Security Update KB925902

G

Guest

Your welcome, and I made sure I contacted as many friends as possible to go
get it. Always someone out there wanting to spoil things...:-(
 
B

Bill Sanderson MVP

There's a single known issue that I'm aware of with this patch--if you have
a RealTek audio driver--some Toshiba laptops, for example, you may see a
message resembling this one:
"Error on reboot: RTHDCPL.EXE Illegal System Relocation
The System Dll user32.dll was relocated in memory. The application
will not run properly. The relocation occurred because the DLL
C:\Windows\system32\HHCTRL.OCX occupied an address range reserved for
Windows system DLLs. The vendor supplying the DLL should be contacted
for a new DLL."
Click to expand...

This doesn't crash Windows, just the audio driver. You'll need to call
Microsoft PSS for a fix--1-866-pcsafety should work.



--
 
R

Randy Knobloch

Bill Sanderson MVP said:
There's a single known issue that I'm aware of with this patch--if you have a RealTek
audio driver--some Toshiba laptops, for example, you may see a message resembling this
one:
Click to expand...
<snip>
The below KB's should help some RealTek users.
(http://support.microsoft.com/?kbid=925902)
(http://support.microsoft.com/kb/935448/)

Randy

--
siljaline

MS - MVP Windows (IE/OE) & Windows Security, AH-VSOP

Security Tools Updates:
http://aumha.net/viewforum.php?f=31
Please reply to group, as return address is invalid that we may all benefit.
 
B

Bill Sanderson MVP

Thanks. I see the hotfix download link in the English version of the page
now. Not sure whether it needs to be localized or not. One difficulty I
have with it is that it requires WGA validation.

Hmm... you need a critical security patch to keep your system safe, but your
system is pirated. Microsoft has committed to providing those patches to
help out the rest of their customers who are adversely affected by owned
pirated machines. So, you choice is to lose sound capability (unless you
find the driver Bob has referenced) or to forgo the protection of the patch.

There's a judgement call involved in the hair-splitting here, but in my book
a hotfix required because of a critical security-related patch should not
require wga validation.



--
 
R

Randy Knobloch

Bill Sanderson MVP said:
Thanks. I see the hotfix download link in the English version of the page now. Not
sure whether it needs to be localized or not. One difficulty I have with it is that it
requires WGA validation.

Hmm... you need a critical security patch to keep your system safe, but your system is
pirated. Microsoft has committed to providing those patches to help out the rest of
their customers who are adversely affected by owned pirated machines. So, you choice is
to lose sound capability (unless you find the driver Bob has referenced) or to forgo the
protection of the patch.

There's a judgement call involved in the hair-splitting here, but in my book a hotfix
required because of a critical security-related patch should not require wga validation.
Click to expand...

You *could* remove WGA, then re-validate, Bill?

Randy

--
siljaline

MS - MVP Windows (IE/OE) & Windows Security, AH-VSOP

Security Tools Updates:
http://aumha.net/viewforum.php?f=31
Please reply to group, as return address is invalid that we may all benefit.
 
B

Bill Sanderson MVP

I don't see this as relevant, I'm afraid. The download mechanism enforces
WGA, so removing WGA presumably would still disallow the download.
Additionally, the removeWGA code that I have seen, removes only the WGA
Notifications portion of the WGA mechanism, which is not required for this
or any other download.

--
 
R

Randy Knobloch

Bill Sanderson MVP said:
I don't see this as relevant, I'm afraid. The download mechanism enforces WGA, so
removing WGA presumably would still disallow the download. Additionally, the removeWGA
code that I have seen, removes only the WGA Notifications portion of the WGA mechanism,
which is not required for this or any other download.
Click to expand...

Understood - I just assumed that *you* were having WGA issues.
That is all :)

Randy

--
siljaline

MS - MVP Windows (IE/OE) & Windows Security, AH-VSOP

Security Tools Updates:
http://aumha.net/viewforum.php?f=31
Please reply to group, as return address is invalid that we may all benefit.
 
G

Guest

Bill Sanderson MVP said:
There's a single known issue that I'm aware of with this patch--if you have
a RealTek audio driver--some Toshiba laptops, for example, you may see a
message resembling this one:
Click to expand...

Can we assume that if audio is working as normal, then this isn't an issue?
Or may it still be lurking somewhere to trip us up?
 
G

Guest

Alan,

We may not be out of the woods yet:
http://isc.sans.org/diary.html?storyid=2565

Microsoft Patch Maybe Causing Some Problems
Published: 2007-04-04,
Last Updated: 2007-04-04 00:38:52 UTC
by Deborah Hale (Version: 1)
We have received several emails today from people who are having problems
with the patch. One that is confirmed by Microsoft is the Realtek problem.
Microsoft has been working on this problem and have provided a patch for the
problem at:
support.microsoft.com/kb/935448/

Other possible issues have been reported and are being investigated...


?:-\
Tim
Geek w/o Portfolio
Only the Paranoid Survive
 
G

Guest

Tim Clark said:
Alan,

We may not be out of the woods yet:
http://isc.sans.org/diary.html?storyid=2565

Microsoft Patch Maybe Causing Some Problems
Published: 2007-04-04,
Last Updated: 2007-04-04 00:38:52 UTC
by Deborah Hale (Version: 1)
We have received several emails today from people who are having problems
with the patch. One that is confirmed by Microsoft is the Realtek problem.
Microsoft has been working on this problem and have provided a patch for the
problem at:
support.microsoft.com/kb/935448/
Click to expand...

Well, this is turning into a nightmare. Having just read that article at
support.microsoft.com/kb/935448/, I tried opening the Realtek audio panel. It
won't open. I don't get the error message, but it won't open - so clearly I'm
affected.

So it looks like I need this hotfix (whatever a 'hotfix' is). But the rest
of the article is almost incomprehensible. It seems I need to jump yet again
through the Genuine Validation hoop in order to download the file that will
fix the problem - a file that I shouldn't be having to download in the first
place, and which seems to need special instructions that will only be
divulged when I download it!

The combination of this mess, coupled with the fact that I doubt my
competence to understand what's needed to fix it, and the fact that I have to
YET AGAIN go through the infernal tangle of validation ... well, really, it's
just too much.

For pity's sake, Microsoft - and I hope someone out there is reading this -
will you please wake up to the fact that the overwhelming majority of people
who use Windows simply cannot cope with the complexities of what you throw at
them.
 
G

Guest

Alan D said:
a file ... which seems to need special instructions that will only be
divulged when I download it!
Click to expand...

Well, I've downloaded it (thankfully, although it said it needed validation,
it didn't seem to in practice). But there is no 'Read Me' file which is
suppose to explain how to install it. There's just the package - labelled
WindowsXP-KB935448-x86-ENU.

Can some kind soul please tell me what to do with it, now I've got it?
 
B

Bill Sanderson MVP

My understanding is that you will see this error on the next startup.
So--yes, I believe that if audio is working after a reboot, you are fine.

--
 
B

Bill Sanderson MVP

That's the same issue I posted about. It is possible that there are other
brands of audio that share this same driver, and thus the same problem.

--
 
B

Bill Sanderson MVP

Just double-click on it to install, I think--should be the same as any other
patch.

--
 
G

Guest

Bill Sanderson MVP said:
Just double-click on it to install, I think--should be the same as any other
patch.
Click to expand...

Ye Gods... I doubleclicked on it and got a big panel warning me to back up
my system before proceeding with the installation! So I cancelled.

Just how dangerous is this exercise? I created a System Restore point - is
that a good enough backing up?

Another question, Bill - if you can help: now I come to think of it, in the
18 months I've owned this computer, I've never actually NEEDED to open the
Realtek Audio Control Panel. Do I even need to bother with this Hotfix? Or,
if I ignore it, may I be setting myself up for trouble at some later date?

I can't help but ponder the fact that there are millions of people out there
who have Realtek audio drivers, who simply allowed Windows automatic updates
to go ahead in ignorance of this issue, and who are completely oblivious that
their audio device has been damaged. What happens to them?
 
G

Guest

I get the distinct feeling from reading the blurb on this patch this is a
hastily contrived fix which is obviously not without its problems. What
intigues me is the fact you received a warning screen of the nature you
describe Alan. Never saw that on my machine - this must indicate MS are aware
of the shortcomings to some systems to even consider programming same into
the code ........

Stu
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

my solution for kb925902 4
is KB925902 update for the ANI attack? 2
Firewire problems due to KB925902 2
Error caused by kb925902: invalid system dll reasignation 2
Update KB925902 failed 34
KB925902 Causing Services To Stop 3
KB925902 data execution problem 1
KB925902 2

Top