{"id":9464,"date":"2019-04-17T00:44:11","date_gmt":"2019-04-16T22:44:11","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=9464"},"modified":"2024-10-03T00:38:08","modified_gmt":"2024-10-02T22:38:08","slug":"windows-patchday-issues-one-week-later-april-17-2019","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2019\/04\/17\/windows-patchday-issues-one-week-later-april-17-2019\/","title":{"rendered":"Windows patchday issues&ndash;one week later (April 17, 2019)"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline;\" src=\"http:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2013\/03\/winb.jpg\" width=\"58\" height=\"58\" align=\"left\" \/>[<a href=\"https:\/\/www.borncity.com\/blog\/2019\/04\/17\/windows-patchday-probleme-eine-woche-spter-17-4-2019\/\" target=\"_blank\" rel=\"noopener noreferrer\">German<\/a>]One week after Microsoft released Windows security updates causing install issues, the situation for victims are not clear. Here's an overview, what we know so far. <strong>Addendum:<\/strong> Avira has updated its knowledge base article, I've added that information.<\/p>\n<p><!--more--><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/vg02.met.vgwort.de\/na\/162f1eb39ce74cf39fc060b88dab4db6\" alt=\"\" width=\"1\" height=\"1\" \/>After Microsoft released security updates for Windows on April 9, 2019, reports about serious issues spread within internet forums. Some users claims freezes or slowdown from Windows 10 (see <a href=\"https:\/\/borncity.com\/win\/2019\/04\/12\/windows-10-v1809-slow-down-with-update-kb4493509\/\">Windows 10 V1809: Slow down with Update KB4493509?<\/a>), while others are facing startup and login issues.<\/p>\n<p>Later on, antivirus vendors Sophos, Avast and Avira confirmed, that their products interferes with the April 2019 security updates. I've addressed this within my blog post <a href=\"https:\/\/borncity.com\/win\/2019\/04\/12\/avast-and-avira-confirms-april-2019-update-issues\/\">AVAST and Avira confirms April 2019 Update issues<\/a>. Now we are a week older, but things doesn't become more transparent.<\/p>\n<h2>Microsoft's extended known issues list<\/h2>\n<p>Some days after Microsoft has released the April 9, 2019 patches, the company has extended the knows issues sections of their kb articles dealing with Windows Updates. Most kb articles dealing with updates for Windows 7, Windows 8.1 and Windows 10 (and it's server pendants) contains now the following know issues (see <a href=\"\/\/support.microsoft.com\/en-gb\/help\/4493467\/windows-8-1-update-kb4493467\" target=\"_blank\" rel=\"noopener noreferrer\">kb4493467<\/a> for Windows 8.1 for instance):<\/p>\n<table border=\"1\" width=\"640\" cellspacing=\"0\" cellpadding=\"2\">\n<tbody>\n<tr>\n<td valign=\"top\" width=\"320\">Issue<\/td>\n<td valign=\"top\" width=\"320\">Remark<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"320\">Microsoft and Sophos have identified an issue on devices with Sophos Endpoint Protection installed and managed by either Sophos Central or Sophos Enterprise Console (SEC) that may cause the system to become unresponsive upon restart after installing this update.<\/td>\n<td valign=\"top\" width=\"320\">Microsoft has temporarily blocked devices from receiving this update if the Sophos Endpoint is installed until a solution is available.<\/p>\n<p>Guidance for Sophos Endpoint and Sophos Enterprise Console customers can be found in the <a href=\"https:\/\/web.archive.org\/web\/20200814074141\/https:\/\/community.sophos.com\/kb\/en-us\/133945\" target=\"_blank\" rel=\"noopener noreferrer\">Sophos support article<\/a>.<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"320\">Microsoft and Avira have identified an issue on devices with Avira antivirus software installed that may cause the system to become unresponsive upon restart after installing this update.<\/td>\n<td valign=\"top\" width=\"320\">Microsoft has temporarily blocked devices from receiving this update if Avira antivirus software is installed.<\/p>\n<p>We are presently investigating this issue with Avira and will provide an update when available.<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"320\">Microsoft and Avast have identified an issue on devices running Avast for Business, Avast CloudCare, and AVG Business Edition antivirus software after you install this update and restart. Devices may become unresponsive at the login or Welcome screen. Additionally, you may be unable to log in or log in after an extended period of time.<\/td>\n<td valign=\"top\" width=\"320\">Avast has released emergency updates to address this issue. For more information and AV update schedule, see the <a href=\"https:\/\/kb.support.business.avast.com\/GetPublicArticle?title=Windows-machines-running-Avast-for-Business-and-Cloud-Care-Freezing-on-Start-up\" target=\"_blank\" rel=\"noopener noreferrer\">Avast support KB article<\/a>.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>The Microsoft support article for <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4493509\/windows-10-update-kb4493509\" target=\"_blank\" rel=\"noopener noreferrer\">KB4493509<\/a> (April 9, 2019, cumulative update for Windows 10 V1809) contains another entry:<\/p>\n<blockquote><p>Microsoft and ArcaBit have identified an issue on devices with ArcaBit antivirus software installed that may cause the system to become unresponsive upon restart after installing this update.<\/p><\/blockquote>\n<p>No issues with Sophos, Avast or Avira are mentioned. ArcaBit is a polish antivirus vendor, not known to me before. Microsoft says 'ArcaBit has released an update to address this issue.' The know issues entry doesn't provides details so far.<\/p>\n<h2>Withdrawn vendor statements<\/h2>\n<p>While Microsoft mentions ArcaBit has released an update, other things went odd. Within Microsoft's support article for <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4493509\/windows-10-update-kb4493509\" target=\"_blank\" rel=\"noopener noreferrer\">KB4493509<\/a> they say in the known issues section 'For more information, see the <a href=\"https:\/\/web.archive.org\/web\/20200814185930\/https:\/\/arcabit.pl\/wsparcie-techniczne.html\" target=\"_blank\" rel=\"noopener noreferrer\">Arcabit support article<\/a>'. But the link to Arcabit's support article isn't to helpful. It seems, that Arcabit deleted the article \u2013 the linked page just contains a sentence in polish, that support for customers is available from 8.00 a.m. to 4 p.m. and the phone and e-mail contact data.<\/p>\n<p>Also Avira decides to withdraw their first statement. While Microsoft still write within its knowledge articles:<\/p>\n<blockquote><p>Microsoft and Avira have identified an issue on devices with Avira antivirus software installed that may cause the system to become unresponsive upon restart after installing this update.<\/p><\/blockquote>\n<p>Avira is tight lipped. Within my blog post <a href=\"https:\/\/borncity.com\/win\/2019\/04\/12\/windows-10-v1809-slow-down-with-update-kb4493509\/\">Windows 10 V1809: Slow down with Update KB4493509?<\/a> I cited from a Avira <a href=\"https:\/\/web.archive.org\/web\/20190808113214\/https:\/\/www.avira.com\/en\/support-for-home-knowledgebase-detail\/kbid\/1976\" target=\"_blank\" rel=\"noopener noreferrer\">knowledge base article<\/a>, title <em>Why does my system run very slow?<\/em>. Within this article Avira says, that systems may be slowed down by Windows 10 V1809 update <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4493509\/\" target=\"_blank\" rel=\"noopener noreferrer\">KB4493509<\/a>. And they mentioned also Windows 7 Updates\u00a0 KB4493472 and KB4493448. Avira also confirmed, that they can reproduce this behavior, and recommended to uninstall those updates. But now, the support article has been deleted without further comments. And Microsoft doesn't write a word about issues within it's kb article for Windows 10 V1809 update <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4493509\/\" target=\"_blank\" rel=\"noopener noreferrer\">KB4493509<\/a>.<\/p>\n<p>German blog readers <a href=\"https:\/\/www.borncity.com\/blog\/2019\/04\/12\/bremst-update-kb4493509-windows-10-v1809-aus\/#comment-70626\" target=\"_blank\" rel=\"noopener noreferrer\">confirmed<\/a>, that there are issues with Windows April 2019 updates in conjunction with Avira antivirus solutions and Windows \/\/10. After uninstalling either Avira or the security updates, this issues are gone. Also a <a href=\"https:\/\/www.heise.de\/forum\/heise-Security\/News-Kommentare\/Patchday-Nachtrag-zu-problematischen-Windows-Updates\/Avira-und-Windows-10\/thread-5958447\/\" target=\"_blank\" rel=\"noopener noreferrer\">comment<\/a> I received for my article a German news site Heise reported similar things. On the other hand, I came across <a href=\"https:\/\/www.heise.de\/forum\/heise-Security\/News-Kommentare\/Patchday-Nachtrag-zu-problematischen-Windows-Updates\/Mein-Rechner-humpelt-seit-wenigen-Tagen-nicht-mehr\/thread-5958593\/\" target=\"_blank\" rel=\"noopener noreferrer\">these comments<\/a> to my Heise article. A user writes there:<\/p>\n<blockquote>\n<p class=\"thread_title\">My computer hasn't limped since a few days &#8230;&#8230;<\/p>\n<p class=\"thread_title\">although I didn't uninstall the update KB4493472, and the Avira virus scanner (under Windows 7) is still installed and active.<\/p>\n<p class=\"thread_title\">The extremely long boot time and the \"hangs\" when booting seem to have disappeared again. Four days ago it looked quite different.<\/p>\n<p class=\"thread_title\">One could almost think that Avira secretly did a software update &#8230;<\/p>\n<\/blockquote>\n<p>A second user confirms this observation. Maybe sombody affected can commont on this observation. All in all not a good and transparent situation.<\/p>\n<h3>Addendum from Avira<\/h3>\n<p>On 18.4.2019 Avira informed me, that <a href=\"https:\/\/web.archive.org\/web\/20190808113214\/https:\/\/www.avira.com\/en\/support-for-home-knowledgebase-detail\/kbid\/1976\" target=\"_blank\" rel=\"noopener noreferrer\">the Knowledge Base article 1976<\/a> had been updated. This article (which was empty in the meantime) now contains the following information:<\/p>\n<blockquote>\n<div class=\"kievit red-stripe-kb\">\n<div class=\"kievit red-stripe-kb\">\n<h2>Why does my system run very slow?<\/h2>\n<\/div>\n<div class=\"details-text content-kb\">\n<div class=\"article\">\n<p>We have looked into the issue that you described, where the system slows down after a Windows update, and have found a way to fix it.<\/p>\n<p>We have recently released an update that should fix this issue. Your Antivirus Pro will be automatically updated, and you don't have to do anything else in the product.<\/p>\n<p>If you have uninstalled the incompatible Windows Update, you can now restore it using the Windows Update function.<\/p>\n<p><strong>Affected Windows Updates<\/strong><\/p>\n<ul>\n<li>Windows 10: KB4493509<\/li>\n<li>Windows 7: KB4493472, KB4493448<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/blockquote>\n<p>Due to the latest update provided by Avira, the unwanted behavior should now be removed. Can anyone of the affected confirm this?<\/p>\n<h2>Updates and more details from Avast and Sophos<\/h2>\n<p>Sophos has the most <a href=\"https:\/\/web.archive.org\/web\/20200814074141\/https:\/\/community.sophos.com\/kb\/en-us\/133945\" target=\"_blank\" rel=\"noopener noreferrer\">detailed knowledge base article<\/a> about these issues, released on April 15, 2019. Microsoft has temporarily blocked devices from receiving this update if the Sophos Endpoint is installed. And Sophos provides temporary solutions to overcome issues with these Windows updates. For Enterprise Console customers Sophos is performing an update that will automatically add Windows exclusions to all Anti-virus and HIPS\u00a0 policies in Enterprise Console. Details are given within the kb article linked above. Also Avast has begun to ship micro updates, according to <a href=\"https:\/\/kb.support.business.avast.com\/GetPublicArticle?title=Windows-machines-running-Avast-for-Business-and-Cloud-Care-Freezing-on-Start-up\" target=\"_blank\" rel=\"noopener noreferrer\">this support article<\/a>.<\/p>\n<p>But after a week, things seems still broken and neither Microsoft nor the antivirus vendors are acting with transparent and reliable information about these issues. On the other hand, Windows security updates are intended to fix serious 0-day vulnerabilities. Imho an odd situation, or what's your opinion?<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]One week after Microsoft released Windows security updates causing install issues, the situation for victims are not clear. Here's an overview, what we know so far. Addendum: Avira has updated its knowledge base article, I've added that information.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[463,22,2],"tags":[166,195,194],"class_list":["post-9464","post","type-post","status-publish","format-standard","hentry","category-issue","category-update","category-windows","tag-issues","tag-update","tag-windows"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/9464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=9464"}],"version-history":[{"count":1,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/9464\/revisions"}],"predecessor-version":[{"id":35370,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/9464\/revisions\/35370"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=9464"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=9464"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=9464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}