Η Microsoft it will not allow you to install future security updates until the developer of the security software you are using sets a specific registry key that certifies the application's compatibility with Windows.
As part of the security updates for the Meltdown and Specter CPU attacks, Microsoft required all security application vendors to confirm compatibility with the CPU fixes and then set a registry key in producttheirs that certifies compatibility. Without this key, the Microsoft security update simply won't install.
Microsoft clarified that this new rule will apply to all future security updates. This means that you are using incompatible third-party antivirus will not be protected from future Microsoft updates.
“Customers will not receive security updates from January 2018 (or any later security updates) and will not be protected from vulnerabilities ασφαλείας, εκτός εάν ο προμηθευτής του λογισμικού αντιμετώπισης ιών ορίζει το ακόλουθο κλειδί μητρώου”, αναφέρουν οι σημειώσεις στη σελίδα υποστήριξης της Microsoft. (το κλειδί το επισυνάπτουμε παρακάτω σε μορφή .reg, για όσους το χρειάζονται)
During the duration της δοκιμής των επιδιορθώσεων για τις δύο επιθέσεις, η Microsoft ανακάλυψε ότι ορισμένα antivirus πραγματοποιούσαν “μη υποστηριζόμενες κλήσεις στη μνήμη του πυρήνα των Windows.” Έτσι πολλοί ήταν αυτοί που παρατήρησαν σφάλματα BSOD μετά την εφαρμογή της ενημερωμένης έκδοσης. Για να αποφευχθεί το συγκεκριμένο πρόβλημα, η εταιρεία ανακοίνωσε το παραπάνω κανονισμό.
Security researcher Kevin Beaumont has compiled a list of antivirus products that are compatible with Microsoft CPU update and have correctly assigned the necessary registry key in Windows.
You can see the products that support its new requirement Microsoft from here.
However, conventional antivirus products appear to meet both requirements, and next-generation security products have confirmed compatibility.
If the security product you are using is not in the list, you can manually pass the key, which Microsoft says should be done with extreme caution.
So we will give the key and the reg file, for those who want to do it with a double click.
Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat" Value="cadca5fe-87d3-4b96-b7fb-a231484277cc" Type="REG_DWORD” Data="0x00000000”
iGuRu_QualityCompat.reg Right click, Save As
