News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • Asking for a Favor About updating my Win 7

    Posted on TheFamilyIT Comment on the AskWoody Lounge

    Home Forums AskWoody support Windows Windows 7 Windows 7 patches Asking for a Favor About updating my Win 7

    This topic contains 25 replies, has 3 voices, and was last updated by  PKCano 13 hours, 34 minutes ago.

    • Author
      Posts
    • #1907521 Reply

      TheFamilyIT
      AskWoody Lounger

      Hello,

      I am looking for someone with a high level role that would be willing to help me on how to safely install (in correct order) and installing the least amount of telemetry updates for my Windows 7 Pro x64 service pack 1 Custom Computer. Plus, I never heard of a Servicing stacking update being a requirement before installing Bluekeep patch.

      I haven’t updated since Jan. 2018 because I am scared of updates causing major operation issues and how Microsoft’s quality control isn’t like how it used to be.

      There’s only a few updates under important list and Optional list.  I have attached Screenshots of WU Lists.

      I have Norton Security 22.18.0.213 installed (which today installed a patch), PC has SSD and Hard Drive.

      Please let me know if you’re willing to help, Thank you in advance.

      Windows-Updates-Important-List_8.13.19
      Windows-Updates-Optional-List_8.13.19

      Attachments:
    • #1907560 Reply

      PKCano
      Da Boss

      I never heard of a Servicing stacking update being a requirement

      The Servicing Stack patch is an update for the Windows Update mechanism. You have received Servicing Stack updates in the past through Windows Update, you just may not have known what they were.

      I have Norton Security 22.18.0.213 installed (which today installed a patch), PC has SSD and Hard Drive.

      We need more information on the specs of your computer (every computer has a hard drive and/or SSD) How old is it? What processor, graphics card, etc does it have? You can download the utility Speccy (free) and run it if you do not know the answers.

      ….how to safely install (in correct order) and installing the least amount of telemetry updates for my Windows 7 Pro x64 service pack 1 Custom Computer…..
      I haven’t updated since Jan. 2018

      Microsoft added telemetry to Win7 through Windows Update beginning in Nov. 2016. So if you were updating through Windows Update until December 2017, there is a good chance you already have the telemetry installed. What started in Jan 2018 that caused all the problems was the Meltdown/Spectre mitigation.

      Can you give us your updating history. Were you using Windows Update to patch your computer? Were you using Catalog download/manual install of Security-only Updates and IE11 Cumulative Updates? What patches (if any) were you avoiding? etc.

      1 user thanked author for this post.
      • #1907619 Reply

        TheFamilyIT
        AskWoody Lounger

        @pkcano

        I know Microsoft starting adding telemetry to Win7 for awhile now. But, I only updated what I needed in order for Windows 7 Pro version to work normally like any PC. So,that I could start installing softwares and setting it up for my uses.

        I would update from Windows Update, but if I have to download from Catalog then I know I would have (I can’t remember if I had to). Before I install updates, I would check and wait to see which KB updates to hide and then update.

        My custom computer was built 2014. Motherboard: Gibabyte GA-X99-UD4 Hard Drive 1 TB SSD 512GB Graphics card: Asus Strix from 2013 with 2 fans  Video Card: NVIDIA GeForce GTX970

        I have attached Screenshot and the Zip is PDF (had to cause 2mb limit) of 11 pages of my Windows Update History.

        • This reply was modified 1 week, 2 days ago by  TheFamilyIT.
        Attachments:
    • #1907737 Reply

      Bertram Pincus
      AskWoody Lounger

      Look for the KB uninstall .bat file here (and there will be tons of other pointer for  you).

      http://forum.notebookreview.com/threads/windows-7-clean-installation-guide.781213/#post-10086233

    • #1907758 Reply

      PKCano
      Da Boss

      Since you were updating from Windows Update, I assume you were installing the Monthly Rollups. So to bring your computer up to date, you are going to need to use a combination of Catalog downloads/manual install and Windows Update. (If you do not want to install Monthly Rollups, the procedure will be different and more complicated)
      Here’s what I suggest:

      Step 1
      You will need to install the latest Servicing Stack and the SHA-2 v1 updates before you can use Windows Update.
      + Download the following updates from the MS Catalog and save them in a folder on your desktop: KB4490628 2019-03 Servicing Stack and KB4474419 2019-03 Security Update (SHA-2 v1). These links are direct downloads from the Catalog, so when you click on the links, the download box will pop up.
      + Close open programs.
      + In Windows Update/Change settings, note your current setting, then set it to “Never check for updates (not recommended).
      + Double click on KB4490628, when the box pops up choose install. When the install is finished, reboot the computer and wait 15 minutes after login to let the installation complete.
      + Double click on KB4474419 when the box pops up choose install. When the install is finished, reboot the computer and wait 15 minutes after login to let the installation complete.
      Let us know if you have any problems before going to step 2.

      Step 2
      + In Windows Update/Important updates, if 2019-08 Security Monthly Quality Rollup for Win7 KB4512506 is listed, right click on it and choose HIDE. (This is the August update and should not be installed yet.) If the installer for .NET 4.8, KB4503548 is listed, also HIDE it.  Click on “Check for Updates”
      + According to your screenshot, install 2019-07 Rollup for .NET KB4507420, 2019-07 Security Monthly Quality Rollup KB4507449, 2019-08 Security Update KB4474419 (this is version 2) and MSRT KB890830. If there are any other updates offered, ask before you do an update. Leave the unchecked Optional updates alone.
      + Reboot the computer and wait 30 minutes after login to give the installation time to complete and the maintenance tasks time to finish and  before doing anything.
      Let us know the results.

      If there are no problems, you will need to unhide KB4512506 (Do NOT install) and reset WU to the original setting.

      • #1908071 Reply

        TheFamilyIT
        AskWoody Lounger

        @pkcano

        Besides creating a system restore point, should I also do a full system and full image back ups before updating, right? I remember reading a couple of weeks ago here, in one of the forum topics that Win7 that is really up to date will have just as much telemetry as Win10. What’s your opinion on this ??

        What is the minimum security updates needed to keep PC safe with minimal unavoidable telemetry and have no risk of PC to start having boot up issues (caused by being out of date.Which happened to Mom’s Win8.1 before working again)?  I don’t know when I will give in & have to go into the dark side & upgrade to Win10.

        So, that July Monthly Quality Rollup have any telemetry? Plus, I thought with Monthly Rollups you can’t avoid hidden telemetry.

        According to WU History, I did try to install, but all 4 failed of Monthly Quality Security Updates and Cumulative Security 2 year ago.  I didn’t see same KB names later on the list. See screenshot below Windows-Update-History_MonthlyRollups_CumulativeSecurity

        Attachments:
        • #1908254 Reply

          PKCano
          Da Boss

          Besides creating a system restore point, should I also do a full system and full image back ups before updating, right?

          Absolutely you should backup before you do any updating. You should make a full disk image (including boot sector and all partitions) and a file backup of your data (everything under the User ID(s)).

          I haven’t updated since Jan. 2018 because I am scared of updates causing major operation issues and how Microsoft’s quality control isn’t like how it used to be.

          Looking at your screenshot, I see failures going back farther than 2017-12 CU for Windows, so you are not updated to Dec 2017. Can you make a screen shot of the last time the CU for Windows (not Active Killbits) was successful, on both sides of that point, with the dates and the Status showing? There may be more to be done to fix this than just updating.

          • #1908537 Reply

            TheFamilyIT
            AskWoody Lounger

            @pkcano

            I have done a full image backup before, but when you said “.. (including boot sector and all partitions)..”  what are the steps to do this ?

            Did you look through that Zip file (contains PDF) of WU History?…Maybe I manually installed the safer/necessary security updates..

            First screenshot, WU main window of when PC was last updated. The rest is Installed Updates List.

            Attachments:
        • #1908935 Reply

          PKCano
          Da Boss

          I am confused. I really don’t understand what I see.
          Microsoft started the Cumulative patching in October 2016.
          But the updates I see in your screenshots are older than that with a few exceptions.
          Since the beginning of 2017, the KB numbers for Windows patches have started with a “4”
          I see none of these in your screenshots. They are all “3” and “2”
          But you say you haven’t updated since Dec. 2018, implying you were updating until that time.

          So before we go any further, I need to know what is honestly going on
          Did you just reinstall Windows in 2018 choosing nothing but the older individual updates?
          I need to know what is installed on the computer – not the History b/c that only shows what has been tried.
          In Windows Update, lower left corner, pull up Installed updates. (see my first screenshot).
          There needs to be three columns: Name, Program, and Installed on. You can slide the columns by grabbing the title and dragging it sideways. Sort the columns on “Name” by clicking on the title – it is a toggle, the little triangle should be pointing down. Scroll down to the “Microsoft Windows” section and shoot everything from there down.
          You may need to create more than one reply to upload all of them, or you can email them to me at (pkcano at askwoody dot com). If you use the email, be sure to put your ID and a reference to Askwoody in the subject. See screenshots.

          Attachments:
          • #1913392 Reply

            TheFamilyIT
            AskWoody Lounger

            @pkcano

            The last successful Update was January 2018 as that screenshot of WU main page that I replied with shows. I did have Enterprise edition installed (while I was not using my PC for a few years. I can’t remember if I did use it once and awhile at some point).

            When I was ready to really start using my PC, I then had to install Win10 Pro after (Enterprise version not messed up after trying to clone for system backup to work. Only had  Win10 Pro for a couple of days and then downgraded to Win7 Pro x64 in order.

            • This reply was modified 2 days, 12 hours ago by  TheFamilyIT.
            Attachments:
            • #1913422 Reply

              PKCano
              Da Boss

              OK, give me until tomorrow to go over what’s installed and come up with a  plan.
              Get back with me tomorrow evening. I’ll be on until around 8:00pm CDT.

              2 users thanked author for this post.
        • #1913820 Reply

          PKCano
          Da Boss

          Looking at the installed updates, I see the latest one was dated in Oct of 2016.
          I also see that some of the telemetry patches are already installed.
          From you earlier History, I also see that you have had quite a number of installation failures.

          So my recommendation is to take this in steps.
          First, I would suggest running some troubleshooting to try to eliminate a few causes of failures.
          Next, would be to get the settings right.
          Then, I would recommend uninstalling a couple of updates.
          You will need to download and manually install some patches before you can use Windows Update.
          Then bring the updates to current, which will also be in steps.
          Lastly, we can deal with the telemetry. I’m not going to recommend Group B methods. They are just too complicated at this point. We’ll use Group A, then neutralize the telemetry.

          If you don’t understand how to do some of the things I suggest, let me know. But to start, I’m going to assume some technical knowledge on your part (since you are “The FamilyIT.” 🙂 ).

    • #1913923 Reply

      PKCano
      Da Boss

      Before you get started, you will need to download the following updates. These are direct MS Catalog download links, so when you click on them, the files will download. SAVE them in a folder on the computer desktop.

      KB4490628 2019-03 Servicing Stack
      KB4474419 2019-08 Security Update (SHA-2 coding v.2)
      pciclearstalecache
      (FYI KB3133977 is already installed.)

      The first few steps need to be done offline. Disconnect the PC from the Internet (turn off WiFi) so that it doesn’t reconnect on reboot.

      Step 1: Get your settings right.
      Settings external to Windows Update (to reduce telemetry):
      1. In Action Center\Maintenance\Settings – Windows Error Reporting is set to “Never check for solutions.”
      2. In Action Center\Change Action Center settings\Related settings: CEIP is set to “No” and Problem reporting is set to “No.”
      3. In Administrative Tools\Services – Diagnostics Tracking Service is Disabled. (If is’t not there, it WILL be installed once you start using the Monthly Rollups.)
      4. In Administrative Tools\Task Scheduler\Library\Microsoft\Windows – all tasks under Application Experience, Autochk, and CEIP are Disabled.
      5. Smart Screen Filter is turned OFF in IE11 in Win7/8.1 and on the desktop in Win8.1
      6. Bing is not the default search engine in IE11 and IE11 is not my default browser.

      Windows Update Settings:
      1. CHECKED “Give me recommended updates the same way I receive important updates”
      2. CHECKED “Give me updates for other MS products”
      3. Windows Updates set to “Never check for updates (Not recommended)”
      4. ONLY hidden updates are telemetry related: Win7 KB2952664/3150513, 3021917, 3068708, 3080149; Win8.1 KB2976978/KB3150513, KB3044374, KB3068708, KB3080149. Unhide everything else.

      1 user thanked author for this post.
    • #1913926 Reply

      PKCano
      Da Boss

      Step 2: Run some troubleshooting to try to eliminate a few causes of failures.

      + Open an elevated Command Prompt (right click cmd.exe and Run as Administrator).
      Run chkdsk /f
      It will tell you it can’t run b/c the computer is on, do you want to run on reboot?
      Yes
      Exit the Command Prompt and reboot.
      Did it find/correct any errors?

      + Open an elevated Command Prompt
      Run SFC /scannow
      Did it find/correct any errors?

      + Reset Windows Update. Since you have had multiple installation failures, to be on the safe side we will delete the WU datastore. This will also delete you Update History (you have the screenshots for reference). It will NOT delete the list of installed updates.
      Open an elevated Command Prompt
      Run each of these commands, one after the other (you can copy/paste them to the prompt)

      net stop wuauserv
      net stop cryptSvc
      net stop bits
      Ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
      net start wuauserv
      net start cryptSvc
      net start bits

      Reboot your computer. Verify that the SoftwareDistribution.old folder exists.

      If there are problems updating here, we may have to run the Windows Update Troubleshooter. But for now, let’s see if we’ve done enough.

      1 user thanked author for this post.
    • #1913981 Reply

      PKCano
      Da Boss

      Step 3: Uninstall/Install updates manually

      Uninstall two telemetry-related updates
      In Installed Updates, Highlight, right click and uninstall KB3068708 (no need to reboot).
      Highlight, right click and uninstall KB3080149
      Reboot, wait 15 minutes after login to proceed.

      Install two updates necessary to use Windows Update.
      In an elevated Command Prompt run net stop wuauserv
      In the folder, double click on KB4490628 Servicing Stack and install.
      Wait 10 minutes for the install to complete, reboot, wait another 5 minutes.
      Double click on KB4474419 SHA-2 update and install.
      Reboot, wait 10 minutes.

      Did you have any problems with the uninstall/install?
      If you haven’t encountered any problems so far, you should be in a position to start using Windows Update. This will be a several step process and I need to put together the sequence. Check back on Thursday for “the rest of the story.” 🙂

      1 user thanked author for this post.
      • #1914149 Reply

        TheFamilyIT
        AskWoody Lounger

        @pkcano

        I’m the IT in the family in the sense that I am the only one that has a chance to understand this level of PC stuff in order to follow instructions.

        Before the questions. I can just click on Win7’s Action Center and click on the Image Backup and follow the prompts,right ?  Because what are the steps to make sure the full image backup will be also “.. (including boot sector and all partitions)..” like how you mentioned before??

        I have read through all the steps, I have some questions to help clarify about your steps:

        At what point do I turn back on my Ethernet/Local Connection (my PC’s internet is wired connection) ?

        In Step 1, how do I turn off Smart filter in IE11?  In #6, I never use Bing and IE only to preview Gif that I create. I don’t know what you want me to do in this part?  Also, when you say Checked, I assume that means enabling those boxes by clicking on them?

        In Step 2, when I run chkdsk /f  I type yes when it asks if I want to reboot/restart PC, right ? When you ask those questions in Step 2 if any errors was found. Do you want me to stop and update you ?

         

         

        • This reply was modified 1 day, 13 hours ago by  TheFamilyIT.
        • #1914171 Reply

          PKCano
          Da Boss

          Before the questions. I can just click on Win7’s Action Center and click on the Image Backup and follow the prompts,right ?

          I would use a third-party backup, not Windows. There are a number of free ones Macrium Reflect, EaseUS Todo to name two. There are discussions here about both of those – use the search in the woodgrain panel. You need to be sure you make bootable Rescue media (CD or USB) also in case you run into a no-boot situation. Your image should be on an external HDD.

          At what point do I turn back on my Ethernet/Local Connection (my PC’s internet is wired connection) ?

          When the instructions say to reconnect.

          #6, I never use Bing

          In IE Menubar\Tools\Manage add-ons\Search Providers – choose something beside Bing as default. If there is nothing else there, at the bottom left – find more search providers.

          In Step 1, how do I turn off Smart filter in IE11?

          In IE, Menubar\Tools\smartScreen Filter – turn off

          Also, when you say Checked

          There is a check mark in the box instead of it being empty.

          In Step 2, when I run chkdsk /f I type yes when it asks if I want to reboot/restart PC, right ? When you ask those questions in Step 2 if any errors was found. Do you want me to stop and update you ?

          When you run the troubleshooting in Step 2, write down the results. When you come back tomorrow, you can report the results.

          • #1914229 Reply

            TheFamilyIT
            AskWoody Lounger

            @pkcano

            I would use a third-party backup, not Windows. There are a number of free ones Macrium Reflect, EaseUS Todo

            Oh boy!…I am terrible in making choices. I feel like it’ll take me forever to read through discussions of each 3rd party Backup software and most likely there won’t be a clear answer as to which one is the best.  Which one do you use and which one(s) do you hear people use the most?

            Do I install 3rd pary backup, in my SSD or HDD ?  I use SSD for OS, downloads, and frequently used software.

            Why not use Windows to do back up? How crucial is it not to use it?

             

            I just looked over all the steps and I don’t see anywhere of when to reconnect to internet.

            You need to be sure you make bootable Rescue media (CD or USB) also in case you run into a no-boot situation.

            I’m scared now..How likely can this cause a no-boot situation?  Would it only happen while doing these steps or can it happen at any point in the future because I did all this steps?

            Also, if I did make a Rescue media last year. Do I need to make another one?   For Rescue Media, use Windows or 3rd party software?

            • #1914235 Reply

              PKCano
              Da Boss

              Any time you make changes to a computer, there is always a risk that something can go wrong. The Rescue media would be associated with whatever backup software is used. You will need to make your own decision on what backup software to use. I made some suggestions, or use Windows backup, but the choice is yours. And you will need to read and follow the instructions for that software, even if you use Windows backup. Or you can not make a backup at all.

            • #1914327 Reply

              TheFamilyIT
              AskWoody Lounger

              I know it’s late, so you can answer tomorrow. I did a google search to double check and I can’t find out if System Repair Disc is the same thing as creating a bootable Rescue Media ?  Also, for a Rescue Media, what size do I need? Since you said CD/USB I’m I right that I need no more than 4GB.

              I can’t find a clear answer as  to where to install a 3rd party backup software when PC has a SSD and HDD.

              Also, when I typed each of the 3rd party names in the search bar that’s in the wood grain panel. I didn’t really get a concentration of posts about only a particular backup software. I read as much as I could focus of what the search results gave… Posts were kind of helpful.

              • This reply was modified 1 day, 9 hours ago by  TheFamilyIT.
              • This reply was modified 1 day, 9 hours ago by  TheFamilyIT. Reason: wanted include an update with questions
            • #1914645 Reply

              PKCano
              Da Boss

              Just go ahead and use Windows backup. The Rescue disk you made a while back should be OK.

              Let me know when you have finished the first three steps and I will post the steps of the update process.

      • #1914160 Reply

        TheFamilyIT
        AskWoody Lounger

        @pkcano

        One more question, do I have to complete step 1-3 in one sitting? If not, at what points is it safe to stop and continue in another day?  (sorry for this additional post. I used up my only edit post )

        • #1914174 Reply

          PKCano
          Da Boss

          No you do not have to do all of it in one sitting/day. You can stop after any one of the tests – but don’t interrupt one while it’s running. If you have any questions about how to do something, come back and ask. I’m around most of the time.

          • #1914187 Reply

            TheFamilyIT
            AskWoody Lounger

            Ok, that’s good to hear. But, when you say that I can stop “..after anyone of the tests” I’m going to assume you mean I can stop for the day even after I rebooting/restarting and like instead of waiting 10-15 mins. I just continue in another day?

            • #1914211 Reply

              PKCano
              Da Boss

              When you do an operation that requires a reboot (like installing an update), the operation completes the first part before the reboot, but requires some time after the reboot to complete. So you have to give the computer the same time to finish the operation which can be after the reboot, or after a startup the next day.

              I am going to wait to post the next steps until you finish the ones above.

    • #1915312 Reply

      PKCano
      Da Boss

      You have to have finished Steps 1-3 before you proceed with Steps 4-6.

      We are going to try to use Windows Update for the rest of the updates. This is going to be done in three steps: Updates through October 2016 (before MS started the Cumulative updating with telemetry), updates up to and including December 2017 (before MS started the Meltdown/Spectre mitigation) and finally current to July 2019 (we’re not doing August 2019 yet).
      Connect the computer to the Internet.

      Step 4 Update to October 2016 (before MS atarted Cumulative patching).

      1. If Windows Update is set to “Never check,” you should be able to manually check for updates by clicking on the “Check for updates” link. This might take quite a while. If it doesn’t work the first time, try rebooting the computer and waiting till it’s finished starting up, and checking again. Then, if it doesn’t work, come back and we’ll try running the Windows Update Troubleshooter.
      Check for Updates.

      2. To avoid most of the telemetry updates, HIDE KB2952664, KB3150513, KB3021917, KB3022345, KB3068708, and KB3080149 if they are in the Important Update list. You will have to keep watching for these every time before you install updates.

      3. To be sure you get all the necessary updates:, HIDE the current “Security Monthly Quality ROLLUP for Windows 7,” (2019-08 Security Quality Monthly Rollup for Windows 7).
      Check for updates.
      HIDE the next earlier “Security Monthly Quality ROLLUP for Windows 7.”
      Check for updates.
      Repeat this procedure until you have hidden the “October 2016 Monthly ROLLUP.”
      NOTE: the later Rollups have yyyy-mm date (like 2019-08) at the beginning of the name. Those in 2016 – 2017 (October 2016) do not, they have the name of the month in the name.

      4. HIDE any other updates you don’t want to install (hardware drivers, anything that has specifically caused a problem with your PC, etc)

      At the top of the Important Update list, on the left side above the list, there is a check box that is a toggle. If you click on it, it unchecks all the boxes on the list. If you click on it again, it checks all the boxes. Click again, it unchecks the boxes.
      Be sure to HIDE KB2952664, KB3150513, KB3021917, KB3022345, KB3068708, and KB3080149 at each step if they show up.
      If there are no updates that match the description, move on to the next item.

      5. Using the box at the top, UNCHECK all the boxes in the Important Update list. Scroll down the list until you see updates labeled “Updates for Windows 7.” Manually check each box next to those updates. Click OK, and install those updates. Reboot.
      Wait 10 min, check for updates.

      6. In the Optional update list, check KB2670838 Platform Update and OK. In the Important update list, using the box at the top, UNCHECK all the boxes in the Important Update list. Scroll down the list and check any updates you see updates labeled .NET 4.5.2 or 4.6.1 ONLY (not .NET Rollups, not .NET Security), any additional  “Updates for Win7,” Manually check each box next to those updates. Click OK, and install those updates.
      Reboot,  wait 10 min, check for updates.

      7. In the Important updates, using the box at the top, UNCHECK all the boxes in the Important Update list. Scroll down the list until you see updates labeled “Update for User-Mode Driver Framework“, Update for Kernel-Mode Driver Framework,”  “Update for ActiveX Killbits“,and “Security Updates for Win7.” Manually check each box next to those updates. Click OK, and install those updates.
      Reboot,  wait 10 min, check for updates.

      8. In the Important update list, using the box at the top, UNCHECK all the boxes in the Important Update list. Scroll down the list until you see updates labeled “Security Updates for MS .NET,” “Rollup for .NET,”  any leftover Updates or Security updates for Win7 and any updates for Internet Explorer. Manually check each box next to those updates. Click OK, and install those updates.
      Reboot,  wait 10 min, check for updates.

      9. On the left in Windows Update click on “Restore hidden updates”. CAREFULLY check only one and UNHIDE the  “October 2016 Security Monthly Quality ROLLUP” KB3185330
      Click OK
      Check for updates
      Install the October 2016 Rollup and any other updates that appear in the Important Update list.

      This should bring the computer up to date as of October 2016. I have included the October 2016 Rollup in this step because it did not contain telemetry, but it did include some important updates.

      Let me know when you have finished this step.

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: Asking for a Favor About updating my Win 7

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.

    Cancel