**UPDATE** MS06-015/kb908531 Breaks IE, Office, Explorer

I spent 2 hours on the phone with Microsoft this morning concerning this issue. We have many machines on our campus that are being affected by this patch and I decided it was time to get to the root of the problem. Some machines have the patch installed and are experiencing no problems, while others can barely function. It appears this problem is caused by installing this patch on systems with Hewlett Packard’s Share-to-Web software, nVidia shell extension GUID’s, Kerio Personal Firewall, Roxio DragToDisc / Adaptec DirectCD shell extension, or SolidWorkds 3D CAD products shell extension. In addition to this information, the engineer I spoke with was nice enough to email me the current registry workarounds for each problem. I asked him for a URL to this information and he said he didn’t have one because they were working on a hotfix and had not posted this on the web. So I am. Here’s the workaround information provided to me to help resolve this issue:

—————————————————————————————————————————-

Resolution 1. HEWLETT-PACKARD’s Share-to-Web software
1. The Shell fix includes a white list – VERCLSID.EXE will not scan any extension that appears on this list, so adding the HP shell extension fixes the problem.

The following REG file can be applied to problem systems and will correct the problem permanently:

To manually enter the registry entries on a problem machine:

a. Log on to the machine with an account with administrator privileges
b. Goto Start ->Run
c. Type Regedit and press enter.
d. Navigate to
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
e. Right Click and Select New -> DWORD Value with and enter the following:

For Windows 2000, enter the following…
{A4DF5659-0801-4A60-9607-1C48695EFDA9} {000214E6-0000-0000-C000-000000000046}

For Windows XP or 2003, enter the following…
{A4DF5659-0801-4A60-9607-1C48695EFDA9} {000214E6-0000-0000-C000-000000000046} 0×401

f. Set the Data of this value to 1
g. Close the Registry editor
h. Reboot the computer

Resolution 2. nVidia shell extension GUIDs

The following REG file can be applied to problem systems and will correct the problem permanently:

To manually enter the registry entries on a problem machine:

a. Log on to the machine with an account with administrator privileges
b. Goto Start ->Run
c. Type Regedit and press enter.
d. Navigate to
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
e. Right Click and Select New -> DWORD Value with and enter the following:

For Windows 2000, enter the following…

{1e9b04fb-f9e5-4718-997b-b8da88302a47} {000214e8-0000-0000-c000-000000000046}
{1e9b04fb-f9e5-4718-997b-b8da88302a48} {000214e8-0000-0000-c000-000000000046}
{1cdb2949-8f65-4355-8456-263e7c208a5d} {000214e6-0000-0000-c000-000000000046}

For Windows XP or 2003 enter the following…

{1e9b04fb-f9e5-4718-997b-b8da88302a47} {000214e8-0000-0000-c000-000000000046} 0×401
{1e9b04fb-f9e5-4718-997b-b8da88302a48} {000214e8-0000-0000-c000-000000000046} 0×401
{1cdb2949-8f65-4355-8456-263e7c208a5d} {000214e6-0000-0000-c000-000000000046} 0×401


f. Set the Data of each of these values to 1
g. Close the Registry editor
h. Reboot the computer

Resolution 3. VERCLSID.EXE process flagged by Sunbelt Kerio Personal Firewall
Note: There has been only one known report of this issue.
Kerio Personal Firewall Users can configure Kerio to allow VERCLSID.EXE to execute without prompting

The App Compat team is currently working with Kerio to request that they not flag VERCLSID.EXE.

========================================================
Other problem GUIDs recently found:
========================================================

Roxio DragToDisc / Adaptec DirectCD Shell Extension
Windows XP / 2003
{5e44e225-a408-11cf-b581-008029601108} {000214e8-0000-0000-c000-000000000046} 0×401
Windows 2000:
{5e44e225-a408-11cf-b581-008029601108} {000214e8-0000-0000-c000-000000000046}

SolidWorks 3D CAD products shell extension
Windows XP / 2003
{ee386d18-e6d7-407e-8d3c-47c05e602199} {0000010b-0000-0000-c000-000000000046} 0×401
Windows 2000:
{ee386d18-e6d7-407e-8d3c-47c05e602199} {0000010b-0000-0000-c000-000000000046}

—————————————————————————————————————————-

I was unable to find this information anywhere and thought it would be good to share. I’m sure other people are experiencing the same problems we are. Maybe this information will help to overcome the problems caused by 908531.

**I have made a patch for both 2000 and XP/2003 that will insert the registry values mentioned above.**
–For Windows 2000, go to http://claydawg.helpdesk.olemiss.edu/reg-fix-2k.zip
–For Windows XP/Server 2003, go to http://claydawg.helpdesk.olemiss.edu/reg-fix-xp.zip

  • Share/Bookmark
Posted on April 21, 2006 at 9:32 am by Clay · Permalink
In: general, windows, work

This website uses IntenseDebate comments, but they are not currently loaded because either your browser doesn't support JavaScript, or they didn't load fast enough.

15 Responses

Subscribe to comments via RSS

  1. Written by eagertile
    on May 3, 2010 at 8:21 am
    Permalink

    Интересно, но все равно остается вопрос . отобрать блекберри и айфоны) бы пересмотрел то,

  2. Written by Fuguntons
    on May 3, 2010 at 1:19 pm
    Permalink

    Здорово! Спасибо большое.. Это понятно кого заботят проблемы

  3. Written by Vesnarema
    on May 3, 2010 at 4:12 pm
    Permalink

    Уважаемый админ сайта: claydawg.helpdesk.olemiss.edu, хочу разместить у вас рекламу, свяжитесь пожалуйста со мной.

  4. Written by mendUndew
    on May 4, 2010 at 4:43 am
    Permalink

    Спасибо, но не хватает. что бесконечны Вы лукавите.

  5. Written by enverlitrex
    on May 4, 2010 at 9:27 am
    Permalink

    Спасибо! Было бы также интересно. но что делать Культ карго

  6. Written by DienBoniinavy
    on May 5, 2010 at 12:33 am
    Permalink

    Очень долго ломал голову . Все это прекрасно бы пересмотрел то,

  7. Written by IlleriSaura
    on May 6, 2010 at 2:38 am
    Permalink

    Супер полезно!. Я вот проще делал уже не видно грани

  8. Written by Annentnib
    on May 6, 2010 at 5:46 am
    Permalink

    Скоро ресурсы с посещалкой от тысчи уников в день должны будут обзавестись лицензией по типу сми. Ещё пара таких указов и в рунете останутся одни гс :(

  9. Written by incefmink
    on May 6, 2010 at 7:01 am
    Permalink

    я сам еще не разобрался. Ну на самом деле всё к лучшему

  10. Written by enritopeviera
    on May 6, 2010 at 1:35 pm
    Permalink

    Спасибо! Было бы также интересно. что бесконечны всё к лучшему

  11. Written by Diettypaype
    on May 6, 2010 at 11:56 pm
    Permalink

    Спасибо, но не хватает. митинг проводить стоя прошу прощения

  12. Written by Reaterwood
    on May 7, 2010 at 4:31 pm
    Permalink

    Спасибо за пост, не всё, но местами мне помогло.

  13. Written by Evemealiehilk
    on May 13, 2010 at 2:03 am
    Permalink

    может еще есть интересно посмотреть в единственном числе останется .

  14. Written by errodaroRib
    on May 14, 2010 at 6:10 am
    Permalink

    хотел сделать ошибаешься партен интересует .

  15. Written by alleloMeese
    on May 14, 2010 at 2:42 pm
    Permalink

    это первое, еще мне интересно что жалко пропадает штука чёрт подери.

Subscribe to comments via RSS