Microsoft released the Patch Tuesday update for all versions of Windows. However, it looks like the updates did more harm than good, at least to some users. Since the update rolled out, several users are complaining about the random freezes on their devices. Windows 7 and Server 2008 R2 machines, and Windows 8.1 and Server 2012 R2 machines. According to the Spiceworks forum, users are experiencing freezes during and after the login.
Windows 7 machines can not login and suffer from this.
Symptoms: Login screen stuck on Welcome and taking up an hour to logon. And then even if they can login they freeze up completely.
According to another thread on Sophos forum, disabling the Sophos services on the Windows 2008 R2 machine fixes the problem.
Last night one of my Windows 2008 R2 servers hung after installing Microsoft patch KB4493472. After initial examination I discovered that SAV service has been logging lots of error messages in event log. Event IDs: 7022 (hang service), 80, 81, 83, 85, 82, 566, 608, 592.
The server became unresponsive, no rdp, no file share access, Ctrl Alt Delete not working.
I rebooted the server in a safe mode and disabled the Sophos services. After this, I was able to reboot normally. Then I uninstalled Sophos, rebooted and tried to install again but this time the installation did not complete and the server hang again. I rebooted again in safe mode, disabled services, rebooted and uninstalled sophos again. After checking the Windows logs I realized that the server had installed update KB4493472 last night. I uninstalled the patch, rebooted and installed sophos again. This time there was no problem.
We are currently trying to unlock KB4493472 on our update system.
Seeing the issue, Sophos has published an official announcement blaming Microsoft and Windows 7 updates for the issue.
If you have not yet performed the update we recommend not doing so. If you have performed the update but not yet rebooted we recommend removing the update prior to rebooting.
For Enterprise Console customers, if you have performed the update, not yet rebooted but require the Windows updates to remain installed, adding the following folder to your Windows exclusions in the Anti-virus and HIPS on-access scanning policy will prevent the issue on boot.
For now, Microsoft has the Sophos services installed. Both companies are working together on identifying the problem and releasing a fix soon. Not only that, but Avast has also published an announcement for users who are facing issues with the latest updates.
Windows machines (especially those running Windows 7) are becoming locked or frozen on Microsoft KB4462223, KB4493472, KB4493448, KB4464520, KB4462230 and KB4493435.
Avast for Business and Avast CloudCare on Windows machines, especially those with Windows 7 operating systems.
Microsoft is yet to release any information on the issue. In the meantime, we would like to update the latest version of Patch Update.
Via: Computer World