Category Archives: Microsoft

Windows 10 Insider Preview Builds 14352, 14361, 14366, and 14367

I was starting to wonder why my Windows 10 test computer wasn’t getting new preview builds. It was seemingly stuck on build 14342, as new build announcements paraded past in my RSS feed reader.

As much as possible, I’ve attempted to evaluate Windows 10 as a regular user, so I held off trying to fix this, assuming it would fix itself. A couple of days ago, I finally relented, and started to investigate.

Looking at All Settings > Update and Security > Windows Update, I was confronted with this message: “We couldn’t connect to the update service. We’ll try again later, or you can check now. If it still doesn’t work, make sure you’re connected to the Internet.” I clicked the Check for Updates button and initially it seemed to be working. It showed a new available build, and actually installed a minor update, but then when it started to download the new build, the message reappeared.

I found plenty of reports on the web of other people having similar difficulties, but mostly for earlier builds. None of the suggested solutions had any effect, including disabling the option Updates from more than one place, and running the Windows Update troubleshooter. The troubleshooter found nothing untoward.

I use a special DNS service for privacy reasons, so on a hunch, I switched to my ISP’s DNS and again checked for updates. Preview Build 14366 started downloading, and eventually installed.

Is Microsoft somehow preventing Windows 10 preview builds from being downloaded when certain DNS services are being used? I find that difficult to believe, but it’s certainly possible.

What’s new in builds 14352, 14361, and 14366?

Build 14352

Release announcement (May 26, 2016).

  • Cortana improvements
  • Windows Ink improvements
  • Feedback Hub now shows Microsoft’s responses
  • A load of bug fixes

Build 14361

Release announcement (June 8, 2016).

  • LastPass extension for Microsoft Edge
  • Windows Ink improvements
  • Settings – visual improvements
  • Start screen – visual improvements
  • the usual pile of bug fixes, many related to Edge

Build 14366

Release announcement (June 14, 2016).

  • Windows Store app – resource usage improvements
  • a bunch more bug fixes, including several for user interface glitches

Build 14367

Release announcement (June 16, 2016).

  • New tool to clean-install the latest Windows 10 release
  • the usual pile of bug fixes

Getting rid of the Windows 8.1 Charms bar

I’ve been running Windows 8.1 on my main computer for a while now, and while I was initially dreading the goofy new touch-centric user interface, most of the time it stays out of the way.

There is one exception: the ‘Charms Bar’. There’s nothing ‘charming’ about this thing; it pops up at the most inconvenient times, usually when I’m gaming.

The Charms Bar is a toolbar and clock overlay that – by default – appears when the mouse moves to the top right or bottom right of the display. The toolbar contains links to the Devices and Settings apps, and the Start screen. I already have plenty of ways to get to those things, so the bar is pure annoyance.

Sure, if I was using a tablet, the Charms Bar would probably be useful. But I’m not. Thankfully, Microsoft provided some settings for getting rid of it. Unfortunately, the settings involved are in more than one place, and there is no setting to disable the lower right corner trigger.

To stop the Charms Bar from appearing when you move the mouse to the top right, navigate to Control Panel > Taskbar and Navigation > Navigation > Corner Navigation and disable the option When I point to the upper-right corner, show the charms.

If your computer supports mouse or touch swiping motions, you will probably need to disable those as well. To do that, navigate to Control Panel > Mouse, look for swipe-related options, and disable them.

That’s as far as you can go with built-in Windows settings. You’ll still see the Charms Bar when you move your mouse to the lower right. The best solution I’ve found so far is the freeware Charms Bar Killer from Winaero. Even this tool can’t fix the problem permanently, because the changes it makes are reversed whenever Windows (or Explorer) restarts. You can configure it to start with Windows, or just run it whenever you want to disable the Charms Bar until the next reboot.

Microsoft: frustrating people needlessly since 1975.

Patch Tuesday for June 2016

It’s that time again, folks. This month Microsoft has sixteen updates, which address forty-four vulnerabilities in the usual culprits: Windows, Internet Explorer, Office, and Edge. Five of the updates are flagged as Critical.

Adobe issued an alert earlier today, saying that they have identified a vulnerability in Flash that is being actively exploited. There’s no update as yet, but they expect to have one ready by June 16. I imagine that Adobe was planning to release a Flash update today to coincide with Microsoft’s updates, but this new threat messed up their timing.

Relief for Windows 7 update headaches

As if in response to my recent post about the joys of updating new Windows 7 installs, Microsoft has just announced a solution. It’s effectively Service Pack 2 for Windows 7, but Microsoft is calling it the Windows 7 SP1 convenience rollup.

The new package will install all post-SP1 updates up to April 2016. After you install Windows 7 with Service Pack 1, you need only install the April 2015 servicing stack update for Windows 7 (KB3020369), a prerequisite for the rollup, then install the rollup, then install any updates published after April 2016.

I haven’t yet tried the new rollup, but it’s difficult to imagine how it could fail to be an improvement.

Microsoft also plans to provide monthly non-security update rollups for Windows 7 and 8.1.

Windows 10 Insider Preview build 14342

I’ve been running build 14342 for a few days now on my test PC. I haven’t experienced any new problems, and it seems to have resolved at least one annoying networking problem left over from the previous build.

What’s New in Build 14342

User Account Control prompts now look different, but their functionality hasn’t changed. There are enhancements for Microsoft Edge, and improvements for the new BASH shell integration. A new setting, Settings > System > Apps for websites doesn’t work yet, but will in the future allow you to designate an app to open specific web sites. The Feedback Hub was also improved in this build.

Build 14342 contains fixes for numerous issues in previous builds, including problems with media playback, Cortana, displays, login, the user interface, apps, location, and anti-virus software compatibility.

Interestingly, the Wi-Fi Sense feature has been disabled. There’s been a lot of debate about the security of this feature since Windows 10 was released. Microsoft says the feature was disabled because nobody was using it. The Verge has more about this, as does Brian Krebs.

Patch Tuesday for May 2016

This month, besides the usual pile ‘o patches from Microsoft, we have updates for Adobe Reader/Acrobat, but (big surprise) not for Flash.

There are sixteen Microsoft updates, addressing thirty-seven vulnerabilities in Windows, Internet Explorer, Office, Edge, and .NET. There’s also Microsoft Security Advisory 3155527. At least one of the vulnerabilities (CVE-2016-0189) is being actively exploited. This flaw could allow an attacker to execute malicious code if an unpatched computer visits a malicious or compromised web site.

The Adobe Reader update addresses over ninety vulnerabilities, which must set some kind of record. And not the good kind. If you use Reader in any context, you should update it to address these critical security issues.

April security roundup

People who store Slack credentials in Github code repositories learned that this a bad idea, as researchers demonstrated the ease with which this information can be gathered without any explicit permissions.

Scary news: computers at a German nuclear reactor facility were found to be loaded with malware. The only thing that prevented miscreants from playing with real nuclear reactors was the fact that these computers are not connected to the Internet.

Crappy security practices led to the theft of user account information (email addresses and poorly-encrypted passwords) from Minecraft community site Lifeboat.

The notorious hacking group known as Hacking Team made the news again, this time with reports of active drive-by exploits affecting Android devices.

The Nuclear exploit kit is still operating, despite recent, partially-successful, efforts to shut it down. Researchers showed that the kit is still being used, and may be involved in recent ransomware infections.

Good news: the two men responsible for the notorious SpyEye banking trojan, recently extradited to the US to face federal prosecution, will be spending nine and fifteen years in prison.

Zero-day exploits are on the rise, doubling from 24 in 2014 to 54 in 2015. A zero-day exploit is a hack that takes advantage of software vulnerabilities before the software’s maintainers have had a chance to develop a fix.

Cisco security researchers identified vulnerabilities in several enterprise software systems, including Red Hat’s JBoss. As many as three million web-facing servers running this software are at risk of being infected with ransomware, and in fact as many as 2100 infected servers were identified.

More good news: the Petya ransomware was found to contain a flaw that allows its victims to decrypt their data without paying any ransom.

The Mumblehard botnet was taken down by ESet researchers, after it infected at least 4000 computers and sent out countless spam emails.

Microsoft announced plans to prevent Flash content from playing automatically in the Windows 10 web browser Edge. All the major browsers appear to be heading in this direction, if they don’t already have the feature, as does Chrome.

April’s issue of the SANS ‘Ouch!’ newsletter is titled “I’m Hacked, Now What?” (PDF) and provides helpful information for the recently-hacked. The newsletter is aimed at regular users, so it may not be particularly useful for IT professionals, except as a means to educate users.

The wildly popular WhatsApp – a messaging application for mobile devices – now has end-to-end encryption. This will make life more difficult for spy agencies who want to know what users are saying to each other. But WhatsApp users should be aware that this does not make their communications invulnerable, since techniques exist to get around full encryption, such as keystroke loggers.

Bad idea: someone at CNBC thought it would be a good idea to ask users to submit their passwords to a web-based system that would test the passwords and report on their relative strength. The service itself was vulnerable, and exposed submitted passwords to network sniffing. The service was taken offline soon after the vulnerability was identified.

The web site for toy maker Maisto International was hacked and serving up ransomware for an unknown amount of time, probably several days or even weeks. The hack was made possible because the site was using outdated Joomla software.

Wrangling updates on a new Windows 7 install

I recently installed Windows 7 on a computer that was previously running Windows XP, and encountered a few issues. The biggest problem was Windows Update, which has trouble with new Windows 7 installs because of the huge number of post-Service Pack 1 updates. If you’re looking for a solution to that problem, you may want to skip to the Windows Update discussion, or jump directly to the fix that worked for me.

Install Now!

Booting from a Windows 7 install disc, the first thing I saw was a lone button in the center of the screen: Install Now. I found this disconcerting, because I was expecting to be able to choose a drive and partition on which to install Windows 7.

Not wanting the installer to choose the wrong partition, I powered down and disconnected all non-essential hard drives. Rebooting from the Windows 7 disc again, I clicked the Install Now button and was eventually allowed to choose the install destination. With a mixture of annoyance and relief, I carried on…

You should upgrade! (not)

I was planning a clean install, since as far as I was aware, it isn’t possible to upgrade from XP to 7.

Proceeding with the install, I assumed there would be no upgrade option. But the installer found the old Windows XP installation (which made sense), and suggested that I should perform an upgrade instead (which was unexpected).

So I followed the instructions: I rebooted the computer, this time from the old boot hard drive, which started Windows XP. Then I inserted the Windows 7 disc, and was told that upgrading from Windows XP to 7 was not possible. Thanks a lot for wasting my time, Microsoft.

Disconnect external drives

Proceeding with a clean install, past the message encouraging me to perform an upgrade install, past a warning about the old Windows directory being renamed windows.old, I was next informed that the installer was “unable to create a new system partition or locate an existing system partition.” There was no way to get past this message.

Turning to Google, I discovered that this message can occur when an external drive is connected to the computer. Remember when I said I disconnected all the other drives? Well, I forgot the external. I unplugged it, rebooted from the Windows 7 disc, and this time, the error did not appear.

Checking for updates…

Once the installer started actually installing, it didn’t take long to finish. At this point I allowed myself to see the light at the end of the tunnel. But that light was a train, and that train was called Windows Update.

In the good old days, Microsoft produced service packs for Windows. These were essentially giant collections of all previous updates, and were a big time saver for IT folks. Install Windows, download and run the most recent service pack, then install a few newer updates, and you’re done. Microsoft even provided Windows media with current service packs pre-installed, to save even more time.

Windows 7 Service Pack 1 was the last service pack ever, as Microsoft declined to produce SP2. It’s been a while since SP1, and Windows 7 is still supported, so the pile of post-SP1 patches is getting big. Well over 200, anyway. And this is a problem.

Aside: some people claim that the best way to install updates on a new Windows 7 install is to leave Automatic Updates enabled and walk away from the computer. This isn’t a viable option if you’re billing by the hour or have other clients waiting. Also, the idea of leaving everything in the hands of Microsoft makes me uneasy.

On my first attempt to run Windows Update, it displayed this error code: 8007000E. Microsoft provides a ‘help with this error’ link, which I clicked. This popped up a help dialog with a list of Windows Update error codes, but 8007000E was not listed. Not very helpful.

I tried running the Windows Update Troubleshooter, which claimed to find problems and fix them. After rebooting, I tried again to run Windows Update.

At this point, Windows Update said it was checking for updates, and it stayed like that for about an hour before I finally gave up and rebooted. Which brings up an interesting question: how long are we supposed to wait for Windows Update to check for updates? There’s no way for a user to determine whether Windows Update is actually doing something, or just frozen/hung. The progress indicator keeps whizzing by regardless. Yes, there are a lot of updates. But there’s no way it should take hours just to determine which updates are available.

After rebooting, I activated Windows 7, on the off chance that this would help. Running Windows Update again, I was presented with another, different error code: 80244019. And once again, the code wasn’t listed in the ‘help with this error code’ dialog.

Turning again to Google, I found a Microsoft knowledge base article about error code 80244019. This suggested that the computer had a virus. Really? A clean install onto a computer that’s behind a router isn’t going to magically become infected with a virus. However, I installed anti-malware software and ran a scan, which of course found nothing of interest.

Eventually, I decided to look for help elsewhere on the web. In other words, anywhere but Microsoft. And found it, on superuser, an extremely useful site where you can ask questions and get answers from other users. Full disclaimer: I’m an active contributor to the site.

Superuser to the rescue

The superuser question that provided the solution is titled “Windows 7 SP1 Windows Update stuck checking for updates“, and there are several answers.

The answer with the highest number of votes recommends installing Microsoft update KB3102810. I installed that update, rebooted, and tried Windows Update again. Almost immediately, it found 161 updates. Success? Only partly. After about an hour of thrashing, Windows Update reported that 93 updates had installed successfully, while 68 update failed to install. It also mentioned two more error codes, 8024200D and 8007000E. Yeesh.

After rebooting, I tried to install the magical KB3102810 update again, but was informed that it was already installed.

Referring again to that helpful superuser question, I decided to try the recommendations in the second highest ranking answer, which I have modified slightly:

  1. Make sure automatic updates are completely disabled: Control Panel > Windows Update > Change settings > Important updates > Never check for updates.
  2. Download the KB3138612 update, saving it somewhere you’ll remember.
  3. Download the Windows 7 System Update Readiness Tool (SUR), saving it somewhere you’ll remember.
  4. Restart the computer.
  5. Install the `KB3138612` update, running it from where you downloaded it earlier.
  6. If you’re prompted to restart, do so.
  7. Install the SUR Tool, running it from where you downloaded it earlier. This is a large set of updates and can take a while to install.
  8. If you’re prompted to restart, do so.
  9. Run Windows Update and check for updates. It may take a few minutes to finish checking.
  10. Install any remaining updates.

Following this procedure resolved all remaining problems. At the final Windows Update check, there were sixty-two important updates and sixty-three optional updates. All 62 of the important updates installed successfully.

Conclusions

Microsoft’s help for Windows Update problems like these is useless:

  • error codes are not listed in the popup help for those codes;
  • the many Knowledge Base articles on this subject are not helpful; and
  • various troubleshooters and FixIts are rarely effective (note that the third answer on that superuser question suggested running one of these, and although it was the accepted answer, it got far fewer votes).