Windows 10: Intel Issues Updates to Protect Systems from Security Exploits

You have already done what you can, updating to the new(Nan 2018?) BIOS and updating the Cumulative update(only if your AV has updated a fix, when using 3rd party solutions and not Defender).

When I updated my BIOS two days ago, at first it said still not protected for the ME bug, but the next day I tried again and it then said it was*Confused

For other members that use 3rd party AV solutions here, read this article: How to Check and Update Windows Systems for the Meltdown and Spectre CPU Flaws

 

Hmmm. I tried the detection tool again and it still says vulnerable. I have not though been successful installing the ME update Asus speaks of in their BIOS page and this because I cannot find this driver they refer to. I think I'm done for now though. This is what the page says at Asus:

Version -2017/11/223.71 MBytesMEUpdateTool
Intel has identified security issue that could potentially place impacted platform at risk. Use ME Update tool to update your ME.
*We suggest you update ME Driver to the latest Version 11.7.0.1040 simultaneously.
Please download the file and check the MD5 code first.
MD5: 6d3df63d6fe7019f956e91aeb6bc9410"

 

Is this a fresh downloaded version of the tool from the Intel site?
It has been updated lately.

 

Hi,

It's not a driver but a firmware update contained in the bios update. If the bios/uefi flash was successful then your machine should now pas the MEI test form Intel.

Cheers, *Wink

 

You really need to update your BIOS. It can be a nervous thing to do but it really isn't all that difficult. In sum you download and put the .CAP file on a thumb drive and apply the BIOS to the computer.

1. Go to the Asus webpage for your Pro Gaming board by typing in the Bing search engine Asus Z170 Pro Gaming and click Support on that page. Click Drivers and Tools then select your operating system Windows 10 64 bit. Scroll down and under BIOS click See All Downloads. Click download for the Version 3501 and after downloading put a USB thumb drive in your computer.

2. Right click on the directory Asus Z170 3501 created and use the Extract all command then go to that directory and copy the .CAP file to the USB thumb drive.

If you want to do this we can walk you through as there really isn't much more to do than to reboot with the thumb drive in the computer then as it is booting press the Delete key to go into the BIOS and a couple of steps later the computer is doing the rest.

 

I doubt it is Cliff. I take it as Asus' way of saying you need this "latest driver," The trouble is I've tried finding a driver at Intel's website but they are all specific to a system, like Intel's NUCs. It comes down to Asus pointing to Intel, and Intel back at Asus which since the mobo manufacturers do customize things probably is where one needs to get a customized driver, unless one can find a driver alone. But therein lies the problem as I cannot find a stripped down version of this driver, one that is a generic driver for all let us say Skylake systems.

 

So far my system does not pass Intel's software test which I ran again several moments ago. The Asus site I quoted above refers to a specific driver, 11.7.0.1040, but then offers no help in finding this driver at Intel's site. Some sites like softpedia offer it but first you get Driver Genius type stuff and I don't go there. Like Cliff said I think I've done all the damage I can.*Wink At least for today.

 

I just tried. I copied the .CAP file to usd, went to bios, tool, ez flash utility, selected the cap file, it said ezflash, do you want to read this file? I said yes, but it says selected file is not a proper BIOS

 

First be certain the .CAP file you copied to the thumb drive came from the unzipped directory. The directory created when you downloaded the file will have a zipper on the directory icon, and the directory created when it is unzipped will have a plain windows yellow directory icon. I would delete first the .CAP file you have on the thumb drive and begin again. Meanwhile I'll go through the BIOS on my machine and see what else may have gone wrong.

 

Don't look for a driver, that has nothing to do with it, it is a firmware, part of the UEFI BIOS for your specific motherboard.
In Shawn's first post on this thread, he has a link to the current SA 00086 checker(last link at the end of the post).Version: 1.0.0.152 (Latest) Date: 12/19/2017

Note If you have updated your BIOS and the tool say's you are still vulnerable. Restart your PC, and as soon as you get back to the desktop, run the tool again before all your system tray programs and services are loaded. It can be that some of your software is causing a false positive.

 

*Smile

I just tested it.

As my PC has been on most of the day, SA_00086 started giving me the message it was vulnerable, and the reboot, and safe mode both say I'm ok,

 

It is as you've said that I've done all I can. The latest Intel software still says this system is vulnerable whether it is a false positive I'll check later on that.

 

Ok thanks, sadly the kids have now stopped my attempts to look at this for now. I opened the zipped file and copied the CAP file which was from memory approx 16,500 kb in size to the usb stick. The bios recognised the stick just fine and I navigated to the CAP file (which I didn’t rename or anything like that). But my second re-downloaded and copied attempt yielded the same roadblock. It’s strange it’s version 3501 which looks to be from summer 2017 as the latest BIOS on their website

 

I don't know if this will make a difference with a cap file, but did you unblock it in properties before unzipping it?
Just a troubleshooting thought, as out of habit I unblock everything before installing or unpacking.

 

thanks, I’ll try that on my next attempt!