Buggy Windows 7 Monthly Rollup KB 4088875 — no acknowledgment from Microsoft

[woodyDa Boss]

Microsoft no longer installs the Win7 March Monthly Rollup automatically, but KB 4088875 is still available in the Update Catalog. Aren’t you glad you
[See the full post at: Buggy Windows 7 Monthly Rollup KB 4088875 — no acknowledgment from Microsoft]

6 users thanked author for this post.

GoneToPlaid, Pepsiboy, OscarCP, JDeC, AJNorth, MrBrian

[anonymous]

Were the amount of complains bigger or smaller before the “Rollup updates” and “WaaS” were introduced?

I have KB4088875 installed while it was still available and checked by default, no problems so far, just like with the BIOS update for my ASRock motherboard that I had that was pulled as well (there’s now a newer fixed BIOS so no big deal), didn’t get any BSODs.

Regardless, I can’t trust anyone at this point! I’ll just stay here with my Win7 and 98SE…and later I’ll just install Arch Linux and will deal with even more problems. I have a feeling Linux problems are….more tolerable than Windows problems.

1 user thanked author for this post.

lurks about

[AscarisAskWoody MVP]

If you are not already aware of whether Linux problems are or are not more tolerable than Windows ones, Arch is probably not the distro of choice.  Someone the other day remarked that Windows was like a Lego set while Linux was like a mixture of bricks… in that analogy, Arch would be like bags of plastic pellets, molds for the bricks, and an injection molding press.

Group L (Linux): KDE Neon User Edition 5.14 (based on Ubuntu 18.04) + Windows 7 in Virtualbox VM

1 user thanked author for this post.

Cybertooth

[anonymous]

I do have experience with Linux in general, never used Linux on my main PC though and as a daily OS. I do like tweaking though, so Arch is best option. I never used XP without nLite, and will definitely do NTLite for my daily Windows 7…

[lurks aboutAskWoody Lounger]

I use Manjaro and Antergos, both Arch derivatives. I the only update issues I have had is with AUR packages (user maintained, semi-official repository). Mostly these issues have been not having proper credentials loaded or incorrect hashes for the package. When this happens, the update stops, allowing to sort out the problem with a still functioning system.

Also, patches are never installed automatically but only after you have given positive approval. The Arch online documentation is very detailed.

[anonymous]

IOW, ArchLinux and Debian are for tech-geeks.

[MrBrianAskWoody MVP]

The fact that a given update is unticked by default in Windows Update doesn’t necessarily mean that those getting updates automatically aren’t getting the update.

[woodyDa Boss]

How so?

Latest reports say that the patch doesn’t even show up in Important. But it’s still in the Catalog.

Wonder if it’s in WSUS?

[MrBrianAskWoody MVP]

Whether a given update is ticked by default in Windows Update apparently is a different setting than whether the given update installs automatically. I also made the mistake of conflating the two in the past.

[MrBrianAskWoody MVP]

As of about 10 minutes ago, KB4088875 is listed for me in Windows Update as an unticked-by-default update. It’s possible that others might not see KB4088875 at all due to Microsoft’s metadata, which was apparently changed for KB4088875 on March 14. (March 14 is the date listed for KB4088875 in the Catalog.)

1 user thanked author for this post.

woody

[anonymous]

As of now, 10:20 Pacific time, the March Windows 7  Monthly Roll-up, KB4088875, does not show up on my Windows 7 computer through Windows Update.  All previous monthly roll-ups have installed without any problems.

KB2952664 now for the first time shows up as important and is checked.

[anonymous]

Still showing in my WSUS list, listed as “Important.”

[MrBrianAskWoody MVP]

I know this because I observed it with other update(s). I started a topic about it at AskWoody around a year ago, probably posted as anonymous.

[MrBrianAskWoody MVP]

I found the topic: Tip: Some unchecked Windows updates are installed when using automatic updates.

2 users thanked author for this post.

GoneToPlaid, woody

[woodyDa Boss]

Bizarre!

Is there any indication that the unchecked KB 4088875 is being installed via Windows Update?

Will wonders ever cease…..

[MrBrianAskWoody MVP]

“Is there any indication that the unchecked KB 4088875 is being installed via Windows Update?”

Yes there is indeed if I am not mistaken. Using one of the scripts at https://www.askwoody.com/forums/topic/how-to-view-detailed-information-about-a-given-windows-update/ modified to use this update search string, KB4088875 has AutoSelection=1 and AutoDownload=2. Most updates have AutoSelection=0 and AutoDownload=0. I believe that for those computers for which KB4088875 hasn’t been blacklisted, and also have automatic Windows updates turned on, KB4088875 will be automatically downloaded and installed.

• This reply was modified 7 months ago by  MrBrian.

1 user thanked author for this post.

Elly

[MrBrianAskWoody MVP]

Whether a given update is automatically ticked by default in Windows Update might be determined by the given update’s property AutoSelectOnWebSites or AutoSelection. Whether a given update is automatically downloaded and installed apparently is determined by a different property – perhaps the AutoDownload property. For update properties, also click on IUpdate, IUpdate2, IUpdate3, IUpdate4, and IUpdate5 at Windows Update Agent (WUA) API Reference.

2 users thanked author for this post.

Jan K., woody

[Jan K.AskWoody Lounger]

Am I the only one missing a button?

At the bottom of the above (interesting!) links, I see a question “Is ths page helpful” with a “yes” and a “no” button…

Instead I would like to see “Is this page” and then 3 buttons, “Helpful”, “Not helpful”, “Scary”.

1 user thanked author for this post.

OscarCP

[anonymous]

You forgot “headache”. 🙂

1 user thanked author for this post.

Bob99

[laidbacktokyoAskWoody Lounger]

Well,  as usual I gave KB4088875 a try install thru win7sp1x64 update center, and surprisingly towards a topic of this thread I must report that it seems performing better than all of its 5 predecessors of 2018 including KB4091290.

One of issues reported by me earlier here:

https://www.askwoody.com/2018/microsoft-releases-kb-4091290-a-fix-for-the-win7-server-2008r2-scard_e_no_service-bug/#post-171682

as dwm.exe irregular error in logs has expectedly gone due to some windows graphics component refresh included, but the 2nd one as the same irregular and annoying leftovers of the already closed windows in win7 taskbar is yet present, although again it occurs less frequently than before.

Also:

I use static IP but can’t report any issues here, and while I don’t use VMware VBox performs just fine.

KB4088875 doesn’t contain any microcode updates for older CPUs like Intel T9500 CPUID 10676.

Anyhow now it’s removed & put to hidden list but I bet that any coming March Preview of Rollup will likely be acceptable for a permanent deployment.

Rgds,

• This reply was modified 7 months ago by  laidbacktokyo.

5 users thanked author for this post.

abbodi86, flackcatcher, AJNorth, woody, MrBrian

[MrJimPhelpsAskWoody MVP]

A Stop error occurs if this update is applied to a 32-Bit (x86) machine with the Physical Address Extension (PAE) mode disabled.

This might be a good thing. PAE mode has been around for a long time, so there has been plenty of time for someone to have enabled PAE mode on their computer. As I recall, PAE mode is designed to provide more security against malware. So I would ask, why hasn’t PAE mode been talked about much over the years, not only by Microsoft, but also by others? In all honesty, this is the first time I have heard much about PAE mode and the security benefits of it.

Something like this — a patch which has security benefits, but also has the potential for causing problems — makes a strong case for the way Microsoft used to do patching — as individual patches, rather than as one big rollup. In this way, someone could decide if they want that patch or not.

Group "L" (Linux Mint)
with Windows 8.1 running in a VM

[anonymous]

The reason is that PAE is not talked about much is that the PAE mode is generally not a relevant option anymore for most systems.  It is almost always on or superseded.

1. The standard 64-bit setup for long addresses (64 bits) already has a PAE like structure as part of the design.
2. Windows has required PAE since Windows 8, effectively meaning they drop support for non-PAE entirely when Windows 7 goes EOL.  Additionally 7 will enable it automatically if DEP is enabled using hardware support.
3. Most Linux distributions have a kernel which enables PAE by default as long as the system is capable of using it.
4. Macs have supported PAE since Tiger, as of Lion 32-bit operation is no longer supported.

In other words most systems either enforce / default to PAE or use an addressing mode designed for 64-bit which has the same benefits already.

The whole thing is just another example of Microsoft not testing patches on more unusual or niche setups, in this case older machines.

 

2 users thanked author for this post.

MrBrian, flackcatcher

[anonymous]

Any processor that supports the NX/XD bit will have PAE mode enabled by default in 32-bit mode. Even the old Pentium M supports XD, so it runs in PAE mode on XP SP2 or later.

So the only users who I think would be affected by this bug would be those who intentionally disabled PAE for whatever reason, or those with very old setups such as Athlon XP or Pentium 4 processors.

1 user thanked author for this post.

MrBrian

[EPAskWoody Lounger]

not all Pentium Ms & Pentium 4s have XD & PAE support, mr anonymous.

many of the “Prescott” & “Cedar Mill” series of P4s have XD & PAE support:
https://en.wikipedia.org/wiki/Pentium_4
the early series like “Willamette”, “Northwood” & “Gallatin” don’t have XD and PAE support.

Certain “Dothan” series of 32bit Pentium Ms have XD & PAE support (starting from 730 to 780):
https://en.wikipedia.org/wiki/Pentium_M
The “Banias” series do not have XD support.

• This reply was modified 7 months ago by  EP.
• This reply was modified 7 months ago by  EP.

1 user thanked author for this post.

MrBrian

[anonymous]

Hence why I said that Pentium 4 users would be affected. Only the later ones support NX.

[David FAskWoody Lounger]

I just checked and I’m still seeing it here unticked (In UK)

[HeavenlyAskWoody Lounger]

I just checked and it has disappeared from  the updates awaiting to be installed I only have the  Windows malicious tool  remover left  ticked up awaiting to be installed. KB 4088875 was there ticked up on the 14th but today the 15th it has gone  (I am in UK)

1 user thanked author for this post.

Elly

[RobbojAskWoody Lounger]

On 12th I tested KB4088875 in my Group A Win7 32bit test machine and couldn’t find any faults.
So this morning I installed in all my Win7 Group A Win 7 32bit and 64 bit machines.
Again Ive not seen any problems.
Why not live dangerously, like me and install KB4088875.
Your PC is only a machine that can be repaired.

[The Surfing PensionerAskWoody Lounger]

That depends on how much you have at stake. I’m just a little old lady who lives alone and thinks technology’s wonderful when it works, but what skills I have are all self-taught. Because I co-ordinate a voluntary organisation, I spend a large part of each day pouring over a hot computer. If it does what I want, I’m happy, but a software problem beyond my ken can bring everything to a halt and my only recourse is to call in a P.C. technician. Before evolving a ‘Group B’ approach, I found myself ringing my local computer engineer so regularly he started arriving with a bunch of flowers, clearly getting the wrong message. I now consult somebody else who is happily married, but – Heaven knows! – I infinitely prefer to avoid the stress and expense by keeping all updates to an essential minimum. The system seems to be working.

 

• This reply was modified 7 months ago by  The Surfing Pensioner.

4 users thanked author for this post.

OscarCP, johnf, lizzytish, Cybertooth

[BobbyBAskWoody Lounger]

KB4088875 appeared Tuesday in Win7x86 & 64 machines, and promptly disappeared today when a check for updates was run. The Win7x86 never shuts down as a rule and it had already gone.

• This reply was modified 7 months ago by  BobbyB.

[Bill C.AskWoody Lounger]

It has disappeared here also. Win7-64Pro_SP1.

[walkerAskWoody Lounger]

@bobbyb:   This question is one which I should have asked the first time I saw it listed.

Exactly what is:

Spectre and Meltdown

I have no idea what it is, however have tried to keep up with the various messages posted here.   Thank you to all!

[woodyDa Boss]

Good explainer here:

https://blog.barkly.com/meltdown-spectre-bugs-explained

1 user thanked author for this post.

walker

[walkerAskWoody Lounger]

@woody:  Thank you so much for the link.    I intend to read it thoroughly, and hopefully I will understand exactly what this (Spectre and Meltdown) is.   I’m Win 7, Home Prem., x64, no sophisticated programs running that I am aware of.   Group A.  Have not checked the updates for a few days however I have not seen that KB4088875 listed in any updates I have done previously  (up to March 10th).

Thank you once again for your help.  Hoping that “someday” I will have the ability to understand more.      We all appreciate your outstanding help  – – – – It is truly WONDERFUL!    🙂

 

[OscarCPAskWoody Lounger]

I don’t know if it is checked or unchecked now, because I have, as invariably with all and any previous such rollups, hidden this as soon as it showed up.

As in the past, I’ll later install the Win 7 SP1, x64 Security Only and the IE11 Security Cumulative from the Catalog. The MS Malware Removal Tool, the .Net and Office patches now being offered to me by Windows Update (set to: tell me about the patches, but let me decided when and what to install), I’ll install later, when the cries of the badly injured and the dying are heard no more.

Don’t agree with my approach?

So sue me.

Be Group B, or die!

2 users thanked author for this post.

Pepsiboy, Cybertooth

[rontpxz81AskWoody Lounger]

KB4088875 appeared in my Windows Update for Windows 7 64 bit yesterday March 14, 2018, listed as Important.  Installed, no problems I’m aware of yet.

• This reply was modified 7 months ago by  rontpxz81.

[anonymous]

On 3/14/18, I installed KB4088875 for Windows 7 since it was shown as “important”. Today, when I tried to access a website I have always used, I see a message that says “this page can’t be display”. When I try to “fix” the connection problems, I see the following: “The remote device or resource won’t accept the connection.” Is it possible that this update could be causing the problem? It doesn’t matter which browser I use. The link/website will not open. Actually, there a other websites that I’m also having the same issue with. I use my desktop PC for personal use only and I don’t know what could be causing this problem. Any feedback would be appreciated. HELP!!

[Susan BradleyAskWoody MVP]

Can you share the web site?  I would use a service like https://downforeveryoneorjustme.com/ to check if it’s them or you.

Susan Bradley Patch Lady

[Jan K.AskWoody Lounger]

Robboj wrote:

On 12th I tested KB4088875 in my Group A Win7 32bit test machine and couldn’t find any faults.
So this morning I installed in all my Win7 Group A Win 7 32bit and 64 bit machines.
Again Ive not seen any problems.
Why not live dangerously, like me and install KB4088875.
Your PC is only a machine that can be repaired.

Eerh… of course you’re right. Only a machine and nobody gets killed or wounded and it usually can be “unpatched” in so or so many minutes/hours…

But if you have work to do and/or clients are waiting, then it may be a bit irritating not being able to. Been there, done that…

Big fan of a boring and un-adventful life. Ms-Defcon system helps, Ms does not…

4 users thanked author for this post.

OscarCP, BobbyB, lizzytish, Cybertooth

[abbodi86AskWoody MVP]

They did acknowledge the issue in article:

A new Ethernet virtual Network Interface Card (vNIC) may be created with default settings in place of the previously existing vNIC, causing network issues after applying this update. Any custom settings on the previous vNIC are still persisted in the registry but unused.
Apply the resolution documented in KB3125574 (Convenience Rollup) for Known issue 1:

IP address settings are lost after applying this update.
Microsoft is working on a resolution and will provide an update in an upcoming release.

2 users thanked author for this post.

woody, MrBrian

[OscarCPAskWoody Lounger]

“Microsoft is working on a resolution and will provide an update in an upcoming release.”

Well, OK, good for them: that keeps them occupied, out of trouble and in gainful employment, I suppose.

 

[anonymous]

“Microsoft no longer installs the Windows 7 March Monthly Rollup automatically, but KB 4088875 is still available in the Update Catalog. Aren’t you glad you held off on patching this month?”

No, I installed it, it works fine. Everyone except Woody seems to think the problems only effect servers configured with fixed IP addresses.

[woodyDa Boss]

anonymous wrote:

Everyone except Woody seems to think the problems only effect servers configured with fixed IP addresses.

See Microsoft’s acknowledgment of the problem.

2 users thanked author for this post.

Elly, OscarCP

[anonymous]

Where is this acknowledgement?

You still can’t expect me to regret installing it. It didn’t break my laptop, didn’t break my desktop and didn’t break my 32 bit Windows VM on my desktop either.

[anonymous]

It looks like it has been pulled, no longer showing up on my unpatched Windows 7 machines.

[anonymous]

Hi our till systems works on Win 7 32bit but when the patch KB4088875 was installed the system started up and after a minute or 2 the start rebooting.

Starting in save mode and uninstalling the patch leaves us with a very slow sytem.

[anonymous]

Win7ProX86 Group “B” KB408875 disappeared today too, and remains “disappeared”…but KB4075211 (Feb Preview rollup) appeared as “optional”…Bizzare.  Going to wait another few days until everything stops “changing”…I know, “You may wait longtime….”   ..Dreamtime?  MS is making me crazy.

[MrBrianAskWoody MVP]

Testing within past hour: On a virtual machine, this update is not listed in Windows Update. On my physical computer, this update is listed but unticked by default in Windows Update.

[CraigS26AskWoody Lounger]

I, too, No Longer have the Chk’d KB4088875 – BUT – I have a REPEAT of  [JAN – FEB] 4.7.1 .Net Frameworks  – Although – (History shows JAN Kb4055532 Inst’d 2/8 — FEB Kb4076492 was Inst’d 3/10 —

Net Frameworks not the Lead Actor now but hopefully some comments will surface on what to do about the Repeat.

WU Grp A - Win 7-64 Hm Prem / Hm-Stdnt Office '10 / i5 Sandy Bridge Gen 2 / NO Java or Flash

[BryanPAskWoody Lounger]

I just checked with both a physical and VM Win7 boxes, and neither 4088875 or 4088878 was offered, FWIW.

[EspressoWillieAskWoody Lounger]

One of my Win7 machines is set to download updates but ask me if and when to install. Interestingly, the 4088875 was checked, even after I checked for updates a few times yesterday (15th). I finally decided to reset my windows update folder (turn off Windows Update service, rename the SoftwareDistribution folder, restart Windows Update service).  Lo and behold, after checking for updates, 4088875 did not even show up.

Cheers!!
Willie McClure
www.datarim.com
Talk's cheap, takes money to buy whiskey.

[anonymous]

“You really have to wonder who’s testing this stuff.”  Actually, we already know; their customers are testing it!  Nadella sent the QA department packing and replaced them with “telemetry” so now the process is, push out a patch, and see what happens.

5 users thanked author for this post.

Cybertooth, Elly, HiFlyer, OscarCP, Seff

[zero2dashAskWoody Lounger]

You really have to wonder who’s testing this stuff.

No one, that’s problem #1. 😀
Problem #2 is that all the good patchers are now working on Win10; the cleaning crew churns out the 7 & 8.1 patches after they clean the toilets. 😀 😀

2 users thanked author for this post.

OscarCP, HiFlyer

[The Surfing PensionerAskWoody Lounger]

Well, Anonymous who submitted # 176362 is happily testing them, at any rate. Maybe that’s part of the problem?

[GeoAskWoody Lounger]

Mine it marked important but unchecked in WU.  I have it set for  check but let me choose to download and install.

[David FAskWoody Lounger]

Still showing here in UK as unchecked at 02:25 GMT 17/03/2018

 

Attachments:

You must be logged in to view attached files.

[Chris BAskWoody Lounger]

For those people interested in the hit to systems from the Meltdown and Spectre patches, here is the result of my testing. The system is a 6 year old Dell Inspiron 620, Win7 Home Premium 64 bit, i5-2310 CPU, 4GB RAM. The tests were done first before any Meltdown patches, then after the Feb rollup (but not the March one).

Passmark test     05-Jan-18             17-Mar-18         Change

Overall rating               1,754.9                    1,573.6             -10.3%
CPU Mark                     6,104.7                   6,047.8              -0.9%
2D graphics                    604.2                        595.5              -1.4%
3D graphics                     515.9                         514.6             -0.3%
Memory                        1,636.3                      1,426.9           -12.8%
Disk mark                        747.3                         563.5           -24.6%

Frankly, I am a bit shocked by the Disk and RAM hit, but we will have to see whether the hit is noticeable in practical usage.
Chris B

Edit to remove HTML from copy/paste.

Please remember to use the ‘text’ tab in the post entry box when you copy/paste.

Chris

4 users thanked author for this post.

AJNorth, laidbacktokyo, Cybertooth, MrBrian

[EPAskWoody Lounger]

hey Chris B. My family also owns a Dell Inspiron 620 desktop computer!
BUT our 620 originally came with an Intel i5-2310 CPU [upgraded this to an i5-2500 CPU], Win7 SP1 Home Premium x64 [upgraded to Win7 SP1 Ultimate x64] with 6Gb of RAM (that’s right, SIX!) > eventually upped the RAM to 8Gb – also has a 1TB hard drive.

The so called meltdown-spectre patches made very little or no performance drops; I made the HW upgrades long before those patches ever came out.

Looks like Windows Update is no longer offering the KB4088875 update on my family’s Dell 620 computer after doing recent WU searches. I only see that update thru the MS Update Catalog site.

• This reply was modified 6 months, 3 weeks ago by  EP.

[anonymous]

Just wondering: (it is Monday 19th now): anyone seen this update as ticked (selected) again?

[woodyDa Boss]

There still seems to be confusion about that very topic – and Microsoft hasn’t enlightened us with an official position.

[Author]

Posts