KB2679255 may cause issues

Topic

New Reply

In Susan’s last story, she had mentioned to install KB2679255, but there may be a problem. I cannot speak for everyone, but just in case. KB2679255 is creating Hidden threads in Windows 7 systems. These threads are now showing up in Avira Anti Virus as a threat (I use Avira). When I uninstall KB2679255, then the Avira scan finds nothing. Here is what I am talking about; this is the part of the log when it finds the Hidden objects as a virus when KB2679255 is installed

Starting search for hidden objects.
HKEY_LOCAL_MACHINESoftwareMicrosoftWindows Media Player NSS3.0Events{36A76769-9A75-4987-8E8C-AAD0733CC97C}
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINESystemControlSet001ControlClass{4D36E972-E325-11CE-BFC1-08002BE10318}013LinkageUpperBind
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINESystemControlSet001ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}{F6AC6B09-B167-4126-88EF-673455FF8B41}ConnectionName
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINESystemControlSet001ControlNetwork{4d36e975-e325-11ce-bfc1-08002be10318}{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}LinkageBind
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINESystemControlSet001ControlNetwork{4d36e975-e325-11ce-bfc1-08002be10318}{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}LinkageRoute
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINESystemControlSet001ControlNetwork{4d36e975-e325-11ce-bfc1-08002be10318}{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}LinkageExport
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINESystemControlSet001servicesTcpipParametersInterfaces{D3AE9D8C-A2AE-4707-BB6D-FEE7502EC35C}DhcpInterfaceOptions
[NOTE] The registry entry is invisible.
HKEY_USERSS-1-5-20SoftwareMicrosoftMediaPlayerHealth{4DF4A9AA-A28D-4A15-9C30-D941ED22F4A6}
[NOTE] The registry entry is invisible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
Hidden thread
[NOTE] A system thread is not visible.
72 Hidden objects were found

Notice all the entries of “Hidden thread”. Now, I uninstalled KB2679255, rebooted, did a reg clean and cleaned other items, rebooted and this is what the Avira log looks like now;

Starting search for hidden objects.
HKEY_LOCAL_MACHINESoftwareMicrosoftWindows Media Player NSS3.0Events{3656FDFB-2D6A-4685-A149-1EC4A4E71D6A}
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINESoftwareMicrosoftWindows SearchGatherWindowsSystemIndexCrawls13
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINESystemControlSet001ControlClass{4D36E972-E325-11CE-BFC1-08002BE10318}013LinkageUpperBind
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINESystemControlSet001ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}{F6AC6B09-B167-4126-88EF-673455FF8B41}ConnectionName
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINESystemControlSet001ControlNetwork{4d36e975-e325-11ce-bfc1-08002be10318}{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}LinkageBind
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINESystemControlSet001ControlNetwork{4d36e975-e325-11ce-bfc1-08002be10318}{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}LinkageRoute
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINESystemControlSet001ControlNetwork{4d36e975-e325-11ce-bfc1-08002be10318}{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}LinkageExport
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINESystemControlSet001servicesTcpipParametersInterfaces{D3AE9D8C-A2AE-4707-BB6D-FEE7502EC35C}DhcpInterfaceOptions
[NOTE] The registry entry is invisible.
HKEY_USERSS-1-5-20SoftwareMicrosoftMediaPlayerHealth{23CA25CE-7EC3-42C7-BE18-DFFA9665F336}
[NOTE] The registry entry is invisible.
9 Hidden objects were found

All those entries are now gone and Avira Anti-Virus does not detect any sort of virus or malicious software during the scan.

This may not affect other systems using other anti-virus software, but just in case; I wanted to advise everyone if they are seeing this as well or if their scans are showing up some malicious entry. It could be related to this update from Microsoft.

FYI everyone

Reply | Quote

Replies

Maybe the problem is Avira and not the patch? Did you report that to Avira’s tech support?

Reply | Quote

Finally getting back to this. I did contact Avira and it is all over their forums. I wanted to make sure that if people had Avira (or another A/V doing the same thing) just to be aware. And uninstalling the KB2679255 patch was okay to do since reading the Microsoft website; it is classified as “Recommended” so it is not a critical security issue and listed here it was put on the back burner for a while so another reason doing this was okay.

Avira released an update yesterday and I installed KB2679255, now those entries are marked as “The registry entry is invisible”. So just letting people be aware, your hidden objects will be increased, but it will not show up as a virus in Avira’s case. Other A/V having the same issue? Not sure, but case closed for Avira/Microsoft

Reply | Quote