MS-DEFCON 4: Time to install the February patches

Topic

New Reply

Most of the bugs introduced by Microsoft patches in early February were fixed by early March. Looks like we’re good to go. Once again, I recommend tha
[See the full post at: MS-DEFCON 4: Time to install the February patches]

15 users thanked author for this post.

MrToad28, jburk07, Nibbled To Death By Ducks, Joulia.S, ymo1965, Pepsiboy, abbodi86, CADesertRat, Lori, SueW, Myst, Elly, fernlady, PhotM, Microfix

Reply | Quote

Replies

Once again, I recommend that you actively block the upgrade to Win10 version 1809.

I have 2 Win X PCs. Both have v1809. One has a xeon 1620 processor. I have had no issues with it. The other has a core-i5 processor. Since the 1809 update, it occasionally locks up and must be power cycled.

1809 has been a real disaster for many people. Let’s hope 1903 makes amends. But, I’m not holding my breath.

Byte me!

Reply | Quote

But 1809 is the LTSC/Server version. They can’t just abandon it for a lost cause. At least I would hope not.

This is the problem with the 6-month cadence. The previous version isn’t even debugged yet.

Reply | Quote

I’ve had KB4487000 installed on 2 devices since 21st feb, I have dual OEM video (primary) Intel and (secondary) nvidia GeForce drivers on the ivybridge with W8.1 OS. The Haswell is nvidia GeForce. Haven’t encountered any issues at all.

Windows - commercial by definition and now function...

Reply | Quote

Nice try, Woody, but until the upcoming Patch Tuesday, Windows Update offers previews only. You certainly don’t want me to install previews, right?

Reply | Quote

Best not to install previews 😉
Either you’ve hid February’s patches or they’re already installed on your Windows OS

Windows - commercial by definition and now function...

2 users thanked author for this post.

Geo, Elly

Reply | Quote

I still have eight (8) Office 2010 updates in my Important WU for Win 7.  Four of them are dated Feb. 5, and the other four are dated Feb. 12.  None of them are in any way that I can see referred to as “previews”.

PCKano told me the older ones are previews but they don’t say that, and if they are, what are they doing in my Important Updates?  I have never gotten previews in my Important Updates.

Being 20 something in the 70's was so much better than being 70 something in the insane 20's

Reply | Quote

No, I believe I told you the early Office updates were non-Security that were released on 2/5 (first Tues).

Windows has Preview Rollups issued on the Third Tues (or after).

Reply | Quote

So it sounds like I should install all eight of them. If they’re in the Important section they must do some good.  But then the Master Patch List only lists the newer four.

Being 20 something in the 70's was so much better than being 70 something in the insane 20's

Reply | Quote

You didn’t expect non-security Office updates to be listed under Office updates, did you? 😉

Reply | Quote

anonymous wrote:

until the upcoming Patch Tuesday, Windows Update offers previews only.

I don’t understand.

If you’re talking Win7 and 8.1, you have to specifically check the Monthly Rollup Previews. Don’t do that.

With Win10 in all versions, follow the instructions to avoid installing the “optional non-security” cumulative updates.

Reply | Quote

Windows Update errors cause OS-version problems By Fred Langa
I recommend that all readers take a moment to check the Windows version and build you’re actually running. …
If you need to, you can force an immediate update to the latest version of Windows 10 — now or anytime you like. …
When it’s done, you should be running the most recent Windows version available — currently 1809.

Win10 1809 still not ready for business By Susan Bradley
Microsoft’s newest release of Windows 10, Version 1809, is now sufficiently patched to make it safe on most consumer machines.

woody wrote:

Once again, I recommend that you actively block the upgrade to Win10 version 1809.

It gets more confusing by the minute. Could the editor in chief place a casting vote?

1 user thanked author for this post.

doriel

Reply | Quote

In my experience with multiple Pro & Home machines you are better off waiting until Windows Update offers 1809 to you unless you have a compelling reason to force the update.

--Joe

1 user thanked author for this post.

woody

Reply | Quote

See https://www.askwoody.com/2019/q-is-it-time-to-install-win10-version-1809/

Many people have valid observations and we don’t all agree. Most assuredly including you…. 🙂

Reply | Quote

Seems like just about every month I have to ask this question:

Do both IE Security Only updates (KB4486474 and KB449113) have to be installed?  Or will KB449113 take care of things by itself?

Being 20 something in the 70's was so much better than being 70 something in the insane 20's

Reply | Quote

Hello Charlie,

KB4491113 is a fix for a specific problem, and if you are not seeing any problems, you don’t need it. It is not cumulative and not a substitute for IE 11’s KB4486474.

 

 

Non-techy Win 10 Pro and Linux Mint experimenter

4 users thanked author for this post.

Lori, Charlie, Geo, Lars220

Reply | Quote

does ie kb4491113 replace kb4486474? in other words do i only have to install kb4491113 for ie? or do i have to install kb 4486474 first and then kb 4491113?

Reply | Quote

kb4491113 is a fix for a specific problem with the (\) in a path when using IE11.
You should not install it unless you are having that specific problem when you use IE11 as your browser.
You should install the usual Cumulative Update IE11 kb4486474  issued 2/12/2019.

Please read Woody’s ComputerWorld article BEFORE you update your computer. There are instructions for safe patching there.

5 users thanked author for this post.

Charlie, Geo, Lars220, Lori, woody

Reply | Quote

okay, ths. as i don’t use ie, i’ll only install kb4486474.

i assume, there is also no pressing / no need to install  kb4490511 (win7) and kb4490512 (8.1) as i don’t use anything access95 related…

and following masterpatch list all office 2010 patches seem to be okay to install. so i’ll also install january patches for office 2010 which will be offered by windows update. in other words, i can install all offered patches for office 2010?

Reply | Quote

On 8.1 I started updating, installed group b patches, now I’ll install all offered Office 2010 patches…

but… I’m offered an update for Visio 2010 (kb315314) although I don’t have visio installed… I won’t install this one.

Haven’t started updating windows 7 computer yet so I don’t know if there is also some Visio update…

Reply | Quote

also on windows 7 i’m offered kb3115314 for visio 2010 which i don’t have.
whats the point of that? of course i did NOT install visio patch on any computer…

anyway, i installed group b patches on both windows 7 pc and win 8.1 notebook. then i installed all patches for office 2010 (all were “important” and checked), i installed .net (also “important” and checked and msrt, defender defininition and flash (win 8.1)…

Reply | Quote

i have do correct my postings above. three of the office 2010 updates were just updates, (not security). i hope i did nothing wrong by installing these.

Reply | Quote

Makes you wonder doesn’t it.  I always install all Office updates unless Woody says not to for some reason.  In this case if something goes wrong, I console myself with the fact that I can uninstall any culprits.

Being 20 something in the 70's was so much better than being 70 something in the insane 20's

Reply | Quote

Office updates share a lot of components

Windows Installer (MSI) and Windows Update are smart enough not to offer you update for something that don’t exist in you current Office

3 users thanked author for this post.

jburk07, SueW, PKCano

Reply | Quote

well, visio 2010 doesn’t exist on any of my computers. and still that particular visio 2010 update kb3115314 is offered by windows update on windows 7 pc and on windows 8.1 notebook.

Reply | Quote

Yes, it’s named/labelled/mainly for Visio
but it definitely contain versions for installed Office files

Reply | Quote

so should i install it on both computers?

Reply | Quote

Yes. If it shows up CHECKED in Windows Update on both computers.

1 user thanked author for this post.

SueW

Reply | Quote

after searching for updates again for visio 2010 update to install, new office updates show up:

kb4018363 (access 2010)
kb2589339 (office 2010)
kb4461626 (office 2010)
kb4462229 (outlook 2010)

are these march updates already? if so, they are not covered under current defcon 4 i assume… so no installation for these?

Reply | Quote

What is the date on the right side when you highlight one? (Feb or Mar?)
Are they CHECKED or UNCHECKED? (We don’t do unchecked, right?)

Reply | Quote

unfortunately on windows 8.1 there are only columns “name” and “size” and i can’t activate any “date” column. at least i can’t find any option to do so. on windows 7 i did not scan for visio / new updates yet, so i don’t know what will be there…

on “details” section on the right side all four new office updates show “veröffentlicht: heute” (i think, “published: today” should be the right term in english). so according to this, these four updates seem to be march updates, if they were releast today (march 05). and none of these is a security update. all four are just “update”.

and everything is checked.

Reply | Quote

Not time for March patches to be installed yet. See blog page.

Reply | Quote

I am dealing with BSOD for Dells 9020M (1607 and 1709)

Dumps point to the win32kfull.sys… I have updated BIOS and video drivers so far but still BSOD. next on my list is chipset and sound.

No other Dell chassis is having this issues (we only have dells)

¯\_(ツ)_/¯

 

1 user thanked author for this post.

woody

Reply | Quote

Keep us posted!

Reply | Quote

win32kfull.sys that comes with KB4487026 is 10.0.14393.2791

dell optiplex 9020m w/o issues have 10.0.143932665

At this point I had to uninstall the patch as it is for one of my Customer Service agents. I setup another 9020M with the latest patches and runing Prime95… I am not sure if this will trigger a blue screen

Reply | Quote

woody wrote:

Susan Bradley’s detailed Master Patch List shows that we’re ready to go – even with this month’s NET patches.

Except the eight patches there which say “Hold for now”?

Reply | Quote

Those are all second monthly Win10 cumulative updates – and the Win 8.1 patch that’s causing BSODs in some cases.

If you follow my instructions in Computerworld, none of those will be installed, except the 8.1 cumulative update. I still haven’t figured out when it triggers a BSOD.

Reply | Quote

I installed kb 4486563, restarted and waited 20 minutes. Then installed kb 4487078 & kb 890830, no restart required but I restarted anyway. All seems okay so far.

Windows 11 Pro
Version 23H2
OS build 22631.5189

4 users thanked author for this post.

jburk07, dgreen, bassmanzam, Myst

Reply | Quote

I have an interesting situation that just happened……(Windows 7, home premium 64 bit, Group A)….I installed 7 various Microsoft Office, Excel and Outlook updates just now and when they successfully updated I had 5 of the exact same KB#s show up in my WU (KB4462174, KB4462177 – both published 2/12), KB4462172, KB4462187, KB4462182 – all published 2/5)…ALL unchecked. Why did they show up again after being successfully install just minutes before? What do I do with them?

1 user thanked author for this post.

Charlie

Reply | Quote

A very good question.

Being 20 something in the 70's was so much better than being 70 something in the insane 20's

Reply | Quote

No problem with KB4487000, nor the preview KB4487016

1 user thanked author for this post.

DrBonzo

Reply | Quote

Does that mean the problem is with HP computers, or some other hardware, or some other software? And, if so, do you know what’s been causing the BSOD problem?

Reply | Quote

@abbodi86 – Or are you saying that you installed those 2 updates on your computer(s) and didn’t have any problems?

Reply | Quote

Yes, Acer laptop and Gigabyte Desktop with nVidia card, no issues

Reply | Quote

Need some help pls.

Windows 10 Pro x64 v1803 Group A.  I have Group Policy > Windows Update set at 2, and have had the Feb update KB4487017 hidden with wushowhide (as well as KB4023057 twice this month).

After changing wushowhide to unhide only KB4487017, I need to wait it out for  Windows to run its updater again (usually the next day) to bring it down.  However this month after Windows updates, KB4023057 also reappears so I have no way to select the Download button without installing it along with the Feb update.

Any ideas how to keep KB4023057 hidden as in the past month’s???

With this persistence, have others already allowed installation?

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

Reply | Quote

KB4023057 keeps showing up because it is actually a different version each time wheich makes it a different update but with the same number. (Thank you , MS)
Hide it again.
Then follow the instructions in AKB2000013 to clear the Update cache.
When you finish that, run wushowhide to be sure there is nothing in the Update queue you DO NOT WANT.
Then is is safe to update.

2 users thanked author for this post.

Lars220, abbodi86

Reply | Quote

PK thanks, will give it a try.

It is my experience once a KB appears on the Windows Update screen that even though the KB is then hidden via wushowhide, it doesn’t matter until the Windows Updater runs again and refreshes the Windows Update screen to also no longer show the hidden KB.  Until the refresh happens any KB still showing on the Windows Update screen will download and install if I press the Download button.

Windows 10 Pro x64 v22H2 and Windows 7 Pro SP1 x64 (RIP)

Reply | Quote

That is why the process to Clear the Update cashe – so it doesn’t show up on the Windows Update screen. Just DO IT and see.

Reply | Quote

Those claims that KB4487000 is causing BSODs on certain systems is scaring the h*** out of me!! I have that update since Day 1, but my PC does not seem to be affected. I want to set up the PC to install security-only updates. In other words, I wish to switch from Group A to Group B. I’m certainly taking no chances with any monthly cumulative rollups going forward. What’s the easiest way to go by doing that? Is it worth making this change or will it potentially make matters worse?

I am no longer an active member of the forums.

Reply | Quote

If you are having no problems now, make an image of your PC, and just start the Group B routing going forward. The patches are available each month for Win7/8.1 as a direct download from the MS Catalog in AKB2000003 here on this site. There is the SO and the IE11 CU there. The rest (.NET, MSRT, Office, etc) are taken from Windows Update,

Reply | Quote

I read on some articles that the Group B method of patching is more trouble than it’s worth. I’m not too clear on this, but at the same time, I don’t care about quality updates which could potentially break the OS.

I am no longer an active member of the forums.

Reply | Quote

Well, this month the problem with IE with the (\) in the path is in both Group A and Group B because the problem is in the IE11 CU which is also contained in the Monthly Rollup. Sometimes the problem is in both the SO and the Rollup. So you still have to be aware.

1 user thanked author for this post.

banzaigtv

Reply | Quote

Did so again without a problem,thanks to your guidance.

Most appreciated Woody.

Great to have you here.

Regards

Windows 7,Home Premium 64 bit - Lenovo laptop
Group A - Intel (R)Core i7 Processors -

ASUS Chromebook C213 12.5 inch
64GB memory .

iphone 6,need to upgrade soon,bugger !

Reeder M7 Go 2019 Tablet !

Reply | Quote

Not sure if my question got lost in the shuffle but I asked this last night and didn’t get any response.

(Windows 7, home premium 64 bit, Group A)

.I installed 7 various Microsoft Office, Excel and Outlook updates and after they successfully updated I had 5 of the exact same KB#s show up in my WU (KB4462174, KB4462177 – both published 2/12), KB4462172, KB4462187, KB4462182 – all published 2/5)…ALL “unchecked”. Why did they show up again after being successfully install just minutes before? What do I do with them?

Reply | Quote

Perhaps MS messed up the metadata supercedence. If they are unchecked, just ignore them.

Reply | Quote

Upon checking them this morning…..they now show up “checked”! Now what??

Reply | Quote

Install them. If they are not needed, the update process will just ignore them. If they have changes, it will install the proper files.

1 user thanked author for this post.

KarenS

Reply | Quote

I’ve recently been installing the Patch Tuesday updates as soon as they were let through the gate since I was worried about those updates being replaced by out-of-band buggy updates later on. However, if I delay updating on Windows 8.1 and an out-of-band quality update is released, then could I safely ignore the newer quality updates by unchecking them in the update panel and just install the Patch Tuesday updates? Or do I need to download and install the updates manually?

I am no longer an active member of the forums.

Reply | Quote

Install what is CHECKED in Windows Updates. This is usually the Patch Tuesday updates. But WAIT to install them until you know whether they are safe (DEFCON 3 or above).

Out-of-band updates are usually NOT released through Windows Update. Only rarely if it is a big problem that is causing trouble for everyone. Don’t worry about out-of-band patches unless you have the specific problem they fix (if you don’t have the specific problem they could cause other problems for you), or it is a dire security emergency. An example of this was this month’s KB4491113 – if you didn’t have the problem it fixed. or were not using IE for your browser, you should not install it.

2 users thanked author for this post.

Lori, banzaigtv

Reply | Quote

Installed in this order for Win 7 x64 Pro, SP1, Grp. A, i7-Core Haswell, HP zBook: KB4486563, reboot, KB4487078, reboot, KB890830, no reboot required. Just got in the habit of installing patches individually after having multiple installs hang, take forever or fail. No problems. Thanks as always to Woody and the MVPs.

3 users thanked author for this post.

jburk07, Chessie, Myst

Reply | Quote

Hello.

KB4489491 doesn’t appear on my machine, I searched in the “Microsoft Update Catalog” and it also doesn’t appear.

Because Windows Update did not download to me this Compatibility update in March, 1?

John Paul

Reply | Quote

You should feel very lucky.

Reply | Quote

@PKCano, 👍😊 Greetings !!

Reply | Quote

I am Windows 7 Group B. The documentation for the January and February 2019 Security Only rollups lists a lot of issues. Some of the January 2019 issues are supposedly resolved by the February 2019 update, and it appears that nearly all issues are resolved by the non-Group B Preview.

I am holding at December 2018 for now, as there are just too many bugs in the January 2019 and February 2019 Security Only rollups. When the March 2019 Security Only rollup is released, and after waiting to see what issues are reported, I will consider installing the January 2019 through March 2019 Security Only rollups.

Reply | Quote

If you’re in Group B you shouldn’t be installing Security Only ROLLUPS. ROLLUPS are cumulative and for Group A users.

1 user thanked author for this post.

SueW

Reply | Quote

Negative, to my understanding. I cannot make excuses for Microsoft jargon. The way I cope with it is to remember that 3yrs ago, pre-patch-apocalypse, each month possibly had a variety of patches and improvements to pick and choose.

Rollup describes throwing them all onto the counter like scraps of bread dough, and rolling them together into a single loaf. This removes all choice from current offerings.

Cumulative describes grabbing all the loaves that have come before, which are individually “rollups”, loading them all onto the same truck and driving them to the client. Where they might be delivered as a single shipment; or more likely will be sliced up to provide just the missing pieces that have been exposed by the scan just performed.

Together they are a Cumulative Rollup, what GroupA sees as a service and GroupB wants to avoid. Windows10 removes this distinction altogether.

1 user thanked author for this post.

GoneToPlaid

Reply | Quote

Hello Ed,

Starting in October 2016, Microsoft transformed all updates into Rollups. Microsoft also created two separate branches of Rollups. Gone are the days of being able to install individual and specific security updates, or being able to choose to not to install specific security updates which were discovered to cause problems.

The Monthly Rollup branch is everything, including IE updates.

The other Rollup branch is Security Only updates, which do not include any IE security updates.

The Monthly Rollup branch is cumulative, such that the update includes ALL previous updates.

The Security Only branch is NOT cumulative, does not include any IE updates, and does not include any previous security updates.

Yeah, the above has been quite confusing for many people.

I am glad that you posted your reply to me, since it is obvious that a lot of people still do not clearly understand the differences in the two different styles of update methodology which Microsoft created, starting back in October of 2016. Microsoft deliberately made this royally confusing for most consumers, since Microsoft’s intent was to install, via updates, deep telemetry into all Windows computers, and without the user’s explicit consent.

Best regards,

–GTP

 

1 user thanked author for this post.

TJ

Reply | Quote

Your terminology is incorrect.
There is a Security Quality Monthly ROLLUP.
Although the security-only patch may be rolled up, the correct terminology is Security Only Quality UPDATE. The use of the term “rollup” for this patch is unnecessarily confusing the users.

5 users thanked author for this post.

Ed, SueW, columbia2011, GoneToPlaid, TJ

Reply | Quote

Installed Feb Monthly Rollup, Net patches and all checked Office 2010 updates, left the unchecked lonely boys alone, didn’t need them. All is good. By the way, I’m the “annonymous” poster above with the same info noted here. You can trash it or I will. Thx

MacOS iPadOS and sometimes SOS

3 users thanked author for this post.

jburk07, GoneToPlaid, PKCano

Reply | Quote

Reporting in: WU on 2 Win 7 Pro x64 desktops this afternoon (Grp A). KB 4486563 (Rollup), KB 4487078 (.net), and MSRT. No major problems so far 🙂

Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

2 users thanked author for this post.

jburk07, Myst

Reply | Quote

Group B, Windows 7 / Windows 8.1 x64.

I have previously decided that there is no need to patch every month unless there is a urgent security matter, and will probably only patch once every 4-6 months.

And as far as I can see, there is no urgency in installing the January and February updates, and I am not satisfied with the bugs situation, so I will continue to hold on December 2018 level, monitor the situation and pass for now.

Six months I have waited between January 2018 and July 2018 (for my Windows 7 machines) without patching and there were no problems then, and I will wait for as long as necessary until I am satisfied about the situation.

Hope for the best. Prepare for the worst.

2 users thanked author for this post.

Steve, GoneToPlaid

Reply | Quote

All Win7 & Win8.1 systems updated w/ Feb 2019 security only, IE11, .Net, Defender & Office 2013 & 2010 … Good-To-Go, no issues.

Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS

3 users thanked author for this post.

SueW, jburk07, bassmanzam

Reply | Quote

Could you please provide some details about your 8.1 system? I’m curious because there have been some reports about the 8.1 rollup giving BSODs. I know you’re Group B, but it still is of some interest what you’re running.

Thanks.

Reply | Quote

In preparation for Windows 7 demise, I recently resurrected and old Vista laptop wiping its drive and installing 64Bit Windows 8.1 Pro from CD. I also installed 64Bit Office 2013 Plus and a few 3rd party programs/utilities.

It’s an old stock 2006 vintage IBM ThinkPad Z61t laptop running under standard BIOS shown here and here.

Several years ago I’ve upgraded it with the following:
a) 4GB Corsair Ram (2.99 usable)
b) Intel 64Bit 2.33Ghz Core 2 T7600 CPU
c) 1TB Samsung 850 Pro SSD
d) ThinkPad Docking Station

After getting all of the updates up thru Sep 2016 via Windows update, I installed only the Group B security updates as posted in PKCano’s AKB2000003, avoiding all telemetry & Rollups.

A few of my programs/utilities I like to use & installed are: 7-Zip (v19.00), Filezilla (v3.40 – portable), CCleaner (v5.28 – portable), ImgBurn (v5.2.8.0 – portable), Adobe Acrobat Reader DC (v19.010.20098), Samsung Magician (v5.3.0.1910), Firefox (v65.0.2), MalwareBytes (v2.2.1.1043 – free), Symantec Endpoint Protection (V14.2 Client), Microsoft Baseline Security Analyzer (v2.3), Microsoft SyncToy (v2.1), ThinkVantage Access Connections, ThinkVantage Fingerprint Software, ThinkVantage Power Manager, ThinkPad UltraNav Driver & Utility, ThinkPad Mobility Customization, Intel Rapid Storage Technology (v11.2.0.1006), Lenovo ACPI Power Management Driver (v1.67.16.20) and a few other Vista and/or XP drivers that Win8.1 couldn’t find (e.g. Intel Display Driver, TI Flash Media Controller, TI PCMCIA Card Reader, ThinkPad Modem, etc.)

Though I’ve only started to experiment with Win8.1 & I’m not really doing anything special with it, it seems to be running fine … my office files open & run correctly as do my other installed programs & utilities though some of the ThinkVantage/ThinkPad utilities don’t run as well under Win8.1 as they did in Vista (or Win7 – my other ThinkPad Z61) but then again they weren’t written to run in Win8.1 let alone Win7 and Lenovo no longer supports the Z61t.

Hope this helps 🙂

Win7 - PRO & Ultimate, x64 & x86
Win8.1 - PRO, x64 & x86
Groups A, B & ABS

2 users thanked author for this post.

Microfix, DrBonzo

Reply | Quote

Is it just me or have we been consistently getting 4’s the past couple of months?

Reply | Quote

NTDBD reporting in-Installed KB4407878  and KB4486563.  No troubles so far. Knock on wood…(hits head twice)!

Win7 Pro SP1 64-bit, Dell Latitude E6330 ("The Tank"), Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Newbie
--
"The more kinks you put in the plumbing, the easier it is to stop up the pipes." -Scotty

2 users thanked author for this post.

Chessie, Myst

Reply | Quote

Nibbled To Death By Ducks wrote:

KB4407878

What is KB4407878? Typo?

1 user thanked author for this post.

Nibbled To Death By Ducks

Reply | Quote

GTP – I figured it to be a typo, remember, NTDBD was in the middle of hitting his head twice.

MacOS iPadOS and sometimes SOS

2 users thanked author for this post.

CADesertRat, jburk07

Reply | Quote

Myst wrote:

GTP – I figured it to be a typo, remember, NTDBD was in the middle of hitting his head twice.

Yup, a typo it was. Sorry.  I should have harked to the 225th Rule Of Computing:

“Never work on a computer or post anything, anywhere, after driving 180 miles through southern California freeway traffic for 8 hours.”

It usually takes a full day to recover.

Win7 Pro SP1 64-bit, Dell Latitude E6330 ("The Tank"), Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Newbie
--
"The more kinks you put in the plumbing, the easier it is to stop up the pipes." -Scotty

Reply | Quote

I too live in SoCal. I try to avoid the traffic like the plague. Please stop hitting your head. I know that it can cause drain bamage. Oops. Now I remember. Brain damage.

Reply | Quote

Maybe it’s due to WuMgr, but my Win 10 Pro 1809 doesn’t get any update offered that Woody mentions in his CW-article: not 4482887, nor 4489491.

I only have one update 4480116 hidden, which is probably a new release of the already installed version that was embedded in the 1809 Version 17763.253-iso which I downloaded in December.

LMDE is my daily driver now. Old friend Win10 keeps spinning in the background

Reply | Quote

4482887, nor 4489491 are Preview CUs. In Pro, you won’t see them unless your settings are SAC(Targeted) and all the deferrals are set to 0 (zero). Then you can “Check for Updates (seeker) and you still may not get them.

The only one the comes through Windows Update with other settings is the Patch Tuesday Security CU.

1 user thanked author for this post.

TJ

Reply | Quote

This for Win 7-64 … (I’m 4.72) Sep & Nov 2017 Net Frameworks being offered With Feb ’19 this time. Sept shows Inst’d 10/1/17 but I skipped NOV for unknown reason.

Inst / Un-chk Advice appreciated.

W10 Pro 22H2 / Hm-Stdnt Ofce '16 C2R / Macrium Pd vX / GP=2 + FtrU=Semi-Annual + Feature Defer = 1 + QU = 0

Reply | Quote

Windows 7 SP1 64bit, with Broadcom network card. Group B.

Installed January’s updates; IE KB4486474, SO KB4486564 and SO .NET 3.5.1 KB4483483 (a SO for Group B) today.

From the catalog; Installed IE KB4486474 1st, SO KB4486564 2nd, SO .NET 3.5.1 KB4483483 3rd and MSRT 4th.

Installed one at a time. Rebooted in between each update letting it sit 1 minute after update was installed.

Saw the mscorsvw (process) running after the .NET was installed. Let sit for 10 minutes.

No network issues. No slow boot. No oddities (worked very well).

Rebooted 3 times and let it sit for several minutes.

I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks, allow .NET’s MSCORSVW to run and let the trusted installer (as per PKCano) do its thing.

Thanks to all here.

4 users thanked author for this post.

Microfix, jburk07, Myst, SueW

Reply | Quote

I know that Woody says we’re at MS-DEFCON 4 currently.  But where are things at with KB4487000 on Win 8.1?  Susan’s Master Patch List says that it’s OK to install it if you don’t have Access 95 (which I don’t).  But there’s no mention of the BSODs that have been reported on systems where KB4487000 got installed.

I’m really nervous about installing that update on my Win 8.1 system; since I really don’t look forward to having to roll it back to recover from a crash.

Has there been any new info on this issue for us folks with Win 8.1?

3 users thanked author for this post.

banzaigtv, b, DrBonzo

Reply | Quote

I’m pretty curious about KB4487000, also. All my 8.1 friends are asking about it, but I don’t know what to tell them.

Reply | Quote

I’ve installed KB4487000 on 3 separate PC’s and I haven’t experienced one BSOD on any of them.

1 user thanked author for this post.

DrBonzo

Reply | Quote

Thanks @Hopper15. Can you please provide a few details about your computer systems? That might be helpful to those trying to decide whether to install or wait.

Reply | Quote

I have installed KB4487000 on four of my systems (2 Ivy Bridge, 1 Haswell, 1 Kaby Lake VM) with no problems. In fact, my main Win8.1 machine is included.

2 users thanked author for this post.

Microfix, DrBonzo

Reply | Quote

Windows 7 Home SP1 64bit, Group B. Desktop: locally built, i7-4770 Haswell, Intel ethernet Connection I217-V, and laptop: Dell Inspiron 5520 i7-3612QM, Intel Centrino Wireless N2230.
After creating an image backup first installed KB4486564, rebooted, next installed KB4486474, rebooted, next installed KB4483483, and KB4483474, no restart required but I rebooted anyway. Finally via WU installed Feb 2019 KB890830.
So far no issue.
Thanks y’all.

3 users thanked author for this post.

Microfix, jburk07, SueW

Reply | Quote

DrBonzo wrote:

Thanks @hopper15. Can you please provide a few details about your computer systems? That might be helpful to those trying to decide whether to install or wait.

All three are from Dell.

One Laptop is a x64 bit on a Intel I7 7700k on a Seagate 1 TB Hard Drive 2.70 GHZ with 12 GB of RAM. Another laptop is a X64 bit on AMD Radeon R6 1.90 GHZ on a 1 TB Seagate 1 TB Hard Drive with 8 GB of RAM.

The other is a desktop x64 bit running Intel I7-9700K 3.20 GHZ on a Seagate 4 TB Hard Drive with 12 GB of RAM. I had the hard drive replaced on this desktop last year though as the original HD was failing.

If you need any other details just let me know.

2 users thanked author for this post.

DrBonzo, Elly

Reply | Quote

what about CVE-2019-0626 ?

Edit: HTML removal – Please use the ‘Text’ tab in the post entry box when you copy/paste

Reply | Quote

Updated 8 Win 7 PC’s with Feb patches last night. No problems seen. These are older Core-2 duo and similar.

2 users thanked author for this post.

DrBonzo, jburk07

Reply | Quote

For those intending to patch this weekend, a few data points.

Five Win 7 machines, 1 Starter 32 bit and 4 Pro SP1 64 bit, all group B, patched successfully. Even Windows Media Player did not need to be reset. Also did the .NET Rollup, KB4487078, successfully. No drama, although the .NET is quite slow (10 to 15 minutes on 3rd generation core i5 and 5th gen core i3, and one Atom).

Also a report from a friend running 8.1 Pro on a 5th gen core i5 Dell Latitude (I believe all other chips – graphics, etc. – in the computer are Intel, also). NO BSOD after installing the Feb Rollup (Group A, KB4487000).

Good Luck, all.

3 users thanked author for this post.

Microfix, SueW, jburk07

Reply | Quote

Checking in after updating just now:

1 – imaged my disk with Macrium Reflect

2 – downloaded Updates KB4486564 (Feb. SO) and KB4486474 (IE11 Feb. Cumulative)

3 – installed each Update and then rebooted; waited 15 minutes

4 – checked “Windows Update” => 14 Important: 11 Office 2010 (8 checked; 3 unchecked) and 3 Win 7 (all checked); 2 Optional: both unchecked

5 – hid the 3 unchecked Important Office Updates (non-Security Updates): Access 2010 (KB4018363), Office 2010 (KB2589339), and Office 2010 (KB4461626) <= Note: these are March non-Security Updates

6 – unchecked and hid 3 Important Office Updates (non-Security Updates): Office 2010 (KB4462172), Office 2010 (KB4462187), and Visio 2010 (KB3115314) <= all related to Japanese error patching

7 – unchecked and hid “Important” Update KB4486563 (Feb. Rollup)

8 – hid the 2 unchecked “Optional” updates: KB4486565 (Feb. Preview Rollup) and KB4487256 (Feb. Preview Rollup .NET)

9 – checked “Windows Update” again => 7 Important: 5 Office 2010 and 2 Win 7: all checked; 0 Optional

10 – unhid 0 hidden updates to install

11 – installed 7 Updates: 5 Office 2010 (KB4462186, KB4018313, KB4462174, KB4462177 and KB4462182), Feb. S&QR for .NET (KB4487078), and MSRT (KB890830).

12 – rebooted; waited ~ 45 minutes (until the hard drive light stopped flashing)

13 – unhid the 3 March non-Security Updates that were hidden in #5 above

For the second month in a row, no need to reconfigure Windows Media Player!

Many thanks to Woody, PKCano, and all the other folks who continue to contribute their time and expertise!

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

3 users thanked author for this post.

Lori, DrBonzo, Microfix

Reply | Quote

SueW, Thank you for the “Thanks” you gave to me #290 above. Your posts are also helpful to others and are very detailed, so thanks to you too.

1 user thanked author for this post.

SueW

Reply | Quote

@anon, you’re very welcome!  I, too, read the results that other “Group B-ers” post each month, and find those posts very helpful to my own updating 🙂

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

Reply | Quote

For what it’s worth, I have recently installed Win8.1 Pro, and installing this month’s KB 4487000 has not caused any bluescreen on my system.

Will report back if that changes for me.

1 user thanked author for this post.

DrBonzo

Reply | Quote

Windows update reporting in:

Installed KB4486563 (Feb rollup) yesterday with no issues.
Installed KB4487078 (Feb Net rollup) this morning with no issues.

Have not installed MSRT for quite a while and continue to not install.

Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)
Windows 7 Home Premium 64 bit SP 1  GROUP A
Processor:  Intel i3-3240 (ivy bridge 3rd generation)
chipset Intel (R) 7 series/C216
chipset family SATA AHCI Controller -1 E02
NIC Realtek PCLE GBE Family Controller

MSE antivirus
Chrome browser
Note: checked Chrome Browser update and it is up to date.

2 users thanked author for this post.

DrBonzo, Microfix

Reply | Quote

PKCano wrote:

KB4023057 keeps showing up because it is actually a different version each time which makes it a different update but with the same number. (Thank you , MS) Hide it again. .

I see KB4023057 is available once again, as a 2019-02 update. I have hidden it once again.

Will this thing ever get the “all clear”?

All of the articles that I can find about it seem to reference older versions.

Thanks you, MS. 🙂

***windows 10-1803***

Windows 10 Pro 22H2

Reply | Quote

Just snuck in under the DefCon2 wire early this morning while the Feb stuff was still showing on my WU scan…

‘Group A” running Old 32-bit Win 7 Pro sys with WolfDale Core 2 Duo HP SFF

After full imaging, I then proceeded to install, without any drama (one at a time, and with reboots and about 30 minutes quiet time after each reboot):

KB4486563, KB4487078 and Feb’s MSRT

Cleaned up Disk, rebooted a few more times for good measure.  All seems well.

Heartfelt thankyous to all the participants here.  I am grateful for this forum!

2 users thanked author for this post.

Steve, abbodi86

Reply | Quote

JohnW wrote:

PKCano wrote:

KB4023057 keeps showing up because it is actually a different version each time which makes it a different update but with the same number. (Thank you , MS) Hide it again. .

I see KB4023057 is available once again, as a 2019-02 update. I have hidden it once again. Will this thing ever get the “all clear”? All of the articles that I can find about it seem to reference older versions. Thanks you, MS. 🙂 ***windows 10-1803***

They seem to re-release it at least once a month, so you have to keep hiding it. It just showed up again today, 21 March.  ***W10 Pro x64-1803***

Reply | Quote

ltorres wrote:

win32kfull.sys that comes with KB4487026 is 10.0.14393.2791 dell optiplex 9020m w/o issues have 10.0.143932665 At this point I had to uninstall the patch as it is for one of my Customer Service agents. I setup another 9020M with the latest patches and runing Prime95… I am not sure if this will trigger a blue screen

I donno if this matters anymore but I did not deploying KB4487026. I deployed March updates and win32kfull.sys changed to 10.0.14393.2848 and my user has yet to blue screen so I am confident I am ok for march updates… I did not end up finding out what caused the bsod

Reply | Quote

I can report that KB4487000 caused BSOD on 2 out of 50 computers I have in an updates test group, and pulled the update from going to production.

I can further report the BSOD problem continues on the same computers with March cum 8.1 KB4489881 🙁

Both BSOD report win32k.sys as the problem.

I had hoped Microsoft would have at least acknowledged the problem.

BSOD experience is random BSOD approx. once every 24 hours. Uninstall the update solves the problem.

I am still looking at how to solve the problem.

Edit to remove HTML.

2 users thanked author for this post.

woody, columbia2011

Reply | Quote

Microsoft has officially acknowledged the bug:

After installing this update, devices with a winsock kernel client may receive D1, FC, and other errors. Additionally, systems that run the Skype for Business or Lync Server Edge Transport role may be affected by this issue

This issue is resolved in  KB 4489893.

So, once again, we have a bug introduced by a Monthly Rollup that’s fixed by installing the next month’s Monthly Rollup preview.

Reply | Quote