locked
Money 2007 Premium vers 16.0 crashes after importing bank statement (XP professional SP3 ) RRS feed

  • Question

  • Hello,

    Since approximately mid Dec haven't been able to upload bank/credit card statements without Money crashing.  After repairing Money data file ("Fixed records in online table") I tried suggested fixes to no avail.

    Windows XP Professional SP3 32 bit, MS Money 2007 Premium 16.0.125.621, IE:  8.0

    Fixes tried:  Removed Windows XP update KB2758857.  Replaced mnyob99.dll in folder MNYCoreFiles with patched version downloaded from ameridan Money offline weblog.  Removed and re-installed Money.

    Following a later OS updates, December updates no longer appear in add/remove programs list (show updates box checked); however a hard drive search shows the following "security catalog" files:  C:\WINDOWS\$hf_mig$\KB2758857\update\KB2758857 and C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2758857.  Is the troubling Windows update really removed?

    Have seen solutions for later versions of Money and Windows 7 and 8 but not Money version 16 and Windows XP.

    Is there a later version of Money where the fixes work and continues to provide online updates to security prices?  Prefer not to update to Sunset, don't want to loose online updates.

    Please help!!!

    Thanks

    <input id="8ed486d6-edc9-4321-8222-a48f181946b6_attachments" type="hidden" />
    Saturday, January 26, 2013 10:57 PM

Answers

  • The update for KB2758857 made a change to the kernel32.dll file.

    Therefore you need to check which version of the file you have running on your system. You can do that as follows :

    Use Windows Explorer to navigate to the C:\Windows\System32 folder. There you will find the kernel32.dll file.

    Right click on the file and select Properties. From the Properties display, click the Version tab. The first piece of

    data displayed on the Version tab is the file version. If the version is 5.1.2600.6293 then that is the level of the

    file that was shipped with KB275887.

    You should also check the same dll (kernel32.dll) in folder C:\Windows\System32\dllcache as there is a copy in

    there as well. 

    If you do NOT have the fix applied, it is likely the file version shown will be 5.1.2600.5781

    If I needed to revert back to the previous dll, I would do the following :

    Rename the kernel32.dll file on both of those folders to Okernel32.dll

    Copy the version of kernel32.dll from folder C:\Windows\$NTUninstallKB2758857$ to C:\Windows\system32 and C:\Windows\system32\dllcache.

    Reboot.

    Whenever I do ANY changes like that I have always taken a backup of my system before I start.

    • Edited by AshleyST Wednesday, January 30, 2013 8:47 AM
    • Marked as answer by knussml Saturday, February 2, 2013 7:00 PM
    Wednesday, January 30, 2013 8:31 AM
  • AshleyST,

    Thank You!!!  Replacing kernel32.dll version 5.1.2600.6293 with 5.1.2600.5781 in folder C:\Windows\System32 solved the issue of MS Money 2007 Premium version 16 crashing when uploading bank statements.  The patched version of mnyob99.dll did not work (Money would not open), probably because it was written for later version of Money.  One difference from your instructions:  I found version 5.1.2600.5781 of kernel32.dll not in C:\Windows\$NTUninstallKB2758857$ but in C:\WINDOWS\$hf_mig$\KB959426\SP3QFE.  I replaced the later version with earlier and uploading statements worked.

    Now for the trade-offs.  Is my system now more vunerable to threats addressed by Windows update KB2758857?  If so will the Python program being worked my Kal Learner to modify mnyob99.dll for later versions of Money solve the issue without the threats?  Lastly, will future Windows update undo the fix described above?

    Thanks to all who have worked so hard to address this!!!!!!!!

    • Marked as answer by knussml Saturday, February 2, 2013 7:34 PM
    Saturday, February 2, 2013 7:32 PM

All replies

  • SarahB reported on my blog that by simply removing KB2758857 from her PC with XP SP3 (and using the new dll file - which is really written for Money Plus & Sunset), she got Money 2007 working again, so perhaps you need to insure that KB2758857 actually is removed AND automatic updates is turned OFF to insure that it isn't reinstalled again.

    -Dan



    • Edited by ameridan Sunday, January 27, 2013 7:27 PM
    Sunday, January 27, 2013 7:25 PM
  • I read ameridan blog.  Others with Money 2007 vers 16 and XP have had success addressing downloads crashing Money by removing Windows update KB2758857.  I thought I had tried that couple weeks ago.  Anyway, that update no longer appears in Add/Remove Programs list; however a folder with that name and several files does appear in a Windows sub directory.  So perhaps it is still there.  How can I remove Windows updates if they no longer appear in Add/Remove Programs list?  There's what appears to be a uninstall file named spuninst.exe file in the KB275887 folder but when launched I get error that file updspapi.dll was not found.  Are there other means of removing updates?

    Thanks


    • Edited by knussml Tuesday, January 29, 2013 4:13 AM
    Tuesday, January 29, 2013 4:11 AM
  • On Sat, 26 Jan 2013 22:57:38 +0000, knussml wrote:
     
    > Replaced mnyob99.dll in folder MNYCoreFiles with patched version
     
    If I recall correctly, this dll was written/patched for the Sunset version of Money.  Perhaps if you installed Sunset, and then used the patched mnyob99.dll, you would have better luck.
     

    Ron
    Tuesday, January 29, 2013 11:56 AM
  • Ron,

    Yes I agree, installing Sunset and updating to pathed dll would likely solve crash problem when importing bank statements, but from what i've read it sounds like I would loose automatic updates to security prices with Sunset.  Presently securities prices are updated when I start Money 2007.  Is that your understanding with Sunset?

    Unless a patched dll is created for Money 2007 it appears to me the only way to avoid crashes is to remove Windows update KB2758857.  That update no longer appears in my  add/remove programs list, but I see folders with related files in Windows directory so I think it is still installed.  How can I remove that update if it no longer appears in add/remove list?

    Thanks!

    Wednesday, January 30, 2013 2:21 AM
  • On Wed, 30 Jan 2013 02:21:42 +0000, knussml wrote:
     
    >
    >
    >Ron,
    >
    >Yes I agree, installing Sunset and updating to pathed dll would likely solve crash problem when importing bank statements, but from what i've read it sounds like I would loose automatic updates to security prices with Sunset.  Presently securities prices are updated when I start Money 2007.  Is that your understanding with Sunset?
     
    That is definitely the case.  However, there seems to be several ways of dealing with that issue.  For me, in the US, I am using PocketSense scripts to continue to download brokerage (and bank) information and I find that the daily update of prices that comes through with my brokerage download is sufficient.  There are other solutions, for which I cannot vouch personally, that seem to be available (search the forum for stock quotes) which may work for those that require more frequent updates.
    >
    >Unless a patched dll is created for Money 2007 it appears to me the only way to avoid crashes is to remove Windows update KB2758857.  That update no longer appears in my  add/remove programs list, but I see folders with related files in Windows directory so I think it is still installed.  How can I remove that update if it no longer appears in add/remove list?
     
    That is outside my area of expertise.
     

    Ron
    Wednesday, January 30, 2013 5:33 AM
  • The update for KB2758857 made a change to the kernel32.dll file.

    Therefore you need to check which version of the file you have running on your system. You can do that as follows :

    Use Windows Explorer to navigate to the C:\Windows\System32 folder. There you will find the kernel32.dll file.

    Right click on the file and select Properties. From the Properties display, click the Version tab. The first piece of

    data displayed on the Version tab is the file version. If the version is 5.1.2600.6293 then that is the level of the

    file that was shipped with KB275887.

    You should also check the same dll (kernel32.dll) in folder C:\Windows\System32\dllcache as there is a copy in

    there as well. 

    If you do NOT have the fix applied, it is likely the file version shown will be 5.1.2600.5781

    If I needed to revert back to the previous dll, I would do the following :

    Rename the kernel32.dll file on both of those folders to Okernel32.dll

    Copy the version of kernel32.dll from folder C:\Windows\$NTUninstallKB2758857$ to C:\Windows\system32 and C:\Windows\system32\dllcache.

    Reboot.

    Whenever I do ANY changes like that I have always taken a backup of my system before I start.

    • Edited by AshleyST Wednesday, January 30, 2013 8:47 AM
    • Marked as answer by knussml Saturday, February 2, 2013 7:00 PM
    Wednesday, January 30, 2013 8:31 AM
  • AshleyST,

    Thank You!!!  Replacing kernel32.dll version 5.1.2600.6293 with 5.1.2600.5781 in folder C:\Windows\System32 solved the issue of MS Money 2007 Premium version 16 crashing when uploading bank statements.  The patched version of mnyob99.dll did not work (Money would not open), probably because it was written for later version of Money.  One difference from your instructions:  I found version 5.1.2600.5781 of kernel32.dll not in C:\Windows\$NTUninstallKB2758857$ but in C:\WINDOWS\$hf_mig$\KB959426\SP3QFE.  I replaced the later version with earlier and uploading statements worked.

    Now for the trade-offs.  Is my system now more vunerable to threats addressed by Windows update KB2758857?  If so will the Python program being worked my Kal Learner to modify mnyob99.dll for later versions of Money solve the issue without the threats?  Lastly, will future Windows update undo the fix described above?

    Thanks to all who have worked so hard to address this!!!!!!!!

    • Marked as answer by knussml Saturday, February 2, 2013 7:34 PM
    Saturday, February 2, 2013 7:32 PM
  • As you are not running with the latest version (5.1.2600.6293) of that dll, you ARE now exposed to the threat detailed in the article. The code that Microsoft changed to fix the threat is related to filename parsing, so potentially it's used in a lot of places. 

    You should read the security bulletin carefully, including the FAQ section, to see if you think your current system is too compromised by not having the fix applied. 

    Here is a link to the bulletin :

    http://technet.microsoft.com/en-us/security/bulletin/ms12-081 

    Any future Windows Updates to the kernel32.dll routine will include the changes for KB2758857, as module replacements tend to be

    cummulative.

    Monday, February 4, 2013 9:31 AM