Solved Win Update KB2506014 Causes Restarts

[ddougb]

Hi All, today I received a whole bunch of win updates which I installed. I then started having PC restarts every few minutes. I went back to a restore point before the updates were installed and all was then OK again. I installed the updates a few at a time and was able to isolate the problem to KB 2506014
Microsoft Security Advisory: Update for the Windows Operating System Loader.

Does anyone know of a problem with this update? I need toupdate my PC profile to indicate the PC is running SP1 win 7 Home Premium x64

Thanks so much, Richard

 

[JMH]

Hi there Richard.

* There is very little information currently available re your specific problem.

BTW well done on your troubleshooting measures applied to isolate the nuisance.


* Note - Support - I suggest you seek further help via the methods below

Customers in the United States and Canada can receive technical support from Security Support. For more information about available support options, see Microsoft Help and Support.

International customers can receive support from their local Microsoft subsidiaries. For more information about how to contact Microsoft for international support issues, visit International Support.
Microsoft TechNet Security provides additional information about security in Microsoft products.

* Some links below that you have probably already noted.

Microsoft Security Advisory (2506014): Update for the Windows Operating System Loader

Microsoft Security Advisory: Update for the Windows Operating System Loader

Microsoft Support

Good luck.

 

[ddougb]

Problem Solved KB-2506014 Installed and Stable

Thanks for the information JMH. I decided to visit the MS site and downloaded and saved the update to my PC. I created a restore point and then installed the downloaded update. My PC is updated and stable, no more self boots. Go figure!!??

Richard

 

[JMH]

Thanks for reporting back Richard.
That is certainly good news,

Safe surfing.

 

[blkolo]

I too was able to isolate this patch as the source of Win7 Home Premium x64 automatically booting to recovery mode and reporting system 'could not be recovered.' Initial system restores failed, but eventually got system to boot with sfc /scannow and chkdsk and repeated system restore points.
I manually created new restore points and was able to narrow it down to patch KB2506014. I can recreate it every time. Hardware is Dell Inspiron laptop with factory installed OS.

 

[ddougb]

Solved Win Update KB2506014 Causes Restarts

Hi, My solution to installing the update was do download from Windows without using the update feature of Win7. Then created a restore point and executed the install from my desktop.

Richard

 

[dypsis]

I also have this problem with KB2506014.
Downloading and installing it manually didn't work for me. Same problem.
It reboots and goes to "Startup Repair" and restores my computer to an earlier time.

I have hidden this update for now until I can find a solution.
I am running Windows 7 Ultimate 64-bit.

 

[kgranson]

same error

I too have seen this error on one of my laptops. It's a Sony Vaio VPCCW13FX. Every time I apply this patch it tries to recover and typically fails. I just now finally narrowed down the patch. I wish I would have come to this forum sooner.

I have not had this problem with my desktop computer (64 bit Ultimate) or my other laptops (2 other 64 bit computers and 1 32 bit).

There doesn't seem to be a lot of info about this on the web. Has anyone contacted Microsoft about it to see what they say?

 

[dypsis]

I have been trying to work out what the common denominator is with the affected computers, but there doesn't seem to be anything obvious. Maybe a BIOS update is needed.

The motherboard of my affected computer is: ASUS P7P55D-E LX.

 

[kgranson]

According to Sony (god I hate Viao's) by BIOS is up to date. The other computers we have that are 64 bit are 2 Toshiba laptops and a custom built with an older ASUS motherboard in it that hasn't had the firmware updated in years.

 

[ScottLeffel]

Possible Commonality - TDL4 Rootkit?

I would advise anyone who has experienced the problem described in this thread, and in particular anyone who continues to face an inability to apply the update/patch in KB2506014, even manually via downloaded installer, to investigate and run Kaspersky's TDSSKiller, which can be found at:

Anti-rootkit utility TDSSKiller

While Microsoft's security advisory for KB2506014 never mentions TDL4, or the TDSS family of Rootkits specifically, and only generically addresses the concept of a Rootkit, the fact is that KB2506014 was very carefully and specifically designed to address flaws or "misfeatures" in winload.exe in terms of its handling of BCD variables related to the WinPE environment & kernel-mode code signing policy enforcement which TDL4 cleverly exploits. I just went through this mess yesterday, fixing a Win7 Home Premium x64 laptop for a friend.

I can post more later about how TDL4 operates, what KB2506014 specifically does to address that (since the security advisory is purposely somewhat vague in that respect), and why I believe that an infected system can fail to boot following even the manual installation of this update, if anyone is interested. The latter is somewhat a matter of conjecture on my part, but I have solid information on the first two topics I mentioned. In the meantime, this just might be the commonality some are looking for right now, and I strongly believe it'd at least be worth your while to investigate this possibility. I hope this helps those who are fighting with this, and again, if there is interest I will post to elaborate on the subject.

 

[JanHenning]

I would advise anyone who has experienced the problem described in this thread, and in particular anyone who continues to face an inability to apply the update/patch in KB2506014, even manually via downloaded installer, to investigate and run Kaspersky's TDSSKiller, which can be found at:

Anti-rootkit utility TDSSKiller

Thank you so much! This tool solved the KB2506014 corrupt ci.dll problem for me.

 

[hr2pilot]

Finally I found a thread with a real bit of valuable information.
Hd I found thisbthread and your suggestion using TDSSKiller, I would have saved myself a weeks worth of insufferable agony trying to sort out and repair the damage to ci.dll file caused by a virus.

Finally being able to upload KB250614 shows the fix works!

Thanks Scott!