MS update, Kerio or HP problem

Posted on 2006-05-10
Last Modified: 2012-05-05
I just formatted and reinstalled XP Home w/SP2.
I was getting strange error msgs, weird XP GUI, locking up, and other stuff.
By weird GUI, my task bar changed from XP blue to 98SE tan, the "Start/Turn off Computer/ Standby, Restart, Turn Off" changed to an old style box with the arrow selecton, icons changed and others disappeared.

This happened before "AND" now after format and reinstall.
I had and reinstalled the full HP software package for my scanjet 3570c scanner which includes "Share to web."
Installed Kerio Firewall and did all the updates from MS.

All the stange things came back to a newly formatted hard drive. I didn't bring anything back that was backed up except my outlook express using Rex Backup.

Still getting the same weird messages such as:
 "An internal error has occured. Cryptic error message AD3875. Thread creation error: Not enough quota is available to process the command.
(Note: You have not done anything wrong)"
which just appeared.

(This is being entered on a different PC)
After clicking OK on that error, parts of the script disappeared leaving only icons.

Please note:
This was just formatted, all new install.
PO'ed Pete

Now just received:
C++ Error
Runtime Error
(Blank space below)

BTW have run Counterspy Eiwdo, Spybot, Ad-Aware, AVG, Trend Housecall, checked Hosts file, etc.
Question by:cfourkays
    LVL 42

    Assisted Solution

    why not uninstall the HP software and Kerio, and see if the errors go away?  then install one of the two... see if the errors are still gone... etc.

    another option is to use something like a process explorer to see what is running and where it's running from.  (free)

    also might help to check your event log.
    LVL 59

    Expert Comment

    HP Share to Web and Kerio Firewall are both implicated in a recent patch from Microsoft that has a problem.  See this:;en-us;918165
    Problems in Windows Explorer or the Windows shell after you install security update MS06-015
    LVL 2

    Author Comment

    Nothing in the Events I can interpret.
    Have Process Explorer and haven't located anything funny.

    Don't know how I missed the MS bulletin since I have Nvidia, Kerio and the stupid "share to web" which I never use and can't uninstall.
    I'll make the registry changes and try it for a bit and post back.
    LVL 2

    Author Comment

    Before I did the reg work, I noticed at the bottom of the MS KB page it had a link to Nvidia driver downloads with no explanation.
    So I checked my driver version, ( for my GeForce 6600), and upgraded it to version
    I'll give it a little time and see what happens.
    That MS03-015 must have really raised hell.
    Will get back with results.
    LVL 2

    Author Comment

    Still having same problems.
    Should both registry changes be made?
    Also, I'm starting to disable apps one at a time.
    Shut down Network Magic first.
    LVL 59

    Expert Comment

    I think probably both registry changes should be made.  Microsoft came up with a patch to the bad update, which you should be able to get from Windows Update.

    I am not convinced that the proposed MS fix will necessarily correct the problem with the faulty MS patch, for I think it depends upon you using HP products or Sunbelt Kerio Personal Firewall with your computer.  If you don't get the problem corrected with the above, then read this:

    Quoted below:

    That patch that came out 4-11 causes problems on some computers. I am sure Microsoft will end up reissuing the patch that does not break some computers.

    Here are the symptoms:

    Office Products:

    When choosing Save As it will lock up. If you look in Task Manager you will see one or possible 10-20 or more processes of verclsid.exe running. Killing that process will probably allow the office products to work fine in that one instance.

    Internet Explorer:

    Typing in any address and then hitting enter will launch a process of verclsid.exe and it will not go away. IE will sit there and appear like you have done nothing. Killing all processes of verclsid.exe will let IE work fine.


    Uninstall KB908531 from any computer that is affected then reboot.

    Or, as another temporary workaround until MS comes out with the corrected patch, you can find verclsid.exe in \Windows\System32\ folder and rename it to verclsid.old
    LVL 59

    Expert Comment

    On April 25th Microsoft issued a revised patch that you should be able to download and hopefully solve your problems.  From this page (in the Frequently Asked Questions about this Security Update section):

    Why did Microsoft reissue this bulletin on April 25, 2006?
    Microsoft has completed its initial investigation into issues involving old third party software that customers may have experienced after the installation of this security update.

    Microsoft updated this bulletin today to advise customers that revised versions of the security update are available for all products listed in the “Affected Software” section.

    Note Customers who have already applied the MS06-015 update who are not experiencing problems as indicated in Microsoft Knowledgebase Article 918165, need take no action.

    What changes does the revised security update include?
    The revised security update contains no changes to the binaries included in the initial security update. During installation, the revised security update will place the following entries in the allow list as indicated in Microsoft Knowledgebase Article 918165.

    HP Share-to-Web

    • {A4DF5659-0801-4A60-9607-1C48695EFDA9}

    NVIDIA Graphics Driver

    • {1E9B04FB-F9E5-4718-997B-B8DA88302A47}
    • {1E9B04FB-F9E5-4718-997B-B8DA88302A48}
    • {1CDB2949-8F65-4355-8456-263E7C208A5D}

    How do I deploy this revised update?
    For customers who have already applied the update and are experiencing the problem related to the older Hewlett Packard Share-to-Web software, or older NVIDIA drivers prior to or including version 61.94, the revised update will be available through Windows Update and Microsoft Update. The targeted re-release will be automatically delivered to affected computers through Automatic Update if it has been enabled. The re-release will not be distributed to non-affected computers.

    Microsoft Baseline Security Analyzer (MBSA) 2.0 will also determine if one of the identified third-party COM controls has been installed and will offer the revised security update.

    For Microsoft Baseline Security Analyzer (MBSA) 1.2.1, the detection logic has been updated to offer the revised package only to machines that do not have the initial security update installed. MBSA 1.2.1 cannot be used to determine if the identified third-party COM controls have been installed. For customers using MBSA 1.2.1 that are experiencing these issues, we recommend using Group Policy or scripting to add the above COM controls to the allow list manually as documented in Microsoft Knowledge Base Article 918165.

    LVL 2

    Author Comment

    I have the MBSA 2 on the PC and never use it.
    Ran it and it showed no problems.

    I'll hit both reg changes and see what happens.

    When I got up this AM and looked at the monitor, it resembled something Picasso might have drawn. Icons with no text, half of Counterspy's results missing, just a weird screen.
    Rebooting brings everything back to normal.

    Will get back. BTW, there must be a billion posts on this with various indications. Assuming this is my problem.
    LVL 2

    Author Comment

    Found the registry values already in the Reg.

    I'm beginning to think this isn't associated with the MS patch.

    I'm almost tempted to do another format and reinstall.
    I can't pin this down to anything.
    It seems to happen after a period of non-use. I'm going to disable everything from starting and see what happens.

    Did another patch come through fixing the MS problem since those reg values are installed?
    LVL 59

    Accepted Solution

    I don't know of any further patch from MS fixing the problem.  Did you see any symptoms that were detailed in the MSKB article 918165?  Did you try renaming verclsid.dll to verclsid.old to see if that did anything?

    From your description of the initial problems, maybe most of them do not have anything to do with that faulty patch.  I approve of your disabling things in startup (you use MSCONFIG, right?) to see if that affects the problem...
    LVL 2

    Author Comment

    Actually, I use PC Magazine's "Startup Cop Pro or "Autoruns" by Sysinternal.
    They give you a better picture of what the program is.
    If the problem doesn't come back, I'll reboot and start the programs one by one. Like trouble shooting the old 98 and ME problems.
    I'll post back when I've reached a conclusion or am ready to shoot myself.
    LVL 2

    Author Comment

    Still doing an elimination thing.
    It may come down to a beta Counterspy 2.0.
    Still testing.
    LVL 2

    Author Comment

    I'm too embarrassed to even ask for a refund.
    Turned out it was the beta CounterSpy 2.0 which apparently has an adverse affect on the GUI, at least on my PC.
    Thanks for the help.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Join & Write a Comment

    Suggested Solutions

    There are 2 things you must have in order to connect to the internet behind a router, The "Gateway IP" of the router, which is usually something like, I've seen routers with default values of:,,, …
    Sometimes people don't understand why download speed shows differently for Windows than Linux.Specially, this article covers and shows the solution for throughput difference for Windows than a Linux machine. For this, I arranged a test scenario.I…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now