Microsoft pulls Window patch blamed for Blue Screen of Death
Friday, February 12, 2010 8:18Microsoft late Thursday said it had halted distribution of a security update linked to crippled Windows XP PCs that display the notorious Blue Screen of Death.
According to users who posted complaints to Microsoft’s support forum, after installing the update, one of 13 released Tuesday, their machines refuse to start up. Instead, their systems shudder to a stop at the blue screen which in Windows indicates a serious software error and crash.
[ Learn how to secure your systems with Roger Grimes' Security Adviser blog and Security Central newsletter, both from InfoWorld. ]
“We stopped offering this update through Windows Update as soon as we discovered the restart issues,” said Jerry Bryant, a senior manager with the Microsoft Security Response Center (MSRC).
Bryant also said that Microsoft was digging into the problem. “Our initial analysis suggests that the issue occurs after installing MS10-015 (KB977165),” he said. “However, we have not confirmed that the issue is specific to MS10-015 or if it is an interoperability problem with another component or third-party software.”
He also downplayed the extent of the blue screening, saying that only a “limited number” of users were affected.
The support thread dedicated to the problem, however, grew by bounds on Thursday. By day’s end it boasted more than 250 messages — double the number of 12 hours before — and had been accessed over 55,000 times.
Bryant encouraged Windows XP users to apply Tuesday’s other patches, and to protect their machines in lieu of the now-missing MS10-015 with a automated workaround that disables the vulnerable NT Virtual DOS Mode (NTVDM) subsystem.
MS10-015 quashed a pair of 17-year-old kernel bugs in all 32-bit versions of Windows. The vulnerability went public three weeks ago when a Google engineer published proof-of-concept attack code.
Microsoft did not provide any new help Thursday to users whose machines have been incapacitated, nor did Bryant provide a timetable when the company would conclude its investigation. The only Microsoft-endorsed solution, which was posted to the support forum Wednesday by a user , is worthless to netbook owners whose systems lack a CD or DVD drive.
Late Thursday, however, someone identified as “John E” and labeled as a Microsoft employee asked users with the blue screen problem to submit a memory dump file from their PCs for examination.
The impact now stretches beyond Microsoft. A spokeswoman for Dell acknowledged Thursday that calls to its support center were on the increase because of the blue screen issue. Hewlett-Packard did not respond to a similar request for comment on the update problem.
