The Meltdown vulnerability in Intel chips shows that even hardware can have security issues – and a patch is still needed to fix it.
In an ideal world, one program can’t see data from another program or what the operating system is up to. But the Intel chip design flaw enables hackers to do just that – misuse one program to ‘meltdown’ these internal barriers so they can see what other programs and the operating system are doing. This vulnerability gives hackers the ability to uncover private things like saved passwords or browser history.
It’s a huge problem, impacting virtually every computer and device dating back to 1995.
The solution to this hardware vulnerability is a patch from the operating system developers. Apple and Google have released their patches and Avira AV products for Mac OS and Android are compatible with them. Microsoft has already started rolling out this patch (security update KB4056892, OS Build 16299.192) to its users. However, this comes with a warning that “Due to an issue with some versions of Anti-Virus software, this fix is only being made applicable to the machines where the Antivirus ISV has updated the ALLOW REGKEY.” If an AV does not do this critical step, the user might encounter two problems: the Blue Screen of Death or, potentially much worse, not receive or be informed of future Windows updates from Microsoft.
Aware of this, Avira has been hard at work to ensure there are no compatibility issues that can hit our users. Before the rollout started, we have reviewed the Microsoft hotfix build, conducted our own in-house testing, and have fully verified we met Microsoft requirements. With our latest updates, Avira Antivirus Free and Avira Antivirus Pro are compatible with the Microsoft patch. We recommend to our users to opt for automatic updates of their antivirus software as well as to install all Windows updates immediately.
The importance of patches
Vulnerabilities – big and small – are an inescapable element of software. And so are the patches needed to fix these holes. So far, due to the legions of developers working on these patches, there are no reported examples of these vulnerabilities being weaponized by hackers. But Meltdown is not the only vulnerability around.
A key element in your online safety is keeping the device fully patched, making it more difficult for hackers to take over your device and hit you where it counts – the pocketbook. While Microsoft is taking care of this patch by pushing it out to users – that won’t happen all the time with all the software apps on your device. Think about getting a software updater such as the Avira Software Updater to make sure your software is always at its best. Today you might avoid having a meltdown. Tomorrow it could be something worse.
Right-click start,Windows Powershell (admin) or Command Prompt (admin)
Copy & paste this command (all in one line) and press enter
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat” /v cadca5fe-87d3-4b96-b7fb-a231484277cc /t REG_DWORD /d 0 /f
This blog is more about information than individual user support.
You’ll find support ressources here http://www.avira.com/en/support
To (maybe) shorten your way to a solution …
Check if your Avira product is up to date. Avira is update compliant and sets the necessary registry entry expected by Microsoft to show and do the update.
See Microsoft support information about Windows 8.1 security-only-update KB4056898
https://support.microsoft.com/de-de/help/4056898/windows-81-update-kb4056898
This document contains the information you need to proceed.
– how to determine whether your system is compliant and ready for this update
– how to obtain detailed file information to check if your system is already up to date
– how to download the update manually if your Windows Update can’t for whatever reason.
Please note:
1. The update might not show up because it is already installed. Check your update history in Windows Update if kb4056898 (available since Jan. 3, 2018) is done… most likely if automated install and restart are activated.
2. If installation shows up as having failed, this might be incorrect (known issue on windows 10) and might be verified by Microsoft Windows build number or by comparison of the versions of the files delivered by this update.
3. I’m just a user, too, as you are. I’m no frequent visitor here, just came along reading your problem and trying to help you sort it out. Don’t expect me to come back soon…^^
ok for Meltdown vulnerability. What about Spectre?
Hi,
The update provided by Microsoft also includes fixes for Spectre. Learn more about the content of the update provided by Microsoft for Windows 10 here and for Windows 8.1 here. Hope this helped!
Best,
István
Thank You Avira… Still one of the best after all these years!