You may experience problems in Windows Explorer or in the Windows shell after you install security update MS06-015 (918165)

CAUSE

Security update 908531 (MS06-015) installs a new program, Verclsid.exe. The Verclsid.exe program validates shell extensions before they are instantiated by the Windows shell or by Windows Explorer. On some computers, the Verclsid.exe program stops responding. The following conditions can cause the Verclsid.exe program to stop responding:

Hewlett Packard (HP) Share-to-Web software is running. You have not installed the new version of security update 908531 (MS06-015) that released on April 25, 2006.

There have been reported issues where software that was previously distributed by Hewlett Packard (HP) causes the Verclsid.exe program to stop responding. The specific component that causes problems is the Share-to-Web namespace daemon (Hpgs2wnd.exe). This software is no longer distributed by HP, but was previously included with the following items:
- HP PhotoSmart software
- Any HP DeskJet printer that includes a card reader
- HP scanners
- Some HP CD-RWs and HP DVD-RWs
- HP cameras
The Share-to-Web namespace daemon can be found in the following folder:
C:\Program Files\Hewlett-packard\Hp share-to-web\Hpgs2wnd.exe
Share-to-Web software is automatically started when you start the computer. The software may also be started by using the Start menu.
NVIDIA display drivers earlier than or including version 61.94 are installed. You have not installed the new version of security update 908531 (MS06-015) that released on April 25, 2006.

This problem occurs if certain NVIDIA shell extensions are running.
The Verclsid.exe program is blocked by your firewall program.

For example, the Verclsid.exe program is flagged by some versions of Kerio Personal Firewall from Sunbelt Software. For more information about Kerio Personal Firewall, visit the following Sunbelt Software Web site:
Sunbelt Kerio Personal Firewall
Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

This software flags any attempt by one application to start another application and asks for the user's approval. Kerio Personal Firewall flags an attempt by Internet Explorer to start the Verclsid.exe program.

RESOLUTION

Add HP Share-to-Web software or NVIDIA shell extensions to the Verclsid.exe "allow list"

To do this automatically, install the new version of security update 908531 (MS06-015) that released on April 25, 2006. This new update is available from Windows Update, from Microsoft Update, and from Automatic Updates if the identified third-party Component Object Model (COM) controls are installed. This new update is also available from the Microsoft Download Center. For more information and deployment options, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/ms06-015.mspx

If you cannot install the new version of security update 908531 (MS06-015) that released on April 25, 2006, you must manually add the HP Share-to-Web software or the NVIDIA shell extensions to the "allow list" by using the steps in the "More Information" section.

Configure your firewall to let the Verclsid.exe program run

Follow the steps for your firewall program to let the Versclid.exe program run, or click to allow the Versclid.exe program to stop running until you click through Kerio Personal Firewall's notification dialog box. You can configure Kerio Personal Firewall so that the Versclid.exe program runs without any prompts.

MORE INFORMATION

Security update 908531 includes an "allow list." The Verclsid.exe program does not scan any file that has an extension that appears in this list. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

908531 MS06-015: Vulnerability in Windows Explorer could lead to remote code execution

Other third-party COM controls or shell extensions may also cause this problem. If the steps that are described in this article do not solve the problem, contact Microsoft Product Support Services. For a complete list of Microsoft Product Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS

Note If other third-party COM controls or shell extensions cause this problem, you can manually add the appropriate shell extension to the "allow list." In this case, you must know the registry keys that correspond to the shell extensions.

How to manually add HP Share-to-Web or NVIDIA shell extensions to the registry if you cannot install the new version of security update 908531 (MS06-015) that released on April 25, 2006

Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry

Manual steps to add HP Share-to-Web software to the "allow list"

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To resolve this problem if you cannot install the new version of security update 908531 (MS06-015) that released on April 25, 2006, you can manually add the HP shell extension to the list. To you do this, you must follow these steps to modify the registry:

Log on to the computer by using an account that has administrative credentials.
Click Start, click Run, type regedit, and then click OK.
Locate and then right-click the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
Point to New, and then click DWORD Value.
For Microsoft Windows 2000-based computers, type the following:
{A4DF5659-0801-4A60-9607-1C48695EFDA9} {000214E6-0000-0000-C000-000000000046}
For Microsoft Windows XP-based or Microsoft Windows Server 2003-based computers, type the following:
{A4DF5659-0801-4A60-9607-1C48695EFDA9} {000214E6-0000-0000-C000-000000000046} 0x401
Right-click the value that you just created, and then set the Value data to 1.
Exit Registry Editor.
Use Task Manager to close the Verclsid.exe program or to restart the computer.

Manual steps to add NVIDIA shell extensions to the "allow list"

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To manually enter NVIDIA shell extensions in the registry if you cannot install the new version of security update 908531 (MS06-015) that released on April 25, 2006, follow these steps:

Log on to the computer by using an account that has administrative credentials.
Click Start, click Run, type regedit, and then click OK.
Locate and then right-click the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
Point to New, and then click DWORD Value.
For Microsoft Windows 2000-based computers, type the following:
{1e9b04fb-f9e5-4718-997b-b8da88302a47} {000214e8-0000-0000-c000-000000000046}
{1e9b04fb-f9e5-4718-997b-b8da88302a48} {000214e8-0000-0000-c000-000000000046}
{1cdb2949-8f65-4355-8456-263e7c208a5d} {000214e6-0000-0000-c000-000000000046}
For Microsoft Windows XP-based or Microsoft Windows Server 2003-based computers, type the following:
{1e9b04fb-f9e5-4718-997b-b8da88302a47} {000214e8-0000-0000-c000-000000000046} 0x401
{1e9b04fb-f9e5-4718-997b-b8da88302a48} {000214e8-0000-0000-c000-000000000046} 0x401
{1cdb2949-8f65-4355-8456-263e7c208a5d} {000214e6-0000-0000-c000-000000000046} 0x401
Right-click the value that you just created, and then set the Value data to 1.
Exit Registry Editor.
Restart the computer.

For the NVIDIA download page, visit the following NVIDIA Web site:

http://www.nvidia.com/content/drivers/drivers.asp

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.