kb891711.exe

Hello to all the MVPs,
I have noted kb891711.exe
running as a task on my Win Me O/S
Is this a M/S fix??
or Bug??
Thanks in advance

891171 is a valid patch (KB891171 - "MS05-002: Vulnerability in cursor and
icon format handling could allow remote code execution"
(http://support.microsoft.com/?kbid=891711)). Patches usually run once,
patch or update an existing file or files and then exit never to run again
but it appears that 891171 is different and that kb891171.exe runs
continuously in the background. See also "Microsoft Security Bulletin
MS05-002 - Vulnerability in Cursor and Icon Format Handling Could Allow
Remote Code Execution (891711)"
http://www.microsoft.com/technet/sec.../MS05-002.mspx for more
details although no specific details for Win Me are included.

In the case of the 891171 patch it adds the files kb891711.exe and
q891171.dll to a new folder windows\system\kb891711 but updates no other
files.
--
Mike Maltby MS-MVP



John Doe wrote:

Hello to all the MVPs,
I have noted kb891711.exe
running as a task on my Win Me O/S
Is this a M/S fix??
or Bug??
Thanks in advance

Thanks Mike,
I did wonder when I found it running
after I patched and rebooted several times
if it was valid or not.
Thanks for getting back to me so soon,
and with such comprehensive information.
DR

"Mike M" wrote in message
...
891171 is a valid patch (KB891171 - "MS05-002: Vulnerability in cursor and
icon format handling could allow remote code execution"
(http://support.microsoft.com/?kbid=891711)). Patches usually run once,
patch or update an existing file or files and then exit never to run again
but it appears that 891171 is different and that kb891171.exe runs
continuously in the background. See also "Microsoft Security Bulletin
MS05-002 - Vulnerability in Cursor and Icon Format Handling Could Allow
Remote Code Execution (891711)"
http://www.microsoft.com/technet/sec.../MS05-002.mspx for more
details although no specific details for Win Me are included.

In the case of the 891171 patch it adds the files kb891711.exe and
q891171.dll to a new folder windows\system\kb891711 but updates no other
files.
--
Mike Maltby MS-MVP



John Doe wrote:

Hello to all the MVPs,
I have noted kb891711.exe
running as a task on my Win Me O/S
Is this a M/S fix??
or Bug??
Thanks in advance

John Doe wrote:
Thanks Mike,
I did wonder when I found it running
after I patched and rebooted several times
if it was valid or not.
Thanks for getting back to me so soon,
and with such comprehensive information.
DR

"Mike M" wrote in message
...

891171 is a valid patch (KB891171 - "MS05-002: Vulnerability in cursor and
icon format handling could allow remote code execution"
(http://support.microsoft.com/?kbid=891711)). Patches usually run once,
patch or update an existing file or files and then exit never to run again
but it appears that 891171 is different and that kb891171.exe runs
continuously in the background. See also "Microsoft Security Bulletin
MS05-002 - Vulnerability in Cursor and Icon Format Handling Could Allow
Remote Code Execution (891711)"
http://www.microsoft.com/technet/sec.../MS05-002.mspx for more
details although no specific details for Win Me are included.

In the case of the 891171 patch it adds the files kb891711.exe and
q891171.dll to a new folder windows\system\kb891711 but updates no other
files.
--
Mike Maltby MS-MVP



John Doe wrote:


Hello to all the MVPs,
I have noted kb891711.exe
running as a task on my Win Me O/S
Is this a M/S fix??
or Bug??
Thanks in advance



I installed KB891711 and 888113 yesterday and had nothing but blue
screen problems on start up today. I found 891711 in Startup and have
disabled it. So far restart OK. Anyone else having trouble?

"Vince" wrote in message
...
John Doe wrote:
Thanks Mike,
I did wonder when I found it running
after I patched and rebooted several times
if it was valid or not.
Thanks for getting back to me so soon,
and with such comprehensive information.
DR

"Mike M" wrote in message
...

891171 is a valid patch (KB891171 - "MS05-002: Vulnerability in cursor
and
icon format handling could allow remote code execution"
(http://support.microsoft.com/?kbid=891711)). Patches usually run once,
patch or update an existing file or files and then exit never to run
again
but it appears that 891171 is different and that kb891171.exe runs
continuously in the background. See also "Microsoft Security Bulletin
MS05-002 - Vulnerability in Cursor and Icon Format Handling Could Allow
Remote Code Execution (891711)"
http://www.microsoft.com/technet/sec.../MS05-002.mspx for
more
details although no specific details for Win Me are included.

In the case of the 891171 patch it adds the files kb891711.exe and
q891171.dll to a new folder windows\system\kb891711 but updates no other
files.
--
Mike Maltby MS-MVP



John Doe wrote:


Hello to all the MVPs,
I have noted kb891711.exe
running as a task on my Win Me O/S
Is this a M/S fix??
or Bug??
Thanks in advance



I installed KB891711 and 888113 yesterday and had nothing but blue
screen problems on start up today. I found 891711 in Startup and have
disabled it. So far restart OK. Anyone else having trouble?

I really think your problem lies somewhere else. I downloaded and installed
these updates with no difficulty, although I wondered for a while why one of
them (KB891711) showed up among the background running programs. (This
question was answered here earlier.)

Ken Bland

In article , Vince says...

I installed KB891711 and 888113 yesterday and had nothing but blue
screen problems on start up today. I found 891711 in Startup and have
disabled it. So far restart OK. Anyone else having trouble?

People were reporting problems when Zone Alarm, Norton Antivirus, and the
Mozilla browsers were used. I can't address the ZA or NAV issues; I don't
run either. However, Mozilla 1.7.5, Firefox 1.0.1, and Netscape 7.2 all
caused problems for me; Mozilla and Firefox a recoverable blue screen error,
Netscape an unrecoverable lockup.

--
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

In article , Justin Thyme says...

I really think your problem lies somewhere else. I downloaded and installed
these updates with no difficulty, although I wondered for a while why one of
them (KB891711) showed up among the background running programs. (This
question was answered here earlier.)

You don't use Mozilla browsers, do you. Kb891711.exe causes problems when
using those browsers.

After checking the write up, I decided I can live without the patch. It
seems that I'd have to have my Internet Zone security settings set to allow
scripts to run, which is not the case for me. It is unclear whether the
vulnerability carries over to the other browsers, but I think not. If it is
scripting issues, the other browsers also control scripting access.

http://www.microsoft.com/technet/Sec.../ms05-002.mspx

NOTE: I could be wrong, MSFT is being very coy about this. Trying, again, to
kill the competition? That is the main reason my next OS will not be built
by Microsoft.

--
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

I'm not having any problems with Firefox 1.0.1 or Mozilla 1.7.5 and
running ZA Pro 5.1.039. Could the culprit be NAV?

N. Miller wrote:
In article , Vince says...


I installed KB891711 and 888113 yesterday and had nothing but blue
screen problems on start up today. I found 891711 in Startup and have
disabled it. So far restart OK. Anyone else having trouble?


People were reporting problems when Zone Alarm, Norton Antivirus, and the
Mozilla browsers were used. I can't address the ZA or NAV issues; I don't
run either. However, Mozilla 1.7.5, Firefox 1.0.1, and Netscape 7.2 all
caused problems for me; Mozilla and Firefox a recoverable blue screen error,
Netscape an unrecoverable lockup.

Could be NAV, I using IE6 still having problems. After doing updates
KB891711 and KB888113 got )0E &
0D Blue Screens followed by GPF by RSCMPT on Krnt386.exe so did a restore
to previous date. Another problem but not related I have to reload Norton
Systemworks(2002) everytime I do a restore to get it working. Never a dull
moment.

"TomV" wrote in message
...
I'm not having any problems with Firefox 1.0.1 or Mozilla 1.7.5 and
running ZA Pro 5.1.039. Could the culprit be NAV?

N. Miller wrote:
In article , Vince
says...


I installed KB891711 and 888113 yesterday and had nothing but blue
screen problems on start up today. I found 891711 in Startup and have
disabled it. So far restart OK. Anyone else having trouble?


People were reporting problems when Zone Alarm, Norton Antivirus, and
the
Mozilla browsers were used. I can't address the ZA or NAV issues; I
don't
run either. However, Mozilla 1.7.5, Firefox 1.0.1, and Netscape 7.2 all
caused problems for me; Mozilla and Firefox a recoverable blue screen
error,
Netscape an unrecoverable lockup.

"N. Miller" wrote in message
om...
In article , Justin Thyme says...

I really think your problem lies somewhere else. I downloaded and
installed
these updates with no difficulty, although I wondered for a while why
one of
them (KB891711) showed up among the background running programs. (This
question was answered here earlier.)

You don't use Mozilla browsers, do you. Kb891711.exe causes problems when
using those browsers.

After checking the write up, I decided I can live without the patch. It
seems that I'd have to have my Internet Zone security settings set to
allow
scripts to run, which is not the case for me. It is unclear whether the
vulnerability carries over to the other browsers, but I think not. If it
is
scripting issues, the other browsers also control scripting access.

http://www.microsoft.com/technet/Sec.../ms05-002.mspx

NOTE: I could be wrong, MSFT is being very coy about this. Trying, again,
to
kill the competition? That is the main reason my next OS will not be built
by Microsoft.

--
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

I'm using Firefox 1.0.1 (mostly) as my browser and I didn't notice any
difference in the way it worked, or experience any conflicts.

Ken Bland