Issues with Microsoft Security Updates

Geekgirl · 01-05-2006, 07:27 PM

Microsoft became aware of attacks on some customers involving a security
vulnerability in the Windows Meta File (WMF) code area in the Windows
platform. Windows Meta Files are image files used by popular applications
such as Microsoft Word.

Exploits have typically been used to install spyware and adware, although
the threat of virus and worm exploits exists. Users can be infected simply
by visiting a web site with an image file containing the WMF exploit.

Microsoft is urging customers to be cautious when opening e-mail and links
in e-mail from untrusted sources. They further encouraged customers to keep
anti-virus software up-to-date.

1/5/06
Microsoft has released a patch for the Windows WMF flaw today in response to consumer inquiries. Earlier reports suggest Microsoft was not releasing this patch until the 10th.

Windows Meta File (WMF) vulnerability patch for Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2

These following software updates can be found HERE for the following O.S

Microsoft Windows 2000 Service Pack 4

Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2

Microsoft Windows XP Professional x64 Edition

Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1

Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems

Microsoft Windows Server 2003 x64 Edition

Geekgirl · 07-30-2006, 07:43 PM

If your trying to update Windows and the WGA update keeps failing with the error 0x80070005, here's something to try. This came straight from Microsoft and can only be used on a system that is experiencing the error 0x80070005.

Quote:

This kind of behavior may occur if one of the following factors is true:

1. Invalid file permission.
2. Invalid registry permission.

I suggest we perform the following steps to troubleshoot this issue:

Reset permissions
========================
This step will reset the permission settings on this system, which may take us some time. Your patience is highly appreciated.

Step 1: Download SubInACL (SubInACL.exe)

-----------------------------------------

1. Please download the subinacl.msi from the following link and save the installation patch on the Desktop:

http://www.microsoft.com/downloads/d...inityDownloads

2. Please go to the Desktop and double click the downloaded file to install it.

3. Please select the C:\Windows\System32 as the Destination Folder during the Installation. Later we will use this tool to reset the permission setting on the current Machine.

Step 2:

-------

1. Click Start, Run, type: notepad C:\reset.cmd and press Enter. Choose Yes when you are prompted.

2. Copy the following commands and then paste them into the opened Notepad window:

@echo off

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f

subinacl /subdirectories %SystemDrive% /grant=administrators=f

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=systems=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=system=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=system=f

subinacl /subdirectories %SystemDrive% /grant=system=f

@Echo =========================

@Echo Finished.

@Echo =========================

@pause

3. After you paste the above commands, please close the Notepad window. Choose Yes when you are prompted to save the file.

4. Click Start, Run, type: C:\reset.cmd and press Enter to run the commands we have pasted.

5. You will see a DOS-like window processing.

(NOTE: It may take several minutes, please be patient. When it is finished, you will be prompted with "Finished, press any key to continue")

After completing the above steps, please go to the Windows Update site to check whether the issue is resolved now.

Geekgirl · 04-04-2007, 01:43 PM

SYMPTOMS
When you start a computer that is running Microsoft Windows XP with Service Pack 2, the Realtek HD Audio Control Panel may not start. Additionally, you may receive the following error message:

Quote:

Rthdcpl.exe - Illegal System DLL Relocation

The system DLL user32.dll was relocated in memory. The application will not run properly. The relocation occurred because the DLL C:\Windows\System32\Hhctrl.ocx occupied an address range reserved for Windows system DLLs. The vendor supplying the DLL should be contacted for a new DLL.

CAUSE
This problem occurs when the Realtek HD Audio Control Panel (Rthdcpl.exe) by Realtek Semiconductor Corporation is installed.

RESOLUTION
Download information
The following file is available for download from the Microsoft Download Center:

Download the 935448 package now

April 3, 2007
http://support.microsoft.com/kb/935448

Geekgirl · 04-12-2007, 07:01 AM

Symptom

When you start your computer you recieve the following error message:

Quote:

svchost.exe -- application error the instruction at "0x745f2780" reference memory at "0x00000000". the memory could not be 'read'

Looking into the event log yielded the following:

Faulting application svchost.exe, version 5.1.2600.2180, faulting module msi.dll, version 3.1.4000.2435, fault address 0x00012780.

The problem wasn't so much this error message, but the fact then when the dialog with the error was closed, the machine became unusable (no new executables would start). If I left the dialog open, I could use my machine "normally", but it would hang on shutdown.

Something with Windows Update broke something with the Windows Installer. Reinstalling Windows Installer 3.1 didn't solve the problem, but the follow spelunked from Google:

Perform these steps leaving the svchost crash dialog open.

1. Click Start->Run, type "services.msc" (without quotation marks) in the open box and click OK.
2. Double click the service "Automatic Updates".
3. Click on the Log On tab, please ensure the option "Local System account" is selected and the option "Allow service to interact with desktop" is unchecked.

4. Check if this service has been enabled on the listed Hardware Profile. If not, please click the Enable button to enable it.
5. Click on the tab "General "; make sure the "Startup Type" is "Automatic". Then please click the button "Start" under "Service Status" to start the service.
6. Repeat the above steps with the other service: Background Intelligent Transfer Service (BITS)

Step 4: Re-register Windows Update components and Clear the corrupted Windows Update temp folder
================================

1. Click on Start and then click Run,
2. In the open field type "REGSVR32 WUAPI.DLL" (without quotation marks) and press Enter.
3. When you receive the "DllRegisterServer in WUAPI.DLL succeeded" message, click OK.
4. Please repeat these steps for each of the following commands:

REGSVR32 WUAUENG.DLL
REGSVR32 WUAUENG1.DLL
REGSVR32 ATL.DLL
REGSVR32 WUCLTUI.DLL
REGSVR32 WUPS.DLL
REGSVR32 WUPS2.DLL
REGSVR32 WUWEB.DLL

After the above steps are finished. Sicne temporary folder of Windows Update may be corrupted. We can refer to the following steps to rename this folder that

1. Click Start, Run, type: cmd and press Enter. Please run the following command in the opened window.

net stop WuAuServ

(note, you might need to reboot before the net stop command will work)

2. Click Start, Run, type: %windir% and press Enter.
3. In the opened folder, rename the folder SoftwareDistribution to SDold.
4. Click Start, Run, type: cmd and press Enter. Please run the following command in the opened window.

net start WuAuServ

Another easier fix for this problem:

1.Go 2 the start menu
2.Right click "my computer"
3.Click "properties" then the "automatic updates"
tab
4.Choose "turn off automatic updates"
5.Reboot your computer
6.Go back to start menu and in all programs go to "windows update" you have to be connected to the internet.
7.Manually update windows.
8.Turn your automatic updates back on.

http://swigartconsulting.blogs.com/t...s_update_.html

Geekgirl · 06-29-2007, 11:09 AM

Quote:

The "File Download – Security Warning" dialog box opens when you try to open Internet Explorer 7

SYMPTOMS
You install the May 2007 Cumulative Security Update for Internet Explorer (MS07-027), and then you try to open Windows Internet Explorer 7. After you do this, the File Download – Security Warning dialog box may open, and you may receive the following message:
Do you want to save this file?
The File Download – Security Warning dialog box also refers to the "navcancl" file name. After you close this dialog box, you cannot start Internet Explorer 7.

CAUSE
This problem may occur on a Windows Vista-based computer if the following conditions are true:
• The "Temporary Internet Files" folder is moved to a location outside the User folder hierarchy. For example, the "Temporary Internet Files" folder is moved to another volume.
• The Phishing Filter is enabled.
• Protected mode is enabled.
In this case, the "Temporary Internet Files" folder has insufficient permissions in its new location. Therefore, the Phishing Filter cannot start. When this problem occurs, Internet Explorer 7 cannot start, and the File Download – Security Warning dialog box opens.

This problem may also occur on a Microsoft Windows XP Service Pack 2 (SP2)-based computer or on a Microsoft Windows Server 2003-based computer if one of the following conditions is true:
• The folder that contains the "Temporary Internet Files" folder has been deleted.
• The permissions for the "Temporary Internet Files" folder have been changed.
In this case, you cannot write to the folder.

WORKAROUND

Method 1: Move the "Temporary Internet Files" folder back to its original location
To complete Method 1 on a Windows Vista-based computer, follow these steps:
1. Click Start Start button, type Internet Options in the Start Search box, and then click Internet Options in the Programs list.
2. On the General tab, click Settings in the Browsing History area.
3. Click Move Folder.
4. In the Please select a folder to which you can add items navigation pane, locate the following folder:
C:\Users\User_Account_Name\AppData\Local\Microsoft\Windows
5. Click OK two times.
6. When you are receive the following message, click Yes:
Windows will now log you off to finish moving Temporary Internet Files. Do you want to continue?
7. Log on to Windows Vista again.
To complete Method 1 on a Windows XP-based computer or on a Windows Server 2003-based computer, follow these steps:
1. Click Start, click Run, type inetcpl.cpl, and then click OK.
2. On the General tab, click Settings in the Browsing History area.
3. Click Move Folder.
4. In the Please select a folder to which you can add items navigation pane, locate the following folder:
C:\Documents and Settings\username\Local Settings
5. Click OK, click Apply, and then click OK.

Method 2: Grant permissions to the "Temporary Internet Files" folder
To complete Method 2 on a Windows Vista-based computer, follow these steps:
1. Click Start Start button, type Internet Options in the Start Search box, and then click Internet Options in the Programs list.
2. On the General tab, click Settings in the Browsing History area.
3. Click View Files. The "Temporary Internet Files" folder opens.
4. In the Windows Explorer address box, click the folder name that comes before Temporary Internet Files.
5. Click Organize, and then click Properties.
6. On the Security tab, click Edit.
7. In the Group or user names box, click the name of the affected user. If the name of the affected user is not listed, follow these steps:
a. Click Add.
b. In the Enter the object names to select box, type the name of the affected user, and then click OK.
c. In the Group or user names box, click the name of the affected user.
8. In the Permissions for User_Name box, click to select the Full Control check box under the Allow column.
9. Click Apply, and then click OK.
10. Close Windows Explorer.
11. Click OK two times.
12. Start Internet Explorer 7.
To complete Method 2 on a Windows XP-based computer or on a Windows Server 2003-based computer, follow these steps:
1. Click Start, click Run, type inetcpl.cpl, and then click OK.
2. On the General tab, click Settings in the Browsing History area.
3. Click View Files.
4. In Windows Explorer, move to the folder that contains the "Temporary Internet Files" folder.
5. In the right-pane, right-click an empty area, and then click Properties.
6. On the Security tab, click the name of the affected user in the Group or user names box. If the name of the affected user is not listed, follow these steps:
a. Click Add.
b. In the Enter the object names to select box, type the name of the affected user, and then click OK.
c. In the Group or user names box, click the name of the affected user.
7. In the Permissions for User_Name box, click to select the Full Control check box under the Allow column.
8. Click Apply, and then click OK.
9. Close Windows Explorer.
10. Click OK two times.
11. Start Internet Explorer 7.

APPLIES TO
• Windows Internet Explorer 7, when used with:
Windows Vista Enterprise 64-bit Edition
Windows Vista Home Basic 64-bit Edition
Windows Vista Home Premium 64-bit Edition
Windows Vista Ultimate 64-bit Edition
Windows Vista Business
Windows Vista Business N 64-bit Edition
Windows Vista Enterprise
Windows Vista Home Basic
Windows Vista Home Premium
Windows Vista Starter
Windows Vista Ultimate
• Windows Internet Explorer 7 for Windows Server 2003 IA64
• Windows Internet Explorer 7 for Windows XP
• Windows Internet Explorer 7 for Windows Server 2003

http://support.microsoft.com/kb/937409

01-05-2006, 07:27 PM	#1 (permalink)
Geekgirl Manager, Microsoft Support Join Date: Jan 2005 Location: Pennsylvania Posts: 11,971 OS: 98SE/WinXP Home/WinXP Pro Blog Entries: 1	Security Update Alert Microsoft became aware of attacks on some customers involving a security vulnerability in the Windows Meta File (WMF) code area in the Windows platform. Windows Meta Files are image files used by popular applications such as Microsoft Word. Exploits have typically been used to install spyware and adware, although the threat of virus and worm exploits exists. Users can be infected simply by visiting a web site with an image file containing the WMF exploit. Microsoft is urging customers to be cautious when opening e-mail and links in e-mail from untrusted sources. They further encouraged customers to keep anti-virus software up-to-date. 1/5/06 Microsoft has released a patch for the Windows WMF flaw today in response to consumer inquiries. Earlier reports suggest Microsoft was not releasing this patch until the 10th. Windows Meta File (WMF) vulnerability patch for Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2 These following software updates can be found HERE for the following O.S Microsoft Windows 2000 Service Pack 4 Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems Microsoft Windows Server 2003 x64 Edition __________________ Compare NOD32 to your current antivirus and anti-spyware solution, HERE How to back up and restore the registry in Windows XP and Windows Vista How to back up and restore the registry in Windows 98/ ME / NT 4.0 / 2000 I DO NOT ACCEPT EMAILS AND WILL NOT REPLY TO THEM !!!!! I Have Been Smoke-Free For 10 Months, you can quit too R.I.P. KITTY