Tech: Win7 Security Patch May Cause Problem

Subject: Tech: Win7 Security Patch May Cause Problem
From: JohnInKansas
Date: 12 Apr 13 - 11:47 PM

Microsoft security update may break Windows 7

Marshall Honorof , TechNewsDaily – 12 April 2013
.
A security update that Microsoft pushed out earlier this week crashes some Windows 7, Windows Server 2008 and Windows Vista machines, forcing them into an endless cycle of reboots that can only be stopped by repairing the operating systems.

Microsoft recommends that all Windows 7 users uninstall the security update.

The update came as a part of Patch Tuesday, Microsoft's longstanding tradition of releasing security patches on the second Tuesday of each month. The main vulnerability that this month's update addressed required a would-be hacker to possess valid login credentials and physically interact with a computer. Although this issue was not critical by itself, some of the other problems that Patch Tuesday addressed were.

The results of the patch created even more trouble. Upon restarting their machines, many users found that Windows would not start, defaulting instead to the infamous blue screen of death. Error messages varied, but users typically saw "The file system structure on the disk is corrupt and unusable," "The Session Manager Initialization system process terminated unexpectedly," or "Windows failed to start."

Microsoft has found a link between the flawed update and antivirus programs from Kaspersky Labs, which specializes in computer security products. Neither company has explained the relationship between Kaspersky's program and the security update, but Kaspersky has issued a statement to its users.

"Kaspersky Lab apologizes for any inconvenience this has caused our customers," the company statement said. "The company will work harder to strengthen its technical collaboration with its partners in order to prevent any repeat of this incident in the future."

PC owners who have already installed the software and have not yet restarted their machines are in luck, as Microsoft has provided a method for uninstalling the update. Two of the options involve messing around with the sometimes-complicated command prompt, but less tech-savvy users can simply uninstall the update by clicking on Control Panel, Programs and View Installed Updates.

Users who have already tried unsuccessfully to restart their machines may have significantly more trouble. The Windows 7 installation DVD or a bootable USB stick will give users the option of a System Restore, which should do the trick. If that doesn't work, they will have to dive into the command prompt and remove the offending software update manually.

The botched security update has not affected everyone. If you've installed the update and haven't experienced crippling shutdowns, you're probably in the clear, but you can still uninstall it to be on the safe side.

Microsoft has ceased distribution of the patch and will provide a fix as soon as possible. The company has also confirmed that the issue, though potentially very irritating, cannot delete or compromise existing data in any way.

Just about everyone has, at one point or another, tried to fix a minor problem and ended up creating a much worse one in the process. Microsoft's faux pas is just more visible than most.

Copyright 2013 TechNewsDaily, a TechMediaNetwork company.

The report mistates what is in the "instructions" at a link in the report, but the instructions may have been updated since the report was posted. All that is needed is to open Control Panel, click Programs, click View Updates, Select the update and Remove it.

The report doesn't identify which update needs to be removed, but gives a "patch number" and a "Security Bulletin" number, neither of which appears in the listing of recent updates.

Microsoft tells you:

We recommend that customers uninstall update 2823324, which is provided in Microsoft Security bulletin MS13-036. This article provides multiple methods to uninstall the update.

In the "updates" listing, it actually will appear as "KB2823324" if it's been installed. (The instructions obviously were written by a Microsoftie, and accuracy and specificity can't be expected.)

I did a reboot shortly after the patches were installed, and was a little surprised that my Win7 computer ran a CHKDSK, since I hadn't scheduled one. It found no errors, then booted normally.

The indicated patch doesn't appear in my list of updates, so I either got the updates after it was removed in the distribution, or it went away when the CHKDSK ran successfully.

John

Subject: RE: Tech: Win7 Security Patch May Cause Problem
From: JohnInKansas
Date: 12 Apr 13 - 11:49 PM

(Also note that the same patch may affect Vista and Server 2008.)

John

Subject: RE: Tech: Win7 Security Patch May Cause Problem
From: Bert
Date: 13 Apr 13 - 12:26 AM

Security patch, is that like a nicotine patch?

You know, when I was studying Computer Science we were told, "If the program doesn't work, don't bother turning it in, because you've got an F"

The song for Microsoft goes 'When will they ever learn...'.

Another thing that they could do to improve their software is to only employ programmers who have served apprenticeships as boilermakers.

Boilermakers have to do things right, because heavy steel plate doesn't come with an on-line debugger. You mark out the plate, and if it's wrong you are in deep shit. So you make SURE that it is right first.

So Microsoft, if you want to get it right, give me a call. 7192879748.

Subject: RE: Tech: Win7 Security Patch May Cause Problem
From: Pete Jennings
Date: 13 Apr 13 - 11:54 AM

Yep, did that to my (other) PC.

Subject: RE: Tech: Win7 Security Patch May Cause Problem
From: Nick
Date: 13 Apr 13 - 02:41 PM

Good advice - John.

My laptop went through the thing of opening and checkdisk.

I spotted that it was a windows update thing (blame company policy imposed...) but good to know which one :)

Doesn't now.

Kaspersky has been an interesting beast for a long time