Unless you’re running Windows 10 Fall Creators Update (version 1709), now’s a good time to get all outstanding Microsoft patches installed. Details co
[See the full post at: MS-DEFCON 3: Most February 2018 patches are good to go]
|
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it. |
-
MS-DEFCON 3: Most February 2018 patches are good to go
- This topic has 186 replies, 36 voices, and was last updated 7 years, 1 month ago by
.
AuthorViewing 75 reply threadsAuthor-
I am running Win 10 Pro 1709. I delayed updates but that delay only extends to 9 March. My understanding is you don’t recommend installing updates fro 1709 but how can I extend my delay? My understanding is I can not beyond the 30 days that I originally paused updates
BTW I did not want to be on 1709 but was having a problem Windows Update. was on 1703. MS reinstalled Windows the day 1709 was released and that was where I ended up. Thanks Microsoft for not allowing me to choose.
-
You can download wushowhide.diagcab from MS and hide the updates.
Also, read Woody’s ComputerWorld articles on how to Temporarily Turn Off Windows Update and Block Windows Forced Updates.1 user thanked author for this post.
-
-
-
-
As soon as the link to the ComputerWorld article is posted on the blog page, there will be information on patches for 1703. Check it out when posted.
1 user thanked author for this post.
-
-
Although it doesn’t specifically say so, the patch that corrects the Smart card problem KB4091290 is a Rollup. As a Group B patcher, you probably don’t want to install it. Read Woody’s ComputerWorld article for further information.
If you do want to install KB4091290, @MrBrian has determined that you will need to hide the Preview patch KB4075211 before it will show up on Windows Update
1 user thanked author for this post.
-
Yes, thanks. That was my point. No February Security Only patch to fix the smart card reader error created by BOTH the rollup and Security Only patches for February. Group W time? Windows Update as malware?
Was reading on an earlier thread from a beta guinea pig who got the same error I got after he installed the January S.O. patch, and on boot when trying to do a System restore, namely 0xc0000022….
Still have an image and data from 11/30/2017 which I needed to use to get my networking back after a freeze sometime after the Meltdown patch and hard boot broke it and sfc scannow couldn’t fix it and was/is still broken. Group W looks better all the time… 🙁 🙁 🙁
What does kb4074736 break BTW, and does the fix for that break something else?! UGH…
1 user thanked author for this post.
-
My 1709 machines have these updates and none of the problems.
I know there are problems, and yes, MS acknowledges it, but I’d argue there’s probably more people fully patched with no issues than there are people fully patched with problems. JMHO
1703 and 1709 so far have worked great for me, no issues with either; so much so that I’m hands-off with both. It’s nice to not have to fret over updates. (With daily Veeam backups for peace of mind “just in case”.)
It occurs to me that maybe “the mad dash to two new versions of the last version of Windows per year” is Microsoft’s effort to quietly move us further and further away from their traditional way of doing things, and further and further along the new path they have envisioned for everyone. Everyone is so distracted with all of the bad patches that it is not easy to see the overall picture.
Group "L" (Linux Mint)
with Windows 10 running in a remote session on my file server“If you’re using Flash on Internet Explorer (or Edge) and haven’t yet installed the fix for CVE-2018-4878, described in Microsoft’s Security Advisory ADV180004, you’re vulnerable to a Malspam campaign attack described by Morphisec Labs. Of course, if you avoid Flash and/or use a different browser, you have little to fear.”
And nothing to fear if you’re using Windows 7 which doesn’t appear on the list of affected products.
Windows 10 Home 22H2, Acer Aspire TC-1660 desktop + LibreOffice, non-techie
-
Egads, I did it too…
I wrote:
Any chance you meant KB4074598 for security-only patch?I should have written:
Any chance you meant KB4074587 for security-only patch?(Sorry for any confusion, should have reread before hitting submit.)
1 user thanked author for this post.
Just did the updates via Windows Update on two W7 SP1 Home Premium 64-bit computers. With the Defcon 3 green light. Fingers crossed offcourse.
I had not applied updates for a few months given all the depressions raging over patch land. I am happy to say that both computers are still up and running and so far I see no problems.
One of them my main machine used daily has a Windows 7 install from 2009. Over the years I have made regular use of this site to prevent Microsoft from converting it into a Windows 10 PC. I hope that with this site support I can add a few more years of Windows 7 use on both computers.
Thank you very much!
2 users thanked author for this post.
-
Unfortunately, you can’t just forget about them.
Case in point: Last year’s patches to fend off EternalBlue. You had to patch sooner or later.
Most people make the mistake of assuming they have to patch as soon as MS pushes the patch out the chute. They don’t. But you do have do the dirty deed eventually.
1 user thanked author for this post.
following article
https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/ i installed security only (groub b) patches on both windows 7 (three this month) and on windows 8.1 (two as usual).after reboot i installed all important patches (office, msrt, defender, flash,…). of course NO nvidia and no quality-thingy…
as usual i also installed no optionals, so also no .net patches installed this month at all…
1 user thanked author for this post.
-
-
I don’t know if I have a smart card or not. What is a smart card?
1 user thanked author for this post.
-
-
Does anyone know if the ‘WIN7 reboot to black screen’ issue was ever resolved? It apparently caused some machines to go into a strange hibernation state when rebooted using a ‘restart’ button with the only way out being a forced restart via a power switch. Last I read here at AskWoody was to either uninstall the patch – either the February Rollup or security only patch – or to turn off hibernation, or to never restart the machine with a ‘restart’ button (in other words shut the machine down completely and then start it up again).
Thanks.
1 user thanked author for this post.
-
I have Win 7 Home, on a Sandy Bridge processor… and I delayed installing January updates past the all clear by Woody, because of the same concerns. @Lizzytish had reassured me that her updating on a similar system had gone well. I have now updated January and February Group B style. I deliberately did a restart after updating today, and found no problems. There was a slightly scary moment when the screen was black, with only a cursor… but it didn’t stay that way for more than a few (long) seconds.
Non-techy Win 10 Pro and Linux Mint experimenter
-
On my Windows 7 Pro Ivy Bridge machine, installing the February KB4074598 with MS-Defcon 3 brought back the reboot problem, so I removed KB4074598 and the problem was gone. Interestingly, the first reboot after installing the February patch was fine, but the problem came back on the reboots after that.
-
-
The problem happens with either the “restart” from the Start menu or the “restart” from the restart/shutdown button on the login screen. If one chooses “shutdown” in either of those cases, the machine shuts down and powers off normally, and the boot up from turning the power back on happens normally. Since I dual-boot on my machines with Windows 7 or Ubuntu Xenial, I’m using the “restart” much more than I use “shutdown”. It turns out all my machines are either Sandy Bridge or Ivy Bridge so this problem is a pain.
-
-
-
@w5pny-
I never installed the monthly rollup, just the February security only… I did restart multiple times, and no problems were triggered.
Wish I had a test machine to play with… but no monthy rollups going on this one just to test things out!
Non-techy Win 10 Pro and Linux Mint experimenter
1 user thanked author for this post.
-
Regarding KB4077525 and Server 2016, the list of known issues sounds really encouraging: Because of an AD FS server issue that causes the WID AD FS database to become unusable after a restart, the AD FS service may fail to start. There is no way to undo the database corruption. To return your AD FS server to a functional state, you must restore it from a backup.
Yay! QA FTW!
1 user thanked author for this post.
-
-
I think W10/2016 patching is a lost battle… Returning to this very same KB4077525. There’s been a well known issue with NTFS deduplication on W2016, causing data corruption with big (2TB+) files – see https://blogs.technet.microsoft.com/filecab/2017/01/30/windows-server-2016-data-deduplication-users-please-install-kb3216755/. Note it’s dated Jan 2017. The advise back then was to install Windows 10 {!!!) hotfix KB4013429. As everyone is well aware, Windows 10 does not support deduplication at all. So, the way to release patches for serious problem that noone but enterprise server OS users will hit, according to the Redmond genie, is to hide them inside client-only insider preview patches.
Slow forward to Mar 2018 – lookie, our KB4077525 mentions:
– Addresses issue where a file that is optimized and is less than 2.2 TB may be corrupted by the Dedup process when the file is updated to exceed 2.2 TB.
– Addresses issue where a file is always marked as corrupted—even though it isn’t—when running a full Dedup scrub on a file larger than 2.2 TB.
The very same gentlemen who claim to “take your data integrity extremely seriously” took 14 months to (re)release the fix in a way every sane person out there would have expected from the very beginning.
You gotta be kidding me!!! :-X
-
Woody,
I appreciate all your hard work, but in future would it be possible to change the DEFCON level before the weekend, e.g., on Friday?
For two months in a row you’ve changed it on a Monday, but I, and I suspect a lot of home users, don’t have time to install patches until the weekend.
A Monday DEFCON change is like having a dashboard light come on that says “You need to change your oil RIGHT NOW“, but unfortunately you’re on the freeway and the nearest exit is five miles away.
Thanks.
1 user thanked author for this post.
-
Patch Tuesday isn’t until the 13th of March. You should have time next weekend to update before Microsoft does its next dirty deed. ??
And I will patch next weekend.
But the thing is, if I don’t patch and we’re at MS-DEFCON 2, I’m prudent. If Woody changes to MS-DEFCON 3 on a Monday, but I don’t patch until Saturday, then I’m negligent for several days. No one likes to be negligent.
Last month I stayed up late on Thursday night to install the patches, and regretted it all day at work the following Friday. I don’t want to do that again.
-
There’s nothing as good as being retired! Or is that re-tread?
All I know is if I patch on a weeknight the next day I’m half-dead! 🙂
-
alpha128, I’m retired and can patch any day after Woody goes MS-DEFCON 3, including the day of if I want. I have three computers: a desktop, a laptop, and a 3-in-1. I’ve found I’m more comfortable waiting until the weekend before the next Patch Tuesday to get updated. I follow this site carefully while I’m waiting to see how the updating is going for everyone, just in case. If there’s problems, I would have no compunction whatsoever in skipping updating for a month or two until MS gets their act together. I’ve never had to do it yet, though, and doubt very much I ever will. But that’s just me. You should do what’s comfortable for you. But as PKCano said, “Patch Tuesday isn’t until the 13th of March. You should have time next weekend to update before Microsoft does its next dirty deed.” That’s exactly how I’ve been doing it for two years.
-
alpha128, I’m retired and can patch any day after Woody goes MS-DEFCON 3, including the day of if I want… I’ve found I’m more comfortable waiting until the weekend before the next Patch Tuesday to get updated… You should have time next weekend to update before Microsoft does its next dirty deed.” That’s exactly how I’ve been doing it for two years.
I prefer to be more timely with the application of updates after Woody changes the MS-DEFCON level. But changing the level on a Monday makes it difficult, if not impossible, to do that.
It’s the same thing as when the maintenance minder goes off in my car. It’s set to go off at 15% oil life, but I schedule my next service appointment immediately afterwards because I can’t stand looking at that indicator light. 🙂
-
I’ll consider changing on Fridays, if therer are no major outstanding issues.
This month I changed on Monday morning and by Monday afternoon, Microsoft had released a fix for the one really onerous bad patch.
Can’t hardly win for losin’, eh?
-
I’ll consider changing on Fridays, if there are no major outstanding issues.
Thanks!
-
Just want to put my two cents in, as there are many people who run on non-traditional schedules (law enforcement,medical and other 24 hour facilities). Also there are cultural issues about what a good time to do things on the weekend is (dusk on Friday, Saturday observances for some, and Sunday for others). Then there is the time differences being discussed, so that what arrives at midnight for one is 7AM for another.
Maybe I just have an eclectic group of friends, but none of them run Monday-Friday with weekends off type of schedules, religious observances aside. Some of them, preferentially, work double shifts (16 hours) on weekends because of shift differentials and overtime. Banks, schools and government offices do follow a Monday-Friday cycle. It is relatively easy to learn to time shift (make my own adjustments) rather than try and make the world adjust to me (it won’t, stubbed my toe on that one a long time ago). If you go anywhere on a weekend you will see people working… who do you think is running that store, Starbucks, gas station, or other spot you are relaxing at? They don’t have a chance to sit back and update on a weekend, at all.
I would prefer Woody to assess the time to post a change in Defcon based on the risk of infection vs risk of bad updates. Then we can all figure out when it works best for us to update. I know that might shock people who are used to daytime work hours on a Monday-Friday schedule… but it is what millions of people are doing week in and week out… and they don’t get holiday’s off, either…
Non-techy Win 10 Pro and Linux Mint experimenter
-
I prefer to be more timely with the application of updates after Woody changes the MS-DEFCON level. But changing the level on a Monday makes it difficult, if not impossible, to do that.
Understood. I was just sharing what’s comfortable for me, but, as I said, you should do what’s comfortable for you. However, it might not always be prudent for Woody to push the MS-DEFCON 3 button on a Friday, what with MS’s history of pushing out botched patches to fix botched patches at any time since going WaaS crazy. Sometimes, waiting a couple or three days could save us all a whole lot of grief, and Woody from having a bunch of unhappy — and loud — campers on his hands!
-
-
I noticed that the series of updates this year were specifically geared at locking out those if us less PC savy. I have repeatedly contacted microjunk to stop forcing updates on my PC as it is around 4 years old yet they kept sending update after update each conflicting with my settings eventually leading me on a path that says i need the disk to regain systems, of which i never had as the equipment was preloaded, while the win10 update was done in good faith digitally. I use my PC to just play warcraft and browse or pay bills so no big deal yet each update took me further and further away from recovery.. now my PC is in the closet until i can buy a new one as i plan to prove microjunk has an agenda of destroying machines over 5 years old and i can see the pattern they used with my closert case.. i hated when they killed XP.. XP was like a Tank and i ran it with zero security all day long, and yea.. some a**hat or 5 infested it and sent out so much spam it took road runner two weeks to find out who was doing it but hey… if we all did it should be golden! Microjunk
1 user thanked author for this post.
-
-
-
-
-
Almost like KB2952664 in Win7 – They keep coming back like a bad Penny!
1 user thanked author for this post.
-
A crusty, sticky, icky penny that nobody wants. Also is the cumulative update safe though? Ya know the cumulative update for Feb? Is it safe to install? Just wanna know-I know you said you didn’t install it yet, but did you get the chance PK?
1 user thanked author for this post.
-
-
-
-
Susan’s Patch Lady Master Patch list says it’s OK and the MS pages don’t show any known issues.
It has a lot of fixes.I just didn’t install it (I updated earlier before it was issued – I’m one of the Guinea Pigs. Don’t tell anyone)
1 user thanked author for this post.
-
Personally, I installed 4077528 on 2/22/18 and have had no ill effects on my HP laptop with 1703. YMMV
Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).1 user thanked author for this post.
-
You’ll be getting the Windows Spectre/Meltdown fixes for the first time. The Windows Spectre/Meltdown fixes are not compatible with some security programs, as Woody’s article mentioned.
If you’re in Group B, I recommend that you install the February 2018 Windows security-only update first, and then the January 2018 Windows security-only update, in order to avoid the other issues (such as the AMD processor issue) that the January 2018 Windows security-only update has. You don’t need to reboot in between the installation of these two updates.
-
-
“Will installing Feb Update prior to Jan Update now correct this?”
I doubt it. Your problem probably isn’t with the updates themselves, but with your Windows servicing subsystem. I recommend asking about it at https://www.sysnative.com/forums/windows-update/.
-
-
-
-
KB4075211 is the Feb Preview patch. KB4091290 is basically the Preview patch + the fix for the smart card. If you are using a smart card, you should install the combined patch. If you are not using a smart card, you do not need the combined patch. If the Preview patch is UNCHECKED in the “optional updates” list, you do not need to install it b/c it will be included in the March Rollup.
-
Thanks again @PKCano, Turns out I was getting smart cards confused with Windows Cardspace. I was thinking that a smart card reader would be something IN the computer not external hardware. Also, would a smart card reader show up in the device manager window? If that would be the case, then I know that I don’t have one.
1 user thanked author for this post.
-
Does anyone know if the ‘WIN7 reboot to black screen’ issue was ever resolved?
I don’t know if it was solved, but I’ve heard very few screams about it lately.
UPDATE: And now we have a report that the “reboot to black” problem is still there.
I got three out of my four Windows machines backed up and patched. Working on the fourth one now.
Patch time is a great time to do a backup. Not only does it allow you to recover from a rogue update, but it keeps you on a regular backup schedule.
So if there’s a silver lining in the sometimes-bad patches that Microsoft sends our way, it keeps me on a regular backup schedule!
Group "L" (Linux Mint)
with Windows 10 running in a remote session on my file serverSusan’s Patch Lady Master Patch list says it’s OK and the MS pages don’t show any known issues. It has a lot of fixes. I just didn’t install it (I updated earlier before it was issued – I’m one of the Guinea Pigs. Don’t tell anyone)
Well, I installed stand-alone 4077528 and found Start Menu won’t display and found calendar won’t display. Maybe, you were wise guinea pig to install 4074592 and not 4077528. 1703 (15063.936) Comment? Edit: I have updates for 1703 4023057, 4023814 hidden & update for W10 4056254 hidden.
Well, for those that pass this way. I restored machine thru recent image.
Start Menu and calendar display okay, now. I’m back at (15063.877).So, unsure how to proceed. Maybe, I’ll sit on my hands although @PKCano wrote 4074592 (15063.909) “has a lot of fixes”.
1 user thanked author for this post.
Win 7-64 SP1 Grp A — KB 4074598 Secur-Qual Rollup on 3/2 – and – MSRT + 2010 Office KB 4011707 – 3114874 – 4011711 (Outlook I actually don’t have) on 3/6. Macrium Images ready at each & no issues.
Awaiting directive on Net Framework 4.7.1. All is well.
W10 Pro 22H2 / Hm-Stdnt Ofce '16 C2R / Macrium Pd vX / GP=2 + FtrU=Semi-Annual + Feature Defer = 1 + QU = 0
1 user thanked author for this post.
I’ve installed the Windows 7 monthly rollup and MSRT together with 4 Office 2010 updates on my “work” (I’m actually retired although busier now than I was before) machine ok, as well as the MSRT on my gaming machine – will add the rollup to that machine in a day or two assuming nothing adverse arises on the work machine in the meantime.
Thanks as always to Woody and the team for the advice on this, including of course our very own Patch Lady :)!
As for the timing of the changing DefCon ratings, my view is that they should be done when they’re ready and not before. These things shouldn’t be rushed, nor should anyone be hassled into working harder for us than they already do.
-
Re: Seff #172951
“As for the timing of the changing DefCon ratings, my view is that they should be done when they’re ready and not before. These things shouldn’t be rushed, nor should anyone be hassled into working harder for us than they already do.”
Hear, Hear!
-
If anyone is having severe problems with the February updates, see 2000009: Getting out of a no-boot situation after installing Windows updates.
1 user thanked author for this post.
However, it might not always be prudent for Woody to push the MS-DEFCON 3 button on a Friday, what with MS’s history of pushing out botched patches to fix botched patches at any time since going WaaS crazy. Sometimes, waiting a couple or three days could save us all a whole lot of grief, and Woody from having a bunch of unhappy — and loud — campers on his hands!
As Woody said, if there are “no major outstanding issues” on a Friday 2-3 weeks after Patch Tuesday then it’s better to push the MS-DEFCON 3 button then. Rather than wait until the following Monday, and have us miss out on a weekend patch opportunity.
Running Win7 HP SP1 x64 here. I did Feb Security updates early yesterday and had no problems restarting after EACH update install. EXCEPT for the .NET updates. After installing the .NET updates, on restart I saw that my desktop had been COMPLETELY rearranged, it was set to “align to grid” and “sort by name”. Desktop was also locked. I could not move any icon or even use the icons to open programs. I tried to remove the .NET updates without success. Had to do a “Hard shutdown” with the power button. On starting up again, PART of the desktop was corrected, but not everything. I did another “Hard shutdown”. On restart everything looked OK. I did the .NET updates again, and on restart I saw the desktop flash. I did another ‘hard shutdown’, on restart everything seemed to be OK.
As of this morning, everything appears to be OK, with no more locked desktop. I don’t know if it had something to do with the .NET updates or if it was just my machine being stubborn.
IF there are any more problems, I’ll post here. If no more problems, I’ll be quiet.
Many thanks to Woody and the crew for all the help and advice given ! ! !
Dave
Win 10 Home 1607 straggler here! Just patched for the first time since December, and after taking an image first, held my breath while taking the plunge. 😉
With only the ‘Feature Update to 1709’ hidden by wushowhide, I opened up the chute, and let it rip!
The updates went according to plan, but I did get a surprise pop-up during the install, which I bypassed with ‘Remind me later’. It left a nice shortcut on my desktop to a ‘Windows 10 Upgrade Assistant’, but otherwise made no upgrades. The image is shown below. 🙂
https://i.imgur.com/gneb3B7.png
Windows 10 Pro 22H2
My Windows 10 Pro 1703 machine was current with the January patches, so i just updated to February without any issues. Only hid the ‘Feature Update to 1709’ with wushowhide. Will wait on that one, no hurry there…
Windows 10 Pro 22H2
-
-
I installed KB 4073543 a month ago on Win 10 Pro 1703 64-bit, when it appeared with the January batch. It has given me no trouble.
Windows 10 Pro 22H2
-
I only found that KB4023814 update on my Windows 10 Home 1607 machine. But my Windows 10 Pro 1703 seems to have avoided that one.
I did receive the nag screen on Home to upgrade to the latest version of Windows, and this page seems to explain why. But it did not force the upgrade to 1709.
Windows 10 Pro 22H2
-
KB3177467 is an exclusive update that Microsoft doesn’t allow to be installed at the same time as other updates. In Windows Update, this update (assuming you haven’t installed it yet) is listed only when no other Important updates that are ticked by default are listed. I recommend to install it.
1 user thanked author for this post.
-
You do not need the Feb Preview patch KB 4075211 or the patch that has the smart card fix KB4091290 if you are not using a smart card.
1 user thanked author for this post.
-
Hello Charlie, your instinct on SMB is correct. Super Mario Bros., Spartan Marching Band, surface mass balance, sub-mini type B connector, Server Message Block, and probably many, many more. But in this context Small and Medium Business servers is the intended meaning. As in the central computer serving the various field units among the staff.
There is also a related subset acronym seen sometimes. Small Office or Home Office, can be abbreviated SOHO, and should not be confused with the Manhattan neighborhood. Like many things if you do not recognize it, it likely does not include you. Or you need better friends. I hope it is not the friend thing. Friendly smile when I write that.
1 user thanked author for this post.
-
-
Hello Charlie,
The smart cards are usually set up in a business environment for two-factor authentication. Some computers have a reader, but an external reader can be plugged in. I also show smart card under services on my laptop… but I am not using a smart card or reader. If not using it, you don’t need this particular update, like PKCano says. Also, KB4091290, the smart card fix, is a rollup, and you don’t want that as Group B.
You are not a server, so don’t have to worry about that, either.
You are on Home or Pro?
I can’t tell you how much help I’ve gotten here… and I’ve had lots of questions that tech-types would never think would be a question. There is always something new to learn, and you have to start from where you are. Don’t be shy about asking a question to clarify an answer.
Non-techy Win 10 Pro and Linux Mint experimenter
-
-
@Charlie – My 2 cents worth is to keep IE 11 and Outlook updated. BUT don’t install KB4088835 yet because it’s actually part of the February Preview. (You can verify it’s part of the Preview by going to the MS support page for 4088835; part way down the page it says the fixes are among the same fixes as the Feb Preview) This preview will come back as part of the March Rollup or perhaps the IE 11 update for March. When that happens wait for the DEFCON level to get to 3 or higher before installing. I personally NEVER install a Preview.
-
@Charlie-
I did think it was Hewlett Packard, and not Home Premium!
The IE 11 updates are cumulative, so if you already installed February’s IE 11 KB 4074736 and don’t need the Outlook fix, you can probably wait until next month to worry about it.
Non-techy Win 10 Pro and Linux Mint experimenter
-
-
-
As Woody said, if there are “no major outstanding issues” on a Friday 2-3 weeks after Patch Tuesday then it’s better to push the MS-DEFCON 3 button then. Rather than wait until the following Monday, and have us miss out on a weekend patch opportunity.
Actually, Woody said only that he would consider changing on Fridays if there are “no major outstanding issues,” and that’s completely in line with my Block Quote which you included with your reply, unless I’m missing something, which if I am please accept my apology. I suspect that we pretty much all here agree it’s better to do our updating and upgrading on weekends, but my main point during the course of this conversation has been that we shouldn’t expect Woody to change to MS-DEFCON 3 or higher until he’s comfortable enough he’s giving us the very best update/upgrade guidance he can possibly give, whether it’s Friday, Monday or whenever. Woody and his staff of outstanding MVPs are working their tails off for our good, not necessarily our convenience. It appears that, from you last post, we’re both now in agreement with that. If not, again, please accept my apology.
1 user thanked author for this post.
-
I suspect that we pretty much all here agree it’s better to do our updating and upgrading on weekends, but my main point during the course of this conversation has been that we shouldn’t expect Woody to change to MS-DEFCON 3 or higher until he’s comfortable enough he’s giving us the very best update/upgrade guidance he can possibly give, whether it’s Friday, Monday or whenever. Woody and his staff of outstanding MVPs are working their tails off for our good, not necessarily our convenience. It appears that, from you last post, we’re both now in agreement with that.
We are in complete agreement. My main point is that two months in a row Woody has changed the MS-DEFCON level on a Monday – which is the absolute worst day to do it. My point is that all else being equal Friday is the best day to change it.
-
-
Yes, I am looking forward to Patch Tuesdays and MS-DEFCON Fridays! 🙂
-
alpha128 wrote:
I am looking forward to Patch Tuesdays and MS-DEFCON Fridays!
+1
In addition to home users/patchers, please remember that, for many small businesses, non-trivial IT operations often occur off-(business-)hours–and often enough on weekends.
So nominal MS-DEFCON changes late on Friday nights–_unless contraindicated_ (by, let’s say, persistent patching perturbations emanating from recent Redmond repairs and re-releases…)–sounds like a great idea. And I trust Woody to make that final call.
Thanks Boss, major props for all u do 🙂
1 user thanked author for this post.
-
-
-
-
Also is there a new update/version for- MS Office Starter 2010 click to run?
The click to run versions update themselves….
Non-techy Win 10 Pro and Linux Mint experimenter
-
I’ve installed KB4076492 (a checked, important update for me) on 3 Win7 machines in the last 2 days, all with no problems at all. 2 were 64 bit Pro SP1 (1 Ivy Bridge 3rd generation and 1 Broadwell 5th generation) and 1 was 32 bit Starter (an Atom).
I’m basically group B so I don’t install Rollups, but on the same machines the security only and IE11 patches (KB4074587 and KB4-74736, respectively) installed with no problems.
I have ‘normal’ Office 2010 (i.e., not click to run) on one win& 64 bit machine and installed 2 Office, 1 outlook, and 1 Powerpoint patches on it with no problems (KB numbers are 4011707, 3114874, 4011711, and 4011187, repectively)
Hope this helps.
-
With regards to Group B:
The Security-only patches are NOT cumulative. If you skip one, you skip the fixes. For Win7 Group B you should install KB 4073578 (Jan SO plus fix for AMD), KB 4074587 (Feb SO) and the Feb cumulative IE11 Update (if you use Outlook Web App, use KB4088835. otherwise use KB 4074736). They can be downloaded from AKB2000003 on this site.
The QualityCompat Registry key set by the anti-virus is a requirement for patching through WU from Jan onward.
With regards to Group A:
For Win7 Group A KB 4074598 (Feb Monthly ROLLUP) is cumulative and supposedly contains the fix for AMD processors.
1 user thanked author for this post.
alpha128’s update adventures
Here you go – this is why I prefer to update on Saturdays.
1. Launched Macrium Reflect and was told that I had to update to a new version. The auto-update failed so I downloaded the full installer, ReflectDLHF.exe
2. I then scanned ReflectDLHF.exe with Avast! and Avast! told me that it had to install a new version. So I did that.
3. After updating Avast! and rebooting. I did an Avast Smartscan ,which told me that my VLC media player was out of date. So I installed that.
4. I then finally installed the Macrium Reflect update and rebooted again after that. Then I did a complete backup of my C: drive.
5. I then installed 2018-02 Monthly Rollup for Windows 7 (KB4074598)
6. After a reboot I installed 2018-02 .NET Rollup (KB4076492)
7. Because the purpose of the Macrium Reflect update was to fix a problem with rescue media, I then created a new rescue disc.
Total elapsed time: about five hours
-
-
you could delay your personal patching routine to the nest available Saturday.
I assume you mean the next available Saturday. And yes, that’s what I ended up doing.
But as I’ve said before, and others have agreed with me, all else being equal Friday is the best day to change MS-DEFCON level.
-
-
I’ve seen you stress the phrase ‘all else being equal’ several times. I find myself wondering what that means.
This may be speculation on my part, but Woody’s earlier post implied that he was basically ready to raise the MS-DEFCON earlier, but waited until Monday morning just in case Microsoft “released a fix for the one really onerous bad patch.” In that case, Woody’s knowledge on that Monday morning and the previous Friday night might well have been equal. And by waiting until Monday morning, he put those of us who don’t have five hours to spare on a weeknight at a disadvantage.
-
-
-
-
As MrBrian help remind us in another topic earlier today, recommended updates can be listed differently from one machine to another without regard to their descriptive title.
When you choose GroupA, those directions ask you to take recommended updates the same as important updates. However GroupB does not do this, and recommended updates appear on the second page of Windows Updates offered items.
In both Groups, instructions are to not check anything not already preselected by Windows Update.
Anonymous, you have not said which Group you prefer, nor how your Windows Update settings are set. So I cannot give guidance beyond describing what you are viewing.
1 user thanked author for this post.
-
why KB4076492 is a optional update not important hmm it’s a security update? is it safe to install? 2018-02 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1 on Windows 7 and Server 2008 R2 for x64 (KB4076492) anyone can explain it to me? thank you
Microsoft’s nomenclature can be confusing. In this case 2018-02 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1 on Windows 7 and Server 2008 R2 for x64 (KB4076492) is all Quality and no Security. It contains bug fixes that are not security related. But my employer pushed this out to my work computer weeks ago, so yes, after a month it should be safe to install. If you want to skip this one, you can. A future Security and Quality Rollup that does have Security will include the fixes from this rollup.
Kirsty has a post about version 7 of Steve Gibson’s New Inspectre Utility. That tool addresses different parts of the Specter Meltdown patching, not just the qualitycompat registry key.
If you don’t want a third party tool, you can check for the presence of the registry key by following
OscarCP’s instructionsSueW’s instructions.A third (indirect) way to check is to see what is being offered to you in Windows Update, because Microsoft won’t offer the monthly rollup, from January on, to machines that don’t have the registry key set.
EDIT original author achknowledged, link amended
Non-techy Win 10 Pro and Linux Mint experimenter
Thank you Elly. I will try that another day since we’re losing an hour of sleep tonight and I have to get to bed very soon.
In doing the security only updates from from PKCano’s post this morning, I encountered an unexpected problem. January’s KB4073578 went just fine having rebooted when prompted. Then I installed February’s KB4074587 and rebooted when prompted. Then I discover I had no internet connection. I uninstalled it and have the internet back. Is there a recommended resolution?
I have not installed the IE11 since that’s usually done after the security updates. A question regarding which IE11 update to use. My wife’s work email is Outlook. She occasionally accesses it from home. Does that mean I should use KB4088835?
Thanks for your help.
1 user thanked author for this post.
-
-
-
I believe it is the Outlook downloaded Web App, but I have not researched it.
O.K. I guess that update doesn’t apply to my outlook mail (live.com)
Here’s what I found:
https://en.wikipedia.org/wiki/Outlook_on_the_web
1 user thanked author for this post.
-
-
Outlook Web App is not a web mail service, but rather a web interface for companies who offer Exchange email to their users, allowing their users to access their Exchange email via the web.
Outlook.com and Live.com are websites where free web email services are provided.
Group "L" (Linux Mint)
with Windows 10 running in a remote session on my file server -
Outlook Web App is not a web mail service, but rather a web interface for companies who offer Exchange email to their users, allowing their users to access their Exchange email via the web. Outlook.com and Live.com are websites where free web email services are provided.
M$ is constantly changing names, seemingly willy-nilly. I find it irritating and counterproductive Wikipedia (#174684 linked above) says,
“Outlook on the web (previously called Exchange Web Connect, Outlook Web Access, and Outlook Web App).”
So I suppose the correct “Quality” up to date term is “Outlook on the Web”.
Go figure.
1 user thanked author for this post.
-
-
Hello @anonymous #174576
In doing the security only updates from from PKCano’s post this morning, I encountered an unexpected problem. January’s KB4073578 went just fine having rebooted when prompted. Then I installed February’s KB4074587 and rebooted when prompted. Then I discover I had no internet connection. I uninstalled it and have the internet back. Is there a recommended resolution?
I am basically non-techy, but share the solutions that I’ve found to things (especially those shared by the knowledgeable people here). I don’t see that any one with that kind of expertise has responded to your problem with the internet… but I’m hoping that with the quote of that specific question, it will be seen… or maybe you have resolved it by now?
Non-techy Win 10 Pro and Linux Mint experimenter
-
Hi anon #174576, as I was reading this, I remembered another question asked up-thread about which order to install the January (KB4073578) and February (KB4074587) updates for Group B. From MrBrian’s response and recommendation (above, on March 6, #172812):
“You’ll be getting the Windows Spectre/Meltdown fixes for the first time. The Windows Spectre/Meltdown fixes are not compatible with some security programs, as Woody’s article mentioned.
If you’re in Group B, I recommend that you install the February 2018 Windows security-only update first, and then the January 2018 Windows security-only update, in order to avoid the other issues (such as the AMD processor issue) that the January 2018
Windows security-only update has. You don’t need to reboot in between the installation of these two updates.”So, the one thing you do need to do first/next is to make sure the “QualityCompat” key exists in your Registry. If you’ve ever used the ‘Find’ function to search for a word in a text document — this is the same process that is also used to search the Registry. No changes are made by doing this. And since you use a well-known AV, I bet the key is already there.
If your Registry has the key, I’d like to suggest that you uninstall the January Update (KB4073578) and reboot. Then, following MrBrian’s recommendation, install the February Update (KB4074587) first, and then January’s.
Please keep us posted.
Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'
Thank you SueW (& MrBrian too).
I have checked the registry using your process previous described (#15700) and find that the key is there. There is also a line entry appearing above the key line in which I see the following: under “Name” (Default) which is surrounded by a rectangle of dots; under “Type” REG_SZ; and under “Data” (value not set). Am I correct that this line is of no significance for the issue at hand?
It’s now too late in the day for me to undertake uninstalling Jan’s KB4073578, rebooting, installing (in order) Feb’s KB4074587 & Jan’s KB4073578, rebooting, installing Feb’s IE11 KB407436, rebooting. Hope to get a chunk of time in next few days to try this.
I do have an older AMD processor (Nov 2009): AMD Phenom II X4 965 Processor 3.40 GHz. Maybe that was part of my issue too? Also using Win 7 Pro SP1 64-bit.
For all of last year it seemed the rules were: updates must be done in chronological order and reboot when Windows update says to. Looks like Jan/Feb 2018 proves the old adage “Rules are meant to be broken.”
Thanks again,
anon #174576-
Regarding your registry question: That is normal and expected.
If you already installed the January 2018 security-only update (or KB4073578) without issue, there is no need to uninstall it. My out-of-order installation advice was meant for those that hadn’t installed the January 2018 security-only update (or KB4073578) yet.
Perhaps of interest: When is it safe to install multiple standalone Windows updates without a reboot?
1 user thanked author for this post.
-
In general it is recommended to install the Security updates in order. January updates were a mess, and some of that mess was fixed by the February update, and that is why it might be better to install the February update first. It is of particular importance for those who have AMD processors, as I remember. The brave, with plenty of expertise, and maybe a VM or spare computer, will be testing the March updates… and that hasn’t had time to happen yet, so any recommendations for March updates have yet to be formulated.
But… I do have a similar question… and that is, if I am doing a clean install, and updating Group B style, do I have to install KB 4073578, the ‘fix’ for AMD processors before I install the January Security Update, KB 4056897 if it is an AMD machine?
Non-techy Win 10 Pro and Linux Mint experimenter
1 user thanked author for this post.
-
But… I do have a similar question… and that is, if I am doing a clean install, and updating Group B style, do I have to install KB 4073578, the ‘fix’ for AMD processors before I install the January Security Update, KB 4056897 if it is an AMD machine?
I would install the Feb patch first then install KB 4073578 (the SO with the fix for AMD) instead of KB 4056897 (the SO without the fix for AMD).
No need to reboot in between.1 user thanked author for this post.
-
I don’t know if there is any good reason to install the March 2018 Windows security-only update before the Feb. 2018 Windows security-only update. For those who didn’t install either the Jan. 2018 Windows security-only update or the Feb. 2018 Windows security-only update, I recommend installing the Feb. 2018 Windows security-only update first, and then the Jan. 2018 Windows security-only update; there should be no need to reboot in between the two. It should also be fine to install the Jan. 2018 Windows security-only update first, and then the Feb. 2018 Windows security-only update, provided that there is no reboot in between the two. The problem is that if you install the Jan. 2018 Windows security-only update first, and then reboot, your computer might not boot properly because of the AMD processor issue.
For those of you who in the past successfully installed the Jan. 2018 Windows security-only update (or one of its functional replacements) or the Feb. 2018 Windows security-only update, there is no need to uninstall them.
-
Simpler advice: You don’t need to worry about installation order if you follow my prior advice to use KB4073578 as the replacement for the Windows 7 January 2018 Windows security-only update or KB4077561 as the replacement for the Windows 8.1 January 2018 Windows security-only update.
-
Woody’s hasn’t given the go-ahead for the March updates yet. You can install the Jan. and Feb. updates though. See https://www.askwoody.com/forums/topic/ms-defcon-3-most-february-2018-patches-are-good-to-go/#post-175821 for my Jan. advice. You need to install only one IE cumulative update. You don’t have to reboot in between.
Hello. Anon #174576 here.
I was delayed in trying the suggestions after my original post (174576 on Mar 10) of problem encountered (ie, no internet after installing KB4074587; internet returned upon uninstalling).
Thank you all (Elly, PKCano, SueW and MrBrian) for your suggestions.
In summary: tonight I uninstalled KB4073578 & rebooted; installed KB4074587, then KB4073578, then rebooted.
The result: internet very sluggish loading pages if at all, Avast Free AV long time loading, email (Outlook 2007) not receiving or sending.
The solution: uninstalling KB4074587 & reboot had no impact; then uninstalling KB4073578 & reboot and email’s working, AV and webpages load as before undertaking tonight’s updating.
March updates comments elsewhere appear even worse than Jan/Feb.
Looks like I’m forced out of Group B and into Group W (if I’m recalling correctly, that’s the do nothing group).Viewing 75 reply threads - This topic has 186 replies, 36 voices, and was last updated 7 years, 1 month ago by
Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Recent Topics
-
Windows 11 Insider Preview build 26200.5600 released to DEV
by 50 minutes ago
-
Windows 11 Insider Preview build 26120.3964 (24H2) released to BETA
by 52 minutes ago
-
Drivers suggested via Windows Update
by 43 minutes ago
-
Thunderbird release notes for 128 esr have disappeared
by 4 hours, 33 minutes ago
-
CISA mutes own website, shifts routine cyber alerts to X, RSS, email
by 7 hours, 43 minutes ago
-
Apple releases 18.5
by 2 hours, 8 minutes ago
-
Fedora Linux 40 will go end of life for updates and support on 2025-05-13.
by 9 hours, 9 minutes ago
-
How a new type of AI is helping police skirt facial recognition bans
by 9 hours, 46 minutes ago
-
Windows 7 ISO /Windows 10 ISO
by 16 hours, 43 minutes ago
-
No HP software folders
by 17 hours, 28 minutes ago
-
Which antivirus apps and VPNs are the most secure in 2025?
by 1 hour, 25 minutes ago
-
Stay connected anywhere
by 22 hours, 50 minutes ago
-
Copilot, under the table
by 14 hours, 3 minutes ago
-
The Windows experience
by 1 day, 5 hours ago
-
A tale of two operating systems
by 20 hours, 1 minute ago
-
Microsoft : Resolving Blue Screen errors in Windows
by 1 day, 10 hours ago
-
Where’s the cache today?
by 2 days, 1 hour ago
-
Ascension says recent data breach affects over 430,000 patients
by 1 day, 18 hours ago
-
Nintendo Switch 2 has a remote killing switch
by 18 hours, 50 minutes ago
-
Blocking Search (on task bar) from going to web
by 1 hour, 8 minutes ago
-
Windows 10: Microsoft 365 Apps will be supported up to Oct. 10 2028
by 2 days, 18 hours ago
-
Add or Remove “Ask Copilot” Context Menu in Windows 11 and 10
by 2 days, 19 hours ago
-
regarding april update and may update
by 2 days, 20 hours ago
-
MS Passkey
by 1 day, 22 hours ago
-
Can’t make Opera my default browser
by 3 days, 4 hours ago
-
*Some settings are managed by your organization
by 2 days, 14 hours ago
-
Formatting of “Forward”ed e-mails
by 3 days, 3 hours ago
-
SmartSwitch PC Updates will only be supported through the MS Store Going Forward
by 3 days, 22 hours ago
-
CISA warns of hackers targeting critical oil infrastructure
by 4 days, 7 hours ago
-
AI slop
by 2 days, 1 hour ago
Remembering Woody
