News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • MS-DEFCON 3: Get your September patches installed — but stick to the mainstream patches

    Home Forums AskWoody blog MS-DEFCON 3: Get your September patches installed — but stick to the mainstream patches

    Viewing 54 reply threads
    • Author
      Posts
      • #1971410 Reply
        woody
        Da Boss

        Lots of people will tell you that you need to install strange (very strange!) patches to protect yourself from the “Exploited: Yes” zero day patch for
        [See the full post at: MS-DEFCON 3: Get your September patches installed — but stick to the mainstream patches]

        12 users thanked author for this post.
      • #1971414 Reply
        anonymous
        Guest

        which “services” and so should be disabled this time as september “security only” (NOT) patches for both win7 and win8.1 have spy-/malware included?

        • #1971422 Reply
          PKCano
          Da Boss

          Woody’s ComputerWorld article will be out shortly with patching instructions. Watch fot the link in the main blog article.

      • #1971463 Reply
        Microfix
        AskWoody MVP

        More good news on the reliably boring Win8.1 Pro x64 patch front again this month on 3 devices. Initially installed on one device 11th Sept, the others followed a few days later.

        kb4516115 – September Adobe Flash Security update.
        kb4516067 – September SQMR for x64 systems; reboot req’d.
        kb4512938 – September SSU; revealed itself once update queue was empty; rebooted anyway.

        SFC /verifyonly displayed no integrity violations on any device.
        Fully WU (Group A) patched and ready for the next onslaught 😉

        Win 7 Pro x64 and x86 installs have shown no issues this month either (Group A) WU SMQR patching.

        note: I’ve not installed the IE zeroday patch from the catalog on ANY device and if it’s THAT important, it should be rolled up within Octobers SMQR.
        These are all hardware installs, not virtual m/c’s

        Win8.1 Pro | Linux Hybrids | Win7 Pro O/L | WinXP O/L
        3 users thanked author for this post.
        • #1974215 Reply
          Microfix
          AskWoody MVP

          Checking in on additional Win 8.1 Pro x64 SMQR kb4524156 released Oct 3rd.
          Installed via WU; reboot required.
          Usual checks for telemetry, none activated 🙂
          SFC /verifyonly displayed below:
          SFCresult

          Checked USB canon pixma printer (test page) and pdf documents.
          Still good here, might just leave the rest ’till the 8th.

          Win8.1 Pro | Linux Hybrids | Win7 Pro O/L | WinXP O/L
          Attachments:
          1 user thanked author for this post.
      • #1971475 Reply
        abbodi86
        AskWoody_MVP

        Regarding SSU KB4516655 metadata revision

        they corrected the situation and removed SSU KB4490628 supersedence

        meaning, SSU KB4490628 is still the active primary SSU, and needed to install sha2-only updates (along with KB4474419)

        5 users thanked author for this post.
        • #1971665 Reply
          Charlie
          AskWoody Plus

          And I was so hoping this month was going to be easier than last month.

          So in addition to “all the regular” SO updates and the 2nd ver. of KB4474419, it looks like now I also need KB4516655 and maybe KB4490628 in addition?

          After last month’s nail biter, I was under the impression that all I would need for the SHA-2 updating this month would be KB4474419.  I thought I was keeping up with things, but I guess not.

          Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

          • #1971674 Reply
            PKCano
            Da Boss

            You should already have SSU KB4490628 from before. But you always need the latest Servicing Stack, which is KB4516655.

            3 users thanked author for this post.
            • #1971750 Reply
              Charlie
              AskWoody Plus

              Okay thanks, looks like I’m okay except for KB4516655 which by the way is dated 9/30/19 in the Microsoft Update Catalog.  That must explain why I didn’t know about it.  I’m assuming that I need these to do all the Sept. updating, and not just the “chicken little” updates right?

              Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

          • #1971754 Reply
            abbodi86
            AskWoody_MVP

            KB4516655 is not needed for anything currently, unless you are business customer and want to test and install Extended Security Updates MAK key

            3 users thanked author for this post.
            • #1971764 Reply
              Charlie
              AskWoody Plus

              No I’m not a business customer, just a regular bloke.  Thanks very much.

              Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

      • #1971603 Reply
        fernlady
        AskWoody Lounger

        On September 23rd, Installed kb4474419 (V3) restart required, kb4516655 restart not required but did it anyway.

        Today Installed kb4516065 restart required, installed kb4514602 restart not required but did it anyway.

        As far as I can tell everything is okay.

        Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller

        5 users thanked author for this post.
      • #1971617 Reply
        honx
        AskWoody Lounger

        i installed so patch kb4516033 (win7), so patch kb4516064 (win8.1) and mainstream ie patch kb4516046 (NOT kb4522007) on both win7 computer and win8.1 notebook.

        after reboot i installed september office 2010 patches, .net, msrt, flash (win8.1) and another (3rd?) incarnation of kb4474419 (win7).

        i skipped outlook 2010 patch kb4475604, as it’s not part of september updates, this one belongs to october. and this one is not titled “security update”, it’s only called “update”. on win8.1 notebook it was “important” and checked, so i had to uncheck it.

        on win7 computer “application experience” and “customer experience improvement program” remained deactivated after installation of NOT “security only” kb4516033.
        on win8.1, after installing NOT so kb4516064, i also deactivated everything within “application experience” and “customer experience improvement program”.

        PC: Windows 7 Ultimate, 64bit, Group B
        Notebook: Windows 8.1, 64bit, Group B

        4 users thanked author for this post.
      • #1971663 Reply
        Seff
        AskWoody Plus

        When Woody says:-

        “And in the middle you have a billion or two Windows customers who really don’t care. They just want their computers to work and not suddenly get whopped by a WannaCry wannabe.”

        I would add:-

        “or an unnecessary or inadequately tested update.”

        Thanks as always to Woody and the Team for watching over us!

      • #1971765 Reply
        barcud
        AskWoody Plus

        So, not sure what to install.

        I have 1903 – 18362.267, and SSU KB4515530.

        I usually download the latest (approved by Woody) from the Microsoft Update Catalogue. – I don’t quite trust Windows Update.

        So exactly which updates do I need now?

        • #1971811 Reply
          PKCano
          Da Boss

          I think the intention is to install the Patch Tuesday update and not the two previews KB4515216 or KB4517211 that have caused problems. You will need the Servicing Stack KB4515383 also. Plus IE11 Flash snd .NET Rollup.

          1 user thanked author for this post.
          • #1974161 Reply
            barcud
            AskWoody Plus

            @pkcano, Help .

            No problem installing the SSU – KB 4515383.

            But, once I had installed KB4515384, I lost my start menu, and search box in the task bar.

            (I also noticed I was one settings icon short too – sorry didn’t work out which one.)

            An uninstall of KB4515384 restored start menu, search and a full set of Settings icons.

            So, still on 18362.267.

            Any ideas ?  Should I carry on and try to install:

            IE11 – KB4516115

            .NET – 10 Sept – KB4514359 or

            26 Sept – KB4522738?

            • #1974207 Reply
              PKCano
              Da Boss

              Hold on – Thursday was crazy. We should hear from Woody/Susan today (10/4) about the updates that were released out-of-band yesterday. They will provide guidance.

              1 user thanked author for this post.
      • #1971770 Reply
        Speccy
        AskWoody Lounger

        Heads-up (in case you haven’t noticed yet): Windows Defender also got a new Antimalware Client (Version 4.18.1909.6) yesterday. Same engine (1.1.16400.2), Quick and Full scans seem to be working fine with current anti malware definitions (1.303.728.0 as I write this – more help about this specific subject in my previous post).

      • #1971810 Reply
        DrBonzo
        AskWoody Plus

        Last weekend in a what the heck moment (no disrespect to Woody’s Defcon system) I installed on one Win 7 starter 32 bit and two Win 7 Pro SP1 64 bit the following in the order given with a restart after each:

        The latest version of KB4474419 (SHA-2), KB4516655 (SHA-2), KB4522007 (the out of band IE 11 patch – I skipped over the in band IE 11 patch, KB4516046), and KB4516033 (Security Only). All were down loaded from the catalog. I’m in the habit of restarting after every patch even if it’s not required.

        Everything is fine/normal (not even Windows Media Player was affected).

        4 users thanked author for this post.
      • #1971868 Reply
        Charlie
        AskWoody Plus

        It seems like a lot of business customers frequent this site, everyone is getting and installing  KB4516655.

        Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

      • #1971931 Reply
        OldBiddy
        AskWoody Plus

        In my Windows Important Updates, I only see the September Security rollup KB4516065, September Security Update KB4474419, and the September Security rollup for .NET. It’s ok to only install these important updates then?

        Win 7 Home x64 Group A

      • #1971935 Reply
        CADesertRat
        AskWoody Plus

        I’m on W10 Pro 1809 and from Woody’s article on Computer World, I guess I’ll go with option 2 which is WU. I did go ahead and get the SSU from the catalog though, KB 4512577 and installed it. It seems a bit odd to me that it’s a lower # than the last SSU I installed which was KB 4512937 on 9/6/19.

        Don't take yourself so seriously, no one else does 🙂
        4 Win 10 Pro at 1909 (3 Desktops, 1 Laptop).

        • #1973184 Reply
          CADesertRat
          AskWoody Plus

          Cloned my NVME and updated (with WU) 1 of my W10 Pro 1809 computers this morning which brought me to 17763.737. So far all is well on this updated computer.

          KB 4516550 .net cum. 3.5/4.8, KB 4514601 .net cum. 3.5/4.8, KB 4516115 Flash Player, KB 4512578 cum. update 1809.

          Don't take yourself so seriously, no one else does 🙂
          4 Win 10 Pro at 1909 (3 Desktops, 1 Laptop).

          • #1973440 Reply
            CADesertRat
            AskWoody Plus

            Interesting, out of 3 computers this morning  (all started as W10 Pro 1809 17763.678) I have gotten different updates on each computer, normally I get the same updates.

            Computer 1- KB 4516550 .net, KB 4514601 .net, KB 4516115 Flash, KB 4512578 cum. 1809.

            Computer 2- KB 4514601 .net, KB 4516115 Flash, KB 4512578 cum. 1809 (no KB 4516550)

            Computer 3- HP laptop about an hour after other computers, KB 4524148 cum. 1809 (no .net or Flash)

            Computer 4- Hasn’t gotten any updates yet.

            Don't take yourself so seriously, no one else does 🙂
            4 Win 10 Pro at 1909 (3 Desktops, 1 Laptop).

            • #1973478 Reply
              CADesertRat
              AskWoody Plus

              I just tried my HP Deskjet Pro 8100 printer on computers 1 & 3 and it still prints (at least so far).

              Don't take yourself so seriously, no one else does 🙂
              4 Win 10 Pro at 1909 (3 Desktops, 1 Laptop).

              • #1974399 Reply
                CADesertRat
                AskWoody Plus

                Update: Computer 2 got KB 4524148 last night and computer 1 got KB 4524148 this morning and so far, computer 1 still prints to an HP Deskjet Pro 8100 Wireless, My girlfriends computer 2 still prints to an HP Deskjet Pro 8600 AIO wireless.

                Don't take yourself so seriously, no one else does 🙂
                4 Win 10 Pro at 1909 (3 Desktops, 1 Laptop).

      • #1971992 Reply
        anonymous
        Guest

        ? says:

        so, if i have KB4474419-v2, and KB4490628 can i install KB4516046-IE or do i need KB4474419-v3, and KB4516655 before the September IE patch? or do i need to just give it up….

        • #1972030 Reply
          PKCano
          Da Boss

          @abbodi86 says you don’t need KB4516655 right now, KB4490628 is sufficient. You may not need KB4474419-v3, but I would go ahead and install it anyway.

          See this discussion (several replies there too).

          1 user thanked author for this post.
          • #1972034 Reply
            fernlady
            AskWoody Lounger

            So, should I uninstall KB4516655 or leave it?

            Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller

            • #1972036 Reply
              PKCano
              Da Boss

              No, leave it. It is not a problem.
              It is just not required right now according to @abboei86.

              2 users thanked author for this post.
          • #1972032 Reply
            anonymous
            Guest

            ? says:

            otay! thank you PK, and please wake me when this bad dream is finally over…

          • #1972299 Reply
            Linda2019
            AskWoody Plus

            servicing stack 4516655 has not come in with the Windows update service for September.  should it have?

            • #1972813 Reply
              PKCano
              Da Boss

              KB4516655 is a Servicing Stack update. Because Servicing Stacks have to be installed exclusively (by themselves), thee will not show up in the Windows Update Important update queue until/unless there are no other pending updates (checked or unchecked). That means you have to install all the other pending updates in the Important queue or hide them. The queue has to be otherwise empty.

              1 user thanked author for this post.
              • #1973616 Reply
                Linda2019
                AskWoody Plus

                Thank you.  The only thing holding me.up is The .NET 4.8 offering.  But it arrived via Windows update unchecked.  Any word on if there are any problems with it?

              • #1973625 Reply
                PKCano
                Da Boss

                We do not recommend installing .NET 4.8 on Win7 or Win8.1 at this time unless you are using an application that absolutely needs it.

                2 users thanked author for this post.
              • #1974859 Reply
                Linda2019
                AskWoody Plus

                Thanks so much.  Sorry to trouble you,   the .NET Rollup KB4514602 for 4.7.2 would be okay then?

              • #1974945 Reply
                PKCano
                Da Boss

                The update is OK if you have .NET 4.7.2 installed on the computer.

      • #1972158 Reply
        wvlord2
        AskWoody Plus

        A real struggle with these last patches even with a 7 day delay on a stock machine. Had problems printing to my Canon MX series printers both wireless and USB. MS Troubleshooting found no problems. Finally I realized it had to be the newer .net framework versions messing with the printers. I eventually reset the printers by deleting and adding back the drivers and then restarting and that cured the issue. Why this happened and wasn’t caught before rollout caused an unwelcome 3 hour trouble shooting delay in three computers work.

        2 users thanked author for this post.
      • #1972248 Reply
        GoneToPlaid
        AskWoody Lounger

        Nice to be at defcon 3 for a little while.

      • #1972266 Reply
        Linda2019
        AskWoody Plus

        Read the article.  As usual, Woody mentions to not check any unchecked patches.  NET Framework 4.8 (KB4503548) is unchecked.  Has there been any problems with it?

      • #1972374 Reply
        anonymous
        Guest

        Win7 x64 Group B(W). Did the IE early update after installing the two servicing stack updates required. No intention of installing the SO with telemetry after the networking probs I had after the earlier SO with telemetry. Checked the Ghacks site and couldn’t find a .Net SO for Win 7 listed there although available for 8.1. Can anyone confirm none exists? My machine runs 4.6.1. Only do SO’s after a .Net rollup messed up graphics programs ~ 18 months ago and this box runs DxO for RAW image development. Thanks.

        • #1972814 Reply
          PKCano
          Da Boss

          There was no .NET SO for Win7. Only the .NET Rollup.

          • #1972987 Reply
            anonymous
            Guest

            Much obliged! Thought I was going blind! 😉

      • #1972469 Reply
        Lori
        AskWoody Plus

        Hi. I haven’t updated my Windows 7×64 and Windows 8.1×64 computers since the May Security patches, (installed early as recommended here). I do the monthly security only updates, and am trying to catch up.

        On my W7 pc, I did the Service Stack update (KB4499175), the May 2019 pciclearstalecache and the first SHA-2 KB4474419 update, and the August IE 11 Cumulative update (KB4511872). I turned off remote access.

        To catch up on my W7 pc, do I:
        1. install the June Security update
        2. skip the July one
        3. install SSU KB4490628 from the MS catalog
        4. install SHA-2 KB4474419 (the most recent updated version?)
        5. install KB3133977 (2016 Bitlocker patch), from MS Catalog
        5. install August security update
        6. Wait on the September Security update with telemetry?
        7. OK to wait on Sept. IE 11 update, even though Norton sent a notice about the out-of-band patch?

        The only .NET update I’m offered thru Windows Update is KB4514602, which has version 4.8. Some here said not to install v4.8. I wasn’t sure what’s best?

        Sorry for the long request. Thanks to anyone who can help!

        • #1972833 Reply
          PKCano
          Da Boss

          Install KB3133977 (2016 Bitlocker patch), from MS Catalog. Please see the note here if you have an ASUS motherboard.
          Install SHA-2 KB4474419 (the most recent updated version)
          Install SSU KB4490628 from the MS catalog

          Install the Security-only updates you want from AKB2000003. Seen notes which contain telemetry. September patches are at DEFCON-3.

          Install IE11 Cumulative Update KB4516046

          1 user thanked author for this post.
          • #1973895 Reply
            Lori
            AskWoody Plus

            PKCano, No ASUS motherboard. So sorry you repeated earlier post I’d read. Wanted to double-check I’d not missed something else. Will install Sept WU then, IE 11 KB4516046, and follow notes on telemetry. And move from .NET v4.7 to v.4.8, as it’s the only one offered by Windows update? Were so many opinions on that. You have the patience of a saint! Thanks kindly, Lori

            • #1974187 Reply
              PKCano
              Da Boss

              .NET 4.8 is not recommended for Win7/8.1 at this time unless you have/use a program that absolutely needs it.

              1 user thanked author for this post.
      • #1972704 Reply
        Paul T
        AskWoody MVP

        Lori, I let Windows Update find and install all the patches rated important – except the GWX ones. I don’t fret about which ones I need because I have a regular image backup so I can restore if it goes pear shaped – hasn’t been necessary.

        cheers, Paul

        1 user thanked author for this post.
        • #1973880 Reply
          Lori
          AskWoody Plus

          Thanks Paul! Health problems, got behind. So many issues to catch up on before patching. Wanted to double-check first. Backup done. Guess I “fret” as I’ve only done/needed pc restores, not installs. Here’s to no pear shapes.

          So do the July/Sept patches; but with the anti-telemetry recommendations? Hid GWX in May. Not reappeared.

          And, move up from .NET Frame v.4.7 to v.4.8, as it’s in the only .NET update offered thru Windows update? Read many opinions on both sides, didn’t need v 4.8; so asked. Can I uninstall it if problems? Getting to work now. Cheers back, Lori

          • #1974827 Reply
            Paul T
            AskWoody MVP

            If the NET update is only optional I wouldn’t install it. And as PKCano said, it’s not recommended yet.

            cheers, Paul

            1 user thanked author for this post.
      • #1972707 Reply
        Morty
        AskWoody Plus

        OK, Boss–

        I ran a backup, said a prayer, and I’m installing these and going to sleep. With Heaven’s help and yours, my computer and I will wake up in the morning.

        2019-09 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 and Server 2008 R2 for x64 (KB4514602)
        2019-09 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4516065)
        2019-09 Security Update for Windows 7 for x64-based Systems (KB4474419)

        Thank you. All the best,

        Morty

        2 users thanked author for this post.
        • #1972764 Reply
          Morty
          AskWoody Plus

          Thank Heaven (and you) I’m back!

          But now they want me to install this:

          2019-09 Servicing Stack Update for Windows 7 for x64-based Systems (KB4516655)

          Do I want to?

           

      • #1972717 Reply
        Alex5723
        AskWoody Plus

        after applying the September 23 patch for IE, that we would be unable to install .net 3.5.

        You have to install the .net 3.5 before installing the IE patch.

        4 users thanked author for this post.
      • #1973144 Reply
        anonymous
        Guest

        I don’t see anyone applying Martin Brinkmann’s workaround for MS Emergency IE update (CVE-2019-1367) on https://www.ghacks.net/2019/09/24/microsoft-releases-emergency-internet-explorer-security-update/

        Why’s that?

      • #1973249 Reply
        Chris B
        AskWoody Plus

        Woody’s Computerworld article comments that Window 10 1903 patching schedule is as clear as mud. Can I add my own experiences with the mud, in this case commissioning a brand new Dell XPS desktop.

        23/9     Activated PC. Preinstalled OS is Windows 10 Pro 1903 build 18362.295. Set Quality delay to 28 days and Feature delay to 250 days. Windows installed a few patches, including 2019-08 cumulative update

        24/9     Installed Office 2010 without licence

        25/9     I noticed that the deferral options above had disappeared favour the Pause option, consistent with Woody’s comment that this change in behaviour came in with the Aug Cumulative patch.

        27/9     Installed licence on Office 2010. A few patches came down for Office, including Office 2010 SP2

        3/10     Set Resume Updates. 49 Office patches came down, plus the August .NET update (4511555), but none of the September patches. The Office patches I understand; the .NET patch I would have expected to come down earlier, but it is down now. The lack of any of the September patches, particularly 4515384, is most unexpected.

        I will await the picture to clarify, but I am not holding my breath.

         

        Chris
        Win 10 Pro x64 Group A

        • #1973322 Reply
          PKCano
          Da Boss

          You set Quality update deferral at 28 days (from release). That was Sept 10th.
          Unless my count is off, today (Oct 3rd) is only 23 days out. You have 5 more days before the Sept updates show up. But that will put you close to Oct Patch Tuesday!!!!

          • #1974223 Reply
            Chris B
            AskWoody Plus

            @Pkcano Yes I know – I made a mistake on that one. The only problem is, with the current 1903 setup, I may not be able to correct it!

            Chris
            Win 10 Pro x64 Group A

            • #1974230 Reply
              PKCano
              Da Boss

              Depending on the status of yesterday’s update (when Woody and Susan have processed the implications) you may be able to terminate the Pause and install an update. You can still HIDE the ones you don’t want with wushowhide first, then clear the WU Cache to install the one(s) you want.

              Wait – there are still 3 1/2 days before panic. 🙂 🙂

              1 user thanked author for this post.
              • #1974295 Reply
                Chris B
                AskWoody Plus

                Thanks. I’ll watch!

                Chris
                Win 10 Pro x64 Group A

      • #1973335 Reply
        EP
        AskWoody_MVP

        check this out woody:

        NEW out-of-band updates on MS Update Catalog:
        https://www.catalog.update.microsoft.com/Search.aspx?q=2019-10

        KB4524135 IE update for IE9/IE10/IE11
        KB4524147 CU for 1903 (build 18362.388)
        KB4524148 CU for 1809 (build 17763.775)
        KB4524149 CU for 1803 (build 17134.1040)
        KB4524150 CU for 1709
        KB4524151 CU for 1703
        KB4524152 CU for 1607

        edit: these updates will also be available thru WU and WSUS

        ooooh information overload 4 me on these new updates 🙁

        • This reply was modified 11 months, 4 weeks ago by EP.
        • This reply was modified 11 months, 4 weeks ago by EP.
        5 users thanked author for this post.
        • #1973368 Reply
          Berserker79
          AskWoody Lounger

          Yeah, just noticed this update through wushowhide and decided to hide it for the moment. Looks like more MS sillyness regarding this IE patch?

          As far as I understand, this is the same IE patch as the previous out-of-band patch of September 23 and also included in the following optional update of September 24, but according to MS the new update also corrects a printing issue.

          I’m assuming the same caveats (as per Woody’s CW article) of the previous versions of the IE patch apply also to this new version.

      • #1973345 Reply
        Tex265
        AskWoody Plus

        Win 7 Pro x64, Group A

        Just went to download and install Sept KB4516065 but it is no longer being offered.

        Instead I have 2019-10  KB4524157 as checked?  What’s with that?

        Should I install, or go to MS Catalog for KB4516065?

        Windows 10 Pro x64 v1909 and Windows 7 Pro SP1 x64 (RIP)
        3 users thanked author for this post.
      • #1973350 Reply
        fernlady
        AskWoody Lounger

        I was just offered KB4524157 and it was checked but I hid it for now.

        Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller

        Attachments:
        1 user thanked author for this post.
        • #1973354 Reply
          Tex265
          AskWoody Plus

          Did you previously receive the original Sept CU KB4516065?
          And install?

          Windows 10 Pro x64 v1909 and Windows 7 Pro SP1 x64 (RIP)
          • #1973355 Reply
            fernlady
            AskWoody Lounger

            yes, installed it yesterday

            Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller

      • #1973401 Reply
        ltorres
        AskWoody Plus

        check this out woody:

        NEW out-of-band updates on MS Update Catalog:
        https://www.catalog.update.microsoft.com/Search.aspx?q=2019-10

        KB4524135 IE update for IE9/IE10/IE11
        KB4524147 CU for 1903 (build 18362.388)
        KB4524148 CU for 1809 (build 17763.775)
        KB4524149 CU for 1803 (build 17134.1040)
        KB4524150 CU for 1709
        KB4524151 CU for 1703
        KB4524152 CU for 1607

        edit: these updates will also be available thru WU and WSUS

        ooooh information overload 4 me on these new updates 🙁

        • This reply was modified 11 months, 4 weeks ago by EP.
        • This reply was modified 11 months, 4 weeks ago by EP.

        They just  came down via WSUS…

        I am a bit torn abt this… to deploy or not deploy to my org (prior testing of course)?

        Also in the notes: “mitigation and corrects a recent printing issue some users have experienced.

        Note This update does not replace the upcoming October 2019 monthly update, which is scheduled to release on October 8, 2019.”

         

        • #1973407 Reply
          Berserker79
          AskWoody Lounger

          There is also this bit of interesting info:

          Addresses an issue that may result in an error when you install Features On Demand (FOD), such as .Net 3.5. The error is, “The changes couldn’t be complete. Please reboot your computer and try again. Error code: 0x800f0950.”

          Did Microsoft fix the issue that prevented installing .NET 3.5 on those machines that had received the IE patch?

      • #1973402 Reply
        Microfix
        AskWoody MVP

        WARNING! MS have just released October Patches Early via WU! !

        Defcon Change Woody?

        SeptSMQR

        Win8.1 Pro | Linux Hybrids | Win7 Pro O/L | WinXP O/L
        Attachments:
        3 users thanked author for this post.
        • #1973427 Reply
          Tom-R
          AskWoody Plus

          Microfix, I just saw this also when I did a Check for Updates on a Win 8.1 system a few minutes ago.  Woody, I think you really need to update the DEFCON level back to 1 or 2 until we know what’s going on here.  I’m not about to install KB4524156.

          3 users thanked author for this post.
      • #1973467 Reply
        Marty
        AskWoody Plus

        Same issue on my Win7 machine.  We haven’t gotten to Patch Tuesday yet, but the September rollout has already been replaced with the October version — KB4524157.  What’s going on here?

        3 users thanked author for this post.
        • #1973472 Reply
          PKCano
          Da Boss

          This is an out-of-band “hotfix.”
          This is NOT the October update released early. The normal Patch Tuesday complement will be released Oct. 8th as usual.

          3 users thanked author for this post.
          • #1973479 Reply
            LHiggins
            AskWoody Plus

            This is an out-of-band “hotfix.” This is NOT the October update released early. The normal Patch Tuesday complement will be released Oct. 8th as usual.

            So should KB4524157  be installed instead of KB4516065? Checked as “Important” in my Windows Update along with KB4514602 and KB4503548 .NET not checked.

            Thanks!

            • This reply was modified 11 months, 4 weeks ago by LHiggins.
            • This reply was modified 11 months, 4 weeks ago by LHiggins.
            1 user thanked author for this post.
            • #1973484 Reply
              PKCano
              Da Boss

              Wait for Woody’s evaluation. He’s mulling over what to do.

              5 users thanked author for this post.
              • #1973487 Reply
                LHiggins
                AskWoody Plus

                Ok – will do. Should I go ahead and just do the one – KB4514602? Or wait on them both?

              • #1973504 Reply
                AJNorth
                AskWoody Plus

                PKC,

                Do we know yet whether their is (or will be ) a SO version of this out-of-band Hotfix?

                Tnx,

                AJN

              • #1973514 Reply
                PKCano
                Da Boss

                It is in the IE11 patch. AKB2000003 has already been updated for Group B.

                The Rollup contains the IE11 patch, but Group A doesn’t do separate patches. So they get a Rollup.

                3 users thanked author for this post.
              • #1973542 Reply
                AJNorth
                AskWoody Plus

                Thanks, PK!

                Had found KB4524135 in the MS Catalog at 53 MB, and the SMQR at 307 MB; this explains their differences.

                Cheers,

                AJN

          • #1973686 Reply
            Marty
            AskWoody Plus

            But the September Security Rollup is gone.  Is it included in this “out-of-band” hotfix?

            • This reply was modified 11 months, 4 weeks ago by Marty.
      • #1973483 Reply
        Charlie
        AskWoody Plus

        What a mess.  One last question (hopefully):  Are all of the S.O. updates and others listed in the Topic 2000003 Group B Win 7 section considered “Mainstream” updates including the Oct 2019 (IE11) KB 4524135?

        I do understand about KB4516655 and even though I don’t have it now in WU it may pop up sometime in the future, or I can get it from the MS Update Catalog.

        Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

        • #1973486 Reply
          PKCano
          Da Boss

          There are notes in AKB2000003 about the patches.

          You will probably need KB4516655 in the future even if not for Sept updates.
          It won’t hurt anything to install it, though.

          3 users thanked author for this post.
      • #1973505 Reply
        anonymous
        Guest

        Well this is odd. I’m on Win 7 64bit, the only update from September I’m getting is the .NET one, KB4514602. No September security updates at all, not even hidden ones. In fact it’s only showing me the single October security update which I hid now.

        • #1973518 Reply
          PKCano
          Da Boss

          Do you have KB3133977, KB4474419, and KB4490628 installed on your PC?

          • #1973579 Reply
            Jones55
            AskWoody Plus

            Hi PKCano

            Today after the september updates quided by the Master patchlist PDF i decided to run
            sfc  /verifyonly on my w10 1809 PRO 32bit just to see..the system ran fine as far as i can tell… i am hardly using it, because i’m mainly on windows 7 ultimate…….BUT!  i got about 32 errors!!!

             windows resource protection found integrity violations
            for offline repairs, details are incuded in the LOG file provided by the  /OFFLOGFILE flag

            i saved the CBS LOG file. Here are 3 of them:

            CSI    00002b96 [SR] Cannot repair member file [l:19]’MusNotification.exe’ of Microsoft-Windows-Update-MusNotificationBroker, version 10.0.17763.719, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, file cannot be checked

            CSI    000033fc [SR] Cannot repair member file [l:28]’MSFT_MpThreatDetection.cdxml’ of Windows-Defender-Management-Powershell, version 10.0.17763.1, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35} in the store, hash mismatch

            2019-10-03 19:41:32, Info                  CSI    00003474 [SR] Could not reproject corrupted file \??\C:\Windows\System32\WindowsPowerShell\v1.0\Modules\Defender\\MSFT_MpComputerStatus.cdxml; source file in store is also corrupted

            something tells me a lot of these errors could have someting to do with the sledgehammer script… While   scf / verifyonly was running windows update services were halted by the script..  its easy to uninstall the script and running the windows related services. Should i do that and then run these checks s below?

            should i first run  sfc / scannow  or  PowerShell DISM.exe /Online /Cleanup-image /Restorehealt  ???

            Any idea if running “Restorehealt” will bring back Onedrive which i removed and other Metroapps?  or are only broken files being replaced? I made a backup after the september updates 🙂

            please move post if posted wrong and notify me ok.

            thanks

            • #1973585 Reply
              PKCano
              Da Boss

              Run DISM restorehealth first then sfc. You also have the Windows troubleshooter available.

              • #1973592 Reply
                Jones55
                AskWoody Plus

                Ok ..i presume its best to uninstall the sledgehammer script (WUMT WUB WUMGR)  first to see if that makes a difference….

                DISM restorehealth doesnt bring back features?

                thanks

      • #1973601 Reply
        Charlie
        AskWoody Plus

        For Win 7, 64 Bit, S.O. IE Updates listed are KB4516046, KB4522007, and now KB4524135.  I was going to do KB4522007 assuming it overrode the previous one, but now I have yet another choice.  So which one do I install or do I do all of them (doubtful).  This is maddening.

        Sorry, thought I was good to go.  No such luck.

        Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

        • #1973603 Reply
          PKCano
          Da Boss

          Try KB4516046. The last one hasn’t been blessed by Woody yet.

          1 user thanked author for this post.
      • #1973613 Reply
        alQamar
        AskWoody_MVP

        Hi all, all 2019-09 CUs for Win10 have been rereleased to fix the printer bug. If someone could double check if this is also the case for the older OSes and Servers, that would be great news and we can go fully patched without the IE / printer caveats.

        • #1973615 Reply
          PKCano
          Da Boss

          We’re still getting reports that these latest patches have not fixed the printer problem. Stand by – reports v1903 now has start button problems.

          • #1973637 Reply
            Jones55
            AskWoody Plus

            PKCano,

            like u said, ran DISM.exe /Online /Cleanup-image /Restorehealt   (PowerShell right click, choose More\Run as Administrator) but get this error..

            Image Version: 10.0.17763.737

            Error: 87

            The restorehealt option is not recognized in this context.
            For more information, refer to the help.

            The DISM log file can be found at C:\Windows\Logs\DISM\dism.log
            PS C:\Windows\system32>
            got dism log file..but not allowed to send  what next to do?

            i uninstalled sledgehammer first…i will restart computer and try again first…be back in a few minutes

             

            • This reply was modified 11 months, 4 weeks ago by Jones55.
            • #1973688 Reply
              Jones55
              AskWoody Plus

              just finished DISM…looks ok

              DISM.exe /Online /Cleanup-image /Restorehealt   had to be

              DISM /Online /Cleanup-Image /RestoreHealth 

              will run sfc /verifyonly again to see whats up

              will post back if there are problems or unwanted modifications  i took note of the C:\Windows\SoftwareDistribution\Download as it was running  “someting like “Hello Face”popped up” but now dissapeared from folder

              THANKS

      • #1973711 Reply
        jburk07
        AskWoody Plus

        Well, what a circus. Here’s my report:

        Like Tex265 and others, I was about to install the September rollup KB4516065 and updated SHA-2 KB4474419 on one of our Win7 laptops when I discovered those patches had suddenly been replaced by the out-of-band KB4524157.

        After I hid KB4524157 and re-checked for updates, the 2 September patches (rollup and SHA-2) reappeared. (The .NET update hadn’t been offered on that machine.) I installed those 2 September updates, rebooted, installed the September Office updates, and unhid the out-of-band KB4524157 as we await further information and advice.

        Our other Win7 laptop worked about the same, except that the two September updates (rollup and updated SHA-2) were still in Windows Update, along with the .NET update. I installed just those two. After the restart, the new out-of-band update showed up in Windows Update, and .NET KB4514602 was still there. So I installed just the .NET, rebooted, and then installed the Office updates.

        I haven’t seen any problems so far.
        My anti-telemetry settings are still intact after the updates.

        I was tempted to hide KB4524157 again, along with the unchecked October Outlook update, just to see if the Servicing Stack Update KB4516655 would appear, but I decided that would be a bridge too far. I’ll wait until after we see how things shake out.

        Thanks to everyone here for all the information and advice, as always. Good luck to those who are still wading through the mess.

        Linux Mint Cinnamon 19.2
        Group A:
        Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux
        Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro, mostly offline
        Win 10 Pro x64 v1909 Ivy Bridge, dual boot with Linux

        5 users thanked author for this post.
        • #1973733 Reply
          Jones55
          AskWoody Plus

          even more errors after sfc /verifyonly so  run sfc /scannow

          sfc /verifyonly.…..most errors were Windows Defender related..

          00003513 [SR] Repairing corrupted file \??\C:\Windows\System32\WindowsPowerShell\v1.0\Modules\Defender\\MSFT_MpThreatCatalog.cdxml from storeVerify and Repair Transaction completed.

          CSI    00000b3f Warning: Overlap: Duplicate ownership for directory \??\C:\Windows\bcastdvr in component Microsoft-Media-Capture-Internal-BroadcastDVR, version 10.0.17763.737, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35}

          CSI    0000302a Warning: Overlap: Duplicate ownership for directory \??\C:\Windows\SystemApps\Microsoft.XboxGameCallableUI_cw5n1h2txyewy in component Microsoft-Xbox-GameCallableUI.toolkit, version 10.0.17763.1, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35}

           

          sfc /scannow

          All files and registry keys listed in this transaction  have been successfully repaired

          now its time to get rid off Xbox and other garbage that sneeked in….

          1 user thanked author for this post.
      • #1973712 Reply
        Seff
        AskWoody Plus

        Security update KB4474419 (the SHA-2 thingummy that is constantly updated but is not an updated update according to MS) has disappeared tonight from the offerings on my main Windows 7 x64 machine, I haven’t had the other machine on to check but it’s usually the same updates on both machines so it’s probably gone on that one too. That leaves just the “quality” rollup and the .net framework update (which I’d normally install separately after the SHA-2 one).

        1 user thanked author for this post.
      • #1974002 Reply
        Fred
        AskWoody Plus

        Here some pc’s were pushed unwillingly installed with some (not all) updates.

        It is quite a mess.

        ~ ~ ~
        • This reply was modified 11 months, 3 weeks ago by Fred.
        • This reply was modified 11 months, 3 weeks ago by Fred.
        • This reply was modified 11 months, 3 weeks ago by Fred.
      • #1974052 Reply
        Myst
        AskWoody Plus

        Mass confusion. Went straight to my check for updates without hopping on the check in at Woody’s place. I usually look closely at all available Important Updates but instead just glanced at them and started with the first, KB4524157, (2019-10 Monthly Quality Rollup for Win7 x64). Walked away for awhile and not sure if it automatically rebooted, but it came back saying “No Important Updates” that everything had been installed. Did a Check for Updates again, KB4514602 showed up, (2019-09 Security and Quality Rollup for .net 3.5.1 etc …). Reboot, and the Office 2010 – 3 of those were marked Important, installed them. Reboot, checked for updates again and there were no more updates available.

        So what happened with KB4516065 (September 2019 SMQR), and the September SHA-2 KB4474419?
        PLUS, I was expecting the SSU KB4516655 for Win7 to show up after the Important Updates were installed. Nothing came through for the SSU. And the last SHA-2 version was installed with the August updates on September 8.

        Heck of a mess trying to figure out whether I should go to the MS Catalog to install the SSU? And what about KB4516065 (SMQR for September), and the September SHA-2 4419?

        Any advice is much appreciated.

        Everything seems to be working fine. I’ve had the machine on for quite awhile since updating, sitting idle initially after the process was complete, then did some work on a few things.

        Win7 Home x64 MacOS Chromebook

        2 users thanked author for this post.
        • #1974194 Reply
          PKCano
          Da Boss

          KB4516065 won’t show up after installing KB4524157 becasue the latter is a Rollup and is cumulative, therefore contains the former.

          2 users thanked author for this post.
          • #1974475 Reply
            Myst
            AskWoody Plus

            Makes perfect sense didn’t think of that while leaping into the fire. So the SSU may come through in the next round of cumulative updates? That’s what really concerns me at this point. Guess we’ll have to wait and see what the next round of craziness offers.

            Win7 Home x64 MacOS Chromebook

        • #1975109 Reply
          Myst
          AskWoody Plus

          The SSU showed up as it should, after installing one last Important Update for Office 2010 Outlook that was unchecked. In the habit of ignoring unchecked updates. Just needed a nudge but it hit me after thinking it through. The Win7 machine is working good, no problems to report since the initial installation of the above noted Important Updates Oct 3.

          Win7 Home x64 MacOS Chromebook

      • #1974209 Reply
        Seff
        AskWoody Plus

        So in addition to KB4474419 disappearing, I now have KB4524157 which appears to be an extra update in advance of the October monthly rollup and in place of the KB4516065 which was the September rollup.

        How does that affect the DefCon rating? It was only released yesterday.

        Perhaps I’ll just install KB4514602, the .net framework one, as the only September update still on offer through WU, plus whatever Office 2010 updates are still important and checked (last time I looked at that machine I had KB4475604 as important but unchecked together with three others that were important and checked). Then again, it’s tempting to forget the whole lot and see what Patch Tuesday brings.

        This is increasingly absurd, and coupled with the similarly absurd nonsense going on with Windows 10 can only lead to more users sticking with Windows 7 and breathing a huge sigh of relief when these shenanigans come to an end in January, no matter how unwise on one level that may be.

        • This reply was modified 11 months, 3 weeks ago by Seff.
        • This reply was modified 11 months, 3 weeks ago by Seff.
        3 users thanked author for this post.
        • #1974214 Reply
          PKCano
          Da Boss

          KB4524157 is an out-of-band update. We should hear from Woody and Susan shortly concerning the Oct 3rd flood of patches.

          1 user thanked author for this post.
          • #1974221 Reply
            Seff
            AskWoody Plus

            Thanks PK, but as it replaces the September rollup for which we’re at DefCon 3, would it make sense to roll back to DefCon 2 pending further consideration and advice?

            I think some people only look at the DefCon rating and will therefore be surprised when they hit the “install updates” button and find they’re not installing what they thought they were, or what was covered by the DefCon 3 rating.

            • #1974225 Reply
              PKCano
              Da Boss

              That’s entirely up to Woody and Susan. (I’m just the reporter here) 🙂

              2 users thanked author for this post.
            • #1974378 Reply
              woody
              Da Boss

              Point well taken. I’m still struggling with the decision, as noted in the Computerworld article an hour ago.

              1 user thanked author for this post.
      • #1974394 Reply
        cluffernut
        AskWoody Plus

        So I just wanted to send an update.  In our corp. environment, we have about 50/50 Server 2012 R2 and Server 2016 LTSB (1607).  As our Cyber dept insists, we patched last weekend (9/29) and we’ve had a slew of weird issues since, Primarily on the 2012 side.

        MS SQL ODBC errors up the wazoo, any App server jobs making calls to/from SQL blowing up, sometimes reproducible sometimes random.  We’ve also had a couple reports of console black screens.  Our back-up environment (Veritas NetBackup) has experienced many backup failures as well.

        Removing .NET updates – KB4514599, Security Only KB4516064, IE KB4516046 fixes all of the issues.  Of course the SSU isn’t removable so KB4512938 is still in place.   I was a little surprised of the move to DEFCON 3.

        Note, our homogeneous 2016 platforms seem fine (both App & Database on OS 2016).  Anyone else seeing these types of issues?

      • #1974428 Reply
        TonyC
        AskWoody Lounger

        Windows 7 SP1 x64 Group B.

        I did my monthly updates this morning (4 October 2019) while still at MS-DEFCON 3.

        I installed the latest SSU (KB4516655), the latest SHA-2 support (KB4474419v3), the 2019-09 Windows 7 SO update (KB4516033), and the 2019-09 IE11 CU (KB4516046). No problems subsequently.

        However, I had three surprises when I searched for updates in WU.

        The first has already been commented on in this thread. I was offered the 2019-10 SMQR for Windows 7 when I was expecting the 2019-09 SMQR. But, like others discovered, when I hid this update and searched again, I was offered the 2019-09 SMQR (which I hid anyway, being in Group B).

        The second surprise was that I was not offered the September MSRT in either search. Can anyone account for this? Has this happened to anyone else? In the past, I have always been offered the monthly MSRT, which I install and run.

        The third surprise was that I was offered KB2310138, Security Intelligence Update for MSE (Version 1.303.837.0) as an optional update. I’ve never been offered such an update for MSE before, and I have been using MSE a long time. Did this happen to anyone else? And is it worth installing?

        1 user thanked author for this post.
        • #1974599 Reply
          SueW
          AskWoody Plus

          @TonyC, I may be able to address your third surprise. I recently started using MSE, and the first time I updated my computer after a “good” DEFCON, the only Optional update that was checked was KB2310138, the MSE update.

          In order to eliminate this [additional update] going forward, I make it a point to manually update MSE just prior to updating my computer.

          Perhaps your version wasn’t up-to-date, or was in the process of updating itself when you were checking for updates. As to whether it’s worth installing: it is if your MSE definitions aren’t current.

          Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'
          2 users thanked author for this post.
        • #1974617 Reply
          DrBonzo
          AskWoody Plus

          There is no September MSRT: https://support.microsoft.com/en-us/help/890830/remove-specific-prevalent-malware-with-windows-malicious-software-remo Scroll down more than halfway for the announcement

          As far as definition updates, you want to install them either through Windows Update or the MSE interface itself. It’s conceivable that if you update frequently through MSE you may not have seen updates through Windows Update.

          Edit: the 2019-10 SMQR supercedes the previous months SMQRs so you’re only seeing the latest, which is now october’s

          • This reply was modified 11 months, 3 weeks ago by DrBonzo.
          2 users thanked author for this post.
          • #1974864 Reply
            TonyC
            AskWoody Lounger

            Re September MSRT. Thank you. It never occurred to me that there might be a month without an MSRT. I thought that something had gone wrong somewhere.

            Re MSE. Thanks to you and SueW. Your replies appear to suggest that a “Security Intelligence Update for MSE” is really just a virus and spyware definitions update. Is that correct? I’ve just noticed that they use the same version numbering system (e.g. 1.303.837.0). I have been offered virus and spyware definitions by WU many times in the past but they have never been called security intelligence updates!

            1 user thanked author for this post.
            • #1974918 Reply
              DrBonzo
              AskWoody Plus

              Re MSE: the answer to your question is Yes, that is correct. When I scroll through my Update History, the name for virus definition updates changes from Definition Update for Microsoft Security Essentials to Security Intelligence Update for Microsoft Security Essentials on July 30, 2019. Regardless of the name, though they all have the same KB number: 2310138. And, as you noticed the same version numbering system continued after the name change.

              Do make sure you keep the definitions up to date (sounds like you probably do)!

      • #1974430 Reply
        alQamar
        AskWoody_MVP

        And now it is getting seriously odd. Seeking WU on Server 2008R2 gives you a non optional 2019-10 Security Cumulative Update it is not even patchday week 1.

         

        • This reply was modified 11 months, 3 weeks ago by alQamar.
      • #1974513 Reply
        dgreen
        AskWoody Lounger

        Reporting in on Sept updates installed this morning.
        at that time MS-Defcon was 3

        Installed KB4474419 (SHA2 ) did this first
        Installed KB4516065 (roll up)
        Installed KB4514602 (.net roll up)
        did not install KB4516655 (service stack)
        did not install MSRT (hid)
        Hid KB4524157 (out of band update)

        All installed without issue.

        so now MS Defcon is back to 1!!
        Should I be worried now that I installed the updates?

        Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)
        Windows 7 Home Premium 64 bit SP 1 GROUP A
        Processor: Intel i3-3240 (ivy bridge 3rd generation)
        chipset Intel (R) 7 series/C216
        chipset family SATA AHCI Controller -1 E02
        NIC Realtek PCLE GBE Family Controller
        MSE antivirus (has new name now)
        Chrome browser
        DSL via ethernet (landline)

        • This reply was modified 11 months, 3 weeks ago by dgreen.
        1 user thanked author for this post.
        • #1974516 Reply
          PKCano
          Da Boss

          Not to worry if you are not having problems. Don’t uninstall patches. Just sit tight.

          2 users thanked author for this post.
          • #1974532 Reply
            dgreen
            AskWoody Lounger

            Not to worry if you are not having problems. Don’t uninstall patches. Just sit tight.

            What happened to my post????

            • #1974534 Reply
              PKCano
              Da Boss

              It got caught tin the spambucket on edit. Slow down with edit/submei/edit sequence (plus the site is kinda flaky at times now0

              1 user thanked author for this post.
      • #1974548 Reply
        Chris B
        AskWoody Plus

        Woody’s move to Defcon 1 (for good reasons) is a classic example of why the 1903 update controls do not work, at least as I understand what I can do. I made a mistake in setting the deferral at 28 days when I set up my PCs, and the August cumulative update whipped the controls away from me so I can’t respond to a set of buggy patches. On top of that, Microsoft have not made clear what the effect of the pause etc controls really are.

        Clarity and control please Microsoft. Clarity and control.

        Chris
        Win 10 Pro x64 Group A

        • #1974550 Reply
          PKCano
          Da Boss

          Pause works like this:
          You won’t get updates tor the designated Pause time period.
          When the Pause time expires, you will not have another opportunity to Pause updates until you install the pending updates. In other words, Pause just puts off the inevitable.
          But you can turn off Pause at any time, and that has the same effect as if the Pause time expired – you have to install whatever is pending before you can pause again.

          In a case like this, Pause kept you from getting thre buggy updates.

          1 user thanked author for this post.
      • #1974556 Reply
        Chris B
        AskWoody Plus

        @PKCano Thanks. In my case, it is the interaction between the Pause function and the earlier referral functions that I am uncertain about. I set defer at 28 days when I installed the PC on 23 Sept and never hit the Pause button. My best understanding is that the 10 Sept patch will hit on 8 Oct; yesterday’s patches on 31 October and so on, and that I have no way now to change that schedule. However, my confidence in that interpretation is extremely low!

        Chris
        Win 10 Pro x64 Group A

        • #1974564 Reply
          PKCano
          Da Boss

          There is a Registry Setting that represents whatever was set in the GUI for Quality deferral  when the Settings switches disappeared. I have mentined if frequently in posts. I do not have time to search for it now, but you can try to find the posts by searching for using “deferral” and “GUI” and “disappear.”

          1 user thanked author for this post.
          • #1974582 Reply
            Chris B
            AskWoody Plus

            @PKCano  Thanks. I’ll search it out.

            Chris
            Win 10 Pro x64 Group A

            • #1974589 Reply
              PKCano
              Da Boss

              Try this Topic – there is information there.

              1 user thanked author for this post.
              • #1975730 Reply
                Chris B
                AskWoody Plus

                In the end I have disabled Windows Update in Group Policies on both of my computers and am sitting out the storm in a bunker until thins get clearer!

                Chris
                Win 10 Pro x64 Group A

      • #1974609 Reply
        rowrbazzle
        AskWoody Plus

        Win 7 Pro x64, AMD Phenom II X4 920, Group B

        Downloaded and installed SO update KB4516033 and restarted.

        Downloaded and installed IE11 update KB4516046 (w/o fix) and restarted.

        WU listed 3 checked “Important” updates:

        Security Update for Microsoft Excel 2010 (KB4475574) 32-Bit Edition
        Security Update for Microsoft Office 2010 (KB4464566) 32-Bit Edition
        Security Update for Microsoft Office 2010 (KB4475599) 32-Bit Edition

        Downloaded/Installed and restarted.

        WU then listed checked “Important” update KB4474419 (SHA-2 code-signing support)

        Downloaded/Installed and restarted.

        All telemetry settings remain Disabled.

        If the order of installation was incorrect, what problems should I expect?

        2 users thanked author for this post.
      • #1975714 Reply
        KarenS
        AskWoody Lounger

        I know this is an older article and this subject has probably been talked about but I don’t know where to look for the answer. I have tried searching but all I get are issues with this involving Windows 10.

        Windows 7 64 home premium Group A and NOT computer savvy at all!!

        Thanks to Hurricane Dorian I had lost power for 7 days when the all clear came for August’s patches and by the time it was restored they were replaced (mostly) by September’s patches, so I waited and didn’t install anything. I waited for the all clear for September patches and installed them (can’t remember now what they all were). The day after installing them the defcon level went to one.  Well apparently some update broke my ability to print!! Does anyone know which update it was and how to fix the problem?? Would uninstalling whichever update caused the problem fix the problem???  PLEASE I am desperate because I need to print off some medical information that I need for a doctor’s appointment tomorrow!!  HELP!!!

        • #1975728 Reply
          PKCano
          Da Boss

          In Control Panel\Windows Update click on “Change settings” and set Windows Update to “Never check for Updates”
          Click on “view update history”.
          KB4516065 is the 2019-09 Security Quality Monthly Rollup (released Patch Tues 10/8)
          KB4524157 is called 2019-10 Security Quality Monthly Rollup (released in Oct)

          If you see either one of these listed:
          In Windows Update at the bottom left, click on “View Installed Updates”
          Scroll down to the section on Windows.
          Highlight the one of those you see installed, right click and choose “Uninstall”

          After the reboot, go back to Windows Update.
          Click on “Check for updates”
          If you see the update you just uninstalled listed in the Important updates, right click on it and choose HIDE.
          Go back to “Change Update settings” and set Windows Update back to where it was originally.

          1 user thanked author for this post.
          • #1975731 Reply
            KarenS
            AskWoody Lounger

            Thanks PKCano for your reply. I don’t have KB 4524157 installed but I do have KB4516065 but ONLY on my PC NOT my husband’s and I am having the same issue with the printer with his PC also, so I doubt that is the problem. I think I have figured it out and I don’t think it was a Windows update at all. After the hurricane our internet provided came and installed a new wireless router (ours was 10 yrs old and out of date) and apparently the router was not connecting to the printer and it have to be done manually. I am in the process of testing that theory now……..

            • #1975736 Reply
              PKCano
              Da Boss

              That sounds like a better fix in this case.

              1 user thanked author for this post.
              • #1975737 Reply
                KarenS
                AskWoody Lounger

                Sure was!!  Well apparently the router was the main culprit but not all programs seem to want to print (my One Note program for example) but I was able to get printed off what I need for now.  Thanks!!!

              • #1976031 Reply
                KarenS
                AskWoody Lounger

                So I was still having issues with my printer, I was getting an error code 0x00000709 when I tried to set my one and only printer as the default printer. So I decided to go ahead and uninstall KB4516065, rebooted when promoted and NOW my pc seems to be stuck on “preparing to configure Windows……Do Not Turn Off Your Computer”. The fan is not going and the HD light is just slowly blinking like it is sitting idle….nothing seems to be happening, it has been 20 minutes.  WHAT SHOULD I DO???? HELP!!!

              • #1976233 Reply
                Speccy
                AskWoody Lounger

                Karen,

                Keep calm. You’ve been there already, remember? 🙂
                If you’re still stuck with the same message after a couple of hours or so, re-read and follow GTP’s advice on that thread to get you back in control. 😉

                Now, if you’re still having issues afterwards, a list of the latest (2019) Windows / .NET Framework updates that have been installed on your system could help us here to figure out if you need to (un)install anything: open Control Panel > Programs and Features, follow the ‘View Installed Updates‘ link, click on the ‘Installed On‘ column to sort down the items (most recent ones at the top) and take a screenshot -or-, alternatively, open a command line window (Windows key+R, type ‘cmd’ and press Enter) and type

                wmic qfe list brief|findstr 2019>%USERPROFILE%\Desktop\wu.txt

                Press Enter and wait a few seconds while a ‘wu.txt‘ text file is being created on your desktop. Once you see the blinking cursor again, type

                reg query HKLM\SOFTWARE\Wow6432Node\Microsoft\Updates /s /f InstalledDate|findstr /c:KB /c:2019>>%USERPROFILE%\Desktop\wu.txt

                and press Enter again. Once the blinking cursor is back, type

                exit

                and press Enter one last time to close the command line window. Reply back with the attached ‘wu.txt‘ file or copy&paste its contents back here.

                2 users thanked author for this post.
              • #1976734 Reply
                KarenS
                AskWoody Lounger

                Yes, I know I have been in the position before but this time seemed different as nothing seemed to be happening. After almost an hour and a half it finally configured (did that 3 times) and my computer rebooted. Now after all this effort to uninstall the update (per PKCano’s instructions) and waiting forever for the reboot it didn’t solve the problem with the printer throwing the error code when I try to set it as the default printer. Not sure what to do with that! Any suggestions??

              • #1976844 Reply
                PKCano
                Da Boss

                Since the problem doesn’t appear to be caused by the Sept Rollup, look for the printer problem elsewhere. Look in the printer setup on the computer. Possibly uninstall, reboot, and then reinstall the printer software.

                The October Windows update will replace the Rollup you uninstalled. So wait for the go-ahead on that.

                1 user thanked author for this post.
      • #1975796 Reply
        anonymous
        Guest

        Windows 7 SP1 64bit, with Broadcom network card. Group B.

        Installed September’s updates; KB4474419 SHA2, KB4516655, IE KB4516046, SO KB4516033 today, KB4522007 and KB4524135 were not installed.

        From the catalog; Installed KB4474419 1st, KB4516655 2nd, IE KB4516046 3rd and SO KB4516033 last.

        Installed one at a time. Rebooted in between each update letting it sit 1 or 2 minutes after update was installed (when hard drive light settled down).

        As per SUEW’s always excellent posts, did the same as before. I went through Scheduled Tasks after installing the September patches. All remained “disabled”. See the below (for those wanting to turn off Telemetry Scheduled Tasks):

        Application Experience
        AitAgent was set to run at 2:30am -presumed altered from July’s patch- but it did honor the set disabled state and didn’t run.

        ProgramDataUpdater – was still set to disabled.

        Autochk Proxy- Disabled (deals with CEIP).

        CEIP did honor the set disabled state.

        DiskDiagonostic Data Collector & Resolver – Disabled (disk & system info for CEIP). It did honor the set disabled state.

        Media Center has: ActivateWindows Search, ConfigureInternet Time Service, DispatchRecoveryTasks, ehDRMInit, InstallPlayReady, mcupdate, MediaCenterRecoveryTask, ObjectStorRecoveryTask, OCURActivate, OCURDiscovery, PBDADiscovery, PBDADiscoveryW1,PBDADiscoveryW2, PeriodicScanRetry(disabled, an old trigger of 2006), PvrRceoveryTask, PvrScheduleTask, RecordingRestart (disabled), RegisterSearch,
        ReindexSearchRoot, SqlRecoveryTask, UpdateRecordPath. ALL had “last time run never”. After install of JULY patch all appeared the same “ready” except for 2 of them mentioned as “disabled”. No new run times, no new triggers (I do not use Windows Media Player).

        PerfTrack – disabled

        “WindowsErrorReporting” (WindowsError Queued files)? I already have Windows Error Reporting Service disabled, so I did disable the Scheduled Task a month ago.

        Control Panel > Administrative Tools > Services, find Diagnostics Tracking Service. I did NOT have that service. I never installed KB2952664 nor any get win10 patches (Group B).

        No network issues. No oddities. This was a fairly simple monthly patch! The IE and SO patch were slow to install but went fine.

        Rebooted 3 times and let it sit for several minutes.

        I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks and let the trusted installer (as per PKCano) do its thing.

        You can also force Processing of Idle Tasks as I do if you want by the administrative command prompt: rundll32 (space) advapi32.dll,ProcessIdleTasks

        You can enter that then walk away for 15 to 20 minutes. If the drive light is still on, it is still running, walk away again. Do not allow the computer to go to sleep. Reset the Power Options to 1 hour sleep if needed. Laptops make sure you are on AC power not battery!

        Thanks to all here.

        Windows 7 Group B

        2 users thanked author for this post.
        • #1975811 Reply
          Charlie
          AskWoody Plus

          This is good to hear, but you took a risk especially with the IE update.

          Edit:  Did you check to see if your printer still works?

          Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

          • This reply was modified 11 months, 3 weeks ago by Charlie.
          1 user thanked author for this post.
          • #1975867 Reply
            anonymous
            Guest

            Hi Charlie and SueW.

            Charlie this PC does not have a printer so it does not matter.

            SueW, I agree with you but then later was convinced bu other here that the Defcon 1 was for the newest patches out and not the older Sept 9 or 10th ones. That is why I post here it to let others know of success or failure and the exact order. Some people have a different order of installs or KB’s they do install. I think you should be OK SueW just make a System Restore Point manually before you start (or back up) just in case.

            Thanks again.

            1 user thanked author for this post.
            • #1975882 Reply
              PKCano
              Da Boss

              Actually, Woody’s post said:

              We’re still at MS-DEFCON 1, folks. There’s absolutely no good reason to install ANY September patches.

              See post #1975252.

              1 user thanked author for this post.
        • #1975825 Reply
          SueW
          AskWoody Plus

          @anonymous, it’s my turn to thank YOU for your very detailed post (and I appreciate your ‘shout-out’).  I have held off installing September’s updates as my timing fell after DEFCON 3 became DEFCON 1. 🙁  I’ve been very tempted, though, especially after reading your results.

          I do agree with @Charlie though about updating IE.  I’d be inclined to wait until October’s IE update (and the go-ahead DEFCON to install): it’s always a Cumulative Update, and hopefully will include the necessary corrections/updates.

          Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'
          • #1975860 Reply
            Charlie
            AskWoody Plus

            SueW, let me just say that I had installed the KB4474419 that came with WU for Sept. and I installed all of the Sept. Office 2010 security updates (but not the unchecked Oct. one).  I had done this while we were still at Defcon 3 and I have not had any problems.

            Be your own judge as to what to do, but I think the Sept. Office 2010 updates are safe.  Susan the Patch Lady had approved them too.  Just my 2 cents.

            Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

            1 user thanked author for this post.
      • #1975820 Reply
        anonymous
        Guest

        ? says:

        i’m now getting random reboots on win7 pro (3 in the last couple of days). Nir bluescreenview tells me it is the Cisco\Linksys AE2500 N600 wifi dongle (driver). i have the “latest” driver available (from 2015). so. if anyone is having a similar problem…

      • #1976516 Reply
        fernlady
        AskWoody Lounger

        On September 23rd, Installed kb4474419 (V3) restart required, kb4516655 restart not required but did it anyway.

        Today Installed kb4516065 restart required, installed kb4514602 restart not required but did it anyway.

        As far as I can tell everything is okay.

        I was checking out installed updates just now and discovered kb4514602 is not in the installed updates that was installed October 2 only shows in history. Where did it go? Guess I really didn’t need it.

        Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller

        • This reply was modified 11 months, 3 weeks ago by fernlady.
        • #1976522 Reply
          PKCano
          Da Boss

          kb4514602 is the .NET Rollup. It is a bundle of updates, one for each individual version of .NET. The individual updates each have a unique KB number that is different from the Rollup. Although the Rollup shows up in the history, it is the individual KBs that show up as installed updates. See the support page for the individual KBs.

          1 user thanked author for this post.
          • #1976561 Reply
            fernlady
            AskWoody Lounger

            ah, dummy me didn’t look at the

              whole

            screen. .Net is there.

            Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller

      • #1976820 Reply

        OK…I’m the one who, through having a cold-flu-foggy head, went and installed patches between Defcon 3 and the gear-grinding pullback to Defcon 1. ( #1974660)

        Opened my laptop tonight and got “Windows has unexpectedly come out of sleep mode. To help you with the problem, here is some information:”

        Problem signature:
        Problem Event Name: BlueScreen
        OS Version: 6.1.7601.2.1.0.256.48
        Locale ID: 1033

        Additional information about the problem:
        BCCode: 1000009f
        BCP1: 0000000000000004
        BCP2: 0000000000000258
        BCP3: FFFFFA8003690660
        BCP4: FFFFF80000B9E420
        OS Version: 6_1_7601
        Service Pack: 1_0
        Product: 256_1

        Files that help describe the problem:
        C:\Windows\Minidump\100719-36660-01.dmp
        C:\Users\user\AppData\Local\Temp\WER-18593790-0.sysdata.xml

        —–

        At first, nothing seemed off. Then I got a blinking cursor BSOD on a reboot the next day, which seemed to resolve; have not seen it again, and I can print with my USB printer (I only have one).

        Ran a full disk drive diagnostic from Dell’s toolkit in the UEFI/BIOS on the HDD (took an hour) and it passed. Now tonight, upon flipping open the laptop, I got this, never seen it before:

        “Windows has unexpectedly come out of a sleep state, here is some information to help you find the trouble:”

        Problem signature:
        Problem Event Name: BlueScreen
        OS Version: 6.1.7601.2.1.0.256.48
        Locale ID: 1033

        Additional information about the problem:
        BCCode: 1000009f
        BCP1: 0000000000000004
        BCP2: 0000000000000258
        BCP3: FFFFFA8003690660
        BCP4: FFFFF80000B9E420
        OS Version: 6_1_7601
        Service Pack: 1_0
        Product: 256_1

        Files that help describe the problem:
        C:\Windows\Minidump\100719-36660-01.dmp
        C:\Users\user\AppData\Local\Temp\WER-18593790-0.sysdata.xml

        Don’t know if this is patch-related, just grist for the mill. Oh, man.

        Oh, and went in search of the files it mentioned; the minidump said “access denied”, the other one was not found!

        Win7 Pro SP1 64-bit ESU, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", Group "Patch List", Multiple Air-Gapped backup drives in different locations, "Don't auto-check for updates-Full Manual Mode." Linux Mint Greenhorn
        --
        "A committee is the only known form of life that has at least four legs and no brain."

        -Robert Heinlein

        • #1977033 Reply
          anonymous
          Guest

          Nibbled, this is anon #1929430. It looks like a power driver (power state) problem.

          Windows 7: BSOD BCCode: 1000009f by Poster cansat66
          https://www.sevenforums.com/bsod-help-support/265161-bsod-bccode-1000009f.html

          DRIVER_POWER_STATE_FAILURE (9f)

          Poster cansat66 uninstalled McAfee and VirtualClone Drive. BSODs went away. Another poster in a forum uninstalled Norton Antivirus and said they would post again if the BSODs were still present. They did not. So one assumes Norton caused their BSODs. Any recent change in your antivirus or did this happen immediately after the MS patches?

          Nibbled, other than the patches have you installed anything? If not, then I would uninstall the patches one by one, starting with the IE11 patch first (my opinion). Others may have ideas too.

          Hope you get it fixed. Keep us informed.

          1 user thanked author for this post.
          • #1977281 Reply

            ? #1929430:

            Am using MSE, nothing exotic re AV.

            No recent changes in  hardware at all…can’t afford it.  :/

            Appreciate the advice on the patches, but as the machine has behaved itself for nearly 24 hours, for the immediate present I’m going to “keep it under observation”. If it has another psychotic episode, I’m going to start pulling patches. Don’t want to do that just yet, as THAT can cause issues; sometimes running Windows is like flying an large airplane: you don’t want to change anything fast! (Save dire emergencies.)

            (Maybe the Moon is in the wrong sign or something.  :p )

            And thanks for the Windows Seven Forum link; hadn’t heard of it, looks neat. One cannot have too many help sources these days. If the instincts of my “Better Angels” didn’t say otherwise, I’d swear MSFT is trying to blow the Win 7 ship up before January.  I am SO tired of being a beta tester.

            (BTW, anything McAfee is, IMHO and experience, as deluded and kludge-ridden as the founder of the company is.)

            Win7 Pro SP1 64-bit ESU, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", Group "Patch List", Multiple Air-Gapped backup drives in different locations, "Don't auto-check for updates-Full Manual Mode." Linux Mint Greenhorn
            --
            "A committee is the only known form of life that has at least four legs and no brain."

            -Robert Heinlein

      • #1977063 Reply
        anonymous
        Guest

        ? says:

        is this MSRT dated 10/3 for september?

        https://www.catalog.update.microsoft.com/ScopedViewInline.aspx?updateid=58429daa-53b6-4d60-8a72-8f85035351e5

        from:

        https://www.catalog.update.microsoft.com/Search.aspx?q=890830

        or does it matter since it is high noon on patch day somewhere?

      • #1979264 Reply
        Alan_uk
        AskWoody Plus

        Today my W7 Prof 64bit got corrupted so I recovered to a post July updates with an image backup. Then via Windows Update (after hidding Octobers) I was offered and installed:

        2019-09 Security Update KB4474419
        2019-09 Security Monthly Quality Rollup KB4516065
        2019-09 Servicing Stack Update KB4516655

        But I’ve not been offered
        2019-09 Security and Quality Rollup for .NET Framework 3.5.1, ………. (KB4514602) [Im on 4.7.2] that I was offered and installed previously in September.

        My last .NET F/W update in now July 19 with KB4507420

        Suggestions on how I install the missing KB4514602 please.

        Also, previously I applied the IE patch KB4522007. Is that now incorporated in the normal Sept patches?

        Thanks

        Alan

         

        • #1979267 Reply
          PKCano
          Da Boss

          Also, previously I applied the IE patch KB4522007. Is that now incorporated in the normal Sept patches?

          KB4522007 is not in the Sept patches. It was issued after Sept Patch Tues. But it is incorporated into the Oct Updates.

          2 users thanked author for this post.
        • #1979268 Reply
          Microfix
          AskWoody MVP

          Alan, the missing .net update is in the MS Catalog: KB4514602

          Win8.1 Pro | Linux Hybrids | Win7 Pro O/L | WinXP O/L
          1 user thanked author for this post.
      • #1979600 Reply
        Alan_uk
        AskWoody Plus

        Many thanks Microfix. I’ve always been a bit wary of using the catalogue when there are multiple files, especially when lots. This NF update is 6 files, some msu and some exe. Can I run those in any order? And if one fails how do I reverse – go back to a Restore Point or will they be in Installed Programmes to uninstall?

        Thanks, Alan

        • #1979609 Reply
          PKCano
          Da Boss

          .NET Rollup KB4514602 is a “bundle” of updates. Look at the MS support page for KB4514602.
          Each one of those files is for a different version of .NET and each has it’s own KB number.
          You only need the one(s) for the version(s) of .NET that is installed on your machine.

          IMHO it is best to install the .NET Rollup through Windows Update because WU “knows” which versions are installed and installs the individual updates accordingly. It’s more difficult if you try to handle the job yourself.

          If you use WU, be sure the update says “Rollup” and is not the installer for another version of .NET (v4.8 installer has been offered through WU lately).

          1 user thanked author for this post.
      • #1980164 Reply
        Alan_uk
        AskWoody Plus

        Many thanks Microfix. I’ve always been a bit wary of using the catalogue when there are multiple files, especially when lots. This NF update is 6 files, some msu and some exe. Can I run those in any order? And if one fails how do I reverse – go back to a Restore Point or will they be in Installed Programmes to uninstall?

        Thanks, Alan

        WU now offering optional 2019-10 Security and Quality Rollup for .NET Framework ….. for x64 (KB4524102) 41MB, so I hid this and checked again for updates.

        Now offered 2019-09 Security and Quality Rollup for .NET Framework 3.5.1, ………. (KB4514602) so I installed.

        Thanks to those that helped.

        Alan

    Viewing 54 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: MS-DEFCON 3: Get your September patches installed — but stick to the mainstream patches

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.