Recovery Method- KB977165 Can/May/Will Cause BSODs for Some WindowsXP Users

[MowGreen]

New Patches Cause BSoD for Some Windows XP Users
http://www.krebsonsecurity.com/2010/02/new-patches-cause-bsod-for-some-windows-xp-users/

BLUE SCREEN, UNABLE TO BOOT AFTER WINDOWS XP UPDATE TODAY
http://social.answers.microsoft.com.../thread/73cea559-ebbd-4274-96bc-e292b69f2fd1/
============================================================================================

A workaround to remove KB977165 and a method to mitigate the
vulnerability this update addresses has been posted in the above Windows
Update forum by Kevin Hau of Microsoft:

" Hello Everyone,

I wanted to thank everyone for the great information and discusion in
this thread!

We have found that there is only one patch that requires un-installation
to resolve the blue screen issue. KB977165 is the patch in question, the
other patches do not seem to cause the blue screen behaviour and do not
need to be uninstalled.

With that in mind, here's the updated solution steps:

1. Boot from your Windows XP CD or DVD and start the recovery console
(see this Microsoft article for help with this step)

Once you are in the Repair Screen..

2. Type this command: CHDIR $NtUninstallKB977165$\spuninst

3. Type this command: BATCH spuninst.txt

4. When complete, type this command: exit


IMPORTANT: If you are able to uninstall the patch and get back into
Windows, in order to stay protected you can use the following automated
solution which secures your PC against the vulnerabilities that are
resolved with KB977165 until you can successfully get the update
installed without the blue screens.

Please see the link below for the article describing the vulnerability
that is fixed with KB977165 and how you can get protected without
installing the actual KB update:

http://support.microsoft.com/kb/979682


I also wanted to thank maxyimus for the great thread, and LThibx for
their participation as well!

Thanks,

Kevin "



MowGreen
================
* -343-* FDNY
Never Forgotten
================

banthecheck.com
"Security updates should *never* have *non-security content* prechecked

 

[Daave]

Thanks for the info, Mow.

I am curious. Not everyone is experiencing this problem with this
update. Has anyone discovered what specifically is responsible (e.g.,
the existence of another program like Norton interacting with KB977165)
to cause these BSODs?

 

[Salsan]

You have to uninstall latest updates to get solve the blue screen errors.

http://www.techsupportserve.com/for...ter-update-it-is-stopping-at-the-blue-screen/

Refer the above link to get how to resolve this issue ....

 

[ANGELKISSES420]

what about all the people who cant boot from their xp disc?? how do they get
their pc fixed??? microsoft says its a hardware issue, but thats funny
considering everything worked fine til the update.. and if it was a hardware
issue or "coincedence" then how come at least 20+ people cant even boot from
disc either??? wheres our "FIX"

 

[MowGreen]

Tell them to contact MS by phone. I can state for a *fact* that Support
Engineers are actually driving to folks homes to further investigate
this issue.

http://blogs.technet.com/msrc/archi...restart-issues-after-installing-ms10-015.aspx

" One of the key components when investigating issues like this are
obtaining memory dumps from computers experiencing the problem. In order
to get the information we need to fully analyze the issue, some of our
support engineers have actually driven to customer locations and picked
up affected systems so we can get the needed crash data directly and
help inform our investigation. "

Your system would not boot from the previous HD and the CD would not
load, correct ? Changing the HD allowed the CD to work, right ?

Then I strongly suspect the non-functioning HD contains a *rootkit* and
when the update was applied it caused the rootkit to stop working as
intended to which in turn disabled the CD player.

You're wasting your time posting here.
Call 1-866-PCSAFETY for *no-charge* assistance !


MowGreen
================
* -343-* FDNY
Never Forgotten
================

banthecheck.com
"Security updates should *never* have *non-security content* prechecked