Any Advise on How To Safely Update A New Win 7 Home Premium Install

Topic

New Reply

I am new to AskWoody having just found it and joining today. I have never joined any online forum before, so I spent hours combing through the Ask Woody forums and questions without any luck before posting this, so please bear with my newness.

I have an Asus U57A-BBL4 Laptop running Windows 7 Home Premium, that has been problem free until this past Sunday afternoon. I foolishly allowed windows update to download and install 30ish Important updates (no optional updates) and when my laptop rebooted I got the Boot error 0xc000000f and have been unable to boot or get into my laptop since.

I’ve spent hours on the phone with Microsoft and was finally able to get the needed Win 7 ISO file downloaded to a bootable USB drive so I could reinstall it. I’m doing a fresh install of Windows 7 Home Premium now and just wondering if anyone know the best course I should take regarding the multitude of updates it’s going to present to me when the new install is finished?

I’ve not been able to find a list of required or necessary updates that Win 7 needs in order to function properly or directions anywhere on how to proceed safely after a new install.  Any help or even just pointing me in the right direction would be greatly appreciated.

Reply | Quote

Replies

There is something you should know about ASUS motherboards. Start with the instructions from ASUS found in the link in this post. It is important to be aware of this because one of the required updates is KB3133977.

Depending on the ISO you have downloaded, you may have over 200 updates pending. Or, there was a Windows ISO made in November 2018, and if that’s the one you get there won’t be as many.

Also, you might look through this thread starting here. I recently stepped a User through an update. Look for the steps we took. The updates that were installed after Oct 2016 and again after Dec 2017 were chosen for a purpose – at points where problems had been ironed out.

 

2 users thanked author for this post.

Microfix, CaliPhil

Reply | Quote

Thank you so much for your reply and the invaluable information you have provided. Long story short, the subject machine is my Asus U57A-BBL4 Laptop and came originally preinstalled with Windows 7 Home Premium. I’ve had it for a number of years and it has performed flawlessly since new, but I stopped using it 10 months ago due to broken screen hinge. I finally fixed it last weekend and on Sunday mistakenly allowed it to download and install 30 “Important” updates. (No Optional updates were installed). After reading your reply and combing through all the threads, links, etc., it sounds like my laptop failing to boot after the updates is most likely attributed to that specific WU that is incompatible with ASUS Motherboards so that was a huge help with understanding what must have caused my problem.

Here’s where I’m at right now in the process.

Done: Microsoft Tier 2 Support provided me with the following ISO which was downloaded directly from them onto a Bootable USB drive. 7601.24214.180801-1700.win7sp1_ldr_escrow_CLIENT_HOMEPREMIUM_x64FRE_en…

Done: I first was told by tier 1 support that I wouldn’t lose any of my personal docs, pics, etc. during the install if I custom installed it to the OS partition of my HD. but they couldn’t help me go any further and escalated it to tier 2. Tier 2 tech finally called and informed me that my only option to fix my problem was to do a clean install. As a result he had me delete all 4 partitions of the hard drive during the Win 7 ISO custom install step. Here’s what was on each partition:

Partition 1  was labeled “System” almost 200mb (which I assume must have been my personal files, docs, pics, etc.

Partition 2 was labeled something like “MSR’ (which the support tech stated was associated associated indirectly with my OS and as a result was probably corrupted by updates as well and had to be deleted)

Partition 3 was labeled OS-“Primary” and was approx 673mb.

Partition 4 was labeled “OEM-Factory something” and I’m pretty sure this is where all of my original ASUS factory installed device drivers and laptop associated/need ASUS files were saved to?

Because I was super concerned about losing factory installed drivers and not having gotten a backup or factory install disc when I purchased laptop new, I asked the tier 2 support tech 3 times, why couldn’t we at least leave the “OEM-Factory” partition so we could have original drivers available after install.  He stated we had to delete everything to ensure we had a clean/corruption free new beginning, but not to worry because Windows would automatically install all the correct drivers.

(He Lied) because we weren’t able to get the correct drivers that match my specific hardware devices and then he said he had to end call and wished me good luck.

Current situation: My laptop was smoking fast prior to the WU crash on Sunday.  After installing the Windows 7 ISO yesterday, it now takes forever to boot.

I went to Asus website and chatted with their tech support last night and got the link to driver downloads for my U57A model laptop, but that’s where their knowledge and advice ended, as to which specific drivers I need.  I am sort of stuck knowing which drivers apply to my specific hardware/devices inside my laptop.

Example: I don’t know exactly how BIOS works but from everything I’ve read, it’s not something I want to screw up. There’s at least 8 different versions of Bios Driver downloads showing under the ASUS drivers download page for my model U57A and I have no idea which one to use.

Because of the deletion of everything on my hard drive and now, after the Win 7 SP1 clean install, I’m pretty sure I lost everything related to my OEM device drivers during the process, which would explain why my display, sound and other functions suck big time right now.

After getting stuck on the ASUS device drivers downloads page last night, I resorted to allowing windows to update my drivers automatically. Even though each device in device manager is showing they have current drivers, my laptop still seems to be running sub par. I’m wondering if Windows just assigned a generic driver that make each device work?

I can’t seem to locate anyone with enough experience at ASUS that can tell me which device drivers or BIOS version “to” and/or “not to” download for my specific model laptop so I’m wondering if you have any suggestions? Is there a specific way you could recommend for me to safely search inside my machine to see specific brand and model for each device that is installed in my laptop? After scouring the links and threads on this subject from both you and Canadian Tech, I want to make sure I have all the correct device drivers and BIOS version installed before going any further in the “Windows Updates after reboot – which do I need?” process!

I did some googling from another PC and found a download for Belarc advisor which looks like it would provide me with device specifics inside my laptop? Any advice would be greatly appreciated. Thanks again.

Reply | Quote

Hi CaliPhil, Canadian Tech wrote a topic that may be what you need.
https://www.askwoody.com/forums/topic/windows-update-for-windows-7-after-1-2020/
He intended it as a guide when needed after next January 14th, but it may give help in your condition now. Others also contributed comments. Post here again if this did not assist.

1 user thanked author for this post.

CaliPhil

Reply | Quote

Thank you for your reply and the link to Canadian Tech’s post.  I found it to be what I was looking for and needing, along with the info I got from PKCano.  I’m now trying to get past the device drivers problem I’ve got after the Win7 ISO clean install before proceeding with Updates. (device driver problem spelled out in my reply to PKCano above).

Thanks again for your help. Much appreciated!

Reply | Quote

Yeah, redoing the updates is a bother.

What I prefer to do with Windows 7 clean installs these days… well, I have archived a fairly recent full set locally, made with wsusoffline. (From http://download.wsusoffline.net/ … can be run on Linux to produce an update set for Windows.)

I also try to get a full set of drivers beforehand, as comprehensive as possible. Then, I typically run some diagnostics off a Linux live media, and make some notes of what I see hanging off the system bus and which drivers Linux ends up using. (Asus in particular has occasionally been … creative… in driver versions for things like graphics.) Also check things like disk interface operating mode (AHCI usually preferred), etc.

But yeah, if the system is now particularly slow, it’s not impossible that you may have had a hardware failure that might have contributed to the Windows updates failing… hence diagnostics.

… last time I did this with someone’s Asus laptop, it turned out that the correct graphics driver was NOT the one Asus recommended for that model. Though to compound the problem, there was a cooling / heatpipe problem too, and if used with the correct graphics driver and no throttling, it’d trigger a thermal halt while watching h.264 videos or…

Reply | Quote

There is a model number and serial number on the computer. It may be on the outside, or sometimes they put it in the removable battery slot. These two numbers on the ASUS website should help you find the documentation on the original equipment. You can try Belarc Advisor. Also run msinfo32.exe – that should tell you which version of BIOS you have.
If you have trouble, come back here with the model & S/N and get help.

You might even be able to get the a copy of the original Restore Disks (original loadset) from ASUS (probably have to pay for them).

I’m going to guess at the partitions: 1 was the boot partition, 2 may have been an OEM partition, 3 was the OS and all your data, and 4 was the Factory Restore Image. All that’s gone.

Looks like the ISO/installer you got was the one from Nov 2018. Maybe you could start over and do the install NOT connected to the Internet so you you can install the ASUS drivers first.

2 users thanked author for this post.

CaliPhil, Microfix

Reply | Quote

With the Asus Drivers problem I described, and then realizing that Windows Update had automatically installed a ton of updates after that 1st clean install of Win7, I followed the recommendation you posted in your reply PKCano. I just finished a new Win 7 Home Premium clean install with updates turned off and I’m not connecting it to internet until I can download all of the correct Asus Drivers onto a USB from my other laptop and get them loaded into the Asus. I’m still unable to find correct Asus model specific drivers but think I may be onto something?

Regarding my Model and Serial number, I do have a sticker on the bottom of laptop and have uploaded it here.

But that’s where this situation gets more confusing for me. After downloading Belarc Advisor and seeing it, I remembered that I had performed this same Belarc Advisor test back in 2017 and had saved screenshot results back then so I found that file backed up on an external drive. Pretty sure that 2017 Belarc report provides a list all of the original devices/hardware and drivers that came OEM/factory installed, because the Belarc advisor report I pulled yesterday (which is after the HD wipe and Win 7 reinstall) doesn’t match up to the 2017 Belarc screenshots.

One thing I noticed regarding the serial number and model is the sticker info on bottom of laptop doesn’t match the model number or serial number that the Belarc Advisor report shows or the WMIC.exe scan results. (Images of both uploaded here as well) Not sure how much of a difference that makes at this point?

Any advice, direction would be greatly appreciated. Thank you

 

Reply | Quote

[PKCano]

Here is the link for the K55a shown on the Belarc printout. Use your old printout and go by what it says. see it this matches what the old Belarc printout says.
There is also a Manual here for that model. It shows Win8, but if the hardware matches you can get the Win7 drivers from the other link.

I Googled the model and used the ASUS site. If you look around you may be able to find the specific S/N – maybe chat with support to find the documents.

 

• This reply was modified 3 years, 8 months ago by PKCano.

1 user thanked author for this post.

CaliPhil

Reply | Quote

Thank you for the reply PKCano. I’ve been traveling with work so apologies for not being able to get back to this sooner. I got back in town today and did as you suggested.  I performed another complete wipe of my system (all partitions) and a clean install with the same 7601.24214.180801-1700.win7sp1_ldr_escrow_CLIENT_HOMEPREMIUM_x64FRE_en… ISO USB and was able to get all of the Asus Model specific device drivers loaded as well.

I did as you suggested and stayed completely disconnected from the internet during the windows and drivers install.  As soon as the Windows install was completed and before I even installed the drivers I made sure that Windows update was set to “Never check for updates”.  The laptop did not have an ethernet cable connected nor did I ever connect to my wifi network!

I periodically even checked to make sure that Windows update had not automatically changed from my original “Never check for updates” setting, and it had not!  I’m only being so specific about my steps, because despite following all the suggested steps, when I went to check “Installed updates” I can see that there are 191 updates installed. Here’s a SS of just the first page.

I’m guessing that these updates already part of the Windows ISO file version that was installed?  If this is the case, I’m wondering if it’s okay for me to uninstall updates that aren’t wanted/needed?  My system is booting and running fine and I am still not connected to the internet.  I’m wondering that with my limited tech experience, along with the end of won 7 support if I’m better off going the route that is outlined here:

https://www.askwoody.com/forums/topic/windows-update-for-windows-7-after-1-2020/

and install either Bitlocker Plus or whatever the best Antivirus program is?

I hope I’m not out of line by asking but it looks like that link shows the same “Windows Install and device drivers install not connected to internet, with windows updates set to Never Check For Updates steps” are the same steps that I have followed up to this point.

With the 191 windows updates already installed, is it even possible for me to to just go the remainder of the way following the steps starting with where it instructs to:

After install and activation, install network drivers if not installed already
Do NOT install anything until all Windows Updating is completed. Not even antivirus.

Set Windows Update to Never
Download and install either one or two updates manually. ***Note exception below if not starting with SP1 disk. In most cases only the first (KB3138612) of these is needed. If that produces a result that says the update is not appropriate for your computer, you need to first install the 2nd of these (KB3020369), then install the first (KB3138612). Choose the one that is for your machine — 32 bit (X86) or 64 bit (X64).
KB3138612

?

Being new to this forum and having never done this before, I’m not sure if I am even going about this the correct way so my apologies if not.  If it’s better for me to reach out to the author of that link, Canadian Tech, I can do so and appreciate all your help thusfar.

Thank you again

Reply | Quote

Unfortunately, the anon poster steered you to a method I do not recommend. @CanadianTech recommends not patching at all after some time in 2017.
The ISO you have is up to date as of 8/1/2018 (way passed 2017), which is why you see the 191 updates listed.

There are two opposing methods here, one FOR patching to the current level (mine) and one AGAINST patching at all (@CanadianTech’s). If you want to get your computer up to date, please say so. If you want to use the other method, you will have to ask @CanadianTech about how to remove two years of patches and procede from there.

Please let me know which way you want to go. My help will be along the lines described in this thread linked in my earlier post above, with some revisions necessary for changes made since that date.

1 user thanked author for this post.

CaliPhil

Reply | Quote

@pkcano

I’d really like to stick with your advice and continue in the direction you’ve already had me on.  So I will continue patching and appreciate any help/directions you’re able to provide me.  I remember reading through the thread you provided above  several times last week when you first posted it and have just went through it again. I also reviewed the link you had provided that referenced (KB3133977) and the affect this WU was having on certain Asus Motherboards.

I can see that (KB3133977) is on my list of Installed Updates and with my laptop motherboard having UEFI and the fact that it seems to be booting and running fine, am I correct to assume that I’m all good with respect the (KB3133977) problem some were experiencing?

Based on your most recent reply where you stated

“My help will be along the lines described in this thread linked in my earlier post above, with some revisions necessary for changes made since that date.”

This has always been a great laptop and smokin fast running windows 7 64bit, right up until that last batch up updates that screwed it up. I’m a fast learner, will follow your advice/directions and would really appreciate your continued assistance.

If you will let me know what, if any, system information, screenshots of the Installed updates or anything else you need from me, I have the day off today and will get it right over to you. Thanks again for all your help.

Reply | Quote

See screenshots in #1908935. So I know what is already installed:

In Windows Update, lower left corner, pull up Installed updates. (see my first screenshot).
There needs to be three columns: Name, Program, and Installed on. You can slide the columns by grabbing the title and dragging it sideways. Sort the columns on “Name” by clicking on the title – it is a toggle, the little triangle should be pointing down. Scroll down to the “Microsoft Windows” section and shoot everything from there down.
You may need to create more than one reply to upload all of them, or you can email them to me at (pkcano at askwoody dot com). If you use the email, be sure to put your ID and a reference to Askwoody in the subject.

Reply | Quote

Sorry to hear of the poor advice given to you in your description of events.
PKCano’s advice to install Windows7 Home Premium offline is a good shout IMO
However, windows 7 has only a few more months until end of support and thereafter may be a hinderance. I’m by no way a big fan of Windows 10 but, in this instance being so close to EOL, have you considered biting the bullet and just downloading Windows 10 1809? as it’s the fittest version at present and used by woody on his production machines.(can’t be bad lol)

If you download the iso for W10 then you should be able to use your existing windows 7 product key to activate Windows 10 Home. There are many people on this forum who use windows 10 home and lots of assistance here getting you up to speed with it too. You shouldn’t have to worry about drivers as Windows 10 drivers should be fine.

something to consider as you already have the Windows 7 ISO..

Keeping IT Lean, Clean and Mean!

Reply | Quote

[Microfix]

Microfix wrote:

If you download the iso for W10 then you should be able to use your existing windows 7 product key to activate Windows 10 Home. There are many people on this forum who use windows 10 home and lots of assistance here getting you up to speed with it too. You shouldn’t have to worry about drivers as Windows 10 drivers should be fine.

Very interesting. Would a Win 7 Pro product key also work to activate Win 10 Professional? My friend has an 8-year old Dell Optiplex 755 desktop that is no longer being used, and wondering if it could be “modernized”. It also has Office 2010 installed, and I think that would work under Win 10.

• This reply was modified 3 years, 7 months ago by Microfix.
• This reply was modified 3 years, 7 months ago by AlphaCharlie.

Reply | Quote

Yes it still works since a few days ago when I used a x86 Win7 product key to activate W10 1809. Remember, it needs to be done on the same device.

Keeping IT Lean, Clean and Mean!

2 users thanked author for this post.

Fritz, AlphaCharlie

Reply | Quote

Before you get started, you will need to download the following updates. These are direct MS Catalog download links, so when you click on them, the files will download. SAVE them in a folder on the computer desktop.

KB4490628 2019-03 Servicing Stack
KB4516655 2019-09 Servicing Stach
KB4474419 2019-09 Security Update (SHA-2 coding v.2)
pciclearstalecache
(FYI KB3133977 is already installed.)

The first few steps need to be done offline. Disconnect the PC from the Internet (turn off WiFi) so that it doesn’t reconnect on reboot.

Step 1: Get your settings right.
Settings external to Windows Update (to reduce telemetry):
1. In Action Center\Maintenance\Settings – Windows Error Reporting is set to “Never check for solutions.”
2. In Action Center\Change Action Center settings\Related settings: CEIP is set to “No” and Problem reporting is set to “No.”
3. In Administrative Tools\Services – Diagnostics Tracking Service is Disabled. (If is’t not there, it WILL be installed once you start using the Monthly Rollups.)
4. In Administrative Tools\Task Scheduler\Library\Microsoft\Windows – all tasks under Application Experience, Autochk, and CEIP are Disabled.
5. Smart Screen Filter is turned OFF in IE11 in Win7/8.1 and on the desktop in Win8.1
6. Bing is not the default search engine in IE11 and IE11 is not my default browser.

Windows Update Settings:
1. CHECKED “Give me recommended updates the same way I receive important updates”
2. CHECKED “Give me updates for other MS products”
3. Windows Updates set to “Never check for updates (Not recommended)”

2 users thanked author for this post.

CaliPhil, Microfix

Reply | Quote

@pkcano

I’ve completed #1-5 in step 1 but I’m not having any luck with

6. Bing is not the default search engine in IE11 and IE11 is not my default browser.

I’ve checked everywhere that I know of in IE11 to do the step above but still can’t perform either of those items in #6. I’m still disconnected from internet and have never downloaded any other browsers or search engines as this was a win7 clean install, so I’m not sure how to complete this step.

Thanks

Reply | Quote

OK, leave that for now. When the updating is over, you should install another browser of your choice, make it the default and pick another default search engine beside Bing.

Another thing, when we finish we need to disable the telemetry also.

Go ahead with the other steps.

1 user thanked author for this post.

CaliPhil

Reply | Quote

Step 2: Uninstall/Install updates manually

Uninstall the telemetry-related updates
You have already done this.

Install three updates necessary to use Windows Update.
In an elevated Command Prompt run net stop wuauserv before each installation.
In the folder, double click on KB4490628 Servicing Stack and install.
Wait 10 minutes for the install to complete, reboot, wait another 5 minutes.
Double click on KB4474419 SHA-2 update and install.
Reboot, wait 10 minutes.
Double click on KB4516655 Servicing Stack and install.
Wait 10 minutes for the install to complete, reboot, wait another 5 minutes.

Did you have any problems with the uninstall/install?
If you haven’t encountered any problems so far, you should be in a position to start using Windows Update. This will be a several step process.

1 user thanked author for this post.

CaliPhil

Reply | Quote

Step 3: Install any old updates that are missing.

We are going to try to use Windows Update for the rest of the updates. This is going to be done in several steps. First, we will install any old updates that are missing.
Connect the computer to the Internet.

1. If Windows Update is set to “Never check,” you should be able to manually check for updates by clicking on the “Check for updates” link. This might take quite a while. If it doesn’t work the first time, try rebooting the computer and waiting till it’s finished starting up, and checking again. Then, if it doesn’t work, come back and we’ll try some troubleshooting.
Check for Updates.

2. To avoid most of the telemetry updates, HIDE KB2952664, KB3150513, KB3021917, KB3022345, KB3068708, KB3080149. Also HIDE KB971033 and KB4493132  if they are in the Important Update list. You will have to keep watching for these every time before you install updates.

3. To be sure you get all the necessary updates:, HIDE the current “Security Monthly Quality ROLLUP for Windows 7,” (2019-10 Security Quality Monthly Rollup for Windows 7).
Check for updates.
HIDE the next earlier “Security Monthly Quality ROLLUP for Windows 7.”
Check for updates.
Repeat this procedure until you have hidden the “September 2018-09 Monthly ROLLUP.”

4. HIDE any other updates you don’t want to install (hardware drivers, anything that has specifically caused a problem with your PC, etc)

At the top of the Important Update list, on the left side above the list, there is a check box that is a toggle. If you click on it, it unchecks all the boxes on the list. If you click on it again, it checks all the boxes. Click again, it unchecks the boxes.
Be sure to HIDE KB2952664, KB3150513, KB3021917, KB3022345, KB3068708, KB3080149, KB 971033 and KB4493132 at each step if they show up.
There is a good chance there will be no old updates, but just to be sure do the next steps.
If there are no updates that match the description, move on to the next item.

5. Using the box at the top, UNCHECK all the boxes in the Important Update list. Scroll down the list until you see updates labeled “Updates for Windows 7.” Manually check each box next to those updates. Click OK, and install those updates. Reboot.
Wait 10 min, check for updates.

6. In the Optional update list, check KB2670838 Platform Update and OK (this is the ONLY one you will install from the Optional list). In the Important update list, using the box at the top, UNCHECK all the boxes in the Important Update list. Scroll down the list and check any updates you see updates labeled .NET 4.5.2 or 4.6.1 ONLY (not .NET Rollups, not .NET Security), any additional  “Updates for Win7,” Manually check each box next to those updates. Click OK, and install those updates.
Reboot,  wait 10 min, check for updates.

7. In the Important updates, using the box at the top, UNCHECK all the boxes in the Important Update list. Scroll down the list until you see updates labeled “Update for User-Mode Driver Framework“, Update for Kernel-Mode Driver Framework,”  “Update for ActiveX Killbits“,and “Security Updates for Win7.” Manually check each box next to those updates. Click OK, and install those updates.
Reboot,  wait 10 min, check for updates.

8. In the Important update list, using the box at the top, UNCHECK all the boxes in the Important Update list. Scroll down the list until you see updates labeled “Security Updates for MS .NET,” “Rollup for .NET,”  any leftover Updates or Security updates for Win7 and any updates for Internet Explorer. Manually check each box next to those updates. Click OK, and install those updates.
Reboot,  wait 10 min, check for updates.

Send me a screenshot of the pending Important update list.

2 users thanked author for this post.

KP, CaliPhil

Reply | Quote

@pkcano

So I have completed #’s 1-3 as shown below and getting ready to do the Check for updates part at the end of #3.  Here’s a screenshot of Important updates and Optional Updates that remain after following steps 2 and 3.  Should I install only the remaining important ones and leave the optional ones unchecked at this point or do I just uncheck all and proceed with “Check Updates” as shown at end of #3 below?

1. If Windows Update is set to “Never check,” you should be able to manually check for updates by clicking on the “Check for updates” link. This might take quite a while. If it doesn’t work the first time, try rebooting the computer and waiting till it’s finished starting up, and checking again. Then, if it doesn’t work, come back and we’ll try some troubleshooting.
   Check for Updates.
2. To avoid most of the telemetry updates, HIDEKB2952664, KB3150513, KB3021917, KB3022345, KB3068708, KB3080149. Also HIDE KB971033 and KB4493132  if they are in the Important Update list. You will have to keep watching for these every time before you install updates.

3. To be sure you get all the necessary updates:, HIDE the current “Security Monthly Quality ROLLUP for Windows 7,” (2019-10 Security Quality Monthly Rollup for Windows 7).
Check for updates.

Reply | Quote

Install nothing in the Optional updates. In fact, forget the Optioal Updates exist.

HIDE B2952664, KB3150513, KB3021917, KB3022345, KB3068708, KB3080149. Also HIDE KB971033 and KB4493132
HIDE KB4503548 the installer for .NET 4.8 – not recommended install on Win 7
Hide the Update beginning with 2019-10

Install MSRT, the update for Defender, and the C++
If you have to reboot wait 10 minutes after login, then go on with the next step.

1 user thanked author for this post.

CaliPhil

Reply | Quote

When you are referring to “Hide the Update beginning with 2019-10 are you referring to the .NET rollup in shown in Post 1982322—Attachment: Important-Updates-Check1.jpg, since this update begins with 2019-10?  If this is the case, then did you recommend to hide KB4524102?  Thanks for your assistance.

Reply | Quote

I believe we hid the Oct .NET until it was installed with the Oct CU at the end. The Oct updates had not (and still have not) been approved for DEFCON patching. But in this case, we went ahead and installed it to avoid problems with earlier patches..

Reply | Quote

Have you hidden all those monthly Rollups from #3 in Step 3?

Reply | Quote

Yes, “KB2952664, KB3150513, KB3021917, KB3022345, KB3068708, KB3080149. Also HIDE KB971033 and KB4493132” were all hidden (greyed out after hiding them) prior to me taking the screenshot I attached but maybe I should have refreshed after hiding them so they wouldn’t show in the screenshot.

I had also hidden both of these “HIDE the current “Security Monthly Quality ROLLUP for Windows 7,” (2019-10 Security Quality Monthly Rollup for Windows 7)”.

But I didn’t originally hide the 2019-10 Security and Quality Rollup for .Net Framework update because it wasn’t listed as a “Hide” in the instructions but I have hidden it now and I’ve also hidden KB4503548 the installer for .NET 4.8 – not recommended install on Win 7

Thanks and proceeding on now…

 

Thanks

Reply | Quote

You need to keep hiding the Monthly Rollups till you get back to the Sept 2018 one. #3 says hide-check-hide-check, so you keep hiding the older ones.

1 user thanked author for this post.

CaliPhil

Reply | Quote

Still hiding and working my way back to 09-18

Reply | Quote

Repeat this procedure until you have hidden the “<b>September 2018-09 Monthly ROLLUP</b>.”

<b>4.</b> <b>HIDE</b> any other updates you don’t want to install (hardware drivers, anything that has specifically caused a problem with your PC, etc)

At the top of the Important Update list, on the left side above the list, there is a check box that is a toggle. If you click on it, it unchecks all the boxes on the list. If you click on it again, it checks all the boxes. Click again, it unchecks the boxes.
Be sure to <b>HIDE</b> KB2952664, KB3150513, KB3021917, KB3022345, KB3068708, KB3080149, KB 971033 and KB4493132 at each step if they show up.
There is a good chance there will be no old updates, but just to be sure do the next steps.
<b>If there are no updates that match the description, move on to the next item</b>.

5. Using the box at the top, <b>UNCHECK</b><b> all the boxes</b> in the Important Update list. Scroll down the list until you see updates labeled “<b>Updates for Windows 7</b>.” Manually check each box next to those updates.

 

I have successfully #3 back to and including hiding the “<b>September 2018-09 Monthly ROLLUP</b>.”

#4 completed with no problems and no old updates showing up.

#5 When I run Windows update there are no updates of any type showing as available showing for Important Updates, there are however five (5) updates labeled “<b>Updates for Windows 7</b>.” under Optional Updates. Screenshots below. I’ve also included a screenshot of my Windows Update setting that shows the only two boxes I checked at the beginning of this process.

With not seeing any important updates and not even seeing the optional update stated in #6, I’m not sure where to go from here?

Reply | Quote

Go to Step 4.
Don’t mess with the Optional Update list – none get installed.
Only work with the Important updates.
Start installing tha last group of updates.

This will take you a while.
If you run into any problems, leave me a note at the end of the thread. We can work it out tomorrow.
If you don’t run into any problems, come back tomorrow and we will deal with disabling telemetry. I will be here till 8:00pm CDT.

I am going to log out.
I am on Central Time and I have to be back on AskWoody at 4:00am.
Looks like things are going like they should. Only three more installs to go.

1 user thanked author for this post.

CaliPhil

Reply | Quote

[PKCano]

Step 4: The rest of the Updates:

Be sure to HIDE the telemetry patches mentioned earlier, and the other two if they show up.
If you have a successful install each time, you do not need to stop and report in – only if there are additional updates beside the one mentioned in the Important Updates.
When you finish, let me know if it was successful.

1. On the left in Windows Update click on “Restore hidden updates”. CAREFULLY check and UNHIDE only the Rollups dated 2018-09 through (including) 2018-12 Security Monthly Quality Rollup for Win7 KB4471318. (Sept 2018 – Dec 2018)
This should be a maximum of 3 updates.
Check for updates.
Send me a screenshot of the Important Update list if it contains any other updates beside KB4471318 . If that’s the only one, go to #2.

2. Install KB4471318 or the updates indicated from my post after a screenshot.
Reboot, wait 15 minutes.
Verify the installation was successful.

3. On the left in Windows Update click on “Restore hidden updates”. CAREFULLY check and UNHIDE only the Rollups dated 2019-01 through (including) 2019-07 Security Monthly Quality Rollup for Win7 KB4507449. (Jan 2019 – July 2019)
This should be a maximum of 7 updates.
Check for updates.
Send me a screenshot of the Important Update list if it contains any other updates beside KB4507449 . If that’s the only one, go to #4.

4. Install KB4507449 or the updates indicated from my post after a screenshot.
Reboot, wait 15 minutes.
Verify the installation was successful.

5. On the left in Windows Update click on “Restore hidden updates”. CAREFULLY check and UNHIDE only the Rollups dated 2019-08 through (including) 2019-09 Security Monthly Quality Rollup for Win7 KB4519976. (Aug 2019 – Oct 2019)
This should be a maximum of 3 updates.
Also restore the 2019-10 .NET Rollup you hid.
Check for updates.
Send me a screenshot of the Important Update list if it contains any other updates beside KB4519976  and the .NET Rollup. If that’s the only ones, go to #6.

6. We are going to make an exception to the DEFCON rating, because of the problems in the Sept updates, and go ahead and install the Oct update.
Install KB4519976  and the 2019-10 .NET Rollup or the updates indicated from my post after a screenshot.
Reboot, wait 15 minutes.
Verify the installation was successful.

We still have to take care of the telemetry.

 

• This reply was modified 3 years, 7 months ago by PKCano.

1 user thanked author for this post.

CaliPhil

Reply | Quote

For an explanation see AKB2000012 How to limit telemetry in Win7/8.1

To fix the telemetry:
Download the file from this link. (w10tel.cmd.bat)
Put it in the same folder as the updates.
Right click and rename the file – remove the “.bat” on the end.
Right click and copy, paste it into the C:\Windows folder. (Do not drag/drop)
Open an elevated command prompt.
Copy the following to the prompt (be sure to get the trailing qupte)
It should tell you the task was created succesfully

SCHTASKS /Create /F /RU "SYSTEM" /RL HIGHEST /SC ONSTART /TN W10Telemetry /TR "cmd /c %windir%\W10Tel.cmd"

1 user thanked author for this post.

CaliPhil

Reply | Quote

If you do not see the “.bat” on the end, you need to enable file extensions.

Save the file to the folder where the updates are.
The problem is, you can’t see the file extension.
Let’s fix that.
In Control Panel\Folder Options click on the “View tab”
Scroll down and uncheck “Hide extensions for known file types”
Click Apply, then OK
You should be able to see the .bat now

1 user thanked author for this post.

CaliPhil

Reply | Quote

Using IE is not recommended. You should download the installer for the browser of your choice and install it even before you open IE for the first time. You should then make that browser the default. Using IE is not safe, so avoid it unless the website you are dealing with absolutely demands its use.

Settings for IE11:

+ When you open IE for the first time, there will be a pop-up box asking if you want “Recommended Settings” or not. The choice should NOT be the recommended settings.

+ If you don’t have a menubar at the top, right click on the top area and check Menu bar, Command bar, Status bar, and Show tabs on a separate row.
+ In the Menu bar\Tools\SmartScreen Filter – turn it off
+ In the Menu bar\Internet Options\Programs tab choose Manage add-ons. Under “Search Providers” choose something beside Bing for default. If Bing is the only choice, in the lower left click on “Find more search providers” and add others, then make one of them the default.
+ In Internet Options\Advanced tab – scroll down to the bottom section and check “Empty Temporary Internet Files folder when browser is closed”

1 user thanked author for this post.

CaliPhil

Reply | Quote

Okay PK, I have successfully completed all the steps you’ve laid out up to and including your latest post “Using IE is not recommended…..” with additional errors or problems. Here’s a screenshot of the successful “W10Telemetry”.  Will watch for further instructions. Thank you my friend!

Reply | Quote

The task you set up in Task Scheduler will run on startup and remove the tlelmetry tasks. So you’re basically set to forget about it.
And your Windows should be updated as of Oct if you performed the last install.

Your Windows Update is on manual (Never check) – don’t forget you are responsible for updating.
The other option is to set it to “Check for updates but let me choose when to download and install” That means the updates will automatically be in the queue until you choose to download.

Other than that, you are good to go. Come back if you have problems. We’re here 24/7.

1 user thanked author for this post.

CaliPhil

Reply | Quote

Yes, I performed every step and verified that Windows is updated as of the October.  I understand that Microsoft is ending support for Windows 7 soon, so… based on how my laptop is currently setup, if  I change the Windows Update settings to “Check for updates but let me choose when to download”, is there a specific section/area here on Ask Woody that I should be monitoring to find/see which new Win 7 64 bit updates, if any, should and/or shouldn’t be downloaded and installed?

One last question regarding Antivirus and Malware protection. I’ve only ever used Microsoft Security Essentials but I’m wanting to protect this laptop with whatever is best. Not sure if this changes any recommendations you might have on Antivirus/Malware Protection but thought I should mention that I occasionally use a VPN on my Win 7 64bit laptops.

Thank you PK for your patience and help with getting my laptop back up and running. I really appreciate everything you’ve done!

 

Reply | Quote

The main blog has a lot of information about patching.
The DEFCON system is used to determine when patching is safe, and Woody writes an article in ComputerWorld (linked at the bottom of the DEFCON topics) with instructions for patching. Read about DEFCON – button in top menu.

The Forum structure is listed under the “Forums” button in the top menu. Its a little difficult to understand sometimes, and slow to wade through, but if you have a question you can create a topic in the appropriate area (as this one) and get help. There are a lot of experts hanging around.

Antivirus is a matter of personal choice. MS Security Essentials works fine. I am mostly on a Mac working Windows out of VMs. I use TrendMicro (paid) for the OSs facing the Internet (Win and MacOS) and Bitdefender Free for most of the VMs and test stuff (I can’t afford all paid, LOL). But I use MalwareBytes Free and SuperAntiSpyware free (not running in the background) for occasional checks.

1 user thanked author for this post.

CaliPhil

Reply | Quote

Sounds great and thanks PK, for that info.  With all the stuff we’ve done to this laptop I wanted to make sure there isn’t a special procedure I need to follow when installing the programs that I previously had on it, especially the older microsoft office program.

I was running a licensed version of Microsoft Office Standard 2010 on the Asus before the crash (still have license # and Key) but the original download was lost during the recent Win7 install.  With system being setup the way it is now, is it okay to download my version of Microsoft Office directly from Microsoft site?

Thanks again

Reply | Quote

Download from MS. Your license key should work. If it needs a phone call for activation, be sure to write down the long number they give you in case you have to reinstall..

As far as installing other programs, everything should work the same as it always has.

1 user thanked author for this post.

CaliPhil

Reply | Quote

CaliPhil wrote:

original download was lost during the recent Win7 install

The download will be on your backup – you did backup didn’t you?

cheers, Paul

1 user thanked author for this post.

CaliPhil

Reply | Quote

Hi Paul, This Win 7 Professional custom reinstall was necessitated because of an unexpected “unable boot” caused by windows update, so unfortunately I didn’t have a readily accessible backup. I was able to find the original download link in my old email records for the Microsoft Office 2010 and it is up and running now.  Thank you for that suggestion and apologies for not replying to your post sooner.  Appreciate yours and everyone else here on Ask Woody for the input. Big shoutout especially to PKCano, thanks to his expertise and instruction, I have a perfectly running Asus Laptop, once again running Win 7 64bit Professional.

1 user thanked author for this post.

PKCano

Reply | Quote