Sophos is reporting that if their business products are installed on Windows 7, installing the May 2019 Patch Tuesday updates may cause Windows to hang on the update screen showing "Configuring 30%".
In a new support bulletin from Sophos, the antivirus company states that Windows 7 and Windows 8.1 users of their Sophos Endpoint Security and Control and Sophos Central Endpoint Standard/Advanced will find their computer hanging at the configuring updates screen while installing the updates.
We have had an increase in customers reporting that following on from the Microsoft Windows 14th May patches they are experiencing a hang on boot where the machines appear to get stuck on "Configuring 30%"
Initial findings suggest that this relates to the below Microsoft Patches:
May 14, 2019—KB4499164 (Monthly Rollup)
May 14, 2019—KB4499165 (Security-only update)
The KB4499164 update is a Windows 7 update titled "2019-05 Security Monthly Quality Rollup for Windows 7" and the KB4499165 is a "2019-05 Security Only Quality Update for Windows 8.1" and Windows Server 2012 R2.
While the Sophos bulletin states that they have "only identified the issue on Windows 7 and Windows Server 2008 R2", the KB4499165 security update applies to Windows 8.1 and Windows Server 2012 R2. Therefore, it is possible this bug is affecting those Windows versions as well.
For those affected by this issue, Sophos states that you can uninstall the update in Safe Mode in order to allow the computer to boot as normal.
They also state if you have problems removing the update in Safe Mode, you can disable the "Sophos Anti-Virus" Service and then attempt to remove the update after it has been installed.
Follows similar issues from the April 2019 updates
This bug follows a similar issue last month where Sophos users found Windows freezing and becoming slow after installing the April 2019 update.
In that particular case, it was determined that a Windows security update for the Windows Client Server Run-Time Subsystem (CSRSS) service was causing the issues with various antivirus programs and Windows.
Comments
JohnnyJammer - 4 years ago
Can confirm i am seeing the same thing but with Webroot. Also note out of 80 machines i have had the \winload.exe issue arise during the boot stage and have had to repair using repair disk.
WhatAShocker - 4 years ago
This is actually a Microsoft issue (Defender ATP) which explains why you would have seen the issue with Webroot as well. See: https://community.sophos.com/kb/134117