OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: MS00-29 patch = blah
From: bill walsh (operator0MINDSPRING.COM)
Date: Fri Jun 09 2000 - 03:12:25 CDT

I've had a really bad experience with this patch.. I'm running NT4 Server
SP6a on all of my servers, with all the relevant and post-SP6a security
patches installed, and all the appropriate security-based registry settings
set.. on 4 of our 25 servers, particularly extremely high-traffic machines,
including two wicked new Dell Poweredge 2400 boxes, the MS00-29 patch
(q259728i) caused insane bluescreens.. I would first get lots of messages
about being low on virtual memory, then every 1 1/2 to 2 hours the machines
would bluescreen, referring specifically to the module tcpip.sys.. I would
check the MEMORY.DMP file, and two pages down into the file there was a
section of text saying that there was a memory parity error, consequently a
hardware malfunction, please contact hardware vendor etc. etc... now
512megs of memory each going bad on 4 different machines at the same time
is obviously nonsense, and no viruses were detected as I suspected a
corrupt tcpip.sys (duh).. once I uninstalled q259728i and the previous
version of tcpip.sys was reverted to (152kb, 11/19/99), everything was fine
and I haven't had a bluescreen since..

anyone else have these problems?

I'm going to bed now..