Meltdown and Spectre Vulnerabilities

[Armageddon Agent]

Problems for Intel AMD and ARM cpus..

Many people have problems getting this update combo installed and it affects Intel amd and others.. I know on the Asus site they give no instructions and fans that might try to help are all over the place and some try multi ways to get this installed with no luck.. Some say you need the newest bios- some say use power shell- some say install MEI first and another says install the Tool first and on and on.. I got the MEI installed with no probs- but When I tried to install the ME Tool I was getting the errors-->> ''Can't open AsIO.sys !! (2)'' I click exit and then I get- ''PEUpdater.exe run fail''.

A nice person that actually tried to help and not just troll helped me.. jrodrigues helped me with step 2.. Thanks. I got the fixes installed and am said not vulnerable any more.. Maybe this will help others and is easy enough.. I hope so..

** A lil Background..

I am using Bios 2202 I updated when I built this system Dec 2016 and did not have to install a later bios to install this MEI and Tool update.. I am using drivers from Asus driver download page that was up to date when I built this system and the only ones that have been newly released/ updated since is sound and this ME and a few bios.. So I only installed drivers for MEI- USB- Lan- SATA- Hotfix and latest Sonic Suite Audio.. I do not use install AI Suite or newer bios because I read of problems and my system runs good.. I do not use install any of the other stuff on the downloads page.. My Nvidia vid card and Aorus Graphics Engine is up to date.. My W10 is the Fall Creators ver.. I use paid ver. Bitdefender 2018 and every few days run free Malwarebytes..

Note: I got the MEI and TOOL from Asus downloads for my Mobo- from ''Chipset and Bios sections of downloads''.. Also I would use 7zip to unpack the downloads- it seems to have less probs with corrupted files..

http://www.7-zip.org/download.html

1..
I down loaded and unzipped the MEI and ME tool.. I right clicked on the MEI AsusSetup exe and ran as admin- it installed.. I restart my system even tho I was not told to do so..

2..
I then turned off my Bitdefender anti virus.. I used 7zip and unzipped the Tool to 1 of my blank 1gb flash drives that was plugged into 1 of my usb 2.0 ports.. I safely removed the drive and plugged it back in just to see if files was on it.. I then right clicked the MEUpdate Tool exe and installed it as admin.. It said it installed ok and restart..

3..
I restart and then I used the Intel-SA-00086 Detection Tool .. It said I am already patched and am not vulnerable.. That's awesome and I did not have to change my bios- I am still on 2202 and all seems to be well..

Intel® Management Engine Critical Firmware Update (Intel-SA-00086)

Resources for Microsoft and Linux* users
Intel-SA-00086 Detection Tool

http://www.intel.com/content/www/us/en/support/articles/000025619/software.html

Asus Hero VIII.. i7 6700K.. Noctua NH-D15.. W10 Pro 64..
Kingston HX421C14FBK2/16.. Gigabyte GTX 1080 G1 Gaming..
EVGA SuperNOVA G2-750.. Dell S2716DG.. Klipsch Promedia 2.1..
SanDisk X400 1TB.. Samsung 850 Evo 500GB.. Thermaltake Core V71..

[999999999]

Another thread about this?

[Armageddon Agent]

I looked through threads and pages and seen nothing and it is important and as said- many people are having probs installing these updates..

[999999999]

Publicado originalmente por Gigolos Get Lonely Too:

I looked through threads and pages and seen nothing

Mainly because they get locked.

[Armageddon Agent]

Thats fine- it still might help someone down the road.. Best I understood reading the sticky on what to post- this fits the bill imo

[Dr.Shadowds 🐉]

Publicado originalmente por 999999999:

Another thread about this?

Yup...

You have to wait for your motherboard brand to supply you the BIOS update for your motherboard, if they're going to do it, so contact them about it with your model of the motherboard you used, to find out more.

These are the updates you should have for your Windows 10, each build are not listed the same, so if you're using the latest build then you're 1709, if you haven't updated to the latest build then you should be one of the older builds, which each build has their own updates.

KB4056892 — Windows 10 version 1709 (Fall Creators Update).
KB4056891 — Windows 10 version 1703 (Creators Update).
KB4056890 — Windows 10 version 1607 (Anniversary Update).
KB4056888 — Windows 10 version 1511 (November Update).
KB4056893 — Windows 10 version 1507 (Initial Release).

Did you ever stop to think how Meltdown and Spectre are used? Did you ever stop to think that since this flaw as been around for a really long time, why haven't no one notice it until just a few months ago? Did you ever think why bloggers are attacking Intel, and trying to make it bigger than it should?

[Bad 💀 Motha]

Why do we even need such discussions about these things. Every users should weight the options of what updates could potentially do. The rest of the majority of the consumer users should just update no matter what and stop questioning it. Since questions leads to "Should I update, let me google how to disable stuff"; No, keep your OS, Drivers and Softwares all up to date... unless you are a tester who has their reasons to do otherwise.

[SenMithrarin85]

Publicado originalmente por Bad_Motha:

Why do we even need such discussions about these things. Every users should weight the options of what updates could potentially do. The rest of the majority of the consumer users should just update no matter what and stop questioning it. Since questions leads to "Should I update, let me google how to disable stuff"; No, keep your OS, Drivers and Softwares all up to date... unless you are a tester who has their reasons to do otherwise.

thats a very blanket statement. updates are not always good. anyone who games on an nvidia gpu will tell you that; for some every driver since the 385 branch has broke more than its fixed.

Same with software. Some people stay on an older branch to avoid compatability issues.

OS updates once again as above. Still with the advent of windows 10 and its "lets keep the noobs safe" motto, updates are forced on us whether we like it or not.

[Morethan2Letters]

Windows Update is blocked, I wont install that patch.

[SenMithrarin85]

Publicado originalmente por Advanced3:

Windows Update is blocked, I wont install that patch.

your funeral

[Morethan2Letters]

Publicado originalmente por SenMithrarin85:

Publicado originalmente por Advanced3:

Windows Update is blocked, I wont install that patch.

your funeral

Oh yes, Please tell me how a exploit that has been around for a decade is such a huge issue now.....

[Septevar]

Publicado originalmente por Advanced3:

Publicado originalmente por SenMithrarin85:

your funeral

Oh yes, Please tell me how a exploit that has been around for a decade is such a huge issue now.....

because now the general public know about it, and virus's malware will be starting to target those vulnrabilities

[Morethan2Letters]

Publicado originalmente por Septevar:

Publicado originalmente por Advanced3:

Oh yes, Please tell me how a exploit that has been around for a decade is such a huge issue now.....

because now the general public know about it, and virus's malware will be starting to target those vulnrabilities

Very doubtful. Hackers could care less about my Steam Librabry.

[Armageddon Agent]

This section is Hardware and Operating Systems.. If not care to read about such things you can do so.. And no- you do not have to update drivers every time they come out.. Proper wisdom is- if its not broken dont fix it.. If you have probs with something or need to add new hardware then yes maybe its best to check and see if new bios or drivers are out and even then might not fix your prob or allow you to add the new device you hope to use..

Anyone that knows anything about computers can tell yah that updating drivers can make some other program or game you normally play/ use not work right and just because a game says you should does not mean you have to- most just give yah a few more fps and thats it but can mess up other programs like my recorder program for 1.. W10 updates your drivers when it feels like it and mess them up.. I install my NV drivers and is only the Graphics and Physx- windows install those and Expirence and NV Sound.. Well I use my onboard sound on my mobo and do not need the nv stuff and I do not use expirence and when I install my drivers I click do a clean install.. W10 changes my sound also.. W10 sound defaults- w10 turns off stereo mix and I turn it on so when I record I get sound and mic in my videos.. I only use analog/ speakers- W10 turns that on and digi and nv and my monitor that does not have sound or a usb pluged in- it has no speakers its just a volume control for headset if plug into the monitor which I do not- and my speakers pop and stupid garbage unless I disconnect from the net and delete and reinstall my drivers.. I reinstal my drivers versus disable and its still installed taking up space..

W10 updates break something everytime you restart after- some program or something does not work right anymore and them that do not think so just have not found it yet.. A computer is a picky machine- some drivers or bios actually makes your system run slower and any Over Clocker or Bench Mark junkie will tell you that and many roll back to the best bios if a new one does not score as well.. if it works well its best left alone- period- end of story.. This MEI security update is another story..

This MEI update is to help keep poor sorry low life people from hacking your computer and or Steam account- so..

[Armageddon Agent]

Exactly- more sorry people know of it now and or more have been under attack lately.. If you do not care to fix your system well good for you.. This is not fixed with a windows update.. You have to get the MEI from your mobo or laptop site and part of it is bios based and is what the ME TOOL is- newer of late bios after a certain date have the ME built in so you not need 2 downloads or steps but might still need update your MEI- as in its both firmware and software.. You should run the detection Tool to check yourself and or system to be on safe side- or not is up to you.. I/ this post was to help people because many have problems getting it installed.. If you wish to stay at risk fine and being silent is great too.. Do try to get other people to stay at risk like maybe they hope to see them hack down the road.. Sounds like something pirate hack cheat marxist socialist communist fans might say- no thanks..

[Armageddon Agent]

I was just reading another post.. A guy did the MEI and Tool and then the new just out 3703 Bios and shows as vulnerable again.. I would run the Intel-SA-00086 Detection Tool and check to be safe.. The bios might not have anything to do with the other and yah have to apply the fix again.. If you have the MEI chipset 11.7.0.1040 you should not have to install that again but yes you might have to install the ME Tool.. I would run the detection tool before and after so you know for sure..

Intel® Management Engine Critical Firmware Update (Intel-SA-00086)
Resources for Microsoft and Linux* users
Intel-SA-00086 Detection Tool

http://www.intel.com/…/sup…/articles/000025619/software.html