Microsoft Advisory

by certifiedbug on April 18, 2006

in Microsoft, Security

Problems in Windows Explorer or the Windows shell after you install security update MS06-015

CAUSE

The MS06-015 security update package installs a new binary, VERCLSID.EXE, which validates shell extensions before they are instantiated by the Windows Shell or Windows Explorer. On some computers, VERCLSID.EXE stops responding. The following have been identified to cause VERCLSID.EXE to stop responding:

Hewlett-Packard’s Share-to-Web software. There have been reported issues where HP software causes the VERCLSID.EXE process to stop responding. In particular, HP’s Share-to-Web Namespace Daemon (Hpgs2wnd.exe) which ships with:

    HP PhotoSmart software
    Any HP DeskJet printer that includes a card reader
    HP Scanners
    Some HP CD-DVD RWs
    HP Cameras

Share-to-Web Namespace Daemon can be found in the “C:\Program Files\hewlett-packard\hp share-to-web\hpgs2wnd.exe” folder. Share-to-Web is auto-started from both the Startup menu and the Run registry key.
The VERCLSID.EXE process is flagged by Sunbelt Kerio Personal Firewall. Sunbelt Kerio Personal Firewall has a feature which flags any attempt by an application to launch another application for the user’s approval. Kerio is flagging Explorer.exe’s launch of VERCLSID.EXE. When this occurs, VERCLSID.EXE’s execution stops until the user clicks through Kerio’s notification dialog. Users can configure Kerio to allow VERCLSID.EXE to execute without prompting.

SYMPTOMS and RESOLUTION
Article ID: 918165

Copyright © is the original authors.

Previous post: Firefox Browser Vunerabilities

Next post: Direct Revenue-180 Solutions-Yapbrowser Targeting Kids