Is KB977165 the 02/09/2010 update culprit?

[ToddAndMargo]

Is KB977165 the 02/09/2010 update culprit that is
causing all the slowdowns? (I have customers across
two counties screaming!)

Many thanks,
-T

[Russ SBITS.Biz [SBS-MVP]]

There's been reports of BSOD but that's only with systems that have already
been infected.
None of my clients have complained
and My personal systems are ok.

What AV are you using on your systems?
Russ

--
Russell Grover - SBITS.Biz [SBS-MVP]
MCP, MCPS, MCNPS, SBSC
Microsoft Certified Small Business Specialist
24hr SBS Remote Support - www.SBITS.Biz
Question or Second Opinion - www.PersonalITConsultant.com
Free Trial Microsoft Online Services - www.Microsoft-Online-Services.com

"ToddAndMargo" <ToddAn...@invalid.com> wrote in message
news:usFckvGr...@TK2MSFTNGP06.phx.gbl...

[PA Bear [MS MVP]]

Slowdowns? Not likely. BSODs? Possibly.

cf.
http://blogs.technet.com/msrc/archive/2010/02/12/update-restart-issues-after-installing-ms10-015.aspx

cf.
http://blogs.technet.com/msrc/archive/2010/02/12/february-2010-security-bulletin-webcast.aspx

For home users, no-charge support is available by calling 1-866-PCSAFETY
(and/or 1-866-234-6020 and/or 1-800-936-5700) in the United States and in
Canada or by contacting your local Microsoft subsidiary. There is no-charge
for support calls that are associated with security updates. When you call,
clearly state that your problem is related to a Security Update and cite the
update's KB number (e.g., KB977165).

Or you can...

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/default.aspx?gprid=6527

Consumer Security Support home page & Microsoft Update Solution Center also
offer support options
https://consumersecuritysupport.microsoft.com/
http://support.microsoft.com/ph/6527#tab3

For more information about how to contact your local Microsoft subsidiary
for security update support issues, visit the International Support Web
site: http://support.microsoft.com/common/international.aspx

For enterprise customers, support for security updates is available through
your usual support contacts.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002

[ToddAndMargo]

On 02/12/2010 10:46 PM, Russ SBITS.Biz [SBS-MVP] wrote:
> There's been reports of BSOD but that's only with systems that have
> already been infected.
> None of my clients have complained
> and My personal systems are ok.
>
> What AV are you using on your systems?
> Russ

Hi Russ,

Thank you. My users AV is Kaspersky Work Space Security,
which can be paused and does not change the symptom. I
left out a bunch of information, so I am going to make
a new post with all the details.

-T

[ToddAndMargo]

On 02/12/2010 10:46 PM, Russ SBITS.Biz [SBS-MVP] wrote:

> There's been reports of BSOD but that's only with systems that have
> already been infected.
> None of my clients have complained
> and My personal systems are ok.
>
> What AV are you using on your systems?
> Russ
>

[frajul2]

I had a problem with the downloads, also. I checked the ISC.SANS.ORG website
and found the suggestion to remove the atapi.sys and replace it with the one
in the SP3 download. I did that and things are back to normal, including the
KB977165 file and the rest of the updates. Hope it helps you.
--
frajul2

> .
>

[ToddAndMargo]

>> > ToddAndMargo wrote:
>>> > > Is KB977165 the 02/09/2010 update culprit that is
>>> > > causing all the slowdowns? (I have customers across
>>> > > two counties screaming!)

On 02/14/2010 01:00 PM, frajul2 wrote:
> I had a problem with the downloads, also. I checked the ISC.SANS.ORG
website
> and found the suggestion to remove the atapi.sys and replace it with
the one
> in the SP3 download. I did that and things are back to normal,
including the
> KB977165 file and the rest of the updates. Hope it helps you.
> -- frajul2

Hi frajul2,

I did not have a problem downloading or installing KB977165.
It is just that everything got really, really slow over the
local area network after the 02/09/2010 patches. I was
hoping someone else had isolated the problem so that I did
not have to remove 02/09/2010 one by one until I found
the culprit. Since this post, I removed KB977165 from
two machines and happy camping returned. Come Monday, I
will start on the rest and see what happens. I will
report back.

Thank you for answering!

-T

[Daave]

ToddAndMargo wrote:

> I did not have a problem downloading or installing KB977165.
> It is just that everything got really, really slow over the
> local area network after the 02/09/2010 patches. I was
> hoping someone else had isolated the problem so that I did
> not have to remove 02/09/2010 one by one until I found
> the culprit. Since this post, I removed KB977165 from
> two machines and happy camping returned.

You may think the camping is happy, but there might be malware
lurking...

[PA Bear [MS MVP]]

I don't need any help so why are you replying to my post?

frajul2 wrote:
> I had a problem with the downloads, also. I checked the ISC.SANS.ORG
> website
> and found the suggestion to remove the atapi.sys and replace it with the
> one
> in the SP3 download. I did that and things are back to normal, including
> the
> KB977165 file and the rest of the updates. Hope it helps you.
>

[ToddAndMargo]

Hi Daave,

The machines all have up to date Kaspersky Work Space
Security. But, that is at best only 61% effective.
So, perhaps. You would not think that so many
machines would be hit at the same time thought.
I might also be that KB977165 does not like Samba.

Any suggestions as to which malware to check for?

-T

[frajul2]

Sorry. I meant to reply to ToddandMargo.
--
frajul2

"PA Bear [MS MVP]" wrote:

> .
>

[Daave]

Any and all. :-)