System Restore and more problems

[Magnus]

On my Windows XP Professional SP2 machine I have for the last two days
experienced the following problems, which may have a common cause.

PROBLEMS
System Restore does not start.
When I click the SR link in the Start menu nothing happens except that the
hour glass shows briefly, although rstrui.exe shows up in the Task Manager.
When I start SR from C:\WINDOWS\system32\Restore\rstrui.exe, a blank SR
window is normally displayed.

User Accounts cannot display.
When I click Control Panel > User Accounts, a blank window opens and I get
the error message "Wrong number of arguments or invalid property assignment"

Script error message in Group Policy Editor.
When I start the GPE, it cannot display the Extended view and reports
"Internet Explorer Script Error. Object doesn't support this property or
method. URL: res://C:\WINDOWS\System32\mmcndmgr.dll/views.htm"

Help and Support Center problems
Some links in the Help and Support Center are simply dead.

Unable to use Microsoft Upgrade

Apart from others with similar problems, I don't have any problems with
Windows Media Player and the Search Companion.

MEASURES
To resolve the above problems I have done extensive searches on the Internet
and tried most of the suggested measures, with no success:

Reinstalled System Restore (right-clicking on sr.inf and choosing Install)
Registered several dll:s with the regsvr32 command (e.g. jscript.dll,
vbscript.dll)
Gone through the tips on the bertk.mvps.org site, e.g.
http://bertk.mvps.org/html/tips.html#SRBlankWindow
Restored html file associations
Installed Windows Script 5.6
Performed sfc /scannow
Checked the Event Viewer but nothing unususal there
Tested that the java applet works on sun.com

I suspect this is basically some sort of script problem...


POSSIBLE CAUSES
This is what I did to the computer two days ago, just before I discovered
the problems:
Uninstalled Microsoft VM (instructions courtesy of sun.com).
Upgraded Java to jre 1.5.0_4 (got and error message about "assertion
failed", but have unistalled it, rolled back to jre1.4.2_8, upgraded to jre
1.4.2_9 and again to jre 1.5.0_4... ).
Installed Copernic Agent (and uninstalled it to make sure it's not the root
of the problem).
Installed the Microsoft October Updates through Microsoft Update (but my
girlfriends computer with the same configuration works fine so I don't blame
the MS Updates).

I am currently out of ideas, apart from resinstalling Internet Explorer.
Reinstalling Windows XP is not a solution but a last desperate resort that I
am not prepared to go through yet. Could anyone give me a tip?

Regards,
Magnus Eriksson

 

[Ramesh, MS-MVP]

Magnus,

Execute these commands from Start, Run dialog:

regsvr32 jscript
regsvr32 vbscript
regsvr32 /i mshtml
- - -
If you receive any error message, post the details here.
- - -

Regarding "Wrong number of arguments or invalid property assignment", here
is some insight
http://groups.google.com/group/microsoft.public.windowsxp.security_admin/msg/e3c9ab03c22ca4e6

Additional recommendations:
-----------------------------

Run SFC /Scannow from Start, Run:

Description of Windows XP and Windows Server 2003 System File Checker
(Sfc.exe):
http://support.microsoft.com/?kbid=310747

You are prompted to insert a Windows XP SP2 CD when you try to run the
System File Checker tool on a Windows XP SP2-based computer:
http://support.microsoft.com/?kbid=900910

In case you want to re-apply SP2, follow this guide.

Detailed installation walkthrough for Windows XP Service Pack 2:
http://support.microsoft.com/kb/875364/

--
Ramesh, Microsoft MVP
Windows XP Shell/User

Windows XP Troubleshooting
http://www.winhelponline.com

 

[Magnus]

Hi Ramesh and thanks for your advice.

As I stated under MEASURES in my original posting, I have already performed
the regsvr32 commands many times (registration always successful) as well as
the sfc /scannow (with correct paths registrered in the
HKLM\Software\Microsoft\Windows\CurrentVersion\Setup key). I performed the
regsvr32 commands suggested below again, with no success.

Since the various problems I listed probably have a common ground, there is
no reason to suspect that there is anything wrong with the User Accounts
control panel extension (nor with rstrui.exe, gpedit or the Help & Support
Center). Still I reinstalled nusrmgr.cpl assording to the suggestions in
http://groups.google.com/group/microsoft.public.windowsxp.security_admin/msg/e3c9ab03c22ca4e6
to no avail. My symptoms are also different, I have no problems displaying
Local Users and Groups through My Computer > Manage > Local Users and
Groups.

Which leaves me with reinstallation of SP2 as the only remaining alternative
of your suggested solutions. I feel it is somewhat heavy artillery at this
point.

Questions:
Isn't it less intrusive to reinstall Internet Explorer before doing an SP2
reinstall?
What happens to the patches I have installed after SP2 if I reistall SP2?
Do you think that the uninstallation of Microsoft VM can have something to
do with the problems, and in such case, is there some way of reinstalling
Microsoft VM?

Note: I uninstalled Microsoft VM according to the instructions in this link:
http://www.java.com/en/download/help/uninstall_msvm.xml


/Magnus

 

[Ramesh, MS-MVP]

Magnus,

- - -- - -

Yes, I too think so. However, this can be only done using the ie.inf file
(and not by downloading the ie6setup.exe package, as you already have SP2
installed).

Reinstall Internet Explorer 6 on Windows XP:
http://www.petri.co.il/reinstall_ie_6_on_xp.htm

When you're prompted for the updated system files:

Case 1: If you've installed a Service Pack (1 or 2) after you installed
Windows XP, mention the path as follows:

C:\Windows\ServicePackFiles\i386

Case 2: If you have a Windows XP Operating System CD integrated with the
latest Service Pack, simply point to the following path:

X:\i386

Where X:\ is the CD-ROM drive-letter.

- - -- - -

The patches that're released after SP2, need to be reinstalled again.


--
Ramesh, Microsoft MVP
Windows XP Shell/User

Windows XP Troubleshooting
http://www.winhelponline.com

 

[Magnus]

No luck with the IE reinstallation, problems persist. So if noone else has
has a suggestion, next step will be to reinstall the entire SP2. But I would
have liked to find out and remedy the cause of these problems, not just
bring up the big "reinstallation gun", and I personally suspect the problems
could have something to do with the uninstallation of Microsoft VM.
/Magnus

 

[Magnus]

Reinstalled SP2 (ran the 272 kB file WindowsXP-KB835935-SP2-ENU.exe), but
still no improvement. Can anyone help me with this, please?
/Magnus

 

[Ramesh, MS-MVP]

Running out of ideas, Magnus. Was wondering if this is due to incorrect DCOM
permissions.

--
Ramesh, Microsoft MVP
Windows XP Shell/User

Windows XP Troubleshooting
http://www.winhelponline.com

 

[guy_montag]

Hi Magnus,

Just to say you're not alone. Since installing the October MS patches,
I've got exactly the same critical malfunctions with my PC too.

It looks like it's a total failure of all COM accesses (anytime any
script calls an object it comes back with a variety of errors). The
monthly patches did major updating to the COM+ and MSDTC stuff to block
remote execution, and I believe that somehow it has blocked local
access on our machines as well.

I've tried reinstalling MS05-51, MS05-052, MS05-048, MS05-049 and
MS05-050 to no avail.

I've reinstalled COM+ as per steps to correct a corrupt catalog. I've
reinstalled MSDTC.

I've reinstalled SP2.

I've checked the COM security settings (and figured out why my Edit
Limits button was greyed out - it was being set by a local security
policy and on clearing out the policy value (not defined), the button
became available again). Still nothing looks wrong in there compared
to another machine that works. I am highly suspicious that local
launch and activation permissions are screwed though. Or maybe a
certificate problem but again nothing looks wrong.

I've tried uninstalling Norton Antivirus, Firewall and MS Antispyware
(i.e. anything that might be affecting script operation).

As you will know, this problem has been lurking for a while (reports of
User Accounts failure, Services MMC snapin) go back to 2003.

In my case, as well as what you've described, I don't get any active
content in IE (all Flash animations appear as red X boxes), even though
IE security zones are all set to default.

I KNOW it was the October monthly security updates that triggered it
(maybe an incompatibility with something else I have installed), as I
always run Microsoft Update twice, and it was the second time (after
the reboot for MS05-051) when Microsoft Update stopped working.

So Ramesh - the question to you is can you think of how you would go
about disabling all local object access in scripts and all active
content in IE to generate the myriad of errors that Magnus and I are
seeing.

In the meantime, I've taken a backup and restored from a backup taken
at end August- Windows directory tree only. This seems to have fixed
it.

I'll reapply all the updates over the next day or two (one at a time)
and if I figure out which has crippled my machine I'll report back.

Is anyone else out there having similar problems post October 12th?

Guy

 

[Ramesh, MS-MVP]

Hi Guy,

Thanks for the detailed feedback.

Just came across this article.

Systems that have changed the default Access Control List permissions on the
%windir%\registration directory may experience various problems after you
install the Microsoft Security Bulletin MS05-051 for COM+ and MS DTC:
http://support.microsoft.com/kb/909444/

--
Ramesh, Microsoft MVP
Windows XP Shell/User

Windows XP Troubleshooting
http://www.winhelponline.com

 

[guy_montag]

The permissions weren't exactly right (as I had previously recreated my
COM catalog so defaults were used), so I cloned them from a working
machine and rebooted - no joy.

I tried reinstalling MS05-051 as well post the permissions changes. No
joy there either.

I accidentally reinstalled all Oct 12 patches in one go on top of my
working August restore - it broke right away so one of the patches is
definitely the culprit as I suspected earlier.

Another restore and one at a time patch installation to come.

Guy

 

[guy_montag]

A break-thru of sorts. we've been suspicious of the wrong patch. I've
uninstalled MS05-51 from my broken system and rebooted (no change -
system still broken)

So then I uninstalled MS05-52 (Cumulative IE Update for October) and
things started working again (small eureka and raised fist).

So I reinstalled MS05-51 just to be sure it wasn't related and sure
enough, the system continued to work.

And then I reinstalled MS05-52 and it broke again. Fingers crossed
that removal will fix it once more.

Conclusion - MS05-52 in isolation singularly to blame. I need to do
more investigation on which specific file(s) are changed (as a
cumulative rollup I'd expect that most of it was on my system from the
last cumulative (August)?

And it looks like the "world" is finally catching up to thinking that
MS05-052 is broken !!!

http://www.microsofttoday.com/news/172301286

 

[Naveen]

I too have the same problem( No active content, cannot download any
activeX, any mmc or app dependent on IE engine throws error). Sometime
last week, after the automatic windows update, I started observing the
symptoms. I tried many different things with IE security options,
permissions, policies, JRE installation, disabled antivirus, etc. but
nothing helped (BTW,cursing & prayers didn't help either).

 

[guy_montag]

Sounds the same.

Uninstall MS05-052 - go into Control Panel\Add or Remove Programs,
ensure the "Show Updates" checkbox at the top is ticked.

Scroll down to Windows XP Software Updates

Find Security Update for WIndows XP (KB896688)

Click on it and press the remove button.

Follow the prompts including the nasty one that says many of your
applications may stop working (that doesn't appear to be the case)

Reboot and keep your fingers crossed.

 

[Naveen]

Thanks a lot! That fixed it!

 

[Ramesh, MS-MVP]

Very well done, Guy. BTW, I'm yet to install the security updates for
October. I'll try it in a test system and post back.

--
Ramesh, Microsoft MVP
Windows XP Shell/User

Windows XP Troubleshooting
http://www.winhelponline.com

 

[Magnus]

Guy, you're a hero!

Had almost given up on this thread although I thought Ramesh might have a
point when mentioning the DCOM permissions. When I discovered last night
that the Kaspersky site wouldn't even let me do an online scan (saying "You
must have administrative rights on this computer", which I have) I started
searching and found the KB909444 article. From then on I reckoned, just like
you, that it must be the KB902400 update that messed up so I uninstalled it,
to no avail, and have spent this day in safe mode working with user rights
and implementing KB909444. Uninstalling KB896688 really is the way to go.
Now it is well hidden in MS Update and will not be unearthed for a long long
time, if ever... Will be nice to get out of the computer coma of the last
few days and maybe do something constructive for a change!

Remember how KB885250 messed up my network and how uninstalling it resolved
the problems. Still to this day I don't think Microsoft has acknowledged
that there is an issue with the patch in environments like mine ( XP SP2
machines). In the future maybe it's best to let others take the first impact
and not install the monthly updates until they have been evaluated
properly...

Thanks again Ramesh for your efforts as well.

/Magnus

 

[Ramesh, MS-MVP]

No problem, Magnus. Glad the problem is fixed. Guy jumped in at the right
time, when I was thinking about verifying the DComcnfg settings. Well done
Guy!

--
Ramesh, Microsoft MVP
Windows XP Shell/User

Windows XP Troubleshooting
http://www.winhelponline.com

 

[vijwm]

Hi guy and thanks for the fix, another clue to the puzzle maybe,

We had the same problem on all computers in our developer team, same
fix worked on all computers (uninstall KB896688). Differences between
dev computers and others (unaffected systems) in our organisation is
the following programs, that are installed on dev computers,

Microsoft Visual SourceSafe 6.0
Microsoft Visual J# .NET Redistributable Package 1.1
Microsoft Visual Studio .NET Enterprise Architect 2003
Microsoft WSE 2.0 SP1
MSDN Library - April 2004
PVCS Tracker 7
Syncfusion Essential Studio
NUnit 2.2

Any ideas on why only dev computers are affected?

/Regards Janne

 

[Magnus]

FYI, I have these programs, among others, installed on the computer that
didn't like MS05-052 (KB896688):

Microsoft Visual Studio .NET Enterprise Architect 2003
Microsoft Visual J# .NET Redistributable Package 1.1
MSDN Library - April 2003

/Magnus

 

[onewing]

To fix this issue without removing the update.
The following text
(between the lines) can be put in a .reg file and ran on the affected
machine:

------------------------------------------------------------------------------------
-------------

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{0000031A-0000-0000-C000-000000000046}]
@="ClassMoniker"

[HKEY_CLASSES_ROOT\CLSID\{0000031A-0000-0000-C000-000000000046}\InprocServer32]
@="ole32.dll"

[HKEY_CLASSES_ROOT\CLSID\{0000031A-0000-0000-C000-000000000046}\ProgID]
@="clsid"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\CLSID]
@="{0000031A-0000-0000-C000-000000000046}"