Startmenuproblems with Microsoft Security Bulletin MS07-006 (92825

Hey there,
after Installing the Feb Updates i noticed 2 errors.
1) problems with systemrestore (descirebed it in the post "Disappearing
files after Feb '07 Updates", too). so i could not start the systemrestore
any more.
Only way out was to reinstall "sr.inf" in safe mode. (Found that information
in an old KB article for SP1a)

and another big poblem:
2) by clicking on "START" and moving the mouse to "Programs" the explorer
crashes.
I got following EventLog: (sorry, I´m german)
===
Ereignistyp: Informationen
Ereignisquelle: Winlogon
Ereigniskategorie: Keine
Ereigniskennung: 1002
Datum: 16.02.2007
Zeit: 00:07:49
Benutzer: Nicht zutreffend
Computer: ***
Beschreibung:
Die Shell wurde unerwartet beendet und Explorer.exe wurde neu gestartet.
===
After that i switched on the ErrorNotification to MS. and recieved more
"red"errors:
===
Ereignistyp: Fehler
Ereignisquelle: Application Error
Ereigniskategorie: Keine
Ereigniskennung: 1000
Datum: 16.02.2007
Zeit: 00:07:43
Benutzer: Nicht zutreffend
Computer: ***
Beschreibung:
Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.2180,
fehlgeschlagenes Modul unknown, Version 0.0.0.0, Fehleradresse 0x00e0fa8e.

Daten:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 32 31 38 30 20 00.2180
0030: 69 6e 20 75 6e 6b 6e 6f in unkno
0038: 77 6e 20 30 2e 30 2e 30 wn 0.0.0
0040: 2e 30 20 61 74 20 6f 66 .0 at of
0048: 66 73 65 74 20 30 30 65 fset 00e
0050: 30 66 61 38 65 0d 0a 0fa8e..
===
and
===
Ereignistyp: Fehler
Ereignisquelle: Application Error
Ereigniskategorie: Keine
Ereigniskennung: 1001
Datum: 16.02.2007
Zeit: 00:07:47
Benutzer: Nicht zutreffend
Computer: ***
Beschreibung:
Fehlerhafter Speicherbereich 381608238.

Daten:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 33 38 31 36 30 38 32 33 38160823
0010: 38 0d 0a 8..
===

By uninstall each update, on after another and choosing the last one at
first, I found out that the problem dissapears when uninstalling this update:
Microsoft Security Bulletin MS07-006
Vulnerability in Windows Shell Could Allow Elevation of Privilege (928255)
Published: February 13, 2007 | Updated: February 15, 2007
http://www.microsoft.com/technet/sec.../ms07-006.mspx
As I can see now, an update was made in the last hour...

Does anybody else have similar problems?

greets C2K

"C2K" <> wrote in message
news:F2FA797D-E4D8-4943-954D-...
> Hey there,
> after Installing the Feb Updates i noticed 2 errors.

....
> and another big poblem:
> 2) by clicking on "START" and moving the mouse to "Programs" the explorer
> crashes.
> I got following EventLog: (sorry, I´m german)

....
> Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.2180,
> fehlgeschlagenes Modul unknown, Version 0.0.0.0, Fehleradresse 0x00e0fa8e.


Crashes in module unknown are often due to third-party interference.
Have you tried doing clean-boot troubleshooting *other than* assuming
that the updates were the cause of the problem?

To get better clues about your crash you need to see the call stack
of the crashing thread. A conventional way to get that is from the
associated drwtsn32.log snapdump. E.g. (in an English dump)
find the string FAULT -> prefixing the crash address and then
page ahead to the section titled Stack Back Trace. Both strings
will undoubtedly have a localized equivalent in your German version.

A new alternative which is only useful for recreatable problems
is to Run... ProcMon and open the entry it can capture for the crash
event. Note: ProcMon is now being distributed by TechNet.

You can enhance the value of either trace by enabling symbols.
Hints for that are available from the ProcMon help and the SysInternals
ProcExp forum.


Good luck

Robert Aldwinckle
---