'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

Hello

That's only part of the patching that is necessary from what I have heard. There is also a bios update which is supposed to be received from the manufacturer of your computer. I wonder what I do since my computer is custom made for me. I guess I can check the Asus website since that is the kind of motherboard I have and that is where I found other bio updates, but not recently. I think my Win 7 Pro is about 4 1/2 years old

Have a Good Night and

Thanks..

Me too.PNGKB4056894.... on the only machine I havesmiley

I've had the MS update on both my machines. yes

bbulog:

...I did not receive any Microsoft security updates released on January 3 ! I have Norton ? Internet Security installed on my laptop with Windows 8.1. How can I get these security updates ?

Hi bbulog:

From Woody Leonhard's 05-Jan-2018 ComputerWorld article Win7 Monthly Rollup KB 4056894 signals early, abbreviated Patch Tuesday:

Win8.1 and Server 2012 R2 KB 4056898 is the January security-only patch, which must be manually downloaded and installed. It, too, contains only the Meltdown fix. (There was no Preview Monthly Rollup in December.) I don’t see any references to a Win8.1 Monthly Rollup — it’s likely we’ll see one sooner or later.

The How to Get This Update section of the Microsoft KB article January 3, 2018—KB4056898 (Security-only update) notes that the Win 8.1 KB4056898 update can be manually installed using the appropriate standalone .msu installer posted <here> on the Microsoft Update Catalog - just save the correct 32-bit (x86) or 64-bit (x64) .msu installer for Win 8.1 to your Windows desktop, close your browser, and double-click the file to start the installation.

You can also wait a few days for the January 2018 Patch Tuesday updates this coming Tuesday (09-Jan-2018) and a patch will likely be delivered via Windows Update by that time.
--------------
32-bit Vista Home Premium SP2 * Firefox ESR v52.5.3 * Norton Security Premium v22.11.2.7 * MB v3.3.1

Does anyone now whether the Norton systems protects a computer against hackers using the weakness found in Intel technology?

 

@bbulog

If you have the Fast Start feature enabled it may be the cause.For more info please see  https://community.norton.com/en/forums/windows-881-or-10-and-fast-start-feature-0 

 

That is testing for an older vulnerability, not this one.

On Microsoft support is article "Windows Client Guidance for IT Pros to protect against speculative execution side-channel vulnerabilities"

I cite: 

"Customers must take the following actions to help protect against the vulnerabilities.

  1. Verify that you are running a supported antivirus application before you install OS or firmware updates. Contact the antivirus software vendor for compatibility information.
  2. Apply all available Windows operating system updates, including the January 2018 Windows security updates.
  3. Apply the applicable firmware update that is provided by the device manufacturer.

Windows-based machines (physical or virtual) should install the Microsoft security updates that were released on January 3, 2018."

I did not receive any Microsoft security updates released on January 3 ! I have Norton ? Internet Security installed on my laptop with Windows 8.1. How can I get these security updates ?

 

I have a 5 years old notebook ASUS and this down is my situation (The system is not vulnerable) :

 

Intel SA-00086 Detection Tool MEI Verifica Vulnerabilità.gif

ITMA. Sitrep ¦ Windows Vista 32-Bit

Windows Stand Alone Installer
Downloaded the x5-Windows Server 2008 Updates. x1-IE9 Windows Server 2008 Updates.

1. Run LiveUpdate, until clear.
2. Create a Windows Restore Point. (WU, isn't going to do it for you).
3. Run the 'msu' files in turn. Restart your machine, when all 6 have installed.
4. My pc, installed closed & opened in the prescribed manner.

5. Reservedly, All is well.

It does appear, as the mayhem accelerates. I require:-
1. Chip updates.
2. BIOS updates.

All 'legacy stuff'. Wonder if it'll ever turn-up ?

"It's That Man Again."
The
SinecolSirphor. AK.

AnNe_Z On windows 10 if you have windows defender set to scan on a scheduled basis AND Norton installed Norton will take precedence because Windows disabled most, but not all the functions of Defender to avoid conflicts. Therefore the registry key will come from Norton via live updates. If you have Norton installed that update most likely has already been installed, however you can use regedit from the run command and check for the registry entry being there. According to this article Windows 7 should also receive the patches as well : https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in

Cheers

Can anyone confirm if it is possible to download the patch on Windows 7 machine? I have a theory that if you have a W10 machine and have Defender enabled to do a scan once in a while, that the registry key-setting is coming from Defender, not Norton?

Thanks to everyone that posted to this tread.  It was kind of weird as I ran Live Update this morning before I ran a Windows Check For Updates and Windows said that I didn't need anything.  This afternoon I checked the registry entry that was posted and sure enough the entry was there as described so I ran Windows Update again on my system and this time I got the download and got it applied without any issues.  I don't know whether Norton made another update to my system after the manual Live Update I ran earlier or whether Microsoft simply wasn't read to send out the update at the time I checked this morning.  Either way I'm good.

It's not looking good for my Intel based Dell Inspiron laptop. MS patch downloaded and installed, from what I can tell the recommendation is a BIOS update. Scary at best to even think of doing that.  The MS help link suggest the code for MS Server isn't installed. No server OS here lol. https://support.microsoft.com/en-us/help/4072698/windows-server-guidance-to-protect-against-the-speculative-execution

ps.PNG

This one  -  Permalink.

OK I was replying to Permalink in a very long thread. Which was the W10 1709 message?

Hugh, the KB I linked for Win10 1709 also has that caveat.

K

I did just read this and the "won't get" referred to seems only to be for certain earlier versions of Windows?

BUT… you won’t get any patches installed unless and until your antivirus software sets a specific registry key.

 This is from the  linked MS article:

Windows 7, Windows Server 2008 R2, Windows Server 2012 Customers


In a default installation of Windows 7, Windows Server 2008 R2, and Windows Server 2012 customers will not have an anti-virus application installed by default. In these situations, Microsoft recommends installing a supported anti-virus application such as Microsoft Security Essentials or a third-party anti-virus application.

Note: Customers will not receive these security updates and will not be protected from security vulnerabilities unless their anti-virus software vendor sets the following registry key:

Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat" Value="cadca5fe-87d3-4b96-b7fb-a231484277cc" Type="REG_DWORD

 

I got the MS KB installed this morning with no problems.

Norton Security w/BU is 28.11.2.7 Windows 10 Pro 32 bit.

I see that Internet Explorer got an update since it went back to showing the IE Home Page on a new TAB

Take a breath and read this.

https://www.computerworld.com/article/3245788/microsoft-windows/windows-meltdown-and-spectre-keep-calm-and-carry-on.html