January 3, 2018 - KB4056897 (Security-only update) Windows 7

Hello Anak

Thank you for the information.

I've also seen a number of posts that this is causing some quite significant problems.

I've found the registry entry, pic attached, it seems to be the same numbers as in your post, so it that how it should be?

I've also seen a reference to only needing to install this update if you have 'crypto currency' whatever that is, pretty sure I've not got it.

LevelBest

Both KB4056897 (security-only) and KB4056894 (monthly rollup) are causing massive problems for AMD users (notably failure to boot up with BSOD) and should definitely not be installed yet, especially as the monthly rollup is generally not checked and is therefore not intended to be ready for installation.

One problem with the security-only update is that by downloading it from the MS Windows Catalog and installing it you are bypassing the registry key test that determines whether your machine is suitable for it.

If you have installed one of these updates and can't boot the machine try to boot into repair mode and then use System Restore to roll back the computer to a date prior to the update being installed.

It looks highly likely, however, that both updates will either be pulled shortly or else replaced on Patch Tuesday. In the meantime it would be prudent to leave well alone, especially on AMD machines.

HI @iko22,

Thanks to @Anak, he has posted a check list of dates AV's for updating the key
CVE-2017-5753, CVE-2017-5715, and CVE-2017-5754 (Meltdown and Spectre) Windows antivirus patch compatibility

As for replacing your AV, as long as the reg key has been set by the new provider then it should not be a problem
Believe Avast has but mine Panda hasn't NO WAY i would swop until ALL AV's have updated


In reality there are 4 parts to fixing the "Meltdown +" issue
MS - Manfacturer(intel/AMD) - OEM - AV

In my eyes the correct order to update

Manufacturer (note Intel have issued a check tool)
AV
MS
OEM

Its been handled piecemeal which doesnt help us,
Even the COMPLETE MS patch comes in 2 parts
(the 2nd is in the monthly cumulative - for IE and Edge browsers)
when the OEM's patch the BIOS, were going to hit another problem are they going to issue it for older machines as well - DONT think so
(that includes my 2009 rig)

Roy

Make sure that any Intel check tool actually relates to the Meltdown issue, there are a lot of posters on multiple forums linking an old Intel check tool that was for a different problem entirely and if applied to this situation it will give a false sense of security.

AMD don't believe that their processors are at significant risk from Meltdown, and there is currently insufficient reason to worry about Meltdown if you have an AMD machine.

Remember too that with Windows Updates you can usually uninstall them or roll back the machine if they cause issues. However, BIOS updates and firmware updates generally don't typically have the same option so only consider any such updates with extreme caution and, most crucially in the light of the many problems being reported all over the place - not yet!

Hi Seffrid,

The intel tool i was refering to is Dated Nov 2017.
Intel-SA-00086 Detection Tool

Unfortunately for some AMD users ithat kb is causing a BSOD

Possibly another related problem
Affecting Sandboxie users - its reporting NOT supported
fix issued
5.23 Beta Available (latest version 5.23.3) - Sandboxie Support

Roy

torchwood said:

Hi Seffrid,

The intel tool i was refering to is Dated Nov 2017.
Intel-SA-00086 Detection Tool

Unfortunately for some AMD users ithat kb is causing a BSOD

Possibly another related problem
Affecting Sandboxie users - its reporting NOT supported
fix issued
5.23 Beta Available (latest version 5.23.3) - Sandboxie Support

Roy

That's an old tool relating to the Management Engine Critical Firmware Update and is nothing to do with the present Meltdown issue. As such it won't tell you whether you're vulnerable to it.

I still have not installed this update.

I've seen on the news this morning that intel processors are at risk from the Meltdown issue but patches/updates (?) are being issued for intel processors that are up to five years old. My trusty laptop is 6 years plus old.

Then there's the issue of whether McAfee have released the update for the registry part.

I don't know whether to install this update or not, even if I do, will it protect my laptop and now given this latest intel issue, whether it could potentially wreck my laptop.

Can anyone help?

LevelBest