MS update, Kerio or HP problem

Posted on 2006-05-10
Medium Priority
Last Modified: 2012-05-05
I just formatted and reinstalled XP Home w/SP2.
I was getting strange error msgs, weird XP GUI, locking up, and other stuff.
By weird GUI, my task bar changed from XP blue to 98SE tan, the "Start/Turn off Computer/ Standby, Restart, Turn Off" changed to an old style box with the arrow selecton, icons changed and others disappeared.

This happened before "AND" now after format and reinstall.
I had and reinstalled the full HP software package for my scanjet 3570c scanner which includes "Share to web."
Installed Kerio Firewall and did all the updates from MS.

All the stange things came back to a newly formatted hard drive. I didn't bring anything back that was backed up except my outlook express using Rex Backup.

Still getting the same weird messages such as:
 "An internal error has occured. Cryptic error message AD3875. Thread creation error: Not enough quota is available to process the command.
(Note: You have not done anything wrong)"
which just appeared.

(This is being entered on a different PC)
After clicking OK on that error, parts of the script disappeared leaving only icons.

Please note:
This was just formatted, all new install.
PO'ed Pete

Now just received:
C++ Error
Runtime Error
(Blank space below)

BTW have run Counterspy Eiwdo, Spybot, Ad-Aware, AVG, Trend Housecall, checked Hosts file, etc.
Question by:cfourkays
  • 8
  • 4
LVL 44

Assisted Solution

by:zephyr_hex (Megan)
zephyr_hex (Megan) earned 800 total points
ID: 16649664
why not uninstall the HP software and Kerio, and see if the errors go away?  then install one of the two... see if the errors are still gone... etc.

another option is to use something like a process explorer to see what is running and where it's running from.
http://www.sysinternals.com/Utilities/ProcessExplorer.html  (free)

also might help to check your event log.
LVL 59

Expert Comment

ID: 16649772
HP Share to Web and Kerio Firewall are both implicated in a recent patch from Microsoft that has a problem.  See this:

Problems in Windows Explorer or the Windows shell after you install security update MS06-015

Author Comment

ID: 16649865
Nothing in the Events I can interpret.
Have Process Explorer and haven't located anything funny.

Don't know how I missed the MS bulletin since I have Nvidia, Kerio and the stupid "share to web" which I never use and can't uninstall.
I'll make the registry changes and try it for a bit and post back.
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.


Author Comment

ID: 16654388
Before I did the reg work, I noticed at the bottom of the MS KB page it had a link to Nvidia driver downloads with no explanation.
So I checked my driver version, ( for my GeForce 6600), and upgraded it to version
I'll give it a little time and see what happens.
That MS03-015 must have really raised hell.
Will get back with results.

Author Comment

ID: 16658153
Still having same problems.
Should both registry changes be made?
Also, I'm starting to disable apps one at a time.
Shut down Network Magic first.
LVL 59

Expert Comment

ID: 16658546
I think probably both registry changes should be made.  Microsoft came up with a patch to the bad update, which you should be able to get from Windows Update.

I am not convinced that the proposed MS fix will necessarily correct the problem with the faulty MS patch, for I think it depends upon you using HP products or Sunbelt Kerio Personal Firewall with your computer.  If you don't get the problem corrected with the above, then read this:


Quoted below:

That patch that came out 4-11 causes problems on some computers. I am sure Microsoft will end up reissuing the patch that does not break some computers.

Here are the symptoms:

Office Products:

When choosing Save As it will lock up. If you look in Task Manager you will see one or possible 10-20 or more processes of verclsid.exe running. Killing that process will probably allow the office products to work fine in that one instance.

Internet Explorer:

Typing in any address and then hitting enter will launch a process of verclsid.exe and it will not go away. IE will sit there and appear like you have done nothing. Killing all processes of verclsid.exe will let IE work fine.


Uninstall KB908531 from any computer that is affected then reboot.

Or, as another temporary workaround until MS comes out with the corrected patch, you can find verclsid.exe in \Windows\System32\ folder and rename it to verclsid.old
LVL 59

Expert Comment

ID: 16658573
On April 25th Microsoft issued a revised patch that you should be able to download and hopefully solve your problems.  From this page (in the Frequently Asked Questions about this Security Update section):


Why did Microsoft reissue this bulletin on April 25, 2006?
Microsoft has completed its initial investigation into issues involving old third party software that customers may have experienced after the installation of this security update.

Microsoft updated this bulletin today to advise customers that revised versions of the security update are available for all products listed in the “Affected Software” section.

Note Customers who have already applied the MS06-015 update who are not experiencing problems as indicated in Microsoft Knowledgebase Article 918165, need take no action.

What changes does the revised security update include?
The revised security update contains no changes to the binaries included in the initial security update. During installation, the revised security update will place the following entries in the allow list as indicated in Microsoft Knowledgebase Article 918165.

HP Share-to-Web

• {A4DF5659-0801-4A60-9607-1C48695EFDA9}

NVIDIA Graphics Driver

• {1E9B04FB-F9E5-4718-997B-B8DA88302A47}
• {1E9B04FB-F9E5-4718-997B-B8DA88302A48}
• {1CDB2949-8F65-4355-8456-263E7C208A5D}

How do I deploy this revised update?
For customers who have already applied the update and are experiencing the problem related to the older Hewlett Packard Share-to-Web software, or older NVIDIA drivers prior to or including version 61.94, the revised update will be available through Windows Update and Microsoft Update. The targeted re-release will be automatically delivered to affected computers through Automatic Update if it has been enabled. The re-release will not be distributed to non-affected computers.

Microsoft Baseline Security Analyzer (MBSA) 2.0 will also determine if one of the identified third-party COM controls has been installed and will offer the revised security update.

For Microsoft Baseline Security Analyzer (MBSA) 1.2.1, the detection logic has been updated to offer the revised package only to machines that do not have the initial security update installed. MBSA 1.2.1 cannot be used to determine if the identified third-party COM controls have been installed. For customers using MBSA 1.2.1 that are experiencing these issues, we recommend using Group Policy or scripting to add the above COM controls to the allow list manually as documented in Microsoft Knowledge Base Article 918165.


Author Comment

ID: 16659067
I have the MBSA 2 on the PC and never use it.
Ran it and it showed no problems.

I'll hit both reg changes and see what happens.

When I got up this AM and looked at the monitor, it resembled something Picasso might have drawn. Icons with no text, half of Counterspy's results missing, just a weird screen.
Rebooting brings everything back to normal.

Will get back. BTW, there must be a billion posts on this with various indications. Assuming this is my problem.

Author Comment

ID: 16663254
Found the registry values already in the Reg.

I'm beginning to think this isn't associated with the MS patch.

I'm almost tempted to do another format and reinstall.
I can't pin this down to anything.
It seems to happen after a period of non-use. I'm going to disable everything from starting and see what happens.

Did another patch come through fixing the MS problem since those reg values are installed?
LVL 59

Accepted Solution

LeeTutor earned 1200 total points
ID: 16663563
I don't know of any further patch from MS fixing the problem.  Did you see any symptoms that were detailed in the MSKB article 918165?  Did you try renaming verclsid.dll to verclsid.old to see if that did anything?

From your description of the initial problems, maybe most of them do not have anything to do with that faulty patch.  I approve of your disabling things in startup (you use MSCONFIG, right?) to see if that affects the problem...

Author Comment

ID: 16663696
Actually, I use PC Magazine's "Startup Cop Pro or "Autoruns" by Sysinternal.
They give you a better picture of what the program is.
If the problem doesn't come back, I'll reboot and start the programs one by one. Like trouble shooting the old 98 and ME problems.
I'll post back when I've reached a conclusion or am ready to shoot myself.

Author Comment

ID: 16675901
Still doing an elimination thing.
It may come down to a beta Counterspy 2.0.
Still testing.

Author Comment

ID: 16708112
I'm too embarrassed to even ask for a refund.
Turned out it was the beta CounterSpy 2.0 which apparently has an adverse affect on the GUI, at least on my PC.
Thanks for the help.

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Can you find a fax from a vendor you saved a decade ago in seconds? Have you ever cursed your PC under your breath during an audit because you couldn’t find the requested statement or driver history?  If you answered no to the first question or yes …
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Suggested Courses

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question