There has been some turmoil in the last few days around the new Windows 10 Feature Update Fall Creators Update , the January 2018 Patchday with the update KB4056892 and the manufacturers of antivirus software products . This is how TrendMicro with its OfficeScan antivirus software was affected.
Microsoft published a few days ago that future Windows 10 updates will only be installed on the clients if the installed third-party antivirus software is also prepared for the new cumulative Windows 10 update and a corresponding registry key is set . TrendMicro only reacted to this on January 4, 2018 and published the OfficeScan hotfix 6496 , which distributes the following registry key to the clients when upgrading the OfficeScan client to version 6496.
HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion QualityCompat
Value : “cadca5fe-87d3-4b96-b7fb-a231484277cc” as REG_DWORD
Data: “0x00000000”
Microsoft has published all necessary information in the article ” Important: Windows security updates released January 3, 2018, and antivirus software “.
We tried this hotfix and the previous OfficeScan patch 6469 in a test environment and would like to share with you our experience with the installation. Unfortunately, the installation and distribution of these two patches 6469 and 6496 do not seem to work as we know it from TrendMicro and OfficeScan.
Already the installation of the OfficeScan hotfix 6469 with the name
osce-11-sp1-patch1-win-en-criticalpatch-6469.exe
Supports Windows 10 Fall Creators Update
runs differently than before, because TrendMicro shows the following message when installing the hotfix.
Very surprising, because what reason can there be that the OfficeScan virus scan engine has to be updated on all clients immediately? This is quite a danger, because in networks with several hundred or thousands of clients, an automatic update can have very unpleasant consequences if the new virus scan engine is causing problems and numerous Windows clients may stop working there.
And after the test installation of the OfficeScan 6469 and 6496 , it really is the case that the OfficeScan server immediately starts updating the virus engines to version 10,000.1043 . However, it has to be said that this update is very slow. Approx. 16 hours after installing the OfficeScan upgrades, approximately 50% of the clients are updated.
However, another problem has emerged. After the OfficeScan server displayed version 6469 in the server console , we assumed that the clients would also receive this version.
This, however, was not the case. All clients that we wanted to raise to build number 6469 by manual OfficeScan update were still on the old build 6355. Even a manual update via the OfficeScan client function ” Update now ” did not improve, it remains with the old client. We then carried out a client installation on a newly installed Windows 10 version 1703 client via the OfficeScan web interface and this also received the old version 6355. However, all of them already had the new Virus Scan Engine 10,000.1043 .
Only the next morning, a good 12 hours later, all clients for whom a manual upgrade had been carried out as on the previous day were also on version 11.0.6496 Service Pack 1 , as you can see here below.
So far we have not been able to find out why the clients received the update so late. Unfortunately there is nothing in the ReadMe files of the two OfficeScan hotfixes that would explain this update phenomenon. Otherwise, the new OfficeScan client 11.0.6496 Service Pack 1 seems to be working perfectly, even under the Windows 10 Fall Creators Update.
If you are interested in further Trend Micro OfficeScan information , we recommend the following articles.
– OfficeScan 11.0.6392 released
– TrendMicro Patch 6355 and 6367 for OfficeScan 11 with Windows 10 Creators Update Support
– TrendMicro Critical Patch 6325 for OfficeScan 11 SP1 (11.0.6325)
– OfficeScan 11 SP1 German version with patch to version 6245
– OfficeScan Patch 6134 Released
– OfficeScan Patch 6242 Build 11.0.6242 SP1 with Anniversary Support
– OfficeScan Client 11.0.6178 Service Pack 1 – Anniversary Patch
– Error 0x7FFA528670E3 ANOMALY use of REX.w is meaningless – TrendMicro OfficeScan
– OfficeScan Patch 6125 has problems with Windows 10 Clean Installation
– KB3189866 fixes OfficeScan problem with Windows 10
– OfficeScan Critical Patch Installation 5010, 6054 and 6125
– TrendMicro OfficeScan Update 6125 for Windows 10 Anniversary