{"id":9407,"date":"2019-04-11T14:32:15","date_gmt":"2019-04-11T12:32:15","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=9407"},"modified":"2024-10-03T00:38:08","modified_gmt":"2024-10-02T22:38:08","slug":"april-2019-updates-freezes-windows-7-8-1-10-server","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2019\/04\/11\/april-2019-updates-freezes-windows-7-8-1-10-server\/","title":{"rendered":"April 2019 updates freezes Windows 7, 8.1, 10 & Server"},"content":{"rendered":"

\"Windows[German<\/a>]Microsofts updates for Windows, released on April 9, 2019, are causing issues in Windows 7, Windows 8.1 and Windows 10, if third party antivirus software from Sophos, AVAST and Avira is installed.<\/p>\n

<\/p>\n

\"\"I had blogged Tuesday\/Wednesday night about the updates, Microsoft released on patchday (April 9, 2019) \u2013 see the links at the end of the article. But then my blog went down, now, after a day, I'm able to bring things together. <\/p>\n

KB4493472 for Windows 7\/Windows Server 2008 R2<\/h2>\n

Update KB44493472<\/a> (Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1) is a security update that contains improvements and bug fixes that were already included in the previous month's update. The update addresses a number of issues, including updating protection against Spectre Variant 2 (CVE-2017-5715) and Meltdown (CVE-2017-5754) on VIA-based systems. <\/p>\n

Furthermore the kernel is patched in win32k.sys and the IE 11 in WININET.DLL. Personally, I would not have installed this update, but rather installed the security-only update KB4493448 after waiting a few days of time.  <\/p>\n

Block all April 9, 2019 Windows updates <\/h2>\n

Shortly after release I received some user comments<\/a> within my German article Patchday: Updates f\u00fcr Windows 7\/8.1\/Server (9. April 2019)<\/a>:<\/p>\n

\n

That went right through the absys. We currently have massive problems with Windows 7 clients that have installed all updates: After the reboot the computer stops at \"Updates will be configured\". <\/p>\n

Remove update doesn't work, only rolling back to the last restore point, which is created automatically.<\/p>\n<\/blockquote>\n

German blog reader mentioned within this comment<\/a>, that a Sophos security suite may be involved and linked to this discussion thread in German forum administrator.de.   <\/p>\n

\n

Good morning, everyone,
I just wanted to point out that after the above mentioned updates at my 2 VM\u00b4s with Windows Server 2008 R2 the machines stopped for more than 1.5 hours at \"Configure Updates\".
The VM\u00b4s are running under VMware vSphere 6.5.0, 9298722.
I can't say anything about the exact cause. I will now restore the machines from the backup.
So please be careful that you don't have to do this in the early morning.<\/p>\n<\/blockquote>\n

As it quickly crystallized, not every system was affected, but a lot. I found articles at askwoody.com<\/a>, ghacks.net<\/a> and spiceworks.com<\/a>. Sophos has published this forum post<\/a>. <\/p>\n

\n

SAV service hangs after installing KB4493472<\/h3>\n

Hello, <\/p>\n

Last night one of my Windows 2008R2 servers hung after installing Microsoft patch KB4493472. After initial examination I discovered that SAV service was logging lots of error messages in event log. Event IDs : 7022 (service hang), 80, 81, 83, 85, 82, 566, 608, 592. <\/p>\n

The server became unresponsive, no rdp, no file share access, Ctrl Alt Delete not working. <\/p>\n

I rebooted the server in to safe mode and disabled the Sophos services. After this, I was able to reboot normally. Then I uninstalled Sophos, rebooted and tried to install again but this time the installation didn't complete and the server hang again. I rebooted again in safe mode, disabled services, rebooted and uninstalled sophos again. After checking the Windows logs I realised that the server had installed update KB4493472 last night. I uninstalled the patch, rebooted and installed sophos again. This time there was no problem. <\/p>\n

Currently we are trying to unauthorise KB4493472 on our update system. <\/p>\n

Is there any known issues with KB4493472 on Windows Server 2008R2? <\/p>\n

Thank You.<\/p>\n<\/blockquote>\n

The Sophos support article, Sophos Central Endpoint and SEC: Computers fail\/hang on boot after the Microsoft Windows April 9, 2019 update<\/a>, dated of 11 April 2019, is now online. The following updates will cause install issues: <\/p>\n