Microsoft Did It Again! Beware Of Bugged Update KB5034441

ThrashZone · Jan 13, 2024

sam_86314 said:
For anyone having this issue, here's a tool that can be used to hide the update.

https://download.microsoft.com/download/f/2/2/f22d5fdb-59cd-4275-8c95-1be17bf70b21/wushowhide.diagcab

I've also attached it in a zip file.

Yes, I'm having this issue on all of my Windows 10 computers.

No, I'm not resizing the partition just for this update to work.

Hi,
Well ms did finally release a poweshell fix
Probably should release it as a update first before the other installs
Or add it to the update but ms is far less than perfect for sure lol

Devastator0 said:
Looks as though Microsoft has now released a powershell script for doing this

Microsoft shares script to update Windows 10 WinRE with BitLocker fixes

Microsoft has released a PowerShell script to automate updating the Windows Recovery Environment (WinRE) partition in order to fix CVE-2024-20666, a vulnerability that allowed for BitLocker encryption bypass.

www.bleepingcomputer.com

I still won't run it until they fix the update itself.

Regeneration · Jan 13, 2024

FoulOnWhite said:
I just got this update, never even noticed, says installed successfully, which is strange when my recovery partition is only 530mb.
View attachment 329448

Wrong KB# you have there.

ThrashZone said:
Hi,
Well ms did finally release a poweshell fix
Probably should release it as a update first before the other installs
Or add it to the update but ms is far less than perfect for sure lol

If a PS script can patch the security hole WITHOUT resizing the partition then why the hell the update can't?

ThrashZone · Jan 13, 2024

Regeneration said:
Wrong KB# you have there.

If a PS script can patch the security hole WITHOUT resizing the partition then why the hell the update can't?

The PS script actually enlarges the partition
Now if ms added it to the update it would be a perfect world hehe

chrcoluk · Jan 13, 2024

Bill_Bright said:
What is a "vanilla" install?

It is probably safe to say if the computer is a factory assembled computer (HP, Dell, Acer, etc.) it is not vanilla.

If the computer (or rather boot disk) is brand new and the user does a fresh install of the OS, then it likely would be the first partition.

But, if the disk previously had Windows 7, for example on it, there may be an older, recovery partition already there that is too small - so the new install will create partition. It would be nice if it just enlarged the first, but not that would be wise for MS to assume that is safe - I don't know what happens to recover partitions when multiple OSs are installed on the same disk, for example.

There might be multiple recovery partitions created if W10 was updated by a major W10 update and the original recovery partition was too small.

To me vanilla is when you select empty disk and let Microsoft auto create the partitions.

Here is my observation of vanilla.

Pre build 2004, RE before C: and sized 499MB.
21H2, RE after C: and sized 528MB. Confirmed by Assimilator.
Upgrade installs, feature upgrades etc. inherit previous partitions.

Assimilator · Jan 13, 2024

chrcoluk said:
To me vanilla is when you select empty disk and let Microsoft auto create the partitions.

Here is my observation of vanilla.

Pre build 2004, RE before C: and sized 499MB.
21H2, RE after C: and sized 528MB. (note this is from a custom ISO where I integrated some drivers on to RE, which might be why its 29MB bigger, and not a change on Microsoft's default sizing scheme).
Upgrade installs, feature upgrades etc. inherit previous partitions.

Mine is also 528MB (well, 529MB), nothing custom.

pressing on · Jan 13, 2024

This update was failing for me because the Recovery Environment was missing. This may have been because the original installation had been cloned to a larger drive and during this the Recovery partition had been copied but not its full contents.

So the usual solution - create Windows 10 install on a USB key, copy install.esd to NVME drive, extract the install.wim file for my version from the esd, and use 7Zip to copy ReAgent.xml and WinRE.wim to C:\Windows\System32\Recovery.

Then to enable the WinRE use Reagentc /enable from a command window. At this point the underlying cause of the loss of the RE is evident. ReAgentc moves WinRE.wim to the Recovery partition, it doesn't just copy it. So if anything happens to the Recovery Partition, it's back to square one. Solution, create a folder such as WinREBackup on the install USB key and copy ReAgent.xml and WinRE.wim to it before using Reagentc. Future recovery of WinRE is then just a simple copy job.

ThrashZone · Jan 13, 2024

pressing on said:
This update was failing for me because the Recovery Environment was missing. This may have been because the original installation had been cloned to a larger drive and during this the Recovery partition had been copied but not its full contents.

So the usual solution - create Windows 10 install on a USB key, copy install.esd to NVME drive, extract the install.wim file for my version from the esd, and use 7Zip to copy ReAgent.xml and WinRE.wim to C:\Windows\System32\Recovery.

Then to enable the WinRE use Reagentc /enable from a command window. At this point the underlying cause of the loss of the RE is evident. ReAgentc moves WinRE.wim to the Recovery partition, it doesn't just copy it. So if anything happens to the Recovery Partition, it's back to square one. Solution, create a folder such as WinREBackup on the install USB key and copy ReAgent.xml and WinRE.wim to it before using Reagentc. Future recovery of WinRE is then just a simple copy job.

Hi,
Yeah I referenced that process a little while back from someone on 11f posted

ThrashZone said:
Hi,
Ran into this yesterday about deleting the partition which I also used to do until I enlarged the original.

Microsoft issues KB5034440, KB5034441 Windows updates for BitLocker Secure Boot flaw

https://www.neowin.net/news/microsoft-issues-kb5034440-kb5034441-windows-updates-for-bitlocker-secure-boot-flaw/

www.elevenforum.com

View attachment 329413

Regeneration · Jan 13, 2024

ThrashZone said:
The PS script actually enlarges the partition
Now if ms added it to the update it would be a perfect world hehe

There is no partition adjustment in this script. In BleepingComputer's article, they confirm it too.

ThrashZone · Jan 13, 2024

Regeneration said:
There is no partition adjustment in this script. In BleepingComputer's article, they confirm it too.

Hi,
Odd but even odder is my recovery partition on two systems got smaller after the update installed
So making the partition larger don't ask me bro the whole ordeal is a MS brain fart :laugh:

They do reference a third party that does offer a script to resize it but yeah unknown to myself hehe

P4-630 · Jan 13, 2024

Regeneration said:
Wrong KB# you have there.

Which was it then for windows 11?

Security Update Guide - Microsoft Security Response Center

msrc.microsoft.com

All updates from last Tuesday got installed successfully on my windows 11 system.

ThrashZone · Jan 13, 2024

P4-630 said:
Which was it then for windows 11?

Security Update Guide - Microsoft Security Response Center

msrc.microsoft.com

All updates from last Tuesday got installed successfully on my windows 11 system.

He's referring to win-10 update not 11
KB.s are in the title though.

Thing is 11's update may fail as well.

Regeneration · Jan 13, 2024

P4-630 said:
Which was it then for windows 11?

Security Update Guide - Microsoft Security Response Center

msrc.microsoft.com

All updates from last Tuesday got installed successfully on my windows 11 system.

Windows 11 - KB5034440, KB5033560.

Windows 10 - KB5034441

Sometimes the error message will not appear in Windows Update just like that.

You'll have to check the full updates history to see it.

P4-630 · Jan 13, 2024

Regeneration said:
Windows 11 - KB5034440, KB5033560.

Well I'm fully updated (windows 11 Pro) and not seeing these you mentioned in my update history....

Security Update Guide - Microsoft Security Response Center

msrc.microsoft.com

ThrashZone · Jan 13, 2024

Hi,
Release dates are ironic.

Microsoft issues KB5034440, KB5034441 Windows updates for BitLocker Secure Boot flaw

Microsoft has addressed a security vulnerability that can lead to BitLocker Secure Boot bypass on both Windows 10 and 11. Alongside that, the company has also detailed how to resize the WinRE space.

www.neowin.net

Onasi · Jan 13, 2024

P4-630 said:
Well I'm fully updated (windows 11 Pro) and not seeing these you mentioned in my update history....

View attachment 329535
View attachment 329536

Security Update Guide - Microsoft Security Response Center

msrc.microsoft.com

View attachment 329537

Same. On 23H2 only three updates were downloaded and installed - the cumulative one, MSRT and .NET update. That’s it. As MS said in its security bulletin, for 11 22H2 and 23H2 the fix for the BitLocker bug is in the CU and seems to require no WinRE messing around.

Chomiq · Jan 13, 2024

FoulOnWhite said:
I just got this update, never even noticed, says installed successfully, which is strange when my recovery partition is only 530mb.
View attachment 329448

Mine is 529 mb and it failed.

ThrashZone · Jan 13, 2024

Regeneration said:
Windows 11 - KB5034440, KB5033560.

Windows 10 - KB5034441

Sometimes the error message will not appear in Windows Update just like that.

You'll have to check the full updates history to see it.

Hi,
Yeah I don't have either one on 11.
I mounted 11 pro 23h2 12-18-2023 and haven't updated since until yesterday
So the two you posted were pulled as far as I can tell.
Not in history or uninstall list either.

Ivan Bliminse · Jan 13, 2024

Can't download and install KB5034441, and of course MS wants me to increase the recovery partition in question which is already at 529mb ?!
Can i change the size using Disk Genius safely and is there a place to find written instructions ?

Or should i just hold tight and wait for this update to be sorted my MS..?

ThrashZone · Jan 13, 2024

Ivan Bliminse said:
Can't download and install KB5034441, and of course MS wants me to increase the recovery partition in question which is already at 529mb ?!
Can i change the size using Disk Genius safely and is there a place to find written instructions ?

Or should i just hold tight and wait for this update to be sorted my MS..?
View attachment 329579

Hi,
Yeah either DG or free minitool will work
As long as you know either will move the os to accommodate the new size
I wouldn't bother if not more than 1gb
Otherwise you can make a new at the end of C with these instructions

CMD format ssd for install

Here's the lappy

www.elevenforum.com

Only item missing is the remove partition letter
I used Z

Code:

remove letter=Z

By the way the other two will see the recovery as any other partition so just right click it and select move or resize.
Apply.
You will likely be restarted to apply the changes.

Ivan Bliminse · Jan 13, 2024

Followed instructions to the letter, Operation Successful.

It now states - Update will not download and install.. :banghead:

ThrashZone · Jan 13, 2024

Ivan Bliminse said:
Followed instructions to the letter, Operation Successful.

It now states - Update will not download and install..

Which one post another screen shot.
You might just have to clear updates history.

Clear Windows Update History in Windows 11 Tutorial

This tutorial will show you how to clear the Windows Update history on your Windows 11 PC. Windows Update keeps Windows 11 updated by automatically downloading and installing the latest updates, drivers, and hotfixes released by Microsoft. Reference...

www.elevenforum.com

Also include the cdm as admin read out with
reagentc /info

The way that actually worked for me
I already had space in front of C
Just created a primary partition with Z letter in free minitool
Then in cmd as admin
Used

Code:

diskpart
list disk
select disk 0?
list par
select par 0 "should show Z"

CMD output to above commands

Code:

C:\Users\masqww-lp\Desktop>diskpart

Microsoft DiskPart version 10.0.22621.1

Copyright (C) Microsoft Corporation.
On computer: MASQWW-LP

DISKPART> list disk

  Disk ###  Status         Size     Free     Dyn  Gpt
  --------  -------------  -------  -------  ---  ---
  Disk 0    Online          953 GB   551 GB        *
  Disk 1    Online         3726 GB    62 GB        *

DISKPART> select disk 0

Disk 0 is now the selected disk.

DISKPART> list par

  Partition ###  Type              Size     Offset
  -------------  ----------------  -------  -------
  Partition 1    Recovery          2912 MB  1024 KB
  Partition 2    System             260 MB  2913 MB
  Partition 3    Reserved            16 MB  3173 MB
  Partition 4    Primary            399 GB  3189 MB

DISKPART> select par 1

Partition 1 is now the selected partition.

DISKPART>

After the above and you selected the Z partition paste each line one at a time

Code:

clean
set id=de94bba4-06d1-4d40-a16a-bfd50179d6ac

GPT ATTRIBUTES=0x8000000000000001

format FS=NTFS quick label="Recovery Tools"

Then use
exit

Go back and select the recovery partition and use remove letter
remove letter=Z
exit again.

Make sure the letter is gone after restart if not use minitool to remove it
Right click it and select remove letter. apply.

Go back to cmd and use
reagentc /info

And then
reagentc /enable

Ivan Bliminse · Jan 13, 2024

Sorry, should have said - I have win 10, not 11. Will it work the same with win 10..?!

ThrashZone · Jan 13, 2024

Ivan Bliminse said:
Sorry, should have said - I have win 10, not 11. Will it work the same with win 10..?!

Yeah it doesn't matter which os
To be accurate I do need the screen shots of the existing and outputs to commands though.

I'll probably be on a different computer in a bit so here's everything on one bit

Code:

diskpart
list disk
select disk 0
list par
select par Z
clean
set id=de94bba4-06d1-4d40-a16a-bfd50179d6ac
GPT ATTRIBUTES=0x8000000000000001
format FS=NTFS quick label="Recovery Tools"
remove letter=Z
reagentc /info
reagentc /enable

If successful should have a readout like this

Regeneration · Jan 14, 2024

Ivan Bliminse said:
Can't download and install KB5034441, and of course MS wants me to increase the recovery partition in question which is already at 529mb ?!
Can i change the size using Disk Genius safely and is there a place to find written instructions ?

Or should i just hold tight and wait for this update to be sorted my MS..?
View attachment 329579

You shouldn't mess around with your partitions just to install some update.

But if you insist, get a 3rd party partitioning software (like Paragon) that is capable to resize C and move the new free space to the begin of the drive (this could a take a while). Microsoft commands will not help because your partition is a bit unusual.

Ivan Bliminse · Jan 14, 2024

Thanks but i've chosen to hide the update..

System Name	Ghetto Rigs z490\|x99\|Acer 17 Nitro 7840hs/ 5600c40-2x16/ 4060/ 1tb acer stock m.2/ 4tb sn850x
Processor	10900k w/Optimus Foundation \| 5930k w/Black Noctua D15
Motherboard	z490 Maximus XII Apex \| x99 Sabertooth
Cooling	oCool D5 res-combo/280 GTX/ Optimus Foundation/ gpu water block \| Blk D15
Memory	Trident-Z Royal 4000c16 2x16gb \| Trident-Z 3200c14 4x8gb
Video Card(s)	Titan Xp-water \| evga 980ti gaming-w/ air
Storage	970evo+500gb & sn850x 4tb \| 860 pro 256gb \| Acer m.2 1tb/ sn850x 4tb\| Many2.5" sata's ssd 3.5hdd's
Display(s)	1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Case	D450 \| Cherry Entertainment center on Test bench
Audio Device(s)	Built in Realtek x2 with 2-Insignia 2.0 sound bars & 1-LG sound bar
Power Supply	EVGA 1000P2 with APC AX1500 \| 850P2 with CyberPower-GX1325U
Mouse	Redragon 901 Perdition x3
Keyboard	G710+x3
Software	Win-7 pro x3 and win-10 & 11pro x3
Benchmark Scores	Are in the benchmark section

System Name	Ghetto Rigs z490\|x99\|Acer 17 Nitro 7840hs/ 5600c40-2x16/ 4060/ 1tb acer stock m.2/ 4tb sn850x
Processor	10900k w/Optimus Foundation \| 5930k w/Black Noctua D15
Motherboard	z490 Maximus XII Apex \| x99 Sabertooth
Cooling	oCool D5 res-combo/280 GTX/ Optimus Foundation/ gpu water block \| Blk D15
Memory	Trident-Z Royal 4000c16 2x16gb \| Trident-Z 3200c14 4x8gb
Video Card(s)	Titan Xp-water \| evga 980ti gaming-w/ air
Storage	970evo+500gb & sn850x 4tb \| 860 pro 256gb \| Acer m.2 1tb/ sn850x 4tb\| Many2.5" sata's ssd 3.5hdd's
Display(s)	1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Case	D450 \| Cherry Entertainment center on Test bench
Audio Device(s)	Built in Realtek x2 with 2-Insignia 2.0 sound bars & 1-LG sound bar
Power Supply	EVGA 1000P2 with APC AX1500 \| 850P2 with CyberPower-GX1325U
Mouse	Redragon 901 Perdition x3
Keyboard	G710+x3
Software	Win-7 pro x3 and win-10 & 11pro x3
Benchmark Scores	Are in the benchmark section

System Name	Main PC
Processor	13700k
Motherboard	Asrock Z690 Steel Legend D4 - Bios 13.02
Cooling	Noctua NH-D15S
Memory	32 Gig 3200CL14
Video Card(s)	4080 RTX SUPER FE 16G
Storage	1TB 980 PRO, 2TB SN850X, 2TB DC P4600, 1TB 860 EVO, 2x 3TB WD Red, 2x 4TB WD Red
Display(s)	LG 27GL850
Case	Fractal Define R4
Audio Device(s)	Soundblaster AE-9
Power Supply	Antec HCG 750 Gold
Software	Windows 10 21H2 LTSC

System Name	Firelance.
Processor	Threadripper 3960X
Motherboard	ROG Strix TRX40-E Gaming
Cooling	IceGem 360 + 6x Arctic Cooling P12
Memory	8x 16GB Patriot Viper DDR4-3200 CL16
Video Card(s)	MSI GeForce RTX 4060 Ti Ventus 2X OC
Storage	2TB WD SN850X (boot), 4TB Crucial P3 (data)
Display(s)	3x AOC Q32E2N (32" 2560x1440 75Hz)
Case	Enthoo Pro II Server Edition (Closed Panel) + 6 fans
Power Supply	Fractal Design Ion+ 2 Platinum 760W
Mouse	Logitech G602
Keyboard	Razer Pro Type Ultra
Software	Windows 10 Professional x64

System Name	Ghetto Rigs z490\|x99\|Acer 17 Nitro 7840hs/ 5600c40-2x16/ 4060/ 1tb acer stock m.2/ 4tb sn850x
Processor	10900k w/Optimus Foundation \| 5930k w/Black Noctua D15
Motherboard	z490 Maximus XII Apex \| x99 Sabertooth
Cooling	oCool D5 res-combo/280 GTX/ Optimus Foundation/ gpu water block \| Blk D15
Memory	Trident-Z Royal 4000c16 2x16gb \| Trident-Z 3200c14 4x8gb
Video Card(s)	Titan Xp-water \| evga 980ti gaming-w/ air
Storage	970evo+500gb & sn850x 4tb \| 860 pro 256gb \| Acer m.2 1tb/ sn850x 4tb\| Many2.5" sata's ssd 3.5hdd's
Display(s)	1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Case	D450 \| Cherry Entertainment center on Test bench
Audio Device(s)	Built in Realtek x2 with 2-Insignia 2.0 sound bars & 1-LG sound bar
Power Supply	EVGA 1000P2 with APC AX1500 \| 850P2 with CyberPower-GX1325U
Mouse	Redragon 901 Perdition x3
Keyboard	G710+x3
Software	Win-7 pro x3 and win-10 & 11pro x3
Benchmark Scores	Are in the benchmark section

System Name	AlderLake
Processor	Intel i7 12700K P-Cores @ 5Ghz
Motherboard	Gigabyte Z690 Aorus Master
Cooling	Noctua NH-U12A 2 fans + Thermal Grizzly Kryonaut Extreme + 5 case fans
Memory	32GB DDR5 Corsair Dominator Platinum RGB 6000MT/s CL36
Video Card(s)	MSI RTX 2070 Super Gaming X Trio
Storage	Samsung 980 Pro 1TB + 970 Evo 500GB + 850 Pro 512GB + 860 Evo 1TB x2
Display(s)	23.8" Dell S2417DG 165Hz G-Sync 1440p
Case	Be quiet! Silent Base 600 - Window
Audio Device(s)	Panasonic SA-PMX94 / Realtek onboard + B&O speaker system / Harman Kardon Go + Play / Logitech G533
Power Supply	Seasonic Focus Plus Gold 750W
Mouse	Logitech MX Anywhere 2 Laser wireless
Keyboard	RAPOO E9270P Black 5GHz wireless
Software	Windows 11
Benchmark Scores	Cinebench R23 (Single Core) 1936 @ stock Cinebench R23 (Multi Core) 23006 @ stock

System Name	The Workhorse
Processor	AMD Ryzen R9 5900X
Motherboard	Gigabyte Aorus B550 Pro
Cooling	CPU - Noctua NH-D15S Case - 3 Noctua NF-A14 PWM at the bottom, 2 Fractal Design 180mm at the front
Memory	GSkill Trident Z 3200CL14
Video Card(s)	NVidia GTX 1070 MSI QuickSilver
Storage	Adata SX8200Pro
Display(s)	LG 32GK850G
Case	Fractal Design Torrent (Solid)
Audio Device(s)	FiiO E-10K DAC/Amp, Samson Meteorite USB Microphone
Power Supply	Corsair RMx850 (2018)
Mouse	Razer Viper (Original) on a X-Raypad Equate Plus V2
Keyboard	Cooler Master QuickFire Rapid TKL keyboard (Cherry MX Black)
Software	Windows 11 Pro (24H2)

Processor	Ryzen 7 5800X3D
Motherboard	Gigabyte X570 Aorus Elite
Cooling	Thermalright Phantom Spirit 120 SE
Memory	2x16 GB Crucial Ballistix 3600 CL16 Rev E @ 3800 CL16
Video Card(s)	RTX3080 Ti FE
Storage	SX8200 Pro 1 TB, Plextor M6Pro 256 GB, WD Blue 2TB
Display(s)	LG 34GN850P-B
Case	SilverStone Primera PM01 RGB
Audio Device(s)	SoundBlaster G6 \| Fidelio X2 \| Sennheiser 6XX
Power Supply	SeaSonic Focus Plus Gold 750W
Mouse	Endgame Gear XM1R
Keyboard	Wooting Two HE

System Name	Scan 3XS System
Processor	Intel Core i7 11700K
Motherboard	ASUS TUF GAMING Z590-PLUS WIFI
Cooling	Corsair Hydro H150i ELITE CAPELLIX RGB
Memory	64GB Kingston FURY Beast (2x32GB) DDR4 3200Mhz
Video Card(s)	10GB EVGA GeForce RTX 3080 XC3 ULTRA GAMING
Storage	1TB Samsung SSD 970 EVO Plus, 2TB Seagate HDD, 240GB Kingston SSD
Display(s)	Samsung C32JG5x Curved, 1080p, 1920 x 1080
Case	Corsair iCUE 4000X RGB
Audio Device(s)	Edifier G1500 RGB & Bluetooth Gaming 2.0 Speakers
Power Supply	Corsair RM750x 80PLUS GOLD
Mouse	Razer Mouse
Keyboard	ROCCAT Horde
Software	Microsoft Windows 11 Pro 64-Bit 23H2

Microsoft Did It Again! Beware Of Bugged Update KB5034441

NGOHQ.COM

NGOHQ.COM

NGOHQ.COM

Attachments

NGOHQ.COM