MS12-034: Description of the security update for CVE-2012-0181 in Windows XP and Windows Server 2003: May 8, 2012

Why is this update re-offered multiple times?

Windows updates are reoffered until the update is installed on your computer. If this update is reoffered, maybe an installation failure has occurred. Check the KB installation log files for error codes. For example, the KB installation log file for this security update would probably be "C:\Windows\ KB2686509.log"
For more information about how to resolve these issues, click the following article number to view the article in the Microsoft Knowledge Base:

958051 You may receive a "0x8007F0F4" error code when you try to install updates from the Windows Update Web site or from the Microsoft Update Web site

What should I do if the installation of this security update fails with the "0x8007F0F4" error?

If you receive the "0x8007F0F4" error when you try to install this security update, check to see if the %windir%\FaultyKeyboard.log file was created on the computer.

If the %windir%\FaultyKeyboard.log file was created, follow these steps:

1. Open the Faultykeyboard.log file that is in the %windir% folder. This log file contains information about registered keyboard layout files that are not in the %Windir%\System32 folder. The log file will resemble the following:
   Keyboard1.dll
   .\Layoutfiles\keyboard2.dll
   C:\Windows\System\Kbda1.dll
   Note In this example, the first entry is just a file name. The second entry includes a relative path with the file name. The third entry includes a full path of the file.

2. Copy the files that are listed in the Faultykeyboard.log log file into the System32 folder.

How do I copy keyboard layout files into the System32 folder?

Notes

• The following steps must be performed by an administrator.

• %Windir%\System32 is a trusted folder. Therefore, make sure that any files that you copy into this folder are trusted by your organization. For example, the file should be provided to by a trusted software vendor.

• Do not move keyboard layout files into the %Windir%\System32. Make sure that you copy the files when instructed instead of moving the files.

Use any of the following methods to copy the keyboard layout file into the System32 folder:

• For any entry in the Faultykeyboard.log log file that uses a file name (and not full or relative path), locate and then copy the file into %Windir%\System32 folder. (Do not move the files.)

• For any entry in the Faultykeyboard.log log file that uses a relative path, use either of the following methods:
  

  • If the entry exists in either of the following registry subkeys, you must locate the file on the hard disk, and then copy the file into the %Windir%\System32 folder:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layouts

  • If the entry does not exist in the previously mentioned registry subkeys, you must contact your software vendor to resolve the issue.

How do I un-register or remove keyboard layouts from my computer?

Consider removing any keyboard layout files that do not come from a trusted software vendor.


Notes

• The following steps must be performed by an administrator.

• Before you remove any keyboard layout files, verify that no trusted applications on the computer require the keyboard layout file.

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756How to back up and restore the registry in Windows

1. Delete any registry entry that references the keyboard layout file in the following registry subkeys:
   

   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layout

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layouts

2. Delete the keyboard layout file.

Method 1. Work around the issue automatically

To do this, follow these steps:

1. Run Microsoft Fix it 50882. To do this, click the Fix it button, click Run in the File Download dialog box, and then follow the steps in the Fix it wizard.
   
   

2. Install the security update that is described in this article.

3. Run Microsoft Fix it 50883. To do this, click the Fix it button, click Run in the File Download dialog box, and then follow the steps in the Fix it wizard.
   
   

Method 2. Work around the issue manually

To do this, follow these steps:

1. Determine whether the registry entry "IgnoreRemoteKeyboardLayout" or the registry entry "ScanCode Map" exists under the following registry subkey. Either of these registry entries may cause the installation of this security update to fail.

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard layout

2. Back up this registry subkey. To do this, click Export on the File menu, and then save the .reg file to a safe location, such as a disk or a USB storage device.

3. Delete the registry subkey.

4. Install the security update that is described in this article.

5. Restore the registry entry (the .reg file) that you saved in step 2. To do this, double-click the .reg file that you saved in step 2, and then click Yes in the dialog box that appears.

If you still cannot install the security update, contact support.

For all supported x86-based versions of Windows XP

For all supported x64-based versions of Windows Server 2003 and of Windows XP Professional x64 edition

For all supported x86-based versions of Windows Server 2003

For all supported IA-64-based versions of Windows Server 2003