Re: SP4 Problems

From: Boczek, Malcolm (MBoczek_at_TERRAINDUSTRIES.COM)
Date: 07/04/03

  • Next message: Peter Kruse: "VisNetic WebSite Path Disclosure Vulnerability"
    Date:         Fri, 4 Jul 2003 08:12:42 -0500
    To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
    
    

    Russ, I think you may be premature stating that you feel Kurt's SP4 problems
    are going to be unique :-)

    Installing SP4, at about 99.9% complete received a STOP: 0x0000007F
    UNEXPECTED_KERNEL_MODE_TRAP. (Double fault). Rebooted numerous times, all
    with same eventual effect, although the timing changed, sometimes being
    almost instant, sometimes delayed by as much as 20 minutes.

    Reading the STOP: 7F subject matter leads to all kinds of explanations,
    usually emphasizing hardware and/or win2000 compatibility lists, with some
    small references to device drivers.... This system is a dual processor that
    had been running for 3 years straight under Windows 2000, and all drivers
    had come from MS.

    Rebooting to safe mode produced an extremely slow logon, very slow screen
    response to anything and 100% CPU usage for over an hour. With 30 minute
    logins and 20 minute shutdowns I proceeded to invoke SP4 Uninstall in safe
    mode, which apparently succeeded - BUT DIDN'T SOLVE THE PROBLEM. Stripped
    the system down, changed out the RAM, minimized all hardware etc, etc, no
    joy. Even started to peel back previous hotfixes.

    Now forced to read the fine print, it appears that uninstall doesn't remove
    all features, some (i.e. Update Service for one) cannot be removed. This
    lead to an extended moment of panic - what if the fault was in an
    unrecoverable component? - at which point I quit for the night, leaving the
    system in safe mode at 100% CPU usage.

    Next morning everything was fine, both in safe mode and (ta-da) in normal
    mode. I'm now assuming that the slowdown was caused by dll cleanup
    operations, which required an extended period to complete and hence correct
    (a total guess, any suggestions?). Your subscribers may wish to be reminded
    to give the system time to complete its cleanup before resorting to more
    drastic repair options (or outright panic).

    Malc Boczek
    Shaken but not Scared

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
    Are You "Certifiable"? Summer's Hottest Certification Just Got HOTTER!

    With a growth rate exceeding 110%, the TICSA security practitioner
    certification is one of the hottest IT credentials available. And now, for
    a limited time, you can save 33% off of the TICSA certification exam! To
    learn more about the TICSA certification, and to register as a TICSA
    candidate online, just go to

    http://www.trusecure.com/offer/s0100/

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo


  • Next message: Peter Kruse: "VisNetic WebSite Path Disclosure Vulnerability"

    Relevant Pages

    • Re: Alert: Microsoft Security Bulletin - MS03-039
      ... The way that Microsoft patched the new RPC Part II vulnerability ... Summer's Hottest Certification Just Got HOTTER! ... To learn more about the TICSA certification, ...
      (NT-Bugtraq)
    • Windows 2000 server issue
      ... accurately parse the lists of vulnerable machines produced by the scan ... of addresses directly on the script. ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification ...
      (NT-Bugtraq)
    • Re: Drivial Pursuit: Internet Explorer Browser & Your Files and Folders !
      ... The default Enhanced Security Configuration of IE ... access to files and folders on the local machine from the internet. ... With a growth rate exceeding 110%, the TICSA security practitioner certification is one of the hottest IT credentials available. ... And now, for a limited time, you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)
    • Re: Microsoft Numbering System
      ... the patch for each systems affected. ... in the right frame. ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)
    • Drivial Pursuit: Internet Explorer Browser & Your Files and Folders !
      ... Yet another quaint lead-up to "silent delivery and installation of an ... access to files and folders on the local machine from the internet. ... With a growth rate exceeding 110%, the TICSA security practitioner certification is one of the hottest IT credentials available. ... And now, for a limited time, you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)