2 machines after installing this update,
> I have now re-downloaded and instaalled the updates MINUS KB908531.
> My machines now appear to be working as before,hopefully Microsoft will
> withdraw KB 908531 and replace it with something that works.

"Al Fikes" <> schrieb:

> I've spent a while getting to the cause of my new display problem with the
> folders pane of my Explorer window on Windows 2000 SP4 system. The culprit -
> 908531 which I removed and all is well. I also had to remove 912812 which
> appeared to rely on 908531.

Nope, KB912812 does *not* rely on KB908531. Please reinstall at least
KB908531. Otherwise your system is like an open door to "hackers" out
there from the Internet!

Could you please confirm, that you have a HP Scanner connected to
your machine and the HP Scanner software installed?

Bye,
Freudi

I spent two hours on the telephone to Microsoft support yesterday -
after unistalling and reinstalling Office they discovered that many
other incoming support calls were about the same problem and figured
out that it was KB908531 that was causing the problem. Removing this
update fixed it. Microsoft said they will let me know by e-mail when a
new update is available.

so microsoft come out a newer update to replace this one? please update us
when you get the email. thanks!

Howard

"Rob" wrote:

> I spent two hours on the telephone to Microsoft support yesterday -
> after unistalling and reinstalling Office they discovered that many
> other incoming support calls were about the same problem and figured
> out that it was KB908531 that was causing the problem. Removing this
> update fixed it. Microsoft said they will let me know by e-mail when a
> new update is available.
>
>

I've got the same problem as "vdm20" pretty much exactly. Uninstalled
KB908531 and problem is temporarily solved until Server Update Services tells
the PC to install the patch. This I can patch via GP.

I'm curious, though, about the question regarding the HP scanner. This
machine DOES have a USB HP scanner and HP scanning software installed.

"Ottmar Freudenberger" wrote:

> "Al Fikes" <> schrieb:
>
> > I've spent a while getting to the cause of my new display problem with the
> > folders pane of my Explorer window on Windows 2000 SP4 system. The culprit -
> > 908531 which I removed and all is well. I also had to remove 912812 which
> > appeared to rely on 908531.
>
> Nope, KB912812 does *not* rely on KB908531. Please reinstall at least
> KB908531. Otherwise your system is like an open door to "hackers" out
> there from the Internet!
>
> Could you please confirm, that you have a HP Scanner connected to
> your machine and the HP Scanner software installed?
>
> Bye,
> Freudi
>

Having updated yesterday I experienced all sorts of problems with both
Microsoft Excel and Word. I contacted Microsoft and was told "we know there
is a problem with KB90831 and suggest you remove the update (done via
add/remove programs) and don't update again until they have posted a new
patch to fix the problem" - how long we have to wait is anybodies guess

"Al Fikes" wrote:

> I've spent a while getting to the cause of my new display problem with the
> folders pane of my Explorer window on Windows 2000 SP4 system. The culprit -
> 908531 which I removed and all is well. I also had to remove 912812 which
> appeared to rely on 908531.
>
> So how do you tell Microsoft that a a security patch is flawed? I can't
> find a way to get feedback to them. When do we know the patch is fixed?
> Does the KB number change?
>
> I have a new attitude about quickly installing patches with Windows Update.
> --
> Al Fikes
>
>
> "Adrian UK" wrote:
>
> >
> >
> > "vdm20" wrote:
> >
> > > After downloading and installing (KB908531) from Windows Update I am
> > > experiencing various problems depending on OS.
> > >
> > > 1) On Windows 2000 Server SP4 Windows Explorer hangs when I click on My
> > > Computer in the folders list (left pane). verclsid.exe launches as a service
> > > (viewable in Windows Task Manager) when Windows Explorer is launched. If I
> > > try to close Windows Explorer the instance will not close.
> > >
> > > If I try to launch Internet Explorer (6.0.2800.1106) and type in an address
> > > in to the address bar (such as www.google.com to search for verclsid.exe) the
> > > brower hangs.
> > >
> > > If I manually end the verclsid.exe process Windows Explorer will then close
> > > properly. Also, I can then browse normally with Internet Explorer.
> > >
> > > I have noticed similar "hanging" on some Windows XP SP2 systems. I have
> > > also noticed that on the Windows XP systems that a directory
> > > C:\WINDOWS\Prefetch is created by virtue of the KB908531 security patch. It
> > > apparently takes some time to generate upon launching Windows Explorer (at
> > > least for the first time).
> > >
> > > On the Windows 2000 Server machine the Prefetch directory is NEVER BUILT.
> > > The default directory for Windows is C:\WINNT not C:\WINDOWS. I'm wondering
> > > if this is not a BUG in the KB908531 code for Windows 2000 Server.
> > >
> > > It appears that the Prefetch directory is built with a listing of legitimate
> > > executable files. Since the Prefetch directory is not built under Windows
> > > 2000 then Windows Explorer, etc. seem to hang, and multiple instances of
> > > verclsid.exe are launched. If I manually kill the verclsid.exe processes in
> > > Windows Task Manager then Windows Explorer and Internet Explorer function
> > > properly (although I assume that I am then no longer protected by the
> > > KB908531 Security Patch).
> > >
> > > Is anyone else experiencing this problem?
> > >
> > > How should I go about reporting the BUG to Microsoft without having to pay
> > > $$$?
> > >
> > > Thanks in advance for your help.
> >
> >
> >
> > I think by now that they are probably aware of this!!
> >
> > You are most definitely not alone.
> > I have had to use system restore on 2 machines after installing this update,
> > I have now re-downloaded and instaalled the updates MINUS KB908531.
> > My machines now appear to be working as before,hopefully Microsoft will
> > withdraw KB 908531 and replace it with something that works.