April 9, 2019 - KB4493472 (Monthly Rollup) for Windows 7

[Brink]

April 9, 2019 - KB4493472 (Monthly Rollup)

Applies to: Windows 7 Service Pack 1Windows Server 2008 R2 Service Pack 1

---

Starting with KB 4493472 Monthly Rollup updates will no longer include PciClearStaleCache.exe. This installation utility addressees inconsistencies in the internal PCI cache. This can cause the symptoms listed below when installing monthly updates that do NOT include PciClearStaleCache:

• Existing NIC definitions in control panel networks may be replaced with a new Ethernet Network Interface Card (NIC) but with default settings. Any custom settings on the previously NIC persist in the registry but were unused.
• Static IP address settings were lost on network interfaces.
• Wi-Fi profile settings were not displayed in the network flyout.
• WIFI network adapters were disabled

These symptoms are especially common on guest virtual machines and on machines which have not been updated since March, 2018.

Administrators should ensure that any one or more of the Monthly rollups released between April 10, 2018 (KB 4093118) and March 12, 2019 (KB 4489878) have been installed prior to installing April 2019 and later updates. Each of these rollup updates includes PciClearStaleCache.exe.

Improvements and fixes

This security update includes improvements and fixes that were a part of update KB4489892 (released, March 19, 2019) and addresses the following issues:

• Provides protections against Spectre Variant 2 (CVE-2017-5715) and Meltdown (CVE-2017-5754) for VIA-based computers. These protections are enabled by default for the Windows Client, but disabled by default for Windows Server. For Windows Client (IT Pro) guidance, follow the instructions in KB4073119. For Windows Server guidance, follow the instructions in KB4072698. Use these guidance documents to enable or disable these mitigations for VIA-based computers.
• Addresses an issue that causes the error "0x3B_c0000005_win32k!vSetPointer" when the kernel mode driver, win32k.sys, accesses an invalid memory location.
• Addresses an issue in which netdom.exe fails to run, and the error, “The command failed to complete successfully” appears.
• Addresses an issue that may prevent Custom URI Schemes for Application Protocol handlers from starting the corresponding application for local intranet and trusted sites on Internet Explorer.
• Addresses an issue that may cause authentication issues for Internet Explorer 11 and other applications that use WININET.DLL. This occurs when two or more people use the same user account for multiple, concurrent login sessions on the same Windows Server machine, including Remote Desktop Protocol (RDP) and Terminal Server logons.
• [UPDATED 4/11] Addresses an issue that may cause compound document (OLE) server applications to display embedded objects incorrectly if you use the PatBlt API to place embedded objects into the Windows Metafile (WMF).
• Security updates to Windows Kernel, Windows Server, Graphics Component, Windows Input and Composition, Windows Datacenter Networking, Windows MSXML, and the Microsoft JET Database Engine.

For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

Known issues in this update



[UPDATED 4/22] Sophos Central Endpoint and SEC: Computers fail/hang on boot after the Microsoft Windows April 9, 2019 update - Sophos Community


[ADDED 4/12]


[UPDATED 4/17] Arcabit - Wsparcie techniczne


[UPDATED 4/18] Avast Knowledge Base


[ADDED 4/18]
https://kc.mcafee.com/corporate/index?page=content&id=KB91465
https://kc.mcafee.com/corporate/index?page=content&id=KB91465


How to get this update

Before installing this update

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest Rollup. SSUs improve the reliability of the update process to mitigate potential issues while installing the Rollup and applying Microsoft security fixes.

If you are using Windows Update, the latest SSU (KB4490628) will be offered to you automatically. To get the standalone package for the latest SSU, go to the Microsoft Update Catalog.

Install this update

This update will be downloaded and installed automatically from Windows Update.

To get the standalone package for this update, go to the Microsoft Update Catalog website.

File information

For a list of the files that are provided in this update, download the file information for update 4493472.

Source: https://support.microsoft.com/en-us/help/4493472

Direct download links for KB4493472 MSU file from Microsoft Update Catalog:

:ar: Download KB4493472 MSU for Windows 7 32-bit (x86) - 149.6 MB

:ar: Download KB4493472 MSU for Windows 7 64-bit (x64) - 244.4 MB

 

[erpster4]

it seems the KB4493472 rollup update cannot coexist peacefully on Win7 systems with Sophos Antivirus or Sophos Endpoint security software installed as that update may cause some lockups.


UPDATE KB4493472 Issues - Windows 7 Forum - Spiceworks

Sophos Central Endpoint and SEC: Computers fail/hang on boot after the Microsoft Windows April 9, 2019 update - Sophos Community

for those using Sophos antivirus or other security product from Sophos, remove/uninstall the KB4493472 update and reboot and wait for a fix from either Sophos or Microsoft.

 

[Brink]

"Improvements and fixes" updated 4/10.

 

[erpster4]

Microsoft has acknowledge the problem with KB4493472 in their support article - added a new issue about this yesterday.

Also Avast and Avira have also confirmed problems with the KB4493472 update on their respective sites:

Avast Knowledge Base
Why does my system run very slow?

 

[Brink]

Windows 7 problems: Microsoft blocks April updates to systems at risk of freezing | ZDNet

 

[Brink]

Update reissued.

 

[Brink]

UPDATE 4/12:

New known issue added.

 

[Brink]

UPDATE 4/15:

New known issue added.

 

[Brink]

UPDATE 4/17:

Known issues updated.

 

[Brink]

UPDATE 4/18:

Known issues updated for McAfee and Avast.

 

[LevelBest]

UPDATE 4/18:

Known issues updated for McAfee and Avast.

Thank you for this. I have McAfee. The update is still waiting to be installed and I was going to do it this morning but ran out of time. I'll wait until it's sorted.

This kind of issue makes me wonder whether, come 2020, it'll be somewhat of a relief not to have anymore updates!

 

[Sky Ranch]

Unless you're using McAfee Endpoint Security used in corporate environments, I don't believe this applies for users running McAfee Internet Security for personal use.

 

[dlwmacgregor]

So it is safe to install this update if i am using Bit Defender 2019?

 

[Brink]

UPDATE 4/22:

Known issues updated. See first post for more details.

 

[Struggling7]

UPDATE 4/22:

Known issues updated. See first post for more details.

If issues continue to be found with this update…. It’s not going to be safely used with anything….. Hope this is not sign of planned Win 7 attacks going forward to EOL date.