[prev in list] [next in list] [prev in thread] [next in thread] 

List:       patchmanagement
Subject:    RE: MS09-010 requires a ShimFlushCache
From:       "Job Cacka" <job () ccbox ! com>
Date:       2009-05-12 22:02:38
Message-ID: 001b01c9d34d$603fb460$aa02a8c0 () Job2172
[Download RAW message or body]

According to:
http://msdn.microsoft.com/en-us/library/bb432482(VS.85).aspx

"Flushes the shim database cache. This function should be called after
installing a new shim database."

According to google searches, this has occurred during many updates for XP.

This might help as well.
http://msdn.microsoft.com/en-us/library/bb432483(VS.85).aspx


-- Job


-----Original Message-----
From: Phillabaum, Paul [mailto:paulp@arts.ucla.edu] 
Sent: Monday, May 11, 2009 8:23 AM
To: Patch Management Mailing List
Subject: MS09-010 requires a ShimFlushCache

Hi,

Can anyone tell me about ShimFlushCache? After installing the MS09-010
fixlet on XP machines, I see this entry in the registry. 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\
"kb923561" -> value "rundll32.exe apphelp.dll,ShimFlushCache"

This only runs when an administrator logs in. I would like to avoid sending
a support person to 100+ desktops, so I want to push this via my patch
management software. I have been able to get my patch management software
(bigfix) to execute "rundll32.exe apphelp.dll,ShimFlushCache" in the SYSTEM
context, but I have no way of testing success or failure. In other words, I
don't know how to confirm in my test environment that running in the SYSTEM
context via a bigfix patch produced the equivalent result as being triggered
by an interactive login by an admin via runonce.

Can anyone tell me what "apphelp.dll,ShimFlushCache" does? What does this
modify? Also, has anyone else encountered this? I have not been able to find
mention of it related to MS09-010.

Thank you for your time,

Paul Phillabaum
paulp@arts.ucla.edu





---
When posting or replying to messages on this list, please send all
emails in plain text format.  HTML formatted messages will not be accepted.

PatchManagement.org is hosted by Shavlik Technologies

To unsubscribe send a blank email to
leave-patchmanagement@patchmanagement.org
If you are unable to unsubscribe via this email address, please email
owner-patchmanagement@patchmanagement.org



---
When posting or replying to messages on this list, please send all
emails in plain text format.  HTML formatted messages will not be accepted.

PatchManagement.org is hosted by Shavlik Technologies

To unsubscribe send a blank email to leave-patchmanagement@patchmanagement.org
If you are unable to unsubscribe via this email address, please email
owner-patchmanagement@patchmanagement.org
[prev in list] [next in list] [prev in thread] [next in thread]