Cumulative Updates issued for W10 1809 and 1903

[Deleted]

www.bleepingcomputer.com/news/microsoft/windows-10-cumulative-update-kb4517389-and-kb4519338-released/


Personally, I'm holding fire for now and only updating Windows Defender until I know more..........

1809 info:

support.microsoft.com/en-gb/help/4519338/windows-10-update-kb4519338


1903 info:

support.microsoft.com/en-us/help/4517389/windows-10-update-kb4517389

[Deleted]

Even more info here:

www.bleepingcomputer.com/news/microsoft/microsofts-october-2019-patch-tuesday-fixes-59-vulnerabilities/


And some security updates for Office:

www.bleepingcomputer.com/news/microsoft/microsoft-releases-the-october-2019-security-updates-for-office/

[Deleted]

Important

Only just had wind of this, but you are required to update the Servicing Stack Update, before the main vulnerability fixes, in order to mitigate any update issues.

More here:

thesquattersarms.proboards.com/thread/8044/windows-servicing-updates-secure-issues

[spitfire]

Greetings Matt,

I contributed to your Bleeping Computer thread (camtornado) where you posted that sfc /scannow had reported integrity violations on your system.
This also occurred on two of my 1903 machines, caused by recent Windows Updates. I tried to fix this by various command prompts per Windows PowerShell (Admin), but this failed to fix it.
I then decided to carry out a repair install of both machines per the Media Creation Tool, electing to keep my files and apps. The repairs were successful, and subsequent sfc /scannow tests reported that there were no integrity violations.

Tonight, I decided to bite the bullet by manually checking for Windows Updates. I was then offered four updates.
Two security updates for MS Office 2016, the September MRT, and Cumulative Update KB4517389. These were successfully installed taking me to Version 1903 (OS Build 18362.418). This took only 25 minutes start to finish. The October update is little more than equivalent to a Service Pack upgrade (not a Feature Update).
In both cases, subsequent sfc /scannow tests reported that there were no integrity violations.
I had a comprehensive check of my important apps (Office, Acrobat Reader DC, Printers, Home Network, etc) and couldn't find any bugs or problems.

All previous Restore Points had been removed and replaced by tonight's new update one, so I then manually created a new one as all appears OK.

Regarding the Servicing Stack Update, I was already aware of it because it has already been offered for several weeks now, so I didn't bother to first install it.

I thought you might be interested in my successful update experience, though you will be making up your own mind whether or not to delay it. I will now do my other 1903 machines at my leisure.

Note: These updates have not taken me to version build release 18363 (which is just one number higher than the build number for version 1903), so this is still to be offered to me.

Good Luck, Spit

[Deleted]

Hello Spitfire

I thought that was probably you on BC, but I wasn't 100% sure. I didn't want to PM, as it may not have been you - but to be honest, the name and the picture gave it away somewhat? I'll make a note now in my BC settings.

I did have to use the the repair tool following the SFC problems with the Media Creation Tool.

I know 1909 (18363) isn't coming yet, but I'm going to use Media Creation Tool to do another Windows system backup on a USB - just in case I have to do another repair. I have to do another sfc, I did one before last nights updates and that was fine. I've only just got up, so I've yet to check all the various ways it may impact on our system.

There were a lot of vulnerabilities mentioned on the BC News, so I thought I'd better go for it.

I downloaded the SSU first and ran that to be sure. There were no Office Updates for us, but it took a bit longer than that I think. This is an old system.

Regarding my BC posting, I think there's light at the end of the tunnel. It appears the FRST found a few things (it reckons it did), but Adware variants or something? I don't know how they got on, but I'm not sure whether they're actually legitimate things I put on. I did do an ESET scan as instructed, but I didn't delete the application data on exit, as they expect you to. The reason for this at the moment is just in case they are genuine/false positives that I need as part of Chrome, and also my Android smartphone.

I'm slowly (ha !) learning more on the learning curve and progressing. I'm slowly getting more confident in things. A lot still bamboozles me though.

Thanks for posting again Spitfire

(and I expect it won't be the last time either you'll see me on that BC forum !)

[Deleted]

Recently completed an sfc /scannow scan, and no problems reported.

So it looks like Microsoft did address the Defender problems in the end !

Actually, Defender is the only one we use at the moment, and the recent problems (MD5 foul-ups/other foul-ups) have given me serious doubts. I'm thinking of installing another one (Avast?) to take the place of that, just use the Windows Firewall.

[spitfire]

Matt, I binned Avast over a year ago on all my W10 machines. I found that it was becoming increasingly bloated and was significantly slowing all my machines at startup.
I was also annoyed with its pop-ups and its pushy marketing ploys and the way it handled the once-excellent CCleaner after acquiring it. Avast then used CCleaner into installing Avast on many users' machines by employing pre-ticked boxes that enraged many users.

I now exclusively use Defender along with the W10 inbuilt firewall. I've had no problems doing so, and none of my many machines have ever succumbed to malware … not even PUPS. Nor has there been any instances of False Positives during Defender scans.

It's your call Matt, but I would advise you against reinstalling Avast, and to continue using the now much-improved, now-credible Defender AV along with the W10 Firewall.

Spit

[Deleted]

Hi Spit

I've never used Avast. We used to use Norton years ago on another PC, but that was expensive and a pain.

Thanks for your comments regarding Defender (our current setup along with the Firewall) but what with the problems encountered (by many, not just me), I had to do a repair install as it wouldn't even complete a full scan, it kept terminating early. Having said that, FRST found a few Adware things, so maybe that was the reason and maybe that was down to me. I wasn't around though for a couple of months, so I don't know what happened with this PC.

From what I gather there weren't just problems in September, but August too, and I wasn't here for either of those Patch Tuesdays. I doubt it has helped MS's credibility much, but we'll stick with the set-up we had before anyway.

I did apply the latest updates (something like 59 vulnerabilities, 8 of which Critical), as I thought they were too important to ignore. Happily, things appear to be running smoothly, although W10 still plays up at times.

Many thanks for your reply and recommendations, and I apologise for the delay in replying but I've just had a two hour afternoon nap (I know..........)

Bye for now

[Deleted]

Further to my last comment, I did run a full scan with Defender to rule out whether it was still playing up, and it did complete although it took 3 hours 15 minutes on this machine. It always seems to take ages to do that, but never mind........