MS-DEFCON 4: March madness? Mostly quiet

Topic

New Reply

ISSUE 19.12.1 • 2022-03-22 By Susan Bradley For the majority of computer users, it’s time to get the updates rolled out. I’m tracking some issues this
[See the full post at: MS-DEFCON 4: March madness? Mostly quiet]

Susan Bradley Patch Lady

10 users thanked author for this post.

MrToad28, genej101, abbodi86, DrBonzo, SueW, Kathy Stevens, jburk07, J9438, Wayne, Alex5723

Reply | Quote

Replies

I install  Security-Only updates on Windows 8.1 and I don’t have SCSI drives (do they still make those?)  My computer is fine as far as it goes.  Has Bing Maps and Bing been compromised?  I do use Bing Maps.  I hope I don’t have to use Google Maps.

 

 

Reply | Quote

anonymous wrote:

Has Bing Maps and Bing been compromised?

Why do you ask?

Windows 11 Pro version 22H2 build 22621.1483 + Microsoft 365 + Edge

Reply | Quote

Reports of Bing and Bing maps source code leaked online.  Typically the release of source code doesn’t make the thing vulnerable.  Rather how the attackers got in is more of concern.

Also this morning and enterprise single sign on product OKTA was reportedly breached through a vendor:

Todd McKinnon on Twitter: “In late January 2022, Okta detected an attempt to compromise the account of a third party customer support engineer working for one of our subprocessors. The matter was investigated and contained by the subprocessor. (1 of 2)” / Twitter

Susan Bradley Patch Lady

1 user thanked author for this post.

b

Reply | Quote

I also reported a USB problem after the 8.1 update in “https://www.askwoody.com/forums/topic-tag/jumpdrive-error-after-feb-2022-win-8-1-update/”   in Support/Questions/Win 8.1

My problem was only minor with involving a warning message on ejecting a USB flashdrive.

However after seeing the above report on another problem with drive problems after the 8.1 update it is obvious the update has drive problems and maybe more not reported/uncovered yet. My Windows is the home version.

Reply | Quote

I am using Win8.1 Pro with the March Rollup installed since Patch Tues.. connecting USB flash drives every day, using the “Safely remove h/w” icon in the taskbar before removing the drive. No problems as yet.
Not sure there is a universal problem. It may be a particular driver problem?

2 users thanked author for this post.

DrBonzo, J9438

Reply | Quote

It’s not universal. In this case the person had a scsi based usb connection which is unusual.

Susan Bradley Patch Lady

2 users thanked author for this post.

DrBonzo, J9438

Reply | Quote

PKCano wrote:

Safely remove h/w” icon

I don’t have that icon on the home version. I have to right click on the drive on the Explorer drive list and click “Eject” and then the warning msg appears.

Since both Susan’s reported scsi problem and mine  seem to have the common thread of “USB” I am still suspicious there is more to this. Note, too, mine started with the Feb update so this could be starting to cascade with the Mar update??

Reply | Quote

Right click on the Taskbar, choose Properties
OR
Control Panel\Taskbar and Navigarion
Toolbar tab – Notification area: Customize
Choose Windows Explorer -Safely Remove H/W and Eject Media
I use: Only show notifications and check Always show all icons and notification on the Taskbar

If you have hidden icons, it may be under the “^” on the left side of the notification area.
And I am using Open Shell (classic shell).

1 user thanked author for this post.

J9438

Reply | Quote

“An unusual occurrence is a problem with a Windows 8.1 update.”

For which update?  I’m kinda stuck until I find out.  Usually I install Security Only (March 5011560) & Internet Explorer (March 5011486) if it’s available.

If this is just a rollup thing I can proceed.  Please advise, thanks.

Win 8.1 (home & pro) Group B, Linux Dabbler

Reply | Quote

Silly Purg2 didn’t click the AW plus alert link (palm/face).  Always thought it was unreadable to us non-plussers.  Glad it’s only the rollup & that I’m uneffected.  Updates installed.  Later gators.

Win 8.1 (home & pro) Group B, Linux Dabbler

Reply | Quote

Alerts are now fully public.  And remember for anyone – a mere $1 donation unlocks many doors.

Susan Bradley Patch Lady

1 user thanked author for this post.

Purg2

Reply | Quote

After reading your post that it was OK to install WIN10 updates, I did so with my x64 Dell Win ver 21H2.  After releasing the Pause I had on updates, system began updating as usual, with only 3-4 updates listed. After about a minute the screen suddenly went completely black. Remained so for 4-5 minutes. I moved the mouse but no response. I turned the monitor off and back on, and although it showed me the usual box message that disappeared into blackness. Waited….. after about 5 minutes, the screen suddenly came alive again with usual post-update message  “Your computer is ready for restart” etc. So I restarted, and so far (15 minutes in) all seems OK.  I noted that one of the installed updates was a display driver update. I’m guessing that was the problem, but that’s just a complete guess.  Regardless, the update should have given a notice that the screen might go dark until the update had completed. Poor software design in my opinion.

I’ve had update failures with different machines in the past, but this was a new problem I’ve never experienced before.  I’m no computer tech, but my advice to others would be that if the screen goes dark during update, just leave it alone and wait it out.

PG

 

1 user thanked author for this post.

Perq

Reply | Quote

A black monitor screen is indeed a sign that a driver update occurred.

Susan Bradley Patch Lady

1 user thanked author for this post.

genej101

Reply | Quote

“Regardless, the update should have given a notice that the screen might go dark until the update had completed. Poor software design in my opinion.”

No, poor software design is including third party driver updates in the Windows updates in the first place (assuming that is what you’re describing).

Reply | Quote

Updated one of our Windows 10 workstations about 8 hours ago and all is well.

System specifications:

• Processor – Intel(R) Core i7-8700 CPU @ 3.20GHz 19 GHz
• Installed RAM – 16.0 GB (15.9 GB usable)
• System type – 64-bit operating system, x64-based processor
• Pen and touch – No pen or touch input is available for this display
• Edition – Windows 10 Pro Version 21H1
• OS build – 19043.1586
• Experience – Windows Feature Experience Pack 120.2212.4170.0 (a number of features have been disabled or uninstalled).

Updates included:

• KB501148
• KB4023057

Optional drivers included:

• HP Inc. – SoftwareComponent – 1.41.2741.0
• HP Inc. – Firmware – 15.43.0.0
• Samsung – Printers – Samsung Universal Print Driver 3

Other updates included:

• Windows Malicious Software Removal Tool (KB890830)

Reply | Quote

mostly quiet but MS is “quietly” releasing new preview updates for certain Win10 versions Tuesday March 22:

KB5011543 – build 1904x.1620 20H2/21H1/21H2
https://support.microsoft.com/help/5011543
{new feature added from KB5011543 – search highlights}

KB5011551 – build 17763.2746 LTSC 2019 1809
https://support.microsoft.com/help/5011551

Reply | Quote

using chrome i can’t download security only updates for march anymore from group b list (https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/).

download “blocked”. i already disabled that “save browsing” thingamajigs and still download blocked. same problem on both windows 8.1 and windows 7.

Reply | Quote

Downloaded using Chrome with right-click on link, save link as..

Reply | Quote

Alex5723 wrote:

Downloaded using Chrome with right-click on link, save link as..

save link as doesn’t work. first i can click “beibehalten” to keep download (don’t know what it is called in english) but then the download is blocked anyway: “Fehler – Blockiert” (in english i assume this meens “error – blocked” or similar).

but if i copy the link into adress bar of a new tab i can download it. at least on my windows 7 machine. haven’t tried that on my 8.1 notebook yet which is shut down stored away already.

Reply | Quote

The problem is that the MS Catalog is secure (https) but the download itself is not (http). I think Chrome sees this as a non-secure download and blocks it.

I use Firefox. There is an option under the download function to allow that insecure download anyway. I would imagine Chrome might also have that workaround. But I do not have/use Chrome. Look for it, or Google the workaround.

Reply | Quote

After installing KB5011487 2022-03 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems – I found newly installed (same date as CU) – Adobe\Flash Player\NativeCache folders in location:
C:\Users\Lars\AppData\Roaming\Adobe\Flash Player\NativeCache
and the NativeCache folder is empty. Awhile back I received KB4577586 the update to remove Adobe Flash Player, and Microsoft Community member and MVP Susan Bradley mentioned this Adobe folder in AppData and recommended deleting it, which I did. Now I just noticed it returned and knowing that Flash Player is unsupported and a security risk, I would not knowingly install it myself. The Flash Player executable program is nowhere to be found. Also I did not see the related Macromedia folder anywhere, only a new Adobe folder. I do not use any Adobe programs. I am just wondering if anyone else sees this in their AppData\Roaming folder, and I wonder why this has shown up on my computer the same day as the CU. I went ahead and deleted it from AppData – again.
Is it time to unleash and liberate the misunderstood, neglected, and underappreciated tin foil hat conspiracy theories?

Reply | Quote

I have that empty folder as well, dated September 2021 which is when I bought the computer. I have not updated for March yet.

Windows 10 Home 22H2, Acer Aspire TC-1660 desktop + LibreOffice, non-techie

Reply | Quote

After reading @Lars220 ‘s post above, I dug around and found a leftover “\Macromedia” folder as well as the aforementioned Flash Player folder. Since I know that the Macromedia folder is from the independent flash player installer (version of Flash that DIDN’T come with Windows), I promptly deleted the folder and its contents and rebooted. No ill effects thus far.

The few folders and single file within that folder were dated February of 2021, which is when I recall using Adobe’s own uninstaller to remove the Flash installation that didn’t come with Windows.
I removed the folder because I found instructions on Adobe’s site saying to manually remove the files in that folder after having run their uninstaller. I removed the folder as well, since the sole remaining file in it was over a year old and hadn’t been modified since February of 2021.

Reply | Quote

PKCano wrote:

Toolbar tab – Notification area: Customize

My Win 8.1 home version apparently does not have the Notification area. Only 4 items, address, links, touch keyboard, desktop. I will note that on my Win 10 it does have the “SafelyRemove” on the taskbar by default.

Reply | Quote

If you are on the Desktop, there is no Notification area?
Did you try the Control Panel setting mentioned above?

1 user thanked author for this post.

J9438

Reply | Quote

PKCano wrote:

The problem is that the MS Catalog is secure (https) but the download itself is not (http). I think Chrome sees this as a non-secure download and blocks it.

I use Firefox. There is an option under the download function to allow that insecure download anyway. I would imagine Chrome might also have that workaround. But I do not have/use Chrome. Look for it, or Google the workaround.

if i google for a workaround the only “solution” i can find tells me to turn off that “save browsing” thingamajigs which IS TURNED OFF already. so there doesn’t seem to be any useful solution for chrome out there…

Reply | Quote

Hi it was covered here before:
https://www.askwoody.com/forums/topic/microsoft-update-catalog-does-it-work-with-7-home-premium/#post-2420889

(Chrome) Change block to allow within ‘insecure content’ when on the catalog site.
hth

Reply | Quote

March patches installed with no problems to report on Win 8.1. 🙂

Installation Successful: Windows successfully installed the following update: 2022-03 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB5011564)

Win 10 ver. 22H2 x64

2 users thanked author for this post.

Microfix, DrBonzo

Reply | Quote

Continuing my role of following in @JD’s footsteps, I’ve reproduced his Win 8.1 results.

1 user thanked author for this post.

Microfix

Reply | Quote

ditto for 3xWin8.1 Pro x64 devices, no issues from March patch release date.

Keep IT Lean, Clean and Mean!

1 user thanked author for this post.

DrBonzo

Reply | Quote

The March updates for Windows 7 and 8.1 (both the cumulative and the security only updates) mess up Windows Media Center registry permissions. The result is that WMC starts with requesting it to be set up again and does so after every reboot. This thread on The Green Button discusses the issue and also has a solution by changing two registry permissions.

ASRock Beebox J3160 - Win7 Ultimate x64
Asus VivoPC VC62B - Win7 Ultimate x64
Dell Latitude E6430 - Win7 Ultimate x64, Win10 Pro 22H2 x64 (multiboot)
Dell Latitude XT3 - Win7 Ultimate x86
Asus H170 Pro Gaming - Win10 Pro 22H2 x64

Reply | Quote

I have not posted for a while, but this is the first time a post I write as a registered Plus member is awaiting moderation. Has something changed in the moderation policy that I missed?

ASRock Beebox J3160 - Win7 Ultimate x64
Asus VivoPC VC62B - Win7 Ultimate x64
Dell Latitude E6430 - Win7 Ultimate x64, Win10 Pro 22H2 x64 (multiboot)
Dell Latitude XT3 - Win7 Ultimate x86
Asus H170 Pro Gaming - Win10 Pro 22H2 x64

Reply | Quote

You hadn’t posted in nearly eight months, and we think the limit is six months (before the next first post gets moderated again). Nothing has changed about moderation policy recently.

Windows 11 Pro version 22H2 build 22621.1483 + Microsoft 365 + Edge

1 user thanked author for this post.

Pim

Reply | Quote

Thanks. I remember that the rule was that once registered and once posted there would be no moderation. But maybe I am just getting old and forgot that there also was a time limit.

ASRock Beebox J3160 - Win7 Ultimate x64
Asus VivoPC VC62B - Win7 Ultimate x64
Dell Latitude E6430 - Win7 Ultimate x64, Win10 Pro 22H2 x64 (multiboot)
Dell Latitude XT3 - Win7 Ultimate x86
Asus H170 Pro Gaming - Win10 Pro 22H2 x64

1 user thanked author for this post.

b

Reply | Quote

PKCano wrote:

there is no Notification area?

My mistake. I misread Taskbar tab for Toolbar Tab. The Notification icon is on the Taskbar but when I use that instead of the right click Eject I get

This only happens after opening a file on the flashdrive. I close everything down but Win still thinks something is open on the drive.

Again it seems that Win sets some bit that tells it a file has been opened and when the flash drive is exited that bit does not get cleared, thus the eject error msg. Again when I fell back the Feb update the problem disappeared. Not really significant to me but worries me that it might be an indicator of other problems such as the coincidently “USB” problem Susan reported.

Reply | Quote

I am slightly perplexed about Microsoft Update’s process on offering updates. I have two PCs, both running 21H2 and Windows Pro. When Susan goes to Defcon 4 I use gpedit to allow the updates by changing the defer date from 25 days to e.g. 10 days. On one, a Dell laptop Vostro 5481 bought 2019 the updates appear the next day. On the other, a Dell XPS 8930 bought later in 2019, the updates have not been offered until several days later.

So this month, I changed gpedit on both machines on 22/3 after Susan’s alert. The laptop offered updates the next day, and the desktop has yet to offer them, even though it checks every day. So far as I am aware, all the Windows update settings are the same on both machines.

This is only a minor irritation  in normal months, but if we went to Defcon 5 again because of an imminent risk, I would have to find the manual update process to force the update.

Has anyone any idea why this might be happening?

Chris
Win 10 Pro x64 Group A

Reply | Quote

Chris B wrote:

The laptop offered updates the next day, and the desktop has yet to offer them, even though it checks every day.

Try using WuMgr to see what updates are available. Maybe there are none for that PC?
You can also use WuMgr to hide/install the updates.

cheers, Paul

1 user thanked author for this post.

Chris B

Reply | Quote

@Paul-T That was interesting! I presume you mean Wushowhide.

I ran it, and it only showed a couple of Dell drivers to update. I don’t like to update the Dell system from Windows Update, so I ran Dell Update, which offered three updates, including a BIOS update, an update for their Support Assist Recovery Tools and another (minor driver I think).

After I had run Dell Update and ensured everything had updated, I went back to Windows Update and, lo and behold, there were the March updates including the March cumulative and .NET plus the other gubbins. It seems the lack of one of the Dell updates, perhaps the BIOS, had blocked the March updates.

After it was all through,  went back to Wushowhide and the two Dell driver updates were still sitting there!

The Vostro system did not have a BIOS update or Support Assist update offered, just a wifi driver update, so I guess the finger points at the BIOS driver or, less liekly, Support Assist recovery tools.

Curious, but sorted.

Chris
Win 10 Pro x64 Group A

Reply | Quote

Chris B wrote:

@Paul-T That was interesting! I presume you mean Wushowhide.

Wushowhide is not WUMgr, and visa versa.

Wushowhide.diagcab (download link) is a Microsoft tool downloadable from the MS website.

WUMgr is a third-party application that controls Windows Update.

1 user thanked author for this post.

Chris B

Reply | Quote

@PKCano Thanks – I was not aware of it. However, I could not see where on the page you linked to I could download the program itself.

Chris
Win 10 Pro x64 Group A

Reply | Quote

The GitHub site is not designed for us mere mortals. You have to click Releases halfway down the right side to reach the downloadable zip file.

Windows 11 Pro version 22H2 build 22621.1483 + Microsoft 365 + Edge

Reply | Quote

Thanks – got it now, although the interface is a bit cryptic.

Chris
Win 10 Pro x64 Group A

1 user thanked author for this post.

b

Reply | Quote

I used your registry hack .bat files to defer Win 11 from being offered. Didn’t work, with the March updates there it was, I didn’t, and won’t, but I’d sure like them to stop trying to push it on me. :^)

Reply | Quote

genej101 wrote:

registry hack .bat files

Registry hacks blocking W11 are .reg files not .bat files and they work.
You can use inControl instead.

1 user thanked author for this post.

genej101

Reply | Quote

Ah, Steve, I’ve been using his works since Spinrite back in the DOS days. Great stuff. :^)

Reply | Quote

My bad, I used the two Susan recommended. “Windows stay on 10.reg” I checked and they are active, but still got 11 pushed at me, just hid it. I’ll try your method too. Thanks.

Reply | Quote

This month’s preview update has finally arrived in the update queue. Here it is in the update catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=KB5011563

Carpe Diem {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1413 x64 i5-9400 RAM16GB HDD Firefox112.0b3 MicrosoftDefender

Reply | Quote

This is Windows 11 preview.

Reply | Quote

The Windows 11 preview update fixes several blue screen of death issues:
https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5011563-update-fixes-smb-directx-blue-screens/

Carpe Diem {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1413 x64 i5-9400 RAM16GB HDD Firefox112.0b3 MicrosoftDefender

Reply | Quote