MS-DEFCON 3: Get the October patches installed

We’re seeing some funny business with the ancillary patches this month, but the mainstream Windows cumulative updates and Office patches look good to go.

Big question is whether you want to upgrade from Win10 version 1909 to version 2004. I have a few observations. Bottom line: Susan Bradley has upgraded her 1909 machines to 2004. I’m still sitting on a fence. Really, there’s exactly nothing in 2004 that most people will want.

Step-by-step details in Computerworld Woody on Windows.

Patch Lady – make sure you are protected

To specifically target hospitals and healthcare with ransomware is pure evil.

Brian Krebs reports that the “CISA, FBI, and HHS have credible information of an increased and imminent cybercrime threat to U.S. hospitals and healthcare providers.”  Earlier today a webcast was also talking about this risk.

I’ve installed the October patches.

I’ve checked to make sure backups are working (and not backing up to a drive that is accessible by the user making the backup – look to your backup vendor/ask them if their solution does this).

I’ve made sure that my email has spam filters and email hygiene turned on.

I’ve repositioned my tinfoil hat so my paranoia is turned full on.

If you work for healthcare or know of someone in healthcare reach out to them and warn them that they are being targeted by cyber attackers and be extra careful.

About that Flash-zapping patch, KB 4577586? One leeetle problem. It doesn’t remove Flash.

Earlier today Microsoft released KB 4577586, the “Update for the removal of Adobe Flash Player: October 27, 2020.” As Susan notes in the entry below, it’s only available if you manually download and install it from the Microsoft Catalog.

Now comes word from Lawrence Abrams at BleepingComputer that the patch doesn’t do anything of the sort:

In our tests, though, Adobe Flash Player remained installed after installing the update… When we checked the Adobe Flash Player component in Microsoft Edge, it was still installed after installing the update.

Let’s hear it for Microsoft’s testers – the unpaid ones, at least.

Patch Lady – saying goodbye to Flash

https://support.microsoft.com/en-us/help/4577586/update-for-removal-of-adobe-flash-player

Saying unofficial goodbye to Flash.  Note this is on the catalog site at this time so that folks can be testing the removal process.  Those behind Windows update will get this later (Decemberish) those on WSUS will get it in 2021.

Patch Lady – how old is that computer?

So the other day I had a misbehaving computer that wouldn’t boot.  After I reset the cmos battery it booted up and is working like a champ.  But it got me to thinking about how old some of the computers in the fleet are and how it’s harder to keep track – either that or I’m not keeping track as much as I did.

In the ancient days of computing, we would migrate to new machines when a new model or version came out and then hand the older computers to other people in the office.  There was major speed differences between these models.

Now, I don’t see as huge of jumps.  I can only type so fast.  Once you get a Windows 10 with good ram (more than 8 gig, even more than 16 gig and more) and a SSD drive, you can be very happy with older hardware.

https://engineering.purdue.edu/ECN/Support/KB/Docs/HPModelYears

https://engineering.purdue.edu/ECN/Support/KB/Docs/PCDesktop

I can honestly get more than four years out of a computer… “Most faculty, staff, and students will find their needs will be easily met by this year’s “standard desktop,” which is designed to provide sufficient performance for at least 4 years. ”  Laptops are a bit harder, especially if you want something portable, but desktop style you can get five and more years out of it.

Gary pointed to some official “refurbished” computer listings from Microsoft

https://devicepartner.microsoft.com/en-us/assets/detail/MAR_Partner_Directory_Aug2017-pdf

https://www.msregrefurb.com/RRPSite/OnlineDirectory.aspx?setlang=en

Refurbs are also an excellent way to get decent machines.  Recently I purchased a refurb and then took the video card out of another computer and moved some parts around.  Windows 10 had no issues whatsoever finding the drivers and handling the changes.

So how old is your computer?

Pulling the trigger on Win10 Version 2004

UPGRADING WINDOWS

By Susan Bradley

Windows 20H2 is in the pipeline — so it’s about time to install … its predecessor, Win10 2004.

On October 20, Microsoft tweeted that the October 2020 Update (aka 20H2) has been officially released and will show up over time via a “throttled” rollout. But a few of the tweet’s replies quickly noted that some Win10 users are still waiting for Version 2004 — or had to manually install it. (Microsoft states that the upgrade from Win10 2004 to 20H2 should go faster because it’s more like a monthly update.)

Read the full story in AskWoody Plus Newsletter 17.42.0 (2020-10-26).

Four solutions to four computing problems

LANGALIST

By Fred Langa

AskWoody subscribers are an eclectic bunch, as evidenced by this quartet of interesting — and exceptionally wide-ranging! — reader-submitted questions.

This week’s topics include using a command-line trick to reveal a PC’s digital license, preserving system data through a UEFI/BIOS reset, managing a PC with dual SSD/HDD drives, and calculating a system’s total power draw. Wow! Let’s dive into them.

Read the full story in AskWoody Plus Newsletter 17.42.0 (2020-10-26).

Online presence: Currency, continuity, and commitment

Small-Business Websites

By Will Fastie

So your website is now up and open for business? That doesn’t mean you can just walk away.

In previous installments of this series on small-business websites, I stressed the important basics of ensuring your site can be easily found. For example, in the September 21 article, “Web presence: Working with search engines,” I discussed understanding the Google search engine. What I didn’t mention was that search engines take into account a site’s age.

In short, if your site isn’t considered current, its perceived value will drop, and it’ll fall lower in search-result lists.

Read the full story in AskWoody Plus Newsletter 17.42.0 (2020-10-26).

Freeware Spotlight — A potpourri of anti-malware apps

BEST UTILITIES

By Deanna McElveen

You might see a doctor for something simple, but it’s likely she will also check your general health.

So, too, we never let a computer leave our store without a thorough check for malware: rootkits, Trojans, viruses, spyware, bots, worms, ransomware, keyloggers, crimeware, and so on.

In past newsletters, various contributors have recommended that you not rely wholly on just one anti-malware utility. Fortunately, there are many good, free products to choose from.

Read the full story in AskWoody Plus Newsletter 17.42.0 (2020-10-26).

Patch Lady – if you use WSUS can I get your feedback?

https://www.surveymonkey.com/r/WSUSSurvey

The first ever unofficial survey on Microsoft’s on premise patching tool called WSUS.

If you use the platform, can you fill out my unofficial survey please?  I will be sharing the results in a few weeks.

Patch Lady – who knew a cmos?

So the other day someone plugged in a usb dongle to an HP Z240 workstation.  And it turned off.  And wouldn’t turn back on again.

So I purchased a replacement power supply thinking it was that.  But it turned out once I connected the new power supply in, still no go.

In searching around, I found a post talking about clearing the CMOS by removing the CMOS battery and pressing the CMOS reset button on the motherboard.

Sure enough, that did the trick.  The computer now boots up as normal.  That said I’ll be plugging things into the usb slots in the front just to make sure there isn’t something else wrong with the machine.   I’ve had two other machines recently that had their power supply died on me.  The HP Z240 was the easiest to change out the power supply.  The hardest was a small form factor home built unit that I needed smaller fingers in order to plug in all the plugs.

Patch Lady – my favorite new Windows Update setting

So you want to ensure you get feature release XXXX and no later than that right?  So you are on 1903, you forgot to download the 1909 iso and yet you still want to install 1909 and only 1909?

There is now a way to do that.

I’ve detailed out my new favorite setting and how it works here.

Edit:  Bruce pointed out on twitter that I said the setting was first released last year…. it actually was released this year but clearly my brain has been impacted by the pandemic and I FELT like it was a year ago.  Apologies to anyone else scratching their heads.