Microsoft Patch Release - 1/3/18

Just wanted to say that on a couple of Windows 10 laptops (2017 [Intel chip], 2015 [amd] & 2009 [Intel]), I added the registry key manually while Webroot is on 9.0.18.44 production version and Windows Update was able to show me and install Microsoft's January 3 patch.

On another older Windows 7 desktop (2006 [Intel chip]), I was going to try to see if Webroot's zip file to set the registry works but the registry value was already on that machine because Webroot's beta version was updated and set it automatically. I then proceeded to do a Windows Update and was able to download and install Microsoft's January 3 patch.

So until Webroot rolls out the update into production, hopefully next week before MS Patch Tues, they provided timely information on setting the Registry Key required by Microsoft:
1. Manual entry
2. Automated via downloading and running a program/script

Hi @, 
To your question below:
"Please note that even Microsoft is expecting the anti-virus vendor to (1) confirm compatibility and (2) set the correct registry key.  Webroot...are you going to do this or not?"
 
Responses:
(1) Our current production version(9.0.18.xx) and our upcoming version(9.0.19.xx)  are tested and verified and are confirmed to be compatible with the patch. 
(2) Yes, our upcoming version(9.0.19.xx), has the code to set the registry automatically. We have already released this to our By Invite users. We will be releasing this new version to the rest of our user base over the next 2 weeks. 
 
We have built a quick tool for users who would like to get the patch immediately, please access the instructions at the link below if you prefer to do so.
https://answers.webroot.com/Webroot/ukp.aspx?pid=12&app=vw&vw=1&login=1&json=1&solutionid=2837
 
Otherwise, the new version(9.0.19.xx) of WSA will take care of everything for you as soon as you get the update. 
 
Thanks @, @ for sharing your comments and confirming that our new version is taking care of the MS Patch update as well.
 
Thanks
Pawani
 
 
 

Any idea when we will see 9.0.19 hit? It has gone from "next week" to "the next 2 weeks", and while I was OK with "next week" we're almost out of that window and it's time to go to Plan B.

Hi Limey, and welcome to the Community. 
 The new version 9.0.19.36 is now available. Just hover your mouse over the icon in the task bar to check on the version. If it hasn't updated you can get it here.
 
http://anywhere.webrootcloudav.com/zerol/wsainstall.exe
 

Thanks for the welcome!
 
I just heard from support that it won't be released to business users until the 31st of January, so I'm SOL.

All - I deleted my other post regarding Connectwise Automate (Formerly Labtech) users to add this one that has updated information.
 
You can use this GitHub to help you gather information on your environment as well as set the appropriate registry settings required for A/V and the ones needed to fully mitigate on the server side.  I am using it in my environment, and it has been extremely helpful.  I know that the author is working on some reporting peices as well:
 
https://github.com/gavsto/ConnectWise-Automate-Meltdown-and-Spectre-Detection-Scripts
 
Webroot has an article & self executing file to set the registry setting for A/V here:
 
https://answers.webroot.com/Webroot/ukp.aspx?pid=12&app=vw&vw=1&login=1&json=1&solutionid=2837
 
 
If you're using GSM, you should be able to add the registry key using Agent Commands -> Advanced -> Run a registry command.
 
As an aside - dell laptops (E7470) with Intel i7, fully patched (BIOS, Chipset & MIcrosoft updates) with Webroot 9.0.18.44 are running smooth.
 
 

Version 9.0.19.36 is gradually rolling out currently or you can force install using the installer as indicated from a link from a few previous posts.
 
https://community.webroot.com/t5/Product-Releases/PC-Agent-release-notes-for-version-9-0-19-36/td-p/310860
 
http://answers.webroot.com/Webroot/ukp.aspx?pid=10&app=vw&vw=1&login=1&json=1&solutionid=1098
 
 

Oh if business licenses are getting it later, then maybe coordinate with your IT support since they would probably be interested in managing / keeping track of everything regarding dealing with the chip vulnerability issues: adding the registry key themselves (Webroot provides a zip file) vs letting the AV do it automatically, and also managing roll out of MS Windows Updates, operating systems the company has for their computers and mobile devices (Apple, Android, Linux etc), computer manufacturer firmware updates, web browser updates, etc.
 
I've already updated Mozilla Firefox browser to v57.0.4 and I think Google Chrome will be rolling out later in the month.  I'm still waiting word on HP for my recent laptop purchase last month regarding firmware update and with my older machines I do not expect any firmware upgrades.  My Android on my Pixel phone was already updated.  So alot of things to keep track of...
 
On several of my machines I've added the registry key manually and was able to get the Windows Updates since Webroot mentioned last week that the current production version (9.0.18.xx) was compatible with MS 1/3/2018 patches.

For Chrome you can enable site isolation:  https://support.google.com/chrome/answer/7623121?hl=en
 
For managed environments you can use Google's ADMX files & Group Policy:
https://support.google.com/chrome/a/answer/7581529

Jan 17
 
After checking for update it's still on version 9.0.18.44 

@ wrote:
Jan 17
 
After checking for update it's still on version 9.0.18.44 

Just Download and install over top to get the latest version v9.0.19.36: http://anywhere.webrootcloudav.com/zerol/wsainstall.exe

Thanks, that worked.

@ wrote:
Thanks, that worked.

You're very Welcome! 😉

Today's date is 2/1/18.  I read in an earlier post that the much anticipated version 9.0.19 would push out to corporate customers on 1/31, but I still see no movement past 9.0.18 at any of my sites.  Anyone have an update on when the new version will be pushed?

@  
 
Are you a businesss customer?  If so, version 9.0.19.43 has started deploying to 200K endpoints as a test deployment.  If that goes well, then it will begin rolling out everywhere.
 
 

@
 
Meant to include these, but here are some threads you should read, and if all else fails, please open a support case.
 
PC Agent Release Notes
 
WSA 9.0.19.43 Business Deployment Has Started
 
Product Release Page