[FIX] - McAfee Update Causing Windows XP SP3 to Shut Down

There has been issue with a McAfee DAT file 5958- released Wednesday, April 21, 2010. Its causing stability issues on Windows XP client systems. The symptom is caused by a false-positive detection of the W32/wecorl.a virus on a core Windows file (svchost.exe). Once the file is quarantined by McAfee, the system may encounter one of the following symptoms:

· The computer shuts down when a DCOM error or a RPC error occurs

· The computer continues to run without network connectivity.

· The computer triggers a Bugcheck (Blue Screen).

 

McAfee DAT 5958 file is propagated to client machines that conduct automatic updates of definition files. McAfee updated the DAT file soon after the problem was identified with a new version that does not cause the problem. DAT 5958  file has been superseded by version 5959, which corrects the false positive detection. Additionally, McAfee has released an EXTRA.DAT file (Check the McAfee links given at the end) that can be used to suppress the false detection of the Svchost.exe process for customers who are running the 5958 DAT file.

 

Resolution

To manually repair a computer encounters this problem, follow these steps:

1.     Restart the computer in safe mode by pressing F8 before the Windows splash screen appears.

2.     Log on to the computer. Then, press CTRL+ALT+DEL, and then click Start Windows Task Manager.

3.     Select New Task (Run…) from the File menu.

4.     Type cmd.exe, and then press ENTER.

5.     Run the following command:

ren “%programfiles%\Common Files\McAfee\Engine\avvscan.dat” avvscan.old

Note This behavior removes McAfee virus definitions. Make sure that you update to the latest definitions (5959 DAT or newer) after you complete these steps to restore virus definitions.

6.     Run the following command:

copy %systemroot%\system32\dllcache\svchost.exe %systemroot%\system32\ and press ENTER

7.     Restart the computer.

Source :

Microsoft KB Article:

http://support.microsoft.com/kb/2025695

 

Please refer also to the following McAfee articles:

https://kc.mcafee.com/corporate/index?page=content&id=KB68780

https://kc.mcafee.com/corporate/index?page=content&id=KB51109

 

Windows XP Service Pack 3 (SP3) is the only operating system that is affected by this problem.

Windows XP SP3 feature by feature compared to Windows Vista SP1

Microsoft has released a white paper which compares feature and capabilities of Windows XP SP3 with Windows Vista SP1. Using this comparison, customers can adjust their expectations for the security, management, deployment, mobility, and productivity of either operating system. For each feature or capability section compares key Windows Vista advancements against Windows XP.

Its a white paper which clearly shows how Windows Vista is superior to Windows XP with those compared features. So this document will be a good help in deciding for those who were waiting to switch to Vista from XP. This document makes a good read where features are compared in a tabular format with key differences shown.

You can download the document here. Its available in pdf format (737 KB ) or in xps format (580 KB) file.

Internet Explorer and Windows XP SP3

Now that Windows XP SP3 has been made publicly available and you must be ready to install it, there are few things to be noted related to Internet Explorer and XP SP3. IE Blog has posted about it in details:

" Internet Explorer 6 Users

XPSP3 will continue to ship with IE6 and contains a roll-up of the latest security updates for IE6. If you are still running Internet Explorer 6, then XPSP3 will be offered to you via Windows Update as a high priority update. You can safely install XPSP3 and will have an updated version of IE6 with all your personal preferences, such as home pages and favorites, still intact.

If you are currently running IE7 or IE8 on  Windows XP SP2 (XPSP2) and you are thinking of upgrading to XPSP3, read on.

Internet Explorer 7 Users

If you are currently running IE7 on XPSP2, Windows Update will offer you XPSP3 as a high priority update. If you choose to install XPSP3, Internet Explorer 7 will remain on your system after the install is complete. Your preferences will be retained. However, you will no longer be able to uninstall IE7. If you go to Control Panel->Add/Remove Programs, the Remove option will be grayed out.

This behavior is by design and here is why. When we install IE7 on Windows XP SP2, we backup the existing IE6 files in an uninstall directory.  Those IE6 files are the ones that shipped on XPSP2 plus all the security updates you’ve installed while using IE6. Windows XP SP3 contains a newer version of the Internet Explorer 6 files. If you have XPSP3 on your system and uninstall IE7, your system would revert to the backed up (older) version of the IE6 files rather than the newer XPSP3 version. You would end up in a mixed file state in Windows where most files would be the upgraded XPSP3, except for the IE6 files restored when uninstalling IE7. This state is not supported and is very bug prone. To ensure a reliable user experience, we prevent this broken state by disabling the ability to uninstall Internet Explorer 7.

If you must uninstall IE7 after you have upgraded to XPSP3, then you have to first uninstall XPSP3, and then uninstall IE7. After this series of uninstalls, you will be reverted back to a XPSP2, and a stable version of IE6, so feel free to upgrade to XPSP3 again.

If you install IE7 after you install XPSP3, then you will be able to uninstall IE7 at any point and be reverted to the newer IE6 version that ships in XPSP3. The restriction on uninstalling only applies to when you install a Windows Service Pack release on top of a standalone IE release.

Keeping this in mind, you might want to uninstall IE7, upgrade to XPSP3 and then install IE7 again so you can uninstall IE7 in the future if need be.

Internet Explorer 8 Beta 1 Users

Installing IE8 Beta1 on Windows XP SP3  is fully supported, so go ahead and upgrade your computers to XPSP3 and then install IE8 Beta 1 to try out our new features. You will be able to uninstall IE8 Beta 1 at any point to revert back to either IE7 or IE6 depending on what you were using before.

However, if you already have IE8 Beta 1 installed on XPSP2, Windows XP SP3 will not be offered to you via Windows Update. This is because after you update your system to XPSP3, you will no longer be able to uninstall IE8 Beta 1 and the Remove option will be grayed out under the Add/Remove programs in Control Panel. The reason is the same as in IE7 case described above. Since people are more likely to uninstall beta software, we strongly recommend uninstalling IE8 Beta 1 prior to upgrading to Windows XP SP3 to eliminate any deployment issues and install IE8 Beta 1 after XPSP3 is on your machine." (Source:IE Blog)

I tried this and this is what happened, when you install XP SP3 on an already installed IE8 Beta1 machine, there's no Remove option.

Windows XP SP3 available on Windows Update and Microsoft Download center

Finally Windows XP SP3 is available for the general public, after distribution was halted (Windows XP Service Pack 3 via Windows Update Delayed) when Microsoft discovered a compatibility glitch involving them and Microsoft Dynamics Retail Management System. Automatic distribution of Windows Vista SP1 is also resumed now. To help protect customers, a filter is put in place to prevent Windows Update from offering both service packs to systems running Microsoft Dynamics RMS.  A fix is being tested and it will be made publicly available via Microsoft Download Center this month.(TechNet Forum)

Here are the links to XP Sp3 from Microsoft Download center:

Windows XP Service Pack 3 - ISO-9660 CD Image File

Windows XP Service Pack 3, Checked Build

Windows XP Service Pack 3 Network Installation Package for IT Professionals and Developers

Windows XP Service Pack 3 MUI Pack Update

Release Notes for Windows XP Service Pack 3

Windows XP Service Pack 3 Overview

IF YOU ARE UPDATING JUST ONE COMPUTER: A smaller, more appropriate download for individual users is now available on Windows Update. The best way to ensure you get Windows XP Service Pack 3 is by turning on the Automatic Updates feature in Windows XP. You can use our step-by-step instructions or, if you prefer, let us do it for you.
The Microsoft Download Center site is your only authorized web source for downloading a licensed copy of Windows XP Service Pack 3. To report a website offering unlicensed copies of Windows XP SP3 for download, please send e-mail to: piracy@microsoft.com or visit http://www.microsoft.com/piracy/ReportingUs.mspx.

IE8 beta 1 and Windows XP SP3 :  Also one more thing to Note is if you already have IE8 Beta 1 installed on XPSP2, Windows XP SP3 will not be offered to you via Windows Update. This is because after you update your system to XPSP3, you will no longer be able to uninstall IE8 Beta 1 and the Remove option will be grayed out under the Add/Remove programs in Control Panel. The reason is the same as in IE7 case described above. Since people are more likely to uninstall beta software, we strongly recommend uninstalling IE8 Beta 1 prior to upgrading to Windows XP SP3 to eliminate any deployment issues and install IE8 Beta 1 after XPSP3 is on your machine.

For more details check IE and Windows XP Service Pack 3

Also check Windows XP SP3 RTM Screenshots, when I had installed it last month when it was made available on MSDN/TechNet.

Windows XP Service Pack 3 via Windows Update Delayed

Microsoft has decided to delay Windows XP SP3 RTW that is it will delay the release of Windows XP SP3 to Windows Update and the Microsoft Download Center as planned on April 29.

This is what the release manager Chris Keroack announced :

"In the last few days, we have uncovered a compatibility issue between Microsoft Dynamics Retail Management System (RMS) and both Windows XP SP3 and Windows Vista Service Pack 1 (SP1). In order to make sure customers have the best possible experience, we have decided to delay releasing Windows XP Service Pack 3 (SP3) to the web.

To help protect customers, we plan to put filtering in place shortly to prevent Windows Update from offering both service packs to systems running Microsoft Dynamics RMS.  Once filtering is in place, we expect to release Windows XP SP3 to the web.

We are also testing a fix, and will make it available once that process is complete.  Once they have installed the fix, Microsoft Dynamics RMS customers should be able to run both service packs.

Until then, we advise Microsoft Dynamics RMS customers to not install either service pack.  Microsoft Dynamics RMS customers running Windows XP SP3 or Windows Vista SP1 should contact Microsoft Customer Support Services for additional information."

(Source:TechNet Forum)

No new dates have been announced.

Also, Some people have downloaded it from direct link to the executable of XP SP3 available on the net. A Microsoft spokeswoman said the company is advising users against doing this. The official response:

“Customers should not download Microsoft software from links posted on non-Microsoft websites, when those links point directly to the executable as is the case here. Customers should always download from a page on Microsoft.com that provides all relevant download details, installation instructions, and release notes. In this particular case, it’s possible that some 3rd party websites are linking to the Windows XP SP3 software that we have published for MSDN and TechNet subscribers. Since we cannot confirm the source of every link that 3rd parties provide, out recommendation is that customers wait until we’ve published Windows XP SP3 to Windows Update and the Download Center.”

(Source:Mary Jo Foley Blog)

While XP SP3 is available on MSDN/TechNet. Windows XP SP3 now available on MSDN, TechNet

Windows XP SP3 RTM Screenshots

After downloading the ISO image from TechNet/MSDN, I burnt the XP SP3 CD. After just running the CD it'll come up with the XP SP3 Installation Welcome Screen.

Check out some of the screenshots obtained during the Installation of Windows XP SP3. I already had XP SP3 RC2 refresh, I did not remove it, just installed the RTM. If you are having any earlier Beta version of SP3, first uninstall it then install the RTM. I could finish the installation within ~12 min. Then I had to restart to finish the installation. There was no problem and everything was smooth.

The only thing I noticed during installation was, in the 2nd Screen, there was a link saying : "What to know before installing Service Pack 3", which when clicked opened up a FAQ page about Installing Service Pack2.

There's in fact another file READMESP.HTM in the CD which has all relevant information.So the link must point to this file. I am sure it'll be corrected soon.

So the installation of XP SP3 was finished without any problem and the system is running smoothly.Any problem will be  reported if encountered.

Windows XP SP3 now available on MSDN, TechNet

Windows XP SP3 appears on MSDN and TechNet Subscriptions. Earlier it was said that it will be delayed but now the Subscribers of TechNet and MSDN can get the XP SP3.

You can find it in the "Top Subscriber Downloads" Section.

Windows XP Service Pack 3 Release schedule

The announcement of Windows XP SP3 Released to manufacturing was put on the TechNet Forum by Chris Keroack, Release Manager of XP SP3. The announcement goes like this:

Today we are happy to announce that Windows XP Service Pack 3 (SP3) has released to manufacturing (RTM). Windows XP SP3 bits are now working their way through our manufacturing channels to be available to OEM and Enterprise customers.

We are also in the final stages of preparing for release to the web (i.e. you!) on April 29th, via Windows Update and the Microsoft Download Center. Online documentation for Windows XP SP3, such as Microsoft Knowledge Base articles and the Microsoft TechNet Windows XP TechCenter, will be updated then. For customers who use Windows XP at home, Windows XP SP3 Automatic Update distribution for users at home will begin in early summer.

Thanks to everyone here who installed the public betas – you not only gave us detailed feedback but also helped each other out with timely troubleshooting. Through the beta program we found several important issues and were able to confirm some essential fixes. We couldn’t have done this without you.

We will still be monitoring this forum during the next few weeks in case you have more feedback about the release of Windows XP SP3.

On behalf of myself, Shashank Bansal and Windows Serviceability, many thanks.

Chris Keroack
Release Manager, Windows XP Service Pack 3
Windows Serviceability

So one can get this on April 29th.

While BLAKE, had come across a post from Nick MacKechnie, Microsoft Senior Technical Account Manager in New Zealand which posted the complete XP SP3 Release schedules, but was later taken off.
Apr-21 = RTM (Release to Manufacturing)
Apr-21 = OEM Channel
Apr-29 = Windows Update
Apr-29 = Download Center
May-02 = MSDN/Technet Download
May-19 = Windows XP SP3 Fulfillment Media
Jun-01 = Volume Customers via Download
Jun-10 = Automatic Updates
Thanks Blake!

UPDATE :23rd Apr.
Windows XP SP3 available on MSDN and TechNet now. Check this post Windows XP SP3 now available on MSDN, TechNet