Bill said:
Thanks very much in advance for any help.
Running XP Pro SP2 and have an empty Device Manager, slow Windows
Explorer, popups in IE, and some USB devices unavailable.. After
several days of searching and trying multiple "solutions" (Enum
permissions, aprpos removal tool, etc), I've discovered that removing
KB905749 re-populates Device Manager. The problem is that I get all
kinds of error messages, mostly relating to not being able to enum
something and I have a dozen errors reported in Device Manager for
"Unknown Device" after removing the KB.
It very much seems like KB905749 is the source of my problem, but I
get worse problems when I uninstall it. Noone who reported curing the
above mentioned problems by removing the KB reported any issues at all
after uninstalling it.
Thanks again for any help.
I see that Michael T has given you a link for a fix I'm just here to say my
two cents worth and "maybe" give you some advice that will help in the
future, this advice is...
never install a hotfix that you do not need! each and every windows update
so called fix changes your operating system, some changes are good MOST are
not needed like KB905749 and when a person installs a unneeded hotfix $hit
can happen.
This is taken from the details page of this update.
Vulnerability Details
Plug and Play Vulnerability - CAN-2005-2120:
A remote code execution and local elevation of privilege vulnerability
exists in Plug and Play that could allow an authenticated attacker who
successfully exploited this vulnerability to take complete control of the
affected system.
Mitigating Factors for Plug and Play Vulnerability - CAN-2005-2120:
. On Windows XP Service Pack 2 an attacker must have valid logon
credentials and be able to log on locally to exploit this vulnerability. The
vulnerability could not be exploited remotely by anonymous users or by users
who have standard user accounts. However, the affected component is
available remotely to users who have administrative permissions.
. On Windows 2000 and Windows XP Service Pack 1 an attacker must have
valid logon credentials to try to exploit this vulnerability. The
vulnerability could not be exploited remotely by anonymous users. However,
the affected component is available remotely to users who have standard user
accounts. In certain configurations, anonymous users could authenticate as
the Guest account. For more information, see Microsoft Security Advisory
906574.
As you can see for someone to exploit this vulnerability they will
require the use of your keyboard, which means that they are in your house,
so why install this unless you really don't trust your own family members?
NO I am not trying to be a smart a$$ its just that most hotfixes and
sometimes all of them on any given patch tuesday contain similar wording as
stated above, the average home user does not need them so if they are not
needed why install them and take the chance of going through something like
you are expericing now? Like so many people do after installing the latest
patches.
This KB was intended for an office type setting whose employees have
limited accounts.
The thinking (which I see here all the time) that one must have all
updates avil. is shear folly.
Read the KB articals before you install and see if you need it.
That was long winded for a lousy 2 cents.
Good luck.
