Quantcast
Channel: Windows – Born's Tech and Windows World
Viewing all 4446 articles
Browse latest View live

Windows 10 Insider Preview Build 18970 (20H1) with media less Cloud installation released

$
0
0

[German]Microsoft has released Windows 10 Insider Preview Build 18970 (from development branch 20H1) for Windows Insider in Fast Ring. This build brings the reset from the cloud and an improved tablet mode.

The announcement with details about new features/changes and bugs can be found in the Windows Blog. Insiders will also be offered a cumulative update build 18970.1005 (KB4518974). Microsoft is testing its ability to maintain a build while it is released. The result for insiders should be that they are on build 18970.1005 after completing these updates. This build brings some innovations.

New Tablet PC Experience for 2-in-1 Systems

With this build, Microsoft begins introducing a new Tablet  PC user experience for 2-in-1 systems. This new user interface allows users to remain in the desktop experience without interruption when switching to Tablet mode. There are some important improvements::

Windows 10, Neuerungen beim Tablet-Modus
(Source: Microsoft)

  • Increased the distance between the taskbar icons
  • The search field on the taskbar is reduced to an icon
  • File Explorer switches to touch-optimized layout
  • The touch keyboard is automatically recalled when you tap text fields.

In this context, the developers have also made some small changes to the Tablet PC area in the settings. However, these changes are only rolled out to some of the insiders. The Windows Blog  describes what the affected users can expect. 

Recovery from the Cloud

This build introduces for the first time a new option to reset the system from the cloud. When users reset a system, they now have the option to download Windows from the cloud or use the local reinstall. 

GIF demo showing click-through flow from Settings > Update & Security > Reset this PC, using cloud download option.
(Source: Microsoft)

Until now ‘Reset this PC’ was only able to perform a new installation from local files and to create a new Windows installation from existing Windows files. When this feature was introduced in Windows 10 Version 1507, it had the advantage that Windows is recoverable without requiring additional hard disk space as a compressed backup copy of Windows in a hidden partition.  However, Microsoft received feedback that some users would like to use fast Internet connections to download Windows during recovery.

Important note: This is a restore operation and removes applications you have installed. In addition, if you select the “Remove all” option, the user data will also be deleted. For more information about resetting this PC and other recovery options, see aka.ms/win10recoveryoptions.

The cloud download option installs the same build, version, and edition that is currently installed on your device. This new cloud download option is available for all Windows 10 devices and is different from the Restore from Cloud feature available on some previous Windows 10 devices.

The build includes other improvements (to the Cortana rollout), but also some known issues. This is all described in the Windows Blog.


Windows 10 once again facing EU GPDR investigation

$
0
0

[German]Microsoft has once again come into the focus of the European data protection watch guards with regard to Windows 10 privacy. The Dutch data protection authority (DPA) has accused Microsoft of remotely collecting user data of Windows 10 Home and Pro systems and thus possibly violating European Union (EU) data protection regulations (GDPR).

With its cloud and telemetry mania, Microsoft is coming under increasing fire in the EU because of the general data protection regulation (GDPR). Office 365 isn’t conform to the GDPR – and Windows 10 is also facing data protection investigations. I have been blogging about this topic in since 2015. Within the last four years, Microsoft has had partly improved its data protection policy. Now there are new accusations and an investigation order has been given to the Irish data protection authority – this time for Windows 10.

Dutch data protection authority intervenes

The Dutch data protectors have been focusing on Windows 10 for some time now because of the collection of telemetry data (see the Techcrunch article from October 2017). Now I came across a Reuter article about the following tweet, which deals with the topic again.

The Dutch Data Protection Agency (DPA) alleges that Microsoft still collects remote data from users of Windows Home and Windows Pro, possibly in violation of EU data protection legislation (GDPR).

Audit reveals irregularities

This year the Dutch DPA has taken an audit on Windows 10 again, after Microsoft was asked last year to improve its data protection. The auditors have found the practices , which probably is a violation of GDPR.

“Microsoft is permitted to process personal data if consent has been given in the correct way,” the watch guard writes. “We’ve found that Microsoft collect diagnostic and non-diagnostic data. We’d like to know if it is necessary to collect the non-diagnostic data and if users are well informed about this.

Does Microsoft collect more data than they need to (think about dataminimalization as a base principle of the GDPR). Those questions can only be answered after further examination.”

Irish data protection authority contacted

The Dutch regulator informed Reuters that it had passed on its findings to its counterpart in Ireland, where Microsoft has its headquarters. The Irish Data Protection Committee (DPC) confirmed that it had received the information from the Dutch regulators last month to TechCrunch.

“Since then the DPC has been liaising with the Dutch DPA to further this matter. The DPC has had preliminary engagement with Microsoft and, with the assistance of the Dutch authority, we will shortly be engaging further with Microsoft to seek substantive responses on the concerns raised.”

Techchrunch has published here an extended statement from Microsoft. This means that Microsoft is once again in the focus of data protection commissioners. This articles from Forbes also covers that issue.

Windows 10 V1903 Update KB4512941: Workaround for the Cortana high CPU load issue

$
0
0

[German]Since August 21, 2019, Microsoft has been testing the KB4512941 cumulative update for Windows 10 Version 1903 with insiders. However, the update causes a high CPU load on a core on some systems.

Update KB4512941: What’s the problem?

Cumulative update KB4512941 is intended to fix some issues in Windows 10, version 1903. Among other things, it is planned that this update will finally fix the issue of the broken sandbox (see my blog post Windows 10 V1903: Update KB4497936 breaks Sandbox).

Microsoft is currently testing this update with Windows insiders only – the first version was released on August 21, 2019. Users who installed the update reported that the search did not work anymore. In addition, Cortana causes a high load on a CPU kernel for some people. I had also reported about this issue within my blog post Windows 10 V1903: Updates KB4512941 and KB4515530. Within this blog post I sketched a workaround that has reduced some people’s core load.

Cause found: Scripts and Cortana Cache

German blog reader Werner B. contacted me 2 days ago by mail and gave me some interesting hints (thanks for that). Werner wrote:

I am a reader of the Windows blog and would like to share some information about a workaround to 100% Cortana CPU load on Windows 1903 KB4512941.

Werner refers to my above mentioned blog post Windows 10 V1903: Updates KB4512941 and KB4515530 where I discussed the high CPU load. During his research, Werner came across a post in the Tenforum that picks up the problem or the cause for the high CPU load. There it says:

Kek. I found what causing problem to Cortana by myself.
The problem is somewhere inside

c:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\cache\

Some scripts cause loop and Cortana is stuck on initialization as I see through Proccess Monitor logs.

The issue seems to be connected to the cache folder used by Cortana, which causes the high cpu load.

Another workaround

With the above knowledge one could now simply say: Ok, I clear the cache and it’s fixed. Unfortunately this won’t help, because the cache will not be rebuilt if it is deleted or a new cache is created. But there is a workaround that the user has outlined in his comment:

Inserting the folder from prev.version works fine insead of black search window

Btw, looking of meaning “cache”, the folder is not recreated / regenerated by itself after delete

Folder saved from backup of 362.295 build (as I remember): cache.rar – Google Drive

German blog reader Werner confirmed to me that this workaround had helped him:

In a local fresh test installation of 1903 in VMWare the CPU load goes to 100% after installation of KB4512941.

If the cache folder is backed up before installing KB4512941 and the folders are copied back after the update, the CPU load of Cortana (immediately without reboot) goes to 0%.

Werner suggests the following steps to fix the high CPU load issue with update KB4512941:

1. Before installing the KB4512941 update, back up the following cache folder to a local directory (e.g. D:\Backup):
c:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\cache

2. Then install the cumulative update KB4512941 and the SSU.

3. After the update installation, open the cmd.exe command prompt by Run as administrator and execute the following command.

cd c:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\cache
xcopy /o /x /e /h /k D:\backup\cache\*

Here I assume that the path to the backed up cache folder is cleanly adjusted with the second command. The xcopy query j/n/ must be confirmed with ‘a’ (for all). Maybe the workaround is helpful for you and Werner asks if someone can confirm the workaround.

Additional details

Werner sent me the following additional information in the aftermath of the article.

The workaround works with the affected Windows country setting “de-de”, regardless of whether Cortana / Bing search was activated or deactivated by OO Shutup10.

A limitation of the manual overwriting of files in ‘SystemApps’ is that “sfc /scannow” detects and resets the change, whereupon the Cortana bug with high CPU load occurs again.

The cache files of Cortana themselves should not be the sole cause of the error. There is no high CPU load at build 18362.327 if the KB4512941 is directly integrated into an April ISO with 18362.30 using DSIM.

A new installation with such an ISO works without problems. One of the benefits of build 18362.327 is that programs compiled with VisualBasic 6 will work again.

Then there was a hint from Werner about installations where the ‘cache’ folder workaround is active:

Installing install.wim from an ISO with integrated KB451294 (which works for new installations) does not fix the cause of the Cortana bug.
( DISM /Online /Cleanup-Image /RestoreHealth /Source:WIM:D:\sources\install.wim /LimitAccess).

With ‘sfc /scannow’, the cache data that works on freshly installed systems, but which have been updated step by step through the monthly updates, will become active again and lead to the Cortana bug..

Werner concludes: “There may be a way to bring existing systems up to build 18362.327 without a workaround. Thanks for the addition.

Similar issues:
Windows 10 V1903: Update KB4497936 breaks Sandbox
Windows 10 V1903: Updates KB4512941 and KB4515530

Windows 10 V1903: Update KB4512941 re-released (08/29/2019)

$
0
0

Microsoft has re-released update KB4512941 for Windows 10 Version 1903 (and for branch 19H2) again on August 29th and tests it with Windows insiders. I reported about it in the blog post Windows 10 V1903: Updates KB4512941 and KB4515530.

The night this update KB4512941 was updated (see this comment). This update is rolled out to Windows Insiders using Windows 10 version 1903 in Release Preview ring (reaching build 18362.329) and Windows Insiders testing Windows 10 19H2 in Fast ring.

Insider previews usually don’t reveal in detail, what has been changed. This time, Microsoft gave some details within this blog post:

UPDATE 8/29: We have released 19H1 Build 18362.329 and 19H2 Build 18363.329 to Windows Insiders in the Release Preview ring with the following fixes:

  • We fixed an issue where on devices with LTE capability, some SIM cards from certain carriers would not work correctly.
  • We fixed several issues resulting in bugchecks on some devices.

My hope that the Cortana issue (see Windows 10 V1903 Update KB4512941: Workaround for the Cortana high CPU load issue) had been solved was therefore not fulfilled.

Windows 10: Microcode Updates (August 29, 2019)

$
0
0

[German]Microsoft has released a series of microcode updates for various Windows 10 versions as of August 29, 2019. I tried to create a list of the KB numbers involved.

PhantomofMobility has informed me about these updates via Twitter.

The Microsoft website with an overview of the Windows 10 Microcode updates was last updated on August 13, 2019, but lists the KB numbers. In the Microsoft Update Catalog the updates are listed with date August 29, 2019 and the KB articles are also updated to this date.

Windows 10 Updates

Here is the list of updates with links to the KB articles I found in the Microsoft Update Catalog.

  • KB4494454: Intel Microcode Update für Windows 10 Version 1507 LTSC (RTM)
  • KB4494175: Intel Microcode Update für Windows 10 Version 1607 (LTSC) und Windows Server 2016
  • KB4494453: Intel Microcode Update für Windows 10 Version 1703
  • KB494452: Intel Microcode Update für Windows 10 Version 1709, Windows Server 2016 Version 1709
  • KB4494451: Windows 10 Version 1803, Windows Server 2016 Version 1803
  • KB4494174: Windows 10 Version 1809, Windows Server Version 1809
  • KB4497165: Windows 10 Version 1903, Windows Server Version 1903

According to Microsoft, microcode updates have been revised for the following products:

  • Valley View
  • Cherry View
  • Haswell Desktop
  • Haswell M
  • Haswell Xeon E3
  • Gemini Lake*
  • Apollo Lake*

Please note that the updates may only be installed for the CPUs listed in the KB articles. It is up to each user to decide whether to install the microcode updates.

Windows 10 V1903: Update KB4512941, KB4515530 (08/30/2019)

$
0
0

[German]Microsoft released the KB4512941 cumulative update for Windows 10 Version 1903 on August 30, 2019. In addition, the and Servicing Stack Update (SSU) was released on August 27, 2019. Both updates were tested with insiders in advance. Here is an overview of these updates.

A list of the updates can be found on this Microsoft website. The update installation requires an existing current Servicing Stack Updates (SSUs). Microsoft now publishes an overview of current Servicing Stack Updates (SSUs) under ADV990001.

Update KB4512941 foür Windows 10 Version 1903

Cumulative Update KB4512941, released on August 30,2019, raises the OS build to 18362.329 and contains quality improvements but no new operating system functions. Microsoft specifies the following ‘highlights’ that the cumulative update addresses: 

  • Updates an issue that prevents certain games from leveraging Spatial Audio capabilities.
  • Updates an issue that fails to provide a cursor when you select a text input box using touch.
  • Updates an issue that may cause the name of an unsupported application to appear as default text, such as “ms-resource:AppName/Text” in the Start menu after upgrading the operating system. 
  • Updates an issue with downloading copyrighted digital media (music, TV shows, movies, and so on) from certain websites using Microsoft Edge and Internet Explorer.
  • Improves the user experience and app compatibility so that more Win32 apps will work with Windows Mixed Reality.

Microsoft lists the following improvements and bug fixes.

  • Addresses an issue that displays a black screen when you use Remote Desktop to connect to a machine running Windows 10, version 1903.
  • Addresses an issue that may prevent the Windows Sandbox from starting with the error, “ERROR_FILE_NOT_FOUND (0x80070002).” This occurs on devices in which the operating system language is changed during the update process when installing Windows 10, version 1903. 
  • Increases the number of supported interrupts per device to 512 on systems that have x2APIC enabled. 
  • Addresses an issue that prevents some Trusted Platform Module (TPM) devices from being used for Next Generation Credentials. 
  • Addresses an issue that causes a workstation to stop working when you sign in using an updated user principal name (UPN) (for example, changing UserN@contoso.com to User.Name@contoso.com). 
  • Addresses an issue that prevents Windows Defender Advanced Threat Protection (ATP) from running automated forensic data collection when using registry-based proxy configuration. 
  • Addresses an issue that prevents Windows Defender Advanced Threat Protection (ATP) from sending cyberspace events for paths beginning with \\tsclient
  • Addresses a possible compatibility issue when Windows Defender Advanced Threat Protection (ATP) accesses case-sensitive Server Message Block (SMB) shares. 
  • Addresses a rare issue that occurs when the mssecflt.sys driver takes too much space on the kernel stack. This results in the error, “STOP 0x7F: UNEXPECTED_KERNEL_MODE_TRAP”, and Parameter 1 is set to “EXCEPTION_DOUBLE_FAULT.” 
  • Addresses an issue that leads to excessive memory utilization in Windows Defender Advanced Threat Protection (ATP). 
  • Improves the detection accuracy of Microsoft Defender ATP Threat & Vulnerability Management. 
  • Addresses an issue in which Windows Defender Application Control will not allow third-party binaries to be loaded from a Universal Windows Platform application. CodeIntegrity event error 3033 appears as, “Code Integrity determined that a process (<process name>) attempted to load <binary name> that did not meet the Store signing level requirements.” 
  • Addresses an issue that causes devices to have truncated device names when Autopilot provisioning automatically assigns a name to them. 
  • Addresses an issue in which the product description of Windows Server 2019 was incorrect when queried using slmgr /dlv
  • Addresses an issue that causes the Windows Management Instrumentation (WMI) class Win32_PhysicalMemory to report that 32 GB memory chips have a missing Capacity value. 
  • Addresses an issue that prevents you from copying and pasting compound documents (formerly OLE objects) between an application that hosts the RichEdit control and other applications. 
  • Addresses an issue that prevents certain games from leveraging Spatial Audio capabilities. 
  • Addresses an issue that fails to provide a cursor when you select a text input element using touch. 
  • Addresses an issue that may cause the name of an unsupported application to appear as default text, such as “ms-resource:AppName/Text” in the Start menu after upgrading the operating system. 
  • Addresses an issue that may prevent the personal identification number (PIN) prompt from appearing when authenticating in Internet Explorer. 
  • Addresses an issue with downloading digital rights management (DRM) files from certain websites using Microsoft Edge and Internet Explorer. 
  • Improves the user experience and app compatibility so that more Win32 apps will work with Windows Mixed Reality. 
  • Addresses an issue with LdapPermissiveModify requests, which fail to make Active Directory (AD) group membership changes if the Lightweight Directory Access Protocol (LDAP) client uses the Security Identifier (SID) syntax. In this scenario, Active Directory returns a “SUCCESS” status even though the change did not occur.
  • Addresses an issue that may prevent devices from starting when they start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) or System Center Configuration Manager (SCCM). The error is, “Status: 0xc0000001, Info: A required device isn’t connected or can’t be accessed.”
  • Addresses an issue that may prevent devices from starting up or cause them to continue restarting if they are connected to a domain that is configured to use MIT Kerberos realms. Domain controllers and domain members are both affected.
  • Addresses an issue that may cause the following to stop responding:
    • Applications that were made using Visual Basic 6 (VB6).
    • Macros that use Visual Basic for Applications (VBA).
    • Scripts or apps that use Visual Basic Scripting Edition (VBScript).

      You may also receive an “Invalid procedure call” error.

If you go through the list of fixes, the black screen is fixed for RDP connections (see Windows 10 V1903: Remote Desktop shows Black Screen). And finally the sandbox problem is reported as fixed. Also in the status page for Windows 10 V1903 the sandbox error 0x80070002 is listed as fixed with the update KB4512941 (I couldn’t check if it really is true yet). In addition, the problem with Visual Basic 6, VBA and VBScript is fixed again (see Fix for VB6, VBA, VBScript bug?). And according to the bugfix list several startup problems are fixed.

Microsoft has also released an update directly for the Windows Update Client to improve its reliability. This will be rolled out outside of Windows Update if the machine is compatible and not a LTSC variant and updates have not been blocked by GPO.

This update is optional and is automatically downloaded and installed by Windows Update if the user initiates the search for updates. This update is also available via Microsoft Update Catalog. Microsoft strongly recommends that you install the latest Service Stack Update (SSU) for your operating system before installing the latest Cumulative Update (LCU). No known issues are currently documented for the update. However, the Windows 10 V1903 status page provides a list of unfixed issues. And on the internet I found preview versions of the same build users where the installation aborted at 44% with the error code 0c800f081f (maybe caused by an image clean up after the latest update installation).

I don’t know if the issues I’ve described in the blog post Windows 10 V1903: Updates KB4512941 and KB4515530 with the broken search and the high CPU load caused by Cortana. In the comments at deskmodder.de the high CPU load is still observed. For problems with Cortana please read the article Windows 10 V1903 Update KB4512941: Workaround for the Cortana high CPU load issue.

Update KB4515530 for Windows 10 Version 1903

The Servicing Stack Update (SSU) KB4515530 has been released on August 27, 2019. This update improves the quality of the service stack, which is the component that installs Windows updates. Some of the most important changes are: 

Fixes an uninstall problem with automated maintenance. If the Features on Demand (FOD) feature has a voice satellite installed, the feature is left in an unusable state. In addition, the shared content of the language pack will not be removed even if it is replaced.

The update is delivered via Windows Update, Microsoft Update Catalog and WSUS. Microsoft strongly recommends that you install the latest Service Stack Update (SSU) for your operating system before installing the latest Cumulative Update (LCU). Installing the Service Stack Update (SSU) ensures that the system has a robust and reliable service stack so that the systems can receive and install Microsoft security fixes. 

Similar articles:
Windows 10 V1903: Remote Desktop shows Black Screen
Windows 10 V1903: RDP (dwm.exe) causes high CPU load, freezes VMs
Fix for VB6, VBA, VBScript bug?
Windows /2008 R2: Re-released Updates with VB6/VBA fix (08/21/2019)
Windows 10 V1903: Updates KB4512941 and KB4515530
Windows 10 V1903: Update KB4512941 refreshed (08/26/2019)
Windows 10 V1903 Update KB4512941: Workaround for the Cortana high CPU load issue
Windows 10 V1903: Update KB4497936 breaks Sandbox

Update KB4511555 .NET Framework 3.5/4.8 for Windows 10 1903 (August 30, 2019)

$
0
0

Windows UpdateMicrosoft has released on August 30, 2019 cumulative Update KB4511555 for .NET Framework 3.5/4.8 for Windows 10 1903. Update KB4511555 reliability improvements in .NET Framework 3.5 and 4.8. Among other things, the crash of the BCL component which caused BackupExec 20.4 to fail (see Windows 10: Update for .NET Framework 3.5, 4.7.2, 4.8 (08/20/2019)) is fixed. Details may be found within the linked kb article.

Microsoft: Flash in Browser will be removed end of 2020!

$
0
0

Sicherheit[German]Microsoft plans to remove Adobe Flash from all Windows browsers by the end of 2020. The company has just announced this, and has rejected a suspicion that Flash will soon be removed.

Microsoft and Flash

Microsoft has integrated the Adobe Flash Player in Windows 8.1 as well as in Windows 10.

Flash in Microsoft browsers under Windows

The Flash Player can be used in Microsoft Edge and Internet Explorer browsers. Users cannot uninstall Adobe Flash Player to get rid of this security risk. But Microsoft provides security updates for Flash Player in Windows 8.1 and Windows 10..

Flash will reach end of life in 2020

At the end of July 2017, Adobe had announced that it was planning the end-of-life for Flash together with Apple, Facebook, Google, Microsoft and Mozilla. At the end of 2020, the Flash update will end and the Adobe Flash Player will no longer be available for download. At that time it was said: Publishers who still rely on Flash should use the time to convert the content to new formats such as HTML5. I had outlined this topic within my blog post Fake News: Flash is dead? Now it’s fading out is planned 2020.

Rumor: Flash doesn’t get security updates anymore

A week ago, there was a rumor that Microsoft would no longer provide security updates for Flash on Windows 10. They will also ‘soon’ remove Flash Player from Windows 10. This rumor was based on information in a Microsoft support chat received by a German blog reader. I collected the details in the blog post Windows 10: Is Microsoft removing Flash support? However, I was skeptical that Microsoft would take the step of killing Flash before the end of 2020.

Flash will be retired at the end of 2020

A few hours ago, the Microsoft Edge Team published the article Update on removing Flash from Microsoft Edge and Internet Explorer (August 30, 2019) within the Windows Blog. The background is that Google’s Chromium Engine is entering the Edge browser. Little has changed in the timetable for the gradual burial of Flash.

  • In the next version of Microsoft Edge (based on Chromium), Microsoft will disable the execution of Flash (in unison with other Chromium-based browsers). However, a user can reactivate Flash for individual websites.
  • Flash will be completely removed from the browser by the end of 2020. The complete 2017 schedule can be read here.

Administrators in Enterprise environments can use Group Policy to change Flash behavior before that date. Both the version of Microsoft Edge (based on EdgeHTML) and the version for Internet Explorer 11 will continue to use Flash in 2019 unchanged. Microsoft plans to completely remove Flash from all browsers by December 2020.

Similar articles:
Fake News: Flash is dead? Now it’s fading out is planned 2020
Windows 10: Is Microsoft removing Flash support?


Security: Avira Optimizer allows privilege escalation

$
0
0

[German]Users of the virus protection solution receive the Avira Optimizer installed in newer versions. Up to the version before 1.2.0.367, this contains a vulnerability that allows privileges escalation. The Avira developers have now fixed this vulnerability with the version mentioned above.

Security researcher Matt Nelson noticed this, he tested it under Windows 10 1803 (x64). The following tweet points to the issue caused by insecure named pipes. 

Here’s a rough outline of what this is about. The details can be read in the linked article.

Vulnerability Avira.OptimizerHost.exe service

When the latest Avira antivirus program is installed, it is delivered with various components as standard. One of these components is the Avira Optimizer. In short, “Avira.OptimizerHost.exe” runs as “NT AUTHORITY\SYSTEM” and takes commands from the named pipe “AviraOptimizerHost”:

\\.\pipe\AviraOptimizerHost

The service performs an improper validation of the calling client. Added to this are invalid checks on started executables that allow malicious code to create process calls to Avira.OptimizerHost.exe. This can lead to local privilege escalation.

Brief analysis of the problem

Avira.OptimizerHost.exe can communicate with clients via a named pipe. This checks whether the client is an Avira application. Matt Nelson has now found a way to use a fake client with an Avira certificate to communicate with the service provided by Avira.OptimizerHost.exe.

The fake client can then open a command prompt that runs with system privileges thanks to the named pipe and the Avira.OptimizerHost.exe. In this blog post, Matt Nelson discusses here the details of the vulnerability.

Vulnerability already fixed

The Avira development team was contacted by Matt Nelson after he encountered the problem. The team remained in constant contact and solved the problem in a very short time. Within about 30 days of the first report, a fix was developed and distributed to the users. Here is the progress of the process:

  • July 23, 2019: Vulnerability sent to Avira
  • July 24, 2019: Confirmation by Avira, hints of compile problems at PoC
  • July 26 , 2019: Avira can reproduce the problem with the PoC
  • August 6, 2019: Avira provides the first fix and offers a test
  • August 6, 2019: Answer to Avira with a bypass for the patch with updated Proof of Concept (PoC) and details
  • August 16, 2019: Avira presents a new fix and offers a new test
  • August 16, 2019: Fix tested, seems to fix the vulnerability, information to Avira
  • August 27, 2019: Avira distributes the fix to its users

On August 29, 2019, Matt Nelson revealed the details within this blog post.

    Similar articles:
    PUP: AVIRA adds Aviara Launcher to paid version
    AVAST and Avira confirms April 2019 Update issues

    Windows 10 V1903: High CPU load from Cortana, Search broken, blame August 2019 Updates

    $
    0
    0

    [German]Users of Windows 10 version 1903 may run into problems after installing several August 2019 updates. Cortana causes a high CPU load on a core and the search does not work. And that doesn’t necessarily depend on KB4512941 alone.

    The post is the continuation of several blog posts I made about the KB4512941 update.

    First cases and blog posts

    Since August 21, 2019 Microsoft has been testing the cumulative update KB4512941 for the Windows 10 May 2019 Update (Version 1903) with insiders. I reported about it in the blog post Windows 10 V1903: Updates KB4512941 and KB4515530. Subsequently, there were some re-releases of the cumulative update KB4512941 (see article links at the end of the post).

    On August 30, 2019, update KB4512941 was finally released (see my blog post Windows 10 V1903: Update KB4512941, KB4515530 (08/30/2019)). This update fixes a number of issues, including the sandbox bug, which is supposed to allow the use in a German Windows 10.

    However, some users already reported problems with the first insider versions of update KB4512941:

    • Cortana causes a high CPU load, which may use a core of the CPU to 44% to 100%.
    • The search will not work if the Bing search has been disabled.

    I had already worked my way through this topic in the blog post Windows 10 V1903: Updates KB4512941 and KB4515530. User ‘Ben’ had found out that you can fix this problem with the following .reg file:

    Windows Registry Editor Version 5.00

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search]
    "AllowCortana"=dword:00000000
    "BingSearchEnabled“=dword:00000001
    "„CortanaConsent“=dword:00000000

    The instructions in the .reg file allow the Bing search, whereupon the search in Windows works again and also the Cortana load goes back again. 

    Furthermore, blog reader Werner B. had contacted me directly by mail and told me about an observation. The high CPU load is generated by scripts in the Cortana cache folder, which in certain constellations run in ‘loops’. I had prepared the details in the blog post Windows 10 V1903 Update KB4512941: Workaround for the Cortana high CPU load issue.

    Update KB4512941 is final, errors are still there

    A few hours ago Microsoft released the update KB4512941 for all users of Windows 10 version 1903. The update is optional and should be found and installed during an update search. I had reported some details about the update in the blog post Windows 10 V1903: Update KB4512941, KB4515530 (08/30/2019).

    The exciting question was whether the above reported bugs with the broken search and the high CPU load by Cortana have now disappeared. I have received confirmations via Twitter, comments on the article Windows 10 V1903: Update KB4512941, KB4515530 (08/30/2019 and from the Internet that the bug has not been fixed and is still occurring. So you should try the workarounds described in the previous section.

    Is update KB4512941 to blame?

    But what bothers me is whether the problem was caused by update KB4512941, or whether the core of the problem was not caused by earlier August 2019 updates. Although the errors reported above will disappear when KB4512941 is uninstalled. Clear conclusion: Has to do with this update …

    Sometimes different information just falls into my picture like pieces of a puzzle. Two days ago German blog reader Andreas E. contacted me via Facebook in a private message:

    I have another one: deactivated web search (GPO under Search) plus August update to 1903 causes broken search and high CPU load by Cortana. Had three cases so far, update uninstall helps, gpo not configured helps too.

    I have to point out that Andreas E. uses Windows 10 as a consultant for enterprise customes – so there is usually no insider preview tested there. It is therefore a production system. Since the update KB4512941 was not yet released at this time, but only available to insiders in the release preview ring, this made me wonder.

    This means that one of the August 2019 updates for Windows 10 Version 1903 causes these problems. Basically, it can only be the cumulative update KB4512508 that was released on August 13, 2019 (see Windows 10 Updates (August 13, 2019)). I haven’t another August 2019 update before August 30, 2019 in the Windows 10 V1903 history.

    he KB article also doesn’t mention any known issues. However, this update caused some installation errors for users (see links at the end of the article). 

    Workaround: Disable Group Policy

    A few final remarks on the above sentence ‘gpo not configured also helps’ by blog reader Andreas E. He has found out the following: If certain group policies are configured on the affected machines, the search no longer works and Cortana causes a high CPU load. Can be controlled via gpedit.msc in case of emergency. The policies should be in the branch:

    Computer Configuration\Policies\Administrative Templates\Windows Components\Search

    There is a policy Do not allow web search, which must not be set to not configured to avoid the issues mentioned above.

    image_thumb[2]

    As soon as the web search (via Bing) is allowed, the search works and Cortana generates a normal CPU load. Something seems to have happened with the update KB4512508.

    Similar articles:
    Microsoft Office Patchday (August 6, 2019)
    Microsoft Security Update Summary (August 13, 2019)
    Patchday: Updates für Windows 7/8.1/Server (August 13, 2019)
    Patchday Windows 10-Updates (August 13, 2019)
    Patchday Microsoft Office Updates (August 13, 2019)
    Windows 10: Updates August 16/17, 2019
    Windows 10 V1803: Update KB4512509 (08/19/2019)
    Fix for VB6, VBA, VBScript bug?
    Windows 10 V1903: Update KB4497936 breaks Sandbox
    Windows 10 V1903: Sandbox fails with error 0xc0370106

    Windows 10 1903 not offered, VeraCrypt as a root cause

    $
    0
    0

    Users who are not offered the upgrade to Windows 10 version 1903 often puzzle over the cause of the upgrade blocker. It could be a hard disk encrypted with VeraCrypt.

    VeraCrypt supports now Windows 10 feature updates (I had written something about this in the blog post Windows 10: ReflectDrivers Setup Option for In-Place-Upgrade on encrypted media). But a hard disk encrypted with VeraCrypt can be the reason that no feature update is offered.

    Martin Brinkmann had to make this experience according to the above tweet. He described the experience within this blog post.

    Windows (Insider Program): Quo vadis?

    $
    0
    0

    [German]During the last years Microsoft has been putting a lot of strain on its Windows 10 users and participants in the Windows Insider program. According to the motto: A new confusion every day, different names are used for Windows 10, the rings in the Insider program are shaken up, and there are A/B tests where only a few people get new features. Somebody may wonder what’s going on with Windows 10 and where the Windows Insider program is heading.

    There are very bad tongues that say ‘anything that Microsoft gets into their hands, they’ll break’. It won’t be that bad. But anyone who participates in the Windows Insider program will at least be put ‘to a hard test’. Here are some samples of what’s going on.

    Report an error in the feedback hub …

    If you find errors as a Windows insider, you can report them in the so-called Feedback hub. Instead of doing something like this in your browser (after registration), you need Windows 10 and the corresponding app. The app can only be described as a disease. I tried the part once or twice to search for issues in the feedback hub, but then gave up the whole thing.

    However: People who take the trouble to use the feedback hub and diligently report bugs become increasingly frustrated. Because for reports, ‘read, laughed, punched and filed’ probably applies. Bugs that become public after the release of a feature update have been reported in many cases months before (in some cases multiple times) in Feedback hub.

    Either Microsoft doesn’t get the evaluation right, or it doesn’t care because milestones have to be met.

    Chaos with Windows 10 names and Insider Preview rings

    On OnMSFT, Kip Kniskern has written in the article Confusion reigns: what’s going on with the Windows Insider Program? about some problems and confusion of the Windows Insider Program.

    Names are not more that smoke and mirrors

    It was well known that Microsoft’s marketing is quite creative in finding names for its products. Anyone who observes this more closely knows that Microsoft also likes to stumble because it does not think long-term or globally.

    There was the Windows 10 Creators Update, which was released in spring 2017 and has the version number 1703. In autumn there was the Fall Creators Update (version 1709), where the ‘Fall’ aroused certain associations in some cultures (here in German the association to ‘fail’ is common). The fact that autumn in the northern hemisphere of the earth, which is meant by ‘Fall’, doesn’t fit for the southern hemisphere – they have spring.

    That version 1703 was not released in March 2017, but rather in April, and version 1709 wasn’t released in September 2017, but in October, is not worth mentioning. After all, some people are now beginning to realise that there will be a problem in spring 2020. According to the above nomenclature, a Windows 10 version 2003 is to be expected, which, however, collides with Windows Server 2003 from the previous decade. I am curious to see how this can be resolved. Maybe they name that thing Windows 10 2004.

    If anyone asked if I’d done any better: Probably not. But first of all I probably wouldn’t have provided a Windows as a service and secondly I’m not paid to scratch my head about the Windows 10 nomenclature …

    Treshold, Redstone, 19H1 …

    For Windows Insiders there used to be special code names like Treshold 1, 2 or Redstone 1, 2 etc. for the development branches. Because this led to confusion, the name for the development branches was changed at the beginning of 2019. There, the year and then the number 1 for the spring release and the number 2 for the autumn release are given. So Windows 10 Version 1903 is the 19H1 development branch. In autumn 2019 Windows 10 19H2 will be released (possibly as V1909).

    And on top of all this, Microsoft often also use individual Windows build numbers to name a version. Personally, I have long give up to assign a build number to a development branch. And I believe, no ordinary user is interested in that.

    On OnMSFT, Kip Kniskern asked the question whether after four years of nonsense, it’s time to slowly establish a single nomenclature for Windows 10 releases. I agree with that and would appreciate a naming scheme like 19H1, 19H2 etc. used uniformly for the insider and productive versions of Windows 10.

    Major and minor releases

    Business users, in particular, have always been furious about the semi-annual feature updates. In the meantime, Microsoft has tried to turn by 180 degrees. In order to maintain the old strategy of having to release a new Windows 10 feature update twice a year, at least verbally, they are coming with an ‘ingenious solution’. In the spring of a year there should be a usual feature update, which receives update support for 18 months in all Windows 10 versions.

    The feature update, which is released in autumn, will come with Windows 10 19H2 as a ‘minor version’ (something like the service packs we have had in the past, but definitively not a feature update). In other words: Users who are on Windows 10 version 1903 (spring 2019) will receive an update which upgrades the operating system to the 19H2 development branch. However, if you are using older Windows 10 builds, you will receive a feature update to the 19H2. So in the autumn of a year every Windows 10 system will be brought up to the same development status – one via an ordinary update, the other with a feature update. Pretty complicated.

    Just for the records: The autumn builds comes with 30 months of support, but only for Enterprise versions. Windows 10 Home and Pro are supported for 18 months. Does a normal user really understand that?

    They ran out of Windows Insider rings

    Originally Microsoft has been started for Windows Insiders with a slow and a fast ring. So Insiders have had to chose between the fast ring, or stay in the more stable slow ring and got new test versions delayed. Plain and easy to understand.

    Meanwhile insiders know the Skip-Ahead-Ring, reserved to skip on Windows Insider Preview branch and test the next branch. And at the lower end there is the Release Preview Ring. In this ring, Microsoft provides updates to be tested before the general release.

    With the early development of the Windows 10 20H1 (expected in spring 2020), some insiders were surprised to find out, that this branch was already distributed in the fast ring (not in the skip-ahead ring) when the (not released at that time) Windows 10 V1903 was still tested as 19H1 in the slow ring. So it was speculated for quite some time that the Windows 10 19H2 never will be released. Meanwhile, the 19H2 development branch is being tested in the Slow Ring. Testers of the 19H2 development branch can no longer choose between slow ring and a fast ring for tests (because the fast ring is blocked by the 20H1 branch).

    A/B-Tests  for Windows Insider Previews

    If people choose to be Insiders, they probably do that to get their hands early on that stuff, Microsoft is intended to release within months. In recent weeks Microsoft has released two 19H2 builds in slow-ring on two occasions. Depending on which build was installed, people were offered one or the other build. Some got new stuff, other was left on an old branch. That’s not the way, people like to get on touch with new stuff. Or in other words: I don’t believe, that people feel happy, if they got the impression, they are just ‘guinea pigs’ for a vendor.

    First of all, I thought I’m getting old. But reading this article at OnMSFT, I got the impression, that others are also confused and disorientated.

    Personal experience: Nothing fits anymore

    Somehow I personally have the feeling that the Windows Insider program is slowly decomposing itself. Gabe Aul, who could still teach technology, keft Microsoft and went to Facebook. The responsible people around Dona Sakar prefer to design new T-shirts with some ninjas flags and other symbols – but they don’t sort out this chaos.

    And I see a bad misfit between what Microsoft offers and what customers need. Windows is just an operating system that should work. If I buy a laser welding machine, that costs me one million US Dollars, I’m not interested in a ‘Windows as a service’, that breaks that thing every 6 months. If I’m running medical equipment, I don’t need feature updates, the software just should run. In SCADA systems there is the same situation. I’m feeling, Microsoft left a big part of it’s customers ‘in the dark’. I’ve been working a decade within the chemical industry, where equipment has to be used for 20 up to 40 years (there have been a revamp every 15 to 20 years). So 10 years support for an operating system is very short. But 6 months release cycles or 18/30 month software support are just a ‘No Go’.

    Earlier, 50 years ago, the Americans flew to the moon, landed successfully and came home safely. I still remember siting in front of the TV and follow that big adventure. But now, it seams at least, that in Redmond can’t sort even the simplest things out in a proper manner. I got the days (surprisingly for me) my Windows Insider MVP certificate for 2019. At the award there is also a acrylic disc, which indicates the year and can be put on a kind of column. There are people who have threaded 20 discs onto the column. A few hours ago I got a mail that they had ‘quality problems’ for the discs of the July 2019 Insider MVPs.

    Insider MVP

    The photo above illustrates the problem. On the left you can see the column with the Windows MVP annual rings. For 2013 and 2014 the rings fits exactly on top of each other. In the year 2015 Windows 10 RTM has been released in July and I received the 2015 MVP award ring for that year. There are already small deviations in the depth of the milled slot (but nothing serious). In 2015 the Windows Consumer MVPs Award was cancelled, we were moved to the Insider MVP program in 2016. On the right of the photo you can see the column of the Windows Insider MVP discs. The block for 2017 fits with the block from 2016. But already in 2018 the slot for the block was milled to deep. In 2019 the slot in the disk was milled to less, it can be clearly seen ‘nothing fits right with the distinct years’.

    Evil tongues claim that ‘exactly reflects the development of Windows 10, nothing fits to its predecessor’. But I say ‘similarities are purely coincidental’. With this in mind, I’m curious to see what Microsoft will offer us in the fall and next spring. I personally don’t really participate in the Windows Insider program anymore. It simply isn’t worth it – the final Windows 10 builds, which are distributed to ordinary users, offer me enough stuff to blog about.

    Of course some things in the text above comes offhand, and depending on your point of view, you may take the position ‘so what, who cares’ or ‘if there are no more serious issues, everything is fine’. But to be honest, as a long-time user of Microsoft products (I’ve been working with MS-DOS 1.01), it worries me to see what Microsoft is doing and what’s going wrong. My personal impression. There have been too many experienced people be fired in the past and too much things seems to be outsourced. If someone had told me this 10 years ago, I would quote him as ‘crazy like hell’.

    I still remember how many people ranted about Windows 8 and 8.1 and it’s tile design. Now, after 4 years of Windows 10  I surprisingly see people, who are now switching to Windows 8.1 due to the end of life for Windows 7. We are living in crazy times. Sad to see this development.

    Windows 10 V1903: Six issues fixed, new bugs added

    $
    0
    0

    [German]Just a brief addendum from End of August 2019. Microsoft has fixed another six issues that existed in Windows 10 May 2019 Update (version 1903) with update KB4512941 that was released on August 30, 2019. But there are still two compatibility blockers – and new issues with desktop search and Cortana already reported within this blog.

    Optional update KB4512941 fixes some bugs

    Cumulative Update KB4512941 was finally released on August 30, 2019, but is an optional update, which appears during a manual update search. To install it, however, you must explicitly select the Download and install link offered in Windows Update.

    Windows 10 V1903 Update  KB4512941

    According to support article KB4512941, the update should fix about 30 bugs in Windows 10 V1903. Here is the hitlist of fixes, which are also listed as fixed in the status page of Windows 10 V1903 by update KB4512941: 

    The support article KB4512941 lists a number of other fixes that Microsoft did not address on the Windows 10 V1903 status page. However, there are a number of unfixed bugs in Windows 10 V1903. This includes the fact that the external Nvidia dGPU in Surface Book 2 devices sometimes disappears (see Windows 10 V1903: Microsoft confirms two new issues). Also sporadically occurring loss of the WiFi connection (see Windows 10 V1903: Know issues (Wi-Fi etc.) updated) or the upgrade stop for Zebra tablets (see Windows 10 V1809/1903: Upgrade for Zebra Tablet PCs blocked) should be mentioned. And update KB4512941 now causes new issues with the desktop search and a high CPU load caused by Cortana (see Windows 10 V1903: High CPU load from Cortana, Search broken, blame August 2019 Updates). So there is still a lot for Microsoft’s developers to do in September 2019.

    Similar articles:
    Microsoft Office Patchday (August 6, 2019)
    Microsoft Security Update Summary (August 13, 2019)
    Patchday: Updates für Windows 7/8.1/Server (August 13, 2019)
    Patchday Windows 10-Updates (August 13, 2019)
    Patchday Microsoft Office Updates (August 13, 2019)
    Windows 10: Updates August 16/17, 2019
    Windows 10 V1803: Update KB4512509 (08/19/2019)
    Fix for VB6, VBA, VBScript bug?
    Windows 10 V1903: Update KB4497936 breaks Sandbox
    Windows 10 V1903: Sandbox fails with error 0xc0370106

    Windows 10 at 50 %: OS-/Windows share (August 2019)

    $
    0
    0

    [German]September 2019 has just begun, and the figures for the operating system share on the desktop are available for the end of August 2019. Here is a look at the figures.

    Some figures

    The latest figures from netmarketshare.com (until the end of August 2019) show that Windows is still running at 87.89 (July 2019: 88.45 %) of desktop systems. Mac OS comes to 9.68% (July 2019: 8.98%), while Linux runs on 1.72% (July 2.10%) of the systems. So no major change. 

    OS share Desktop 8..2019

    (netmarketshare.com OS share 8.2019)

    In the analysis of the share by operating system version, NetMarketShare shows the following figures for the desktop operating systems at the end of August 2019 (see figure above):

    • Windows 10 holds 50.99 % (previous month 48.86%),
    • Windows 7 is at 30.34% (previous month 31.83%),
    • Windows 8.1 still has a share of 4.20 % (previous month 5.29 %),
    • and macOS 10.14 comes to 5.95 % (previous month 5.38 %).

    If statistical fluctuations are taken into account, almost all have remained the same.

    Some conclusions

    Even if the figures fluctuate only slightly, it can be regarded as statistical uncertainties, at least in my eyes, interesting conclusions can still be drawn.

    • Six months before the end of support, Windows 7 still has a 30% market share on the desktop. A sign that the operating system continues to be appreciated by users.
    • Interesting for me is the slight drop in the use of Windows 8.1. Apparently users are not switching from Windows 7 to Windows 8.1, but are choosing other operating systems.   
    • I can’t say, whether the slight increase in macOS 10.14 is an indication that people are switching from Windows 7 to Apple Macs. It could also be due to slight statistical fluctuations or users upgrading from older macOS versions.
    • Linux does not actually appear in the equation – its user share has meanwhile fallen to 1.26% – and it I recalled that the figure was around 2% in the past.

    You can summarize the above data in a few short sentences. Even just before the end of Windows 7 support Windows 10 didn’t overtake the desktop. Since the beginning of 2019, Windows 10 has only grown by around 10%, a sign that Microsoft’s new operating system is not really fit with user requirements. Or in brief: Six months before Windows 7 End of Life Windows 10 isn’t at 80%, and Linux is far away from ‘it’s long year propose’ to overtake the desktop.

    Economic and ecological nonsense?

    And another thought that has just come to my mind. Apparently most people don’t really miss anything with Windows 7 and would like to continue using it. Of course, the End of Life date was announced at the release of any previous Windows versions, including Windows 7. It was also a fact for a long time: Windows gets 10 years of support, because in the meantime there was a newer and mostly better OS alternative from Microsoft.

    But currently we experience that million systems, which works well, are simply destroyed in such a way, although Windows 7 of the functionality is sufficient for many purposes. Microsoft could not score with Windows 8 and Windows 8.1. And with the Windows as a Service approach of Windows 10, this insanity continues.

    Or say it other word: The software industry is mutating due to its update cycles into one of the biggest capital destroyers and eco-pigs of the planet. A few days ago, I realized once again that the IT development driven by computer specialists and marketing – at least in the area of operating systems – don’t meet the requirements of industrial users. Welding machines, laser cutter or other mechanical tools, plants in the chemistry and process or steel production plants, diagnostic units in industry and medicine etc. are sometimes projected for a life time of 10, often even 20 to 40 years. But the Windows systems used there for supervisory are lasting 10 years (and with Windows 10 just 30 months in best case). A revamp in this environments is in most It’s a mis-fit both from an economic and from a safety point of view. In terms of sustainability this could not be the way of our future. We should start, thinking about that.

    Windows 10: ISOs for Insider Previews 19H2 und 20H1

    $
    0
    0

    Microsoft has just released the ISO images for Windows 10 Insider Preview 20H1 Build 18970 and 19H2 Build 18363.327. The Windows 10 Insider Preview 19H2 Build 18363.327 already is a ‘Release Preview’.

    The announcement just came from Brandon LeBlanc on Twitter, where I saw it. Here’s the text:

    As usual the download is only possible for Windows insiders after login on the page To access this page, you need to be a member of the Windows Insider program.

    Windows 10 Insider Preview ISOs

    Build 18363 is wrongly specified as ‘Slow’, but it is already a release preview. However, Microsoft emphasizes that it is not yet the final for the fall 2019 update of Windows 10.


    Windows 10 V1903: MS investigating the Search/Cortana issue (09/03/2019)

    $
    0
    0

    [German]Users of Windows 10 version 1903 may facing issues after installing update KB4512941 (released August 30, 2019). Cortana causes a high CPU load on a core and the search does not work. Now Microsoft investigates that behavior. Here is a refresh, what I know so far from feedback of my blog reader.

    I’ve described the following behavior (and some workarounds) since the release of the first Insider Preview of update KB4512941 (released August 21, 2019) within the articles linked at the end of this blog post.

    • Cortana causes a high CPU load, which may use a core of the CPU to 44% to 100%.
    • The search will not work if the Bing search has been disabled.

    But I also need to confess, I receive nearly hourly feedback from blog readers, reporting many, many special cases, see also my explanations given below.

    Registry fix not reliable

    Within my blog post Windows 10 V1903: Updates KB4512941 and KB4515530 I described a simple registry fix to cure the behavior.

    Windows Registry Editor Version 5.00

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search]
    "AllowCortana"=dword:00000000
    "BingSearchEnabled“=dword:00000001
    "CortanaConsent“=dword:00000000

    The instructions in the .reg file helped some people, to fix the desktop search and reduce the Cortana CPU load.

    But some users has send me the feedback (see the tweet above and this German comment for instance), that switching BingSearchEnabled to 0 or 1 didn’t change anything. Some has to remove the DWORD value BingSearchEnabled from registry, to cure the issues. Another user commented on my German heise article:

    I deleted BingSearchEnabled from HKEY_CURRENT_USER and HKEY_LOCAL_MACHINE in the respective path (value was set in both paths).

    Effect the same, the load goes to 1 core and doesn’t release it anymore. With taskkill -IM SearchUI.exe /F is quiet again.

    Another user has confirmed that behavior.

    The systems’ history matters

    Another German user has send me an additional observation within this comment – below I’ve translated it.

    I had to set the RegKey HKCU the BingEnabledSearch to “1” BEFORE the update to the 18362.329. Only then everything worked again after the update. When I tried to set the value to “1” or delete the complete DWORD after the installation, this had exactly NULL effect. The Cortana Task had enormous CPU load on both computers. This could not be fixed. Other attempts led to the Windows search not working anymore.

    Before I installed the update, the RegKey worked for me, and the web search could be deactivated. After the update the keys won’t work at all anymore. I can do what I want, the web search remains active. And as already mentioned, the GPO settings don’t seem to work anymore, I can’t deactivate the web search.

    […]

    He expressed his suspicion, that Microsoft intends to cut the GPO’s for consumer again or force the web and Cloud search. Or it could also be related to the fact they started to separate Cortana from the system / search, and they screwed it up.

    And there is the Cortana cache thing

    Another blog reader has send me another feedback, blaming some scripts located within the Cortana cache folder will cause the issue, after the update has been installed. He also provide a workaround: Just use a copy of the old cache folder, as described within my blog post Windows 10 V1903 Update KB4512941: Workaround for the Cortana high CPU load issue.

    A day ago, German blog reader Werner B. send me his third addendum with additional information. Here is the translated text:

    I have a correction to my mail from August 29th:

    *) “There is no high CPU load at build 18362.327 if the KB4512941 is directly integrated into an ISO with 18362.30 from April via DSIM.” “There is no high CPU load at build 18362.327”.

    For a new installation with integrated KB4512941 (build 18362.329), Cortana can be disabled via Group Policy or OO Shutup. Web search is immediately disabled without increasing CPU load. After a reboot, the Cortana bug still occurs.

    The same applies to installation from 18362.30 and upgrade to .329 via ‘dism /online /add-package’ of the ‘cab’ packages, or via the ‘.msu’ packages released in the meantime.

    The bug is in the interaction of Cortana with a .JS file from its cache folder, which is loaded at boot time.

    For testing, the Bing search can be temporarily disabled without increasing CPU load by disabling the Group Policy “Search – Don’t search the web and don’t show web results in search” before each shutdown, and only enabled after a restart.

    Microsoft should be able to easily narrow down / recreate the bug. In a virtual machine without network access, install Windows 18362.30 Pro or Enterprise from April, install KB4515530 and KB4512941 via .cab or .msu packages and reboot.
    Then deactivate the web search in the Group Policy but do not restart it yet. The policy works as expected, the CPU load is normal and Bing is disabled in Cortana. Then reboot and the CPU load bug occurs. For better traceability, such a test can be performed in a virtual machine completely without network connection (i.e. copy the KB packets to the machine using Copy Paste and do not load them online).

    I have added additional screenshots. The adjustment of the group policy with gpedit.msc can also be checked with OO Shutup (reading).
    The web search is active if you enter e.g. ‘gpedit.msc’ in the search field and a link to ‘Show web results’ appears.

    GPO-Settings for search

    Weighting the feedback outlined above, it seems pretty complicated. We have to wait for a fix from Microsoft. I’ve escalated that bug to Microsoft’s developers via Microsoft Answers forum (as a MS answers community manager I’m still able to do this).

    Microsoft is investigating

    At a last note I can confirm, that Microsoft is aware of reports discussing this behavior. Woody Leonhard has spotted the tweet below.

    According to the tweet above, Microsoft will provide an update for the update in an upcoming release.

    Similar articles:
    Windows 10 V1903: Updates KB4512941 and KB4515530
    Windows 10 V1903 Update KB4512941: Workaround for the Cortana high CPU load issue
    Windows 10 V1903: High CPU load from Cortana, Search broken, blame August 2019 Updates

    Windows 10 V1903: Review of update KB4512941

    $
    0
    0

    [German]Within this blog post I try to sort out some issues caused by the cumulative update KB4512941 for Windows 10 Version 1903. Here’s an outline of what I’ve notices so far.

    On 30 August 2019 Microsoft released the cumulative update KB4512941 for Windows 10 Version 1903 (see indows 10 V1903: Update KB4512941, KB4515530 (08/30/2019)). The update is intended to fix a number of problems, but will cause new trouble.

    Desktop search and high CPU load caused by Cortana

    I had already mentioned the broken desktop search and the high CPU load caused by Cortana in several articles (see links at the end of the article).

    Issues with RDP connections

    Since the release of Windows 10 version 1903, users have been struggling with issues around RDP connections (high CPU load, hanger, black screen). Microsoft’s support article for the cumulative update KB4512941 for Windows 10 Version 1903 explicitly describes a fix for various RDP issues.

    Black window at RDP sessions are fixed?

    Since Windows 10 Version 1903, users of older graphics cards have suffered from the fact that RDP connections show a black window and do not work. In the blog post Windows 10 V1903: Remote Desktop shows Black Screen, I picked up the error and a user proposed a workaround using Group Policy (forcing the XDDM driver). This bug should be fixed with update  KB451294, – I have some positive feedback. But this comment has reached me about my Germany heise article.

    RDP blackscreen issue with Vmware not fixed

    Does anyone else have the issue with VMware?
    If so, the connection still breaks as soon as I want to use RDP to connect to a machine running Windows 1903. The only remedy is to switch off the 3D function.

    RDP connections: Freezes in VMs and high CPU load (dwm.exe)

    In Windows 10 version 1903 there is still a bad bug with RDP connections, which makes life difficult especially for people with VMs. The Desktop Manager (dwm.exe) causes a high CPU load and freezes VMs when trying to connect via RDP. I had described this in the blog post Windows 10 V1903: RDP (dwm.exe) causes high CPU load, freezes VMs (with a workaround). My hope that this bug has been fixed was not fulfilled. The comments here says that the problem is still present. On German site heise there is this comment thread, where even someone notices client crashes. 

    Is the Sandbox issue fixed?

    Update KB451294 is supposed to make the Windows Sandbox work in a German Windows 10 Pro and to fix the bug described in the blog post Windows 10 V1903: Update KB4497936 breaks Sandbox. The Sandbox seems to be working it now, but I’ve seen single voices reporting isues. One user reports that as a developer he can’t really test in the sandbox because nothing works. At heise you can find this German comment to my article about the update in the forum. There the sandbox eats a lot of CPU time and doesn’t really work. A second comment at heise reports crashes of the sandbox – but can be isolated cases. Anyone else affected?

    Start menu entries ms-resource:AppName/Text

    According to support article KB4512941 the issue, that Start menu tiles shows crytic titles like ms-resource:AppName/Text should be fixed

    Updates an issue that may cause the name of an unsupported application to appear as default text, such as “ms-resource:AppName/Text” in the Start menu after upgrading the operating system.

    The Microsoft Answers forum post here negates exactly this fix. The user still has the cryptic names in the start menu tiles of the apps.

    Kaputte Startmenüeinträge
    (Source: heise forum)

    The above screenshot has been obtained from the Windows Sandbox, but shows the broken entries. My question: Anyone else who is affected by this bug?

    Users are not logged out on restart

    Normally, logged-in users should be logged out when Windows 10 is restarted. This German comment at heise claims that this is no longer the case after installing the update KB451294. However, the user describes a fix via group policy. Currently, it is unclear what happened there. Question: Has anyone noticed anything similar? 

    Display Bug in the Settings App

    Within this Microsoft Answers forum thread a user describes a display issues that occurs due to the update. For example, details in the reset option in the advanced options of most apps are no longer displayed correctly. After uninstalling the updates, the display error is gone.

    DirectX 12: Games stutter?

    For applications such as games that rely on DirectX 12, users will observe jerking and stuttering. About this comment I came across the article here describing a workaround.

    BlueScreens and errors

    In connection with the update KB451294 I found some places on the internet that deal with BlueScreens and various error codes. Here is a short summary.

    BlueScreen and Error 0x800f0845

    This post in Microsoft Answers Forum reports this error (but for the Preview version). The thread didn’t shed light into the root cause. In the meantime I have this forum thread in the MS Answers forum, where the mistake happens in the final. Currently I can only recommend not to install the update (my German article Windows10: Update KB4056892 killt AMD-Systeme (Error 0x800f0845) does not help imho). 

    PAGE NOT FOUND IN NONPAGED AREA BSOD

    The BlueScreen was observed on a Lenovo Legion Y520 and is described here. According to Forenthread it may be based on an ArcSec.sys driver as part of various ArcSoft software such as TotalMedia Theatre. You can try uninstalling it here.

    Install error 0x800f081f

    This installation error has come to my attention in various forum posts (including here and for the preview here). Then also a system file check with sfc /scannow fails. You can read the article Windows 10 V1903: Error 0x8024200D or 0x800F081F with update KB4512508 for further details. .

    ome users get installation errors because they performed a cleanup after an update installation. Colleagues from deskmodder.de have described in this German article how to fix the issue.

    Similar articles:
    Windows 10 V1903: Remote Desktop shows Black Screen
    Windows 10 V1903: RDP (dwm.exe) causes high CPU load, freezes VMs
    Fix for VB6, VBA, VBScript bug?
    Windows 10 V1903: Update KB4497936 breaks Sandbox
    Windows 10 V1903 Update KB4512941: Workaround for the Cortana high CPU load issue
    Windows 10 V1903: Updates KB4512941 and KB4515530
    Windows 10 V1903: Update KB4512941, KB4515530 (08/30/2019)
    Windows 10 V1903: High CPU load from Cortana, Search broken, blame August 2019 Updates
    Windows 10 V1903: MS investigating the Search/Cortana issue (09/03/2019)

    Windows 10 V1903: Search and Cortana bug in Update KB4512941 confirmed (09/05/2019)

    $
    0
    0

    [German]Microsoft hat confirmed officially (09/05/2019) the bug in update KB4512941 for Windows 10 version 1903, which damaged the desktop search and caused a high CPU load due to the language assistant Cortana. 

    The background of the problems

    On August 30, 2019 the cumulative update KB4512941 for the Windows 10 May 2019 Update (Version 1903) came out. The update fixes over 30 minor and major bugs in the current Windows 10 version.

    I had described the details in the blog post Windows 10 V1903: Update KB4512941, KB4515530 (08/30/2019). The update had been tested ‘extensively’ with Windows insiders in the Release Preview Ring since August 21, 2019. And Microsoft wrote in the support article at release, that there were no known issues with this update. So I was confident, that everything is fine.

    Desktop search broken, Cortana causes high CPU load

    However, users had already noticed during the Insider Preview that the desktop search no longer works after installing the update. In addition, the update used up the CPU or individual cores.

    • Cortana causes a high CPU load, which can use a core of the CPU to 44% to 100%.
    • The search does not work if the Bing search has been disabled.

    I had already reported about it at the Insider Preview in the article Windows 10 V1903: Updates KB4512941 and KB4515530 and hoped that this would be fixed until the release of the final. A few hours after this update was released, there was confirmation that the bugs were still present.

    Confirmation by Microsoft, what can you do?

    On September 5, 2019, Microsoft added the following text to the support article for KB4512941 (thanks to the German and English blog readers for the note).

    Microsoft is getting reports that a small number of users may not receive results when using Windows Desktop Search and may see high CPU usage from SearchUI.exe. This issue only occurs on devices that have disabled searching the web using Windows Desktop Search.

    Microsoft assumes that a small number of people are affected and it’s planned to release a fix by mid-September 2019. Whoever is affected by this error should simply uninstall the update via the Settings app (update history) or the Control Panel.

    Windows 10 V1903 Update KB4512941

    Because this update is optional, it is not automatically downloaded and installed by Windows Update if the user triggers the search for updates. Rather, you have to trigger the download explicitly (see screenshot above). You can try the workarounds described in the following articles. But since I received feedback from readers almost every hour that this and that didn’t work, the whole thing remains a tinkering. Just wait until Microsoft has repaired the issues. If the repair reveals new bugs, I will report as soon as possible. 

    Similar articles:
    Windows 10 V1903: Updates KB4512941 and KB4515530
    Windows 10 V1903: Update KB4512941, KB4515530 (08/30/2019)
    Windows 10 V1903: High CPU load from Cortana, Search broken, blame August 2019 Updates
    Windows 10 V1903: MS investigating the Search/Cortana issue (09/03/2019)
    Windows 10 V1903: Review of update KB4512941

    Windows 10: First Open Source PowerToys released

    $
    0
    0

    [German]Microsoft has released the first preview of PowerToys for Windows 10 users. The PowerToys known from Windows 9x are Open Source and available free of charge.

    History of PowerToys

    The PowerToys were free programs under Windows 95/98, with which certain Windows functions could be optimized or adapted. So there was the CabView function with which you could view and unpack the contents of CAB archives (today the Explorer can do this). With CDAutoPlay you could start CDs automatically (Windows can also do that in the meantime). The context menu extension Open Command Prompt here also found its way into the later Windows version (you have to press the Shift key to get the context menu command). The Send To function is also included in the context menu of all Windows versions by default. So the PowerToys became redundant in later Windows versions. An overview of the functions of that time can be found on this website.

    Restarting the project

    Inspired by the PowerToys project under Windows 95, some developers have dared a restart. This reboot is intended to give power users the ability to get more efficiency out of the Windows 10 shell and customize it for individual workflows. The announcement will take place at the beginning of May 2019, I had reported about it in the blog post Windows 10: PowerToys will come as Open Source.

    First tools released

    Now the Microsoft developers have released previews of the first two tools for Windows 10. I just came across the announcement on Twitter.

    The tools are presented in the tech community article Announcing the first preview and code release of PowerToys from September 5, 2019. Within this article, the tools are introduced.

    To try out the tools, this installer is offered. Once the PowerToys are installed, the main PowerToys service runs when Windows is started and a user logs in. Once the service is running, a PowerToys icon appears in the taskbar.

    Power Toys tray icon.Power Toys-Tray-Icon

    Selecting the icon starts the PowerToys settings user interface. The settings interface allows you to enable and disable individual utilities and make settings for each utility.

    PowerToys settings UI.
    (PowerToys settings, Source Microsoft)

    There is also a link to the help document for each utility. You can right-click the tray icon to stop the Power Toys service.

    Note that some PowerToys features require elevated privileges. Therefore, PowerToys.exe requests them via User Account Control at startup.

    At startup the two tools Windows key shortcut guide and FancyZones are released. Further details may be read here.

    Windows 10: Not enough USB Controller resources

    $
    0
    0

    [German]When connecting USB devices, some Windows 10 users experience an unpleasant surprise. Windows reports ‘Not enough USB controller resources’. Here are some hints about the background of this error.

    A description of the error

    I confess, I haven’t had this behavior on the radar before. Then I stumbled upon an English-language Tweet reporting that issue.

    But a search for the english error message brings more hits. The hit from the Microsoft Answers forum is from 2019 and describes the problem as follows:

    Not Enough USB Controller Resources Windows 10 version 1809

    Hello, and sorry for the long post. 

    I decided to upgrade my motherboard and processor after 4 years, and after installing the Aorus x470 and R7 2700x, I couldn’t get more than 3 USB 2.0 devices to work at the same time. After hours of frustration and phone calls to Gigabyte, AMD, and Microsoft support, the best advice was to reinstall Windows 10 Home and Pro, multiple times. Still, the problem persisted. 

    Concluding that the new hardware was malfunctioning, I decided to change back to my old hardware (Gigabyte GA-B150M and I5 6500), and reinstalled my copy of Windows 10 Pro. Note that this is the hardware and OS that I was running before, and never ran into this problem, even after using 4 USB 3.0 devices and 6 USB 2.0 devices. I also never updated my copy of Windows in the past, so I was probably running on a 17xx version, not 1803 or 1809. After reinstalling my old hardware, the problem persisted. I still cannot get more than 3 USB 2.0 devices working at the same time, which is frustrating and detrimental to my work. 

    I have tried all sorts of driver updates, BIOS updates and flashing, Windows power options, registry editing, etc, etc. I have not been able to find a solution. My problem seems to be fairly unique, as googling has not been super helpful. I am not sure how I still have this problem, even though the hardware is the same as I had 2 days ago. The only difference is the Windows version, and the associated drivers. 

    Is anyone else having the problem, and found a fix? Is it a problem with Windows, or something else? 

    The devices I am trying to connect are: 

    Mouse
    Keyboard
    DAC/AMP
    Microphone
    Flash Drives / External HDD

    Any combination of 3 work, more than 3 causes static in the headphones, on/off cycling, etc.

    You will find similar posts within the Internet in several forums – but in most time without a solution. They suggest updating chipset driver or use a hub, what doesn’t help.

    The technical background

    During my research I came across this reddit.com post, which provides a quite good explanation. A user, who probably also owns Oculus-Rift VR glasses, had dealt with several USB extension cables and hubs. He also came across the above error and started digging through the USB specifications. The error that not enough resources are available for the USB connection has nothing to do with the power supply, as is often assumed. Here are the explanations I have derived from his text. 

    • A USB port can communicate (via hub) with several devices. USB is a bus system to which up to 127 devices can theoretically be connected.
    • The amount of USB devices and which devices a USB connection can handle is determined once by the power supply. But there are further criteria for communication
    • A certain bandwidth must be reserved for each so-called endpoint (i.e. a connected device such as a USB mouse).

    The author of the reddit post has found out that there are two situations for connecting the USB device to the USB socket.

    • When a USB device establishes a connection, it creates a number of endpoints, i.e. channels that communicate to the device or back from the device to the controller. A flash drive can create 3 endpoints, an IN and OUT, and a control channel. The sensors of Oculus Rift VR glasses seem to use 7 and a USB headset at least 10 endpoints.
    • The first problem is that USB 3.0 controllers have a limit of 96 endpoints per controller (is a hardware limit from Intel XHCI controllers, AMD controllers can have 254 endpoints, see 2nd post here). If the user connects enough devices, the above message appears that there are not enough USB resources available. Then USB devices will be disconnected if they are struggling for the limited number of endpoints.
    • The second restriction is that each USB 3.0 port is limited to 2×16 endpoints (16 IN and 16 OUT each, see also, but almost all devices use the IN setting for the communication channels). 

    If a hub physically supports the connection of 2 to 4 rift sensors and each rift sensor uses 7 IN endpoints, at best 2 sensors can be connected to a USB 3.0 hub. Then the limit of 16 endpoints is exceeded for the third sensor. If a headset is connected to a hub, adding another USB device becomes a gamble. Depending on the device, the number of 16 endpoints has been exceeded.

    The author of the reddit post sees it in such a way that in practice a maximum of 2 Ocolus-Rift USB-VR devices can be connected to a post. With other devices more or less devices can be operated per hub.

    The whole thing is not really a bandwidth problem, since USB 3.0 has a much larger bandwidth than is required for the sensor data. It’s just that USB 3.0 allows half of the channels that are possible under USB 2, writes the author of the reddit article. So if you have too few USB ports, you may not get far with a USB hub, even if it has a power supply. This is stupid for devices that come with only one USB-C socket.

    What can you do?

    Unfortunately, there is no utility that can specify how many EndPoints a device uses. Utilities like Uwe Sieber’s USB Device Tree Viewer can show you how many controllers are available and which ports go where. The tool can also display EndPoint configurations. But a clean calculation of how many USB devices can be operated on the port is probably not possible. 

    Sometimes you read (like here) that you should turn off xHCI in the BIOS. Disabling xHCI in the BIOS forces all USB 3.0 ports into 2.0 mode. This does not solve the problem that only 15 endpoints are supported per USB port. This reddit.com post mentions a USB switcher tool that can be used to switch USB 2.0 posts to other controllers. This might help to reserve enough bandwidth. 

    Troubleshooters, as offered on some websites for automatic repair, should be avoided. You can use the wizards integrated in Windows for troubleshooting. But I am sceptical that they will solve the problem. The same applies to uninstalling and reinstalling USB drivers – if no new driver is available.

    Maybe you can use USBDeView to remove the previously used USB devices and get rid of the error. This approach is also mentioned in this German forum thread. Maybe it will help – if someone knows another solution, he can leave a comment.

    Viewing all 4446 articles
    Browse latest View live


    <script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>