Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: January 3, 2018 - KB4056897 (Security-only update) Windows 7

21 Jan 2018   #101
michael diemer

Windows 7 x64 SP1
 
 

I have an AMD Athlon 64X2 6000+ CPU. Computer is a Gateway GT5656. 6150se chipset.

I'm doing my best to comprehend this situation. I have installed the Microsoft fix so that this update does not render my computer unbootable. However, I'm reluctant to install it. I have never updated my bios, never had a need to. Is this something I should do first (or at all?). I have made a system image. I have checked that I have the correct registry key. My only AV is MSE. Safe to proceed?

Edit: I also have the workaround if this renders my computer unbootable.


My System SpecsSystem Spec
.
22 Jan 2018   #102
Anak

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1
 
 

Hi,
Quote   Quote: Originally Posted by michael diemer View Post
I have an AMD Athlon 64X2 6000+ CPU. Computer is a Gateway GT5656. 6150se chipset.
I'm doing my best to comprehend this situation.
Quote:
I have installed the Microsoft fix so that this update does not render my computer unbootable. However, I'm reluctant to install it.
I have never updated my bios, never had a need to. Is this something I should do first (or at all?). I have made a system image. I have checked that I have the correct registry key. My only AV is MSE. Safe to proceed?

Edit: I also have the workaround if this renders my computer unbootable.
  • At the parts that I embolden did you mean you downloaded the fix and are reluctant to install, is this KB4073578?
  • How old is your Gateway?
  • Are you aware that Acer bought out Gateway?
  • I've never had to update my BIOS but I have a need now.
  • Most if not all users are installing the Meltdown part first, the Spectre part is taking a bit longer to get around.
  • It's good that you do have backups.
If Acer doesn't come up with a fix for my Gateway I'll find something from Intel, for now I'm using the Gateway Updater to check if there is. but I'm not holding my breath because it looks like both our machines are EOL (end of life) as far as Acer is concerned.

Here's two posts of mine that may help clear things up, they are from another thread, if you want to see the whole thread click on the orange dot next to my name; Anak.
Quote   Quote: Originally Posted by Anak View Post
Quote   Quote: Originally Posted by Anak View Post
Hi, montecarlo87,

I'm in the same boat as you. I have a 7year old Gateway DX4831-01e that is EOL and it to runs like a champ, all I can do for now is apply the recent patches that WU (windows update) sends me for the meltdown part of the Intel problem.

Here's what you need to understand:
  • Meltdown is being handled by MS (Microsoft) and WU.
  • Spectre is being handled by the OEM of each individual user(s) machine(s) because it involves the Intel ME (management engine) and WU can't touch that.
How do you handle your windows updates, have you seen either KB4056894 or KB4056897? You can apply either one to harden your machine. Make sure your OS, AV and browser is up to date.

The one item that I haven't heard anything at all about is; What about all those brand new machines that are sitting in the big box stores that unsuspecting buyers will purchase, are they being alerted before they buy? I could just imagine the drop in sales.
In my opinion they should all be sent back to the OEM to apply the patches, but I'll bet you'll never see that happen.

I'm also waiting for those geek thinkers to come up with an answer, if I hear of anything I'll let you know.
You're welcome, thank you for the rep!

I'd like to add a caveat to one of my earlier statements:
I'm seeing grumblings that WU could do the spectre updates but, MS and WU would have to work together with Intel and their code to receive the patches, so far Intel is reluctant to reveal their code and don't forget the OEM's, and how they along with Intel massage the Intel code to suit the individual aims of the OEM's.

It would be: MS + Intel + OEM's working together to achieve a fix that wouldn't greatly impact the consumer, but I'm not going to hold my breath because corporate pride would invariably get in the way.

I ran the InSpectre tool and had the same results as you.
My System SpecsSystem Spec
22 Jan 2018   #103
antioch

Windows 7 Professional SPI 64bit
 
 

Hi Anak
Had a good weekend away - had a bit of snow - not as much locally as the last two times.
Nothing has been showing in the event log - so far.
However was greeted with lots of updates - the re-issue of 4055532[re-installed] & 4056894[hidden again]. 4056897 seems to have been OK.
Plus I got all hidden/unwanted updates back on offer[52 - they cover the last 12 months] so had to hide again - this is the fourth time I have had this happen in 12 months[used to happen with XP].
BIOS 3061 update is done. There will be others probably so will keep an eye on that.

Fingers crossed as the February black Tuesday will soon be here.
My System SpecsSystem Spec
.

22 Jan 2018   #104
michael diemer

Windows 7 x64 SP1
 
 

Quote   Quote: Originally Posted by Anak View Post
Hi,
  • At the parts that I embolden did you mean you downloaded the fix and are reluctant to install, is this KB4073578?
  • How old is your Gateway?
  • Are you aware that Acer bought out Gateway?
  • I've never had to update my BIOS but I have a need now.
  • Most if not all users are installing the Meltdown part first, the Spectre part is taking a bit longer to get around.
  • It's good that you do have backups.
If Acer doesn't come up with a fix for my Gateway I'll find something from Intel, for now I'm using the Gateway Updater to check if there is. but I'm not holding my breath because it looks like both our machines are EOL (end of life) as far as Acer is concerned.
Thank you Anak for your reply. To answer your questions, yes I have installed the patch which supposedly fixes the makes the Meltdown update safe (KB4073578). I have not yet installed the actual Meltdown fix (KB4056897).

Yes I know Gateway was acquired by Acer. My computer is about 10 years old, but is a workhorse. I have three Linux OS's on it as well.

I have printed out the instructions to boot if the patch causes the BSOD.

In spite of all this, I remain hesitant. My gut just tells me to wait. I don't actually use this Windows much. In fact, I mainly use it to test Windows updates before putting them on my wife's computer (which has Intel, so this update shouldn't be a problem). Since my use of this computer is limited, I wonder if the fix is worth the trouble. I am on Linux 95% of the time, and they are providing their own patches.
My System SpecsSystem Spec
22 Jan 2018   #105
michael diemer

Windows 7 x64 SP1
 
 

I decided to give it a go, and - it worked! No problems at all.

So, at this point I have taken care of the Meltdown part, right? And I still need to do something about the Spectre part, right? And I would do that through Acer? (Except that Acer may have written computers this old off, if I read Anak's remarks correctly).

Edit: Actually, since my computer has an AMD CPU, the Spectre part may not even be an issue for me, right?
My System SpecsSystem Spec
22 Jan 2018   #106
Seffrid

Windows 7 Home Premium 64
 
 

I would urge great caution in relation to installing any BIOS update. Unlike other updates they are generally not reversible so can cause major problems.

Bear in mind also that not all machines will need a BIOS update. For example, AMI have said that their motherboards generally don't need an update as they're not vulnerable to Spectre, unless there is an associated Intel component that does require an update in which case they are working closely with Intel and will provide any necessary update for those machines that need it.

It's also worth bearing in mind that there are currently no reported incidents of Meltdown or Spectre malware occurring "in the wild" i.e. outside theoretical testing so there really is no urgency in dealing with these issues. It's not clear whether this month's Windows Updates have yet been rendered fully reliable so, again, I would urge caution especially with AMD machines or Intel machines with AMD components e.g. graphics cards. Keep an eye on a couple of technical sites and follow their recommendations on which updates to install and when.
My System SpecsSystem Spec
22 Jan 2018   #107
michael diemer

Windows 7 x64 SP1
 
 

I also am leery of Bios updates. What I have seen on them does make me very hesitant. Since I have don't see a reason to do so, I will stay away from it.
My System SpecsSystem Spec
22 Jan 2018   #108
Anak

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1
 
 

antioch,
I had thought it was a moot point but I'll mention it now, there is one difference between 6894 and 6897 and it's about IE (Internet Explorer), MS's browser;
Quote:
Quote:
94 states that there are Security updates to Windows SMB Server, Windows Kernel, Microsoft Graphics Component, Internet Explorer, and Windows Graphics.
where 97 doesn't Security updates to Microsoft Graphics Component, Windows Graphics, Windows Kernel, and Windows SMB Server.
I saw on one site that I'd have to hunt down that even though 97 doesn't list it, it does harden IE, if anyone has noticed, FF and Chrome put out updates to that effect I received mine for FF on the 4th of January I'm now at v57.0.4 and there's talk of another for FF tomorrow the 23rd.

It's certainly your prerogative to hide 6894 and because of that I don't feel right in saying one way or another if you should install it, it's kind of like what @Brink said about KB4073578
Quote   Quote: Originally Posted by Brink View Post
Hey Peter, :)

Correct, but it would be a good idea to install this update if you have an AMD processor no matted if you had the issue.
Just replace "if you have an AMD processor no matted if you had the issue." with "if you have an use IE or not." There has to be an underlying reason why it's being offered.


michael diemer
,
So, yes, yes, yes, and yes, you have read them correctly...AMD CPU? Um maybe, you have to research it.


Seffrid,
Sound advice, One item about AMD GPU's this was back in post #75 by @Nitesco:
Quote   Quote: Originally Posted by Nitesco View Post
I've tested my RX480 with some fairly demanding games, and it has been running as normal. I'll keep an eye on things, but nothing bad to report. And according to a quick search, AMD GPUs are not affected by Meltdown or Spectre.

From The Verge:
Quote:
AMD is also revealing that its Radeon GPU architecture isn’t impacted by Meltdown or Spectre, simply because those GPUs “do not use speculative execution and thus are not susceptible to these threats.” AMD says it plans to issue further statements as it continues to develop security updates for its processors.
Also, from a post on AMD's own forums asking about the issue:
Quote:
No GPUs are affected by Meltdown and Spectre, nVidia only patched their vulnerable software

michael diemer,
Anyone can correct me if I'm wrong, but as I understand it there are two updates for Spectre, one for the BIOS and one for the microcode that involves Intel's ME (Management Engine) as ME is a completely separate sub-system: Intel Management Engine, Explained: The Tiny Computer Inside Your CPU
My System SpecsSystem Spec
22 Jan 2018   #109
Seffrid

Windows 7 Home Premium 64
 
 

Anak, just to clarify my position - I am not claiming that AMD graphics cards are affected by Meltdown or Spectre, rather that both AMD machines and Intel machines with AMD graphics cards are potentially affected (adversely) by Microsoft's Windows Updates.
My System SpecsSystem Spec
22 Jan 2018   #110
Anak

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1
 
 

Okay, and all I'm trying to point out is that AMD GPU's are not affected at all, no matter what their CPU's are.
My System SpecsSystem Spec
Reply

 January 3, 2018 - KB4056897 (Security-only update) Windows 7




Thread Tools




Similar help and support threads
Thread Forum
January 2018 Non-Security Office Update Release
Source: January 2018 Non-Security Office Update Release Office Updates
News
Skype dropping option to login via Facebook in January 2018
Sources: Can I sign in to Skype with my Facebook account? | Skype Support How do I transfer contacts from one Skype account to another? | Skype Support
News
Microsoft Security Bulletin(s) for January 10, 2017
Microsoft Security Bulletin(s) for January 10, 2017 Note: There may be latency issues due to replication, if the page does not display keep refreshing Today Microsoft released the following Security Bulletin(s). Note: »Access Denied ··· security and »Access Denied are authoritative in all...
Windows Updates & Activation
January 12th 2016 Security Update Release Summary
Source: January 2016 Security Update Release Summary - Microsoft Security Response Center - Site Home - TechNet Blogs See also: Microsoft Security Bulletin Summary for January 2016 Security Advisories 2016
News
January Security Bulletin Webcast
More...
News


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 13:29.
Twitter Facebook Google+