Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum? in Security http://www.dslreports.com/forum/r20775900 en Fri, 27 Nov 2009 07:29:51 EDT Fri, 27 Nov 2009 07:29:51 EDT Found the culprit!! http://www.dslreports.com/forum/remark,20810039 antdude : I think I found it: CmdLineExt.dll (SecuROM context menu for Explorer)

ShellViewEx said: CmdLineContextMenu Class Yes Context Menu SecuROM context menu for Explorer. 1,1,224,0 Sony DADC Austria AG. No No No No No No C:\WINDOWS\system32\CmdLineExt.dll {F0407C3D-349C-42B9-B83E-821E31623DF9} 5/30/2005 2:36:01 PM 7/9/2008 12:37:25 AM No .exe, .vtx, exefile A 107,888

7/9/2008 12:37:25 AM matches the time I installed this and started having problems!! This was from Command & Conquer: Kane's Wrath v1.01 update!

Crossing my fingers that no more crashes (already over an hour with two reboots -- safe mode and normal with all stuff back except this one). Damn these copy protections.

»groups.google.com/group/microsof···dd75937e had the same symptoms in his Vista. Lots of people seem to have this type of problem: »www.google.com/search?q=CmdLineE···xe+crash ... Heads up for those if you ever run into this problem. :)
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer]]> http://www.dslreports.com/forum/remark,20810039 Fri, 18 Jul 2008 01:58:03 EDT Re: Kerio Personal Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20793729 antdude :
said by redwolfe_98 See Profile :

antdude, i have heard of software that is used for burning cd's causing problems with explorer, due to its monitoring folder contents.. you could look into that if you burn cd's..

i have read about that, in the past, particularly in hewlett-packard forums..
Hmm, I still use the same programs many years. I don't have any HP CD burners. I do have a HP printer. And wouldn't safe mode disable these things?
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer]]> http://www.dslreports.com/forum/remark,20793729 Tue, 15 Jul 2008 09:59:17 EDT Re: Kerio Personal Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20793198 redwolfe_98 : antdude, i have heard of software that is used for burning cd's causing problems with explorer, due to its monitoring folder contents.. you could look into that if you burn cd's..

i have read about that, in the past, particularly in hewlett-packard forums.. ]]> http://www.dslreports.com/forum/remark,20793198 Tue, 15 Jul 2008 06:36:48 EDT Re: Kerio Personal Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20789883 antdude :
said by antdude See Profile :

said by redwolfe_98 See Profile :

said by antdude See Profile :

Hmm.. it doesn't seem like KB951748 is causing my Explorer crashes
have you installed the new "spybot 1.6"? if you have, maybe it is the culprit?
Yes, but I already uninstalled it and was able to reproduce it. I think I know what's the cause. K-Lite Codec v4.00, I need to test it later.
Dang, this stuff is getting crazy. I can still reproduce the crashes without K-Lite Codec Full Pack installed. I don't know what the heck is happening. I might upgrade to XP SP3 to see if that helps. It seems like explorer.exe crashes with ntl.dll file. SP3 has newer versions to fix the issue.

I was able to reproduce the crazy crashes in safe mode without networking as well. Same for another administrator account. It can be reproducable if I rename a file (sometimes changes or not), viewing a file property, using Start Menu, etc. :(

If anyone is interested or can help, I posted in "XP Pro. SP2's explorer.exe crashing a lot and randomly." newsgroup thread on msnews.microsoft.com news server in three newsgroups: microsoft.public.windowsxp.general, microsoft.public.windowsxp.help_and_support, and microsoft.public.windbg. It has logs from Process Explorer, Debug Diagnostics Tool, etc.

I hate computers (easy to break and hard to fix). :(
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer]]> http://www.dslreports.com/forum/remark,20789883 Mon, 14 Jul 2008 15:02:25 EDT Re: Kerio Personal Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20789814 Jarmo P : Kerio 2.1.5 works fine with me. I needed to change my DNS rules though as already told to local port range 1024-65535.]]> http://www.dslreports.com/forum/remark,20789814 Mon, 14 Jul 2008 14:46:54 EDT Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20786180 lilhurricane :
said by redrebel See Profile :

I'm one of the minority that still uses KPF v2.1.5 (desktop and laptop)
You aren't the "only" one ;)

This plus BlitzenZeus See Profile's ruleset work well for me..multiple browsers..

No issues as yet :)
--
~Safe Hex~ Team Discovery ~ Project Hope ~ Like A Hurricane~]]> http://www.dslreports.com/forum/remark,20786180 Sun, 13 Jul 2008 20:37:33 EDT Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20785589 NetFixer :
said by Curiosity See Profile :

Why is changing the local port range going to make DNS more secure? What is the idea behind that?
Try doing a Google or Yahoo! search for DNS spoofing and you will find a lot of answers to your question. Here is a sample link from such a search, I hope some of the results you get will match your technical knowledge level, since I don't know exactly how high or low to shoot.

From SANS Internet Storm Center: Multiple Vendors DNS Spoofing Vulnerability
--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander.
Test your firewall.]]> http://www.dslreports.com/forum/remark,20785589 Sun, 13 Jul 2008 18:04:17 EDT Re: Kerio Personal Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20785540 antdude :
said by redwolfe_98 See Profile :

said by antdude See Profile :

Hmm.. it doesn't seem like KB951748 is causing my Explorer crashes
have you installed the new "spybot 1.6"? if you have, maybe it is the culprit?
Yes, but I already uninstalled it and was able to reproduce it. I think I know what's the cause. K-Lite Codec v4.00, I need to test it later.
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer]]> http://www.dslreports.com/forum/remark,20785540 Sun, 13 Jul 2008 17:49:33 EDT Re: Kerio Personal Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20785510 redwolfe_98 :
said by antdude See Profile :

Hmm.. it doesn't seem like KB951748 is causing my Explorer crashes
have you installed the new "spybot 1.6"? if you have, maybe it is the culprit?]]> http://www.dslreports.com/forum/remark,20785510 Sun, 13 Jul 2008 17:41:31 EDT Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20785403 Curiosity :
said by redrebel See Profile :

I'm one of the minority that still uses KPF v2.1.5 (desktop and laptop) and yes when I installed the dreaded KB951748 it knocked out IE and Firefox for me. Looking at my logs it was using highports for DNS resolution. I had it specifically set to only use the range of 1024-5000. Made the change to allow highports (1024-65535) and it works fine (desktop only).
Why is changing the local port range going to make DNS more secure? What is the idea behind that?]]> http://www.dslreports.com/forum/remark,20785403 Sun, 13 Jul 2008 17:16:28 EDT Re: Kerio Personal Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20778859 antdude : Hmm, it doesn't seem like KB951748 is causing my Explorer crashes. I just had a crash again. :(

Thanks to everyone who replied about this.]]> http://www.dslreports.com/forum/remark,20778859 Sat, 12 Jul 2008 00:45:36 EDT Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20776499 antdude :
said by redrebel See Profile :

I'm one of the minority that still uses KPF v2.1.5 (desktop and laptop) and yes when I installed the dreaded KB951748 it knocked out IE and Firefox for me. Looking at my logs it was using highports for DNS resolution. I had it specifically set to only use the range of 1024-5000. Made the change to allow highports (1024-65535) and it works fine (desktop only).
On the laptop I said forget it and uninstalled the patch and will wait to figure out what happens next.
Hmm, DNS? I wonder if Explorer is calling out even though I use hosts and my old Netgear RT311 router (firmware from 2002 or so). I do use LAN file sharing with a Linux/Debian box (Samba). What's the rule called for this DNS resolution?
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer]]> http://www.dslreports.com/forum/remark,20776499 Fri, 11 Jul 2008 16:08:51 EDT Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20776493 antdude :
said by Sentinel See Profile :

I have 5 PCs running XP Home Ed w/SP3 and KPF 2.1.5 and I have all updates that I know of and I am having no problems. But I don't use IE. I don't know if that matters or not.
I rarely use IE6 as well.
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer]]> http://www.dslreports.com/forum/remark,20776493 Fri, 11 Jul 2008 16:08:06 EDT Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20775900 redrebel : I'm one of the minority that still uses KPF v2.1.5 (desktop and laptop) and yes when I installed the dreaded KB951748 it knocked out IE and Firefox for me. Looking at my logs it was using highports for DNS resolution. I had it specifically set to only use the range of 1024-5000. Made the change to allow highports (1024-65535) and it works fine (desktop only).
On the laptop I said forget it and uninstalled the patch and will wait to figure out what happens next.]]> http://www.dslreports.com/forum/remark,20775900 Fri, 11 Jul 2008 14:13:25 EDT Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20775680 Sentinel : I have 5 PCs running XP Home Ed w/SP3 and KPF 2.1.5 and I have all updates that I know of and I am having no problems. But I don't use IE. I don't know if that matters or not.]]> http://www.dslreports.com/forum/remark,20775680 Fri, 11 Jul 2008 13:38:16 EDT Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20775556 antdude :
said by grobinette See Profile :

said by antdude See Profile :

Also, where is the forum for old KPF users? I can't remember where it is. :(

Thank you in advance. :)
The old Kerio forum fell by the wayside.
»Old Forums

I used it from back when it was Tiny and enjoyed reading in the forum but eventually dropped it.
Is this the only forum that old KPF users hang out now? I thought Sunbelt had a forum for them.
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer]]> http://www.dslreports.com/forum/remark,20775556 Fri, 11 Jul 2008 13:17:30 EDT Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20775549 antdude : Strange. I uninstalled this KB update and restarted explorer.exe (it crashed actually and I needed to reboot PC), but no crashes now. Hmm!]]> http://www.dslreports.com/forum/remark,20775549 Fri, 11 Jul 2008 13:16:57 EDT Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20775528 BandHeight : I've got the following PC set-ups:

1 - XP Home SP2 w/ Kerio v2.1.5

2 - XP Pro SP3 w/ Kerio v2.1.5

1 - XP Pro SP3 w/ Kerio v2.1.5 running simultaneously with Comodo Firewall Pro (testing the Defense+ portion)

All are patched and everything is perfectly stable. Internet connections are fine. ]]> http://www.dslreports.com/forum/remark,20775528 Fri, 11 Jul 2008 13:12:58 EDT Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20775345 grobinette :
said by antdude See Profile :

Also, where is the forum for old KPF users? I can't remember where it is. :(

Thank you in advance. :)
The old Kerio forum fell by the wayside.
»Old Forums

I used it from back when it was Tiny and enjoyed reading in the forum but eventually dropped it.
--
Team Discovery]]> http://www.dslreports.com/forum/remark,20775345 Fri, 11 Jul 2008 12:40:03 EDT Kerio Personal Firewall v2.1.5 & KB951748? Kerio forum? http://www.dslreports.com/forum/remark,20775245 antdude : Hi!

Is anyone else here using old KPF v2.1.5, Windows XP SP2, and with this KB951748? If so, then are you seeing any problems like Windows Explorer crashing randomly (e.g., ntdll.dll) when using Windows Explorer?

Also, where is the forum for old KPF users? I can't remember where it is. :(

Thank you in advance. :)
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer]]> http://www.dslreports.com/forum/remark,20775245 Fri, 11 Jul 2008 12:21:18 EDT