|
MS-DEFCON 2:
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it.
|
-
MS-DEFCON 4: Time to get December patches installed
Posted on Comment on the AskWoody Lounge- This topic has 174 replies, 49 voices, and was last updated 2 years ago.
Viewing 56 reply threads-
-
It looks like the “emergency” Internet Explorer patch is working. As for the Outlook patches for the “operation failed” Rules & Alerts bug, your g[See the full post at: MS-DEFCON 4: Time to get December patches installed]
-
-
-
-
-
-
-
Yep, it is. But there haven’t been any more screams of pain, as far as I can tell…..
1 user thanked author for this post.
-
-
-
Precisely. I didn’t see any general pattern of bugs in the IE updates….
1 user thanked author for this post.
-
-
-
-
KB4470199 has been replaced by KB4483187 for both Win7 and Win8.1
3 users thanked author for this post.
-
-
-
-
-
Thanks for the update. I’ll wait on the article, but in any event I can think of more relaxing ways of spending Christmas with my family than saying to them “Apologies, but do you mind if we hold back on the exchanging of gifts, I need to install my Windows Updates”!
I’ll give it a few days and see what Microsoft give other people for Christmas before accepting their gifts myself…
10 users thanked author for this post.
-
I imagine the details will be in the Computerworld article, but will the .NET patches be clean, or should we wait another month? On Win8.1, KB4471989 came through as Important on Patch Tuesday; usually it’s only Recommended. No biggie if we hold off on .NET again, especially if there are no security-related fixes.
2 Machines for Now!
#1: Windows 8.1, 64-bit, back in Group A.
#2: Getting close to buying a refurbished Windows 10 64-bit, recently updated to v1909. Have broke the AC adapter cord going to the 8.1 machine, but before that, coaxed it into charging. Need to buy new adapter if wish to continue using it.
Wild Bill Rides Again...1 user thanked author for this post.
-
-
I have successfully updated Windows, IE, and .NET (no problems):
+ 2 XP Pro VMs (The only problem I had out of all was the fact it seems Avast AV no longer supports XP. The latest egine won’t run, but the older one does and still gets updated definitions)
+ 4 Win7 Pro and Ultimate VMs
+ 4 Win8.1 Pro VMs
+ 1 Win10 Pro 1709 VM
+ 1 Win10 Pro 1803 VM
+ 1 Win10 Pro 1809 VM
+ 1 Win10 Pro Insider Preview Fast Ring VM
+ 2 32-bit Win7 (one Home, one Pro) laptops
+ 2 64-bit Win7 Pro (one desktop, one laptop) hardware installsAND My Townhouse Homeowners Office Aii-in-One Win10 Pro 1709.
None of the Win10 machines got forced to 1809!!!
-
-
Christmas Eve? No support people around for a week or two? What’s the panic? Has anyone even reported being hit by the vulnerability “fixed” by the wonky IE11 patch, or even disclosed what opened this hole?! Was it a December update which opened it in the first place? Hmmm…
1 user thanked author for this post.
-
-
I appreciate the “seems to be innocuous” reassurance, but that’s still not quite “it’s not a problem” reassurance. Since I have neither the time nor the patience to deal with crashes over the holidays, I think I’ll just uncheck the KB4483187 IE11 update for now and install the others on our three Win7 Pro 64-bit SP1 machines. Then, once we have a genuine “all clear” on KB4483187, I can update it on our machines. We never use IE, so even though it still needs to be patched eventually, I’m voting for “better safe than snarling.”
Better thoughts from wiser minds are welcome.
Cheers
Group 7-L (W7, heading toward Linux)
W7 Pro x64 SP1
Linux Mint 18.3 Cinnamon 64-bit
Linux Mint 17.1 Xfce 32-bit1 user thanked author for this post.
-
I just set a new restore point, backed up my drive, and installed these updates:
2018-12 Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based systems (KB4483187)
2018-12 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 and Server 2008 R2 for x64 (KB4471987)
Windows Malicious Software Removal Tool x64 – December 2018 (KB890830)
2018-12 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4471318)So far, thank Heaven, everything seems to be working.
And thank you again.
1 user thanked author for this post.
-
-
-
Call me chicken little but I think I’ll wait till after Christmas
Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller
4 users thanked author for this post.
-
-
-
-
Two machines, both Windows 7 SP1 32-bit – Installed all available updates – .NET, Cumulative rollup, and Internet Explorer – no problems experienced.
I did them one-by-one – .NET first then reboot, Cumulative rollup second then reboot, and finally Internet Explorer then reboot.
Thank you to all the helpers here for their advice, comments, etc. Always very much appreciated.
-
As Christmas Eve turned to Christmas, I set about patching in Group B fashion my Win 7 Starter 32 bit guinea pig machine with the December updates: .NET Rollup, Security Only update, and the newest IE 11 patch from Dec. 19, with a required reboot after each.
Heartened by my success, I donned my Santa Suit, stuffed some extra pillows inside, taped on a white beard and proceeded to slide down the chimneys of neighbors whom I knew for certain had not been naughty, but instead, nice. Hopefully, I would be able to give a most unexpected gift, that of a seamless trouble-free Windows update for December. And, with a bit of luck, perhaps chase away the ghosts of Windows past. Next to the fireplace of each neighbor, I was greeted with a tall glass of milk, a plate of chocolate chip cookies, and a booted computer with a sign reading, “Please, Santa, keep my computer from turning into a lump of coal, and successfully update my machine. I promise I’ll be nice again next year, too.”
I set to work immediately; on each machine (all Win 7 Pro x64 SP1) I installed the updates listed above in the same order with a 15 minute wait after each restart before moving on to the next update. I should also add I did the .NET and IE 11 updates from Windows Update, but manually installed the SO patch from the MS Catalog.
Success in all cases! I’m back home now, exhilarated by the success and yet sleepy from all the milk and cookies.
Merry Christmas everyone. Thanks to all for sharing trials, tribulations, and triumphs of Windows Patching.
-
Thanks, Dr. Bonzo, for a humorous, refreshing chuckle full of good news, in the middle of the perpetual chaos which M$ inflicts upon us all! As Tiny Tim said, “God bless us every one”.
1 user thanked author for this post.
-
Dr. Bonzo,
Thank you for a most literate contribution. I have one question though, “Was all quiet through the house, not even a louse was stirring”?
1 user thanked author for this post.
-
Funny you should mention that. Each time on my way down the chimney I thought I heard a bunch of snickering and caught a glimpse of 2 guys scurrying away. Didn’t think much of it, but since then I’ve had this haunting feeling I’ve seen these creatures before. I could swear one of them was a white guy, early 60s, grey hair, glasses. Almost looked like he had $1,000 bills falling out of his pockets. The other guy was maybe early 50s, shiny bald dome, glasses, middle to far eastern descent – maybe Indian. He was always trailing the first guy and was desperately trying to stuff his pockets with the $1K bills the first guy was dropping.
Funny thing is, they always showed up at my next stop, like they knew where I was headed. At each place there was a sense of tension and unease when I started, but by the time I finished the updates I heard little whimpers and moans and there was a general feeling of peace and well-being.
Truly a Christmas I’ll never forget.
-
-
-
-
Correct.
2 users thanked author for this post.
-
-
Office patches are available through Windows Update if you have “Give me updates for other MS products” checked in Windows Update\Change settings\. If the check box is not there, you can open one of the Office programs and look for the option for automatic updates. I believe it may put the check box in WU as well,
Otherwise, you can download them from the Office pages here.
1 user thanked author for this post.
-
MS Office patches are available in the Catalog (to which Topic 2000003 gives direct links for the SO patches) but it is much, much easier to install them via Windows Update – I have only installed MO patches from the Catalog when my WU was broken and I temporarily lost the option to get updates for Microsoft products. Just locating them used to do my head in! Why not use WU for your .Net and Office patches, remembering to change the setting back to “Never check for updates” when you’ve finished? It makes life a lot simpler. Happy Christmas!
1 user thanked author for this post.
-
-
-
-
-
-
Hi Guys ‘n’ gal/s,
Well, just to keep you all updated re; KB4483187 for IE11.
I tentatively installed it but struck trouble.
It installed O.K. BUT….
when I opened “Computer”, I saw that my “C” drive was still there, but my
D, G, J & K drives were not showing & checking the “System > System Protection” settings,
the above were listed as “Missing.”(NB: The G drive holds my WIN10 OS. Dual boot only.)I tried to un-install the KB4483187 but it did not seem to work.
I then tried a System Restore but it got “stuck” as well.
I then chucked my WIN 7 disc in & did a Repair…..it also wanted to do a System Restore, which apparently it did.Anyway, the bottom line is, my desk top is now functioning O.K. again & all my drives are back.
All this took about 1 1/2 Hours.
What a weird one.Thanks for reading & keep up the good work.
May you all have a safe & Happy Christmas & New Year.Regs., Mike..
(Regs = Regards.)4 users thanked author for this post.
-
-
Dec 2018 (IE11) KB 4483187 – Download 32-bit or 64-bit (Released 12/19/2018 replaces KB4470199, fixes CVE-2018-8653 Scripting Engine Memory Corruption Vulnerability)
taken from:
https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/
does this mean, i don’t have to install KB 4470199? skip this one and install KB 4483187?only install KB 4471328 (windows 7, group b) and KB 4483187 (ie 11) on windows 7
and KB 4471322 (windows 8.1, also group b) and KB 4483187 (ie 11) on windows 8.1?
plus all office 2010 patches, msrt, flash, .net (is there any “important” .net this month?)…PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B1 user thanked author for this post.
-
If it says that a patch replaces an earlier patch, that means you DO NOT need the replaced patch. Only the one that replaces it.
Beside the SO and IE11 CU, with the exception of the Monthly Rollup, Group B gets the other patches through Windows Update – whatever is checked.
-
-
-
A few years back this would happen pretty frequently. But this time is only two months since the last. That’s annoying. Fortunately, as I mentioned then, almost all of the old settings seem to be preserved. so it’s a quick fix.
MS-DEFCON 4: With the Win7 Monthly Rollup now working, it’s time to get everything updated
1 user thanked author for this post.
-
-
The rule is that you may patch any style you choose. There are advantages and disadvantages to all patching styles. Patches that fail are not user fault.
Beta Work {Got backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender TRV=1909 WuMgr
offline▸ Win10Pro 20H2.19042.685 x86 Atom N270 RAM2GB HDD WindowsDefender WuMgr GuineaPigVariant
online▸ Win10Pro 2004.19041.746 x64 i5-9400 RAM16GB HDD Firefox86.0b2 WindowsDefender TRV=2004 WuMgr5 users thanked author for this post.
-
-
I’m a Group B patcher and the need to reconfigure Media Player has happened to me several times in the last few months. Face it: there is no good way to patch. For me, Group B is the lesser of two evils; for you, maybe it’s not.
-
Same here. Group B and Media Player has launched a number of times after Group B patching asking to be configured. Each time I checked my settings, it appeared nothing was changed, so I saved and closed. But each time there was a nedia player log is my User Name/AppData/Local/Temp folder.
-
-
-
-
-
-
-
The 15 day deferral (if you set it for 15 days) applies to each individual patch.
That’s handy when Microsoft uses the “C” and “D” week patches to test the next month’s non-security patches. But it’s problematic if a later patch is necessary to fix a problem introduced by an earlier patch.
1 user thanked author for this post.
-
-
-
-
The links in AKB2000003 are direct downloads from the MS Update Catalog.
1 user thanked author for this post.
-
-
In the last 24 hours or so my download experience from MS servers has been extremely inconsistent. Sometimes a patch downloads in just a few seconds, sometimes 30 minutes. Several patches did nothing for 10 minutes then downloaded about 60% in a few seconds then slowed way down, then sped up.
-
-
-
-
Just finished updating 1 of my W7 Pro x64 computers and all seems well so far. Rebooted ok and no surprises YET.
KB 4483187 (IE 11), KB 4471987 (.net), KB 4471318 (Rollup), and MSRT.
Don't take yourself so seriously, no one else does 🙂
4 Win 10 Pro at 1909 (3 Desktops, 1 Laptop).-
-
KB4483234 is a CU that was released to take care of CVE-2018-8653 (vulnerabliity in IE, not Flash). Since it was rated as “Security,” it was pushed through WU out-of-band, more or less.
1 user thanked author for this post.
-
-
-
I just finished installing:
kb4483187, restarted and waited 15 minutes
kb4471318, kb890830 restarted and waited 15 minutes
kb4471987 no restart required but I restarted anywaySo far all is ok.
Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller
-
Group ‘A’ patches installed okay here on a Windows 7 machine.
I did fall for the world is falling concerning the IE11 patch. Installed it, thought better of it and uninstalled it, all before a reboot. Upon reboot, the machine didn’t know which way was up as it hung on ‘Configuring Updates’. A hard reboot cured that (lucky me). Another reason it pays not to seek and to check out the ‘Defcon’ status before installing any updates.
-
-
The .NET Rollups/SO patches are “bundles” which contain separate updates for each version of .NET installed on your computer. That is why you see multiple patches in the download from the Catalog. The individual patches have different KB numbers than the Rollups/SOs. It is difficult to determine which of the patches you need for each computer.
The recommendation for Group B patching is to install the .NET updates through Windows Update because that mechanism will install the correct ones. The .NET patches are not considered to be part of the Group B telemetry avoidance.
1 user thanked author for this post.
-
-
Hey Y’all,
Just got done updating my production machine 1803 with the Dec. quality updates w/o issue:
Also my TEST 1809 machine w/o issue:
I must have been a good boy last year…
-
-
@shorty22-
Glad that you have registered! If updating your Windows 7 Pro was going to be as awful as you fear, I’d direct you to the Support Forum… Instead, if you follow the steps in Woody’s linked ComputerWorld article in his initial post, above, you should be fine. That is one of the benefits of Group A updating (using the Monthly Quality and Security Updates)- just applying the most recent patch should bring you up to date. Another plus, is that all the problems with patches that led to the recommendation to roll back, have been pretty much solved. So updating should work without introducing dire problems. You should back up before updating, just in case, as it is cheap insurance.
KB2952664 (is this the one not to install cause it’s a win10 thing…?
KB2952664 has long been avoided, not because of W10, but because it is related to telemetry, and so many of us find telemetry less than acceptable. It’s functions have been rolled into the Monthly Quality and Security Updates… More good news- We still have AKB 2000007: Turning off the worst Win7 and 8.1 snooping. (which you might want to review) but we also have 2000012: How To Neutralize Telemetry and Sustain Windows 7 and 8.1 Monthly Rollup Model..
One caution… when following the steps given for Windows 7 Group A updating, do not skip any of the steps in 2000004: How to apply the Win7 and 8.1 Monthly Rollups. @MrBrian spent a lot of time testing, and found out that because Group A has Windows Update set to “Never check for updates (not recommended),” they (and Group B, too) were missing servicing stack updates, and step “A5 Wash, Rinse, Repeat” was added to Group A updating to address it. Servicing Stack updates only show up in Window’s Update once all other updates are either installed or hidden… and would be installed automatically if Window’s Update was set on automatic. They do not contain telemetry, and really should be installed. I apologize, because I’ve had my own health challenges, and I can’t remember exactly… but you may run into the Monthly Quality and Security Update failing to install… and that may be because the Servicing Stack isn’t updated, and it might be easiest to do that manually. So don’t get worried if that happens. Just report back here for that particular step. Read Windows 7 and 8.1 might be missing updates if don’t hide unwanted updates for more detailed information on the Servicing Stack updates.
Happy Updating!
Non-techy Win 10 Pro and Linux Mint experimenter
-
Elly,
KB 2952664 still shows up when I check for updates so I’m not sure that it is rolled into the Quality rollups yet.
Don't take yourself so seriously, no one else does 🙂
4 Win 10 Pro at 1909 (3 Desktops, 1 Laptop).1 user thanked author for this post.
-
-
You keep seeing it because the Rollups do no supersede it. What you are seeing is the last version of it. Just hide it and it won’t come back.
3 users thanked author for this post.
-
-
Elly, Elly, Elly. So quick and so thorough! Thank you very much for your post. My company is FINALLY leaving tomorrow and as much as I love them, I’ll be looking for some peace and quiet and delicious leftovers in the Instant Pot. Yum.
I plan to follow your instructions to the “T” and will likely give ‘er on Friday or Saturday.
Once again, thanks very much Elly. Happy New Year to one and all.
Marie (fingers crossed)
and………….. of course I think I clicked the wrong place for this reply, so I hope you see it, Elly.Thanks very much from Marie
Win7 Pro 64 bit (holdin on for life)
8Gg Ram
i51 user thanked author for this post.
-
-
-
Windows update reporting in:
Installed KB4471318 (roll up)
waited 15 minutes
Installed KB4471987 (.net roll up)did not install:
Kb4483187 (IE update 12/19)
My gut told me not to. Just didn’t have a good feeling about it.
Deceided to wait until the January rollup which I am sure it will be included.2 things I noticed with the updates is that it took forever to search for updates, which was very unusual.
The rollup which was over 200 mb took hardly any time at all to download and install.
I’m talking it only took a couple of minutes, which is totally unusual!!!
I had to check my “installed” updates to make sure it went through.
It did.
Had to reset Windows Media Player like others have reported.Dell Inspiron 660 (new hard drive installed and Windows 7 reloaded Nov. 2017)
Windows 7 Home Premium 64 bit SP 1 GROUP A
Processor: Intel i3-3240 (ivy bridge 3rd generation)
chipset Intel (R) 7 series/C216
chipset family SATA AHCI Controller -1 E02
NIC Realtek PCLE GBE Family Controller
MSE antivirus
Chrome browser1 user thanked author for this post.
-
@PKCano: Thank you, thank you, thank you!!!! It is such a Godsend to have help from you, who possess so much expertise and knowledge, you are a REAL “Lifesaver”, and I cannot adequately describe my admiration, and gratitude for the wonderful help you provide for me, and everyone else on this Forum. God Bless You!! 🙂
1 user thanked author for this post.
-
-
Thanks to everyone for reporting patch successes and failures. The reports make patching easier for everyone — rather like road signs, but for computers.
Blind curve.
Slow.
Construction ahead.
Bridge out.
Detour.Beta Work {Got backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender TRV=1909 WuMgr
offline▸ Win10Pro 20H2.19042.685 x86 Atom N270 RAM2GB HDD WindowsDefender WuMgr GuineaPigVariant
online▸ Win10Pro 2004.19041.746 x64 i5-9400 RAM16GB HDD Firefox86.0b2 WindowsDefender TRV=2004 WuMgr -
Five Win 7 Pro and three Win 8.1 Pro (all x64) were patched with the Dec 2018 “Group B” patches on 20 DEC 2018 (KB4471328 & KB4483187 and KB4471322 & KB4483187, respectively); their .NET Security & Quality Rollups were installed on 24 DEC 2018 (KB4471987 & KB4471989, respectively).
No adverse issues have been reported.
-
Another checking in (after updating last night):
1 – imaged my disk with Macrium Reflect
2 – downloaded Updates KB4471328 (Dec. SO) and KB4483187 (IE11 Dec. Cumulative)
3 – installed each Update and then rebooted; waited 15 minutes
4 – checked “Windows Update” => 7 Important: 4 Office 2010 (all checked) and 3 Win 7 (all checked); 0 Optional
5 – unchecked and hid “Important” update KB4471318 (Dec. Rollup)
6 – checked “Windows Update” again => 6 Important: 4 Office 2010 and 2 Win 7: all checked; 0 Optional
7 – unhid 0 hidden updates to install
8 – installed 6 Updates: 4 Office 2010 (KB4461577, KB4461570, KB4461576 and KB4461521); Dec. S&QR for .NET (KB4471987); and MSRT (KB890830)
9 – rebooted; waited 45 minutes (until the hard drive light stopped flashing)
Note: needed to reconfigure Windows Media Player again
Many thanks to Woody, PKCano, and everyone else here who contributes in helping us maintain our own systems!
Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie' -
Windows 7 SP1 64bit, with Broadcom network card. Group B.
Installed December’s updates; IE KB4470199, SO KB4471328 and .NET 3.5.1 KB4470600.
From the catalog; Installed IE KB4470199, SO KB4471328 2nd, .NET 3.5.1 KB4470600 3rd and MSRT 4th. Will install IE KB4483187 after the dust settles.
Installed one at a time. Rebooted in between each update letting it sit 1 minute after update was installed.
No network issues. No oddities (worked very well).
Rebooted 3 times and let it sit for several minutes.
I would recommend people on the last reboot to go to the desktop and let it sit 45 to 60 minutes to Process Idle Tasks and let the trusted installer (as per PKCano) do its thing.
No Problems.
Thanks to all here.
1 user thanked author for this post.
-
Windows 7 SP1 64bit, with Broadcom network card. Group B. Installed December’s updates; IE KB4470199, SO KB4471328 and .NET 3.5.1 KB4470600. From the catalog; Installed IE KB4470199, SO KB4471328 2nd, .NET 3.5.1 KB4470600 3rd and MSRT 4th. Will install IE KB4483187 after the dust settles…
KB4470199 was superseded by KB4483187. I too am Group B Win7 x64. I installed KB4483187 without any issues.
2 users thanked author for this post.
-
Windows 7 SP1 64bit, with Broadcom network card. Group B.
update:
Installed December’s updates; IE KB4470199, SO KB4471328 and .NET 3.5.1 KB4470600 a few days ago.
Now installed IE KB4483187.
No problem seen. IE opens, pages load.
1 user thanked author for this post.
-
-
-
-
You’re welcome, anon. I can understand your waiting; however, my reading is that it was the first update (KB4470199) that caused potential issues, and the second (KB4483187) that resolved them. I haven’t read any reports of issues with KB4483187.
See this post – #241301 – by PKCano.
Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'1 user thanked author for this post.
-
Hello again SueW. I hope you are right. The following posts here made me hold off for another few days on KB4483187. 242422, 242435, 242539.
Thank you again.
Windows 7 64 bit Group B1 user thanked author for this post.
-
-
-
-
-
-
Well, I would take that with a large grain of salt or a lump of coal. There is a statement identical to the one @b referenced immediately above on the support pages for both the Dec Win 7 Rollup and SO. And yet, for the large handful of Win 7 machines I’ve patched in the last few days, none had a broken seek bar before or after patch installation and ALL needed a configuration settings reset after the SO installation. The configuration reset is becoming par for the course in recent months. That’s not my definition of “fixed”. I haven’t checked Webster’s Unabridged yet, but I bet Webster and I are in agreement.
1 user thanked author for this post.
-
-
If you’ve been reading some of our earlier comments, you’ll only need to reconfigure Media Player, not reinstall it. And that’s assuming you encounter this issue.
Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'1 user thanked author for this post.
-
I don’t know much about audio stuff, so all I can say is this: All the machines I patched were standard brands (HP, Dell, Asus, etc.) with what I would call standard audio cards, speakers, etc. (no special codecs). After installing the SO, the first time I opened Media Player, I was greeted with a screen that said ‘Welcome to Windows Media Player. Configure your settings.’ (That’s not a direct quote, but the message was to that effect.) Below that were 2 buttons, one for a standard configuration and one for custom. I chose standard in every instance and Media Player, after a few moments, came up looking like it had before the patch installation.
Anyway, I’d be pretty surprised if you had to reinstall either Media Player or the Codec, but you might have to use the custom settings option.
Good Luck.
1 user thanked author for this post.
-
-
-
-
Reporting in:
Win 7 Home Premium x64
Full backup
KB4471987 (Net) installed OK.
KB4471318 (December Security Rollup) installed but trashed the WMP configuration settings.
KB4483187 (IE11) held over until I have a warmer feeling.
Both updates took their time to download and install – more than 30 minutes apiece.
All seems good at the moment…1 user thanked author for this post.
-
-
Sorry to break this to you but I also do nothing but SO updates on a large handful of Win 7 Pro x64 sp1 machines and I almost always have to reconfigure Media Player. For me, it’s not a big deal since I almost always use the standard or default configuration settings. Just because I’ve had to reconfigure doesn’t mean you will, but you should know the possibility exists even with SO patches.
1 user thanked author for this post.
-
I have a number of WMP non-default settings and filetype associations, and the *only* one that is ever changed by a WU-induced configure request is — ta-da — how often to check for WMP updates. It takes under 2 minutes getting back to where I was before the WU, with most of that time being in recreating my WMP shortcut for the QuickLaunch.
-
-
-
? says:
have the updates changed the CEIP setting in the WMP? i haven’t opened it since i don’t use it…
and here under Other Microsoft Applications:
https://www.ghacks.net/2016/10/26/turn-off-the-windows-customer-experience-program/
-
G’day folks
I was able to successfully Group A update a HP15 laptop with Win 8.1, and a Toshiba laptop with Win 7 (both 64 bit) with all December WU patches and Office 365 patches, but my old 32 bit Dell Dimension 4600 desktop completed the .NET update and then just stalled after trying to install the December MSRT. I restarted and tried again, and it completed the other 2 WU updates but marked the MSRT as failed. I could not find the MSRT in the list of updates to remove (unsurprisingly), but it would not appear as an option in WU anymore, to download again.
Is there any way for me to get it back? Does it really matter that much?
1 user thanked author for this post.
-
MSRT is anti-virus update and doesn’t uninstall. If you want to run MSRT, download and save from the link shown below.
“Windows Malicious Software Removal Tool (MSRT) helps keep Windows computers free from prevalent malware. MSRT finds and removes threats and reverses the changes made by these threats. MSRT is generally released monthly as part of Windows Update or as a standalone tool available here for download.”
https://www.microsoft.com/en-us/download/malicious-software-removal-tool-details.aspxBeta Work {Got backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender TRV=1909 WuMgr
offline▸ Win10Pro 20H2.19042.685 x86 Atom N270 RAM2GB HDD WindowsDefender WuMgr GuineaPigVariant
online▸ Win10Pro 2004.19041.746 x64 i5-9400 RAM16GB HDD Firefox86.0b2 WindowsDefender TRV=2004 WuMgr1 user thanked author for this post.
-
What exactly do you mean by “just stalled?” If it’s that the the machine just seemed stuck on some sort of Configuring Windows message, you really should have waited — a long time. See my post linked to below, about a situation where an update that installed quickly on two of my Win 7 computers required 55 minutes to finish on my third Win 7 computer (with a Configuring Windows screen staring at me almost the whole time):
MS-DEFCON 4: With the Win7 Monthly Rollup now working, it’s time to get everything updated
As for a remedy for your current situation, if geekdom’s suggestion doesn’t work you could try a system restore back to before the update process was started, and try again.
1 user thanked author for this post.
-
-
-
I have just installed December’s patches and my machine also failed to install MSRT, which must be a first. However, I had noticed that the patch initially offered showed up as just over 8 MB, which seemed remarkably small. A subsequent search located a MSRT of identical KB but sized at 43 MB. This installed quite successfully, as per usual. I assume that the first MSRT patch was incomplete, hence the initial failure. I also assumed that the error (I’m afraid I didn’t make a note of the eror code) was not the responsibility of my PC, but of MS. Maybe they’ve got server problems?
3 users thanked author for this post.
-
Mine would not install either, or failed. I looked it up in the catalog, but there were 2 listed for Dec. Win 10 and I couldn’t determine which–could not find 64-bit, so I skipped it.
2 users thanked author for this post.
-
You can prevent WU from even using/ downloading MSRT, if you wish, by applying the following to the registry:
After typing REGEDIT in the run box, navigate to
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MRT]
Create a new 32bit dword
DontOfferThroughWUAU
Give it a value of 1
After that, you won’t be bothered with MSRT again and I’ve certainly not missed it 😉
No problem can be solved from the same level of consciousness that created IT- AE2 users thanked author for this post.
-
-
-
-
-
Reporting in:
Group A, Win7 Home Premium x64 SP1 Intel Ivy Bridge and
Win7 Ultimate x64 SP1 Intel Arrandale:Installed the rollup KB4471318, .NET KB4471987, and IE KB4481387 updates separately, with reboots in between, without problems.
Also installed the Office 2010 and 2013 patches and haven’t seen any problems so far.
All telemetry-mitigation settings are still intact, unchanged after the updates.Thanks to Woody, Patch Lady, PKCano and the other MVPs, and everyone who posted results and comments for helping us get through another round of patching. Here’s hoping for a Happy New Year for us all.
Linux Mint Cinnamon 19.2
Group A:
Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux
Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro, mostly offline
Win 10 Pro x64 v1909 Ivy Bridge, dual boot with Linux -
-
You really should have taken the time to search for KB 3177467 before posting your question – it has already been answered frequently here. See this one, which explains it’s a servicing stack update.
-
-
The Servicing Stack was offered to you AFTER the other updates because it has to be installed exclusively, in other words, by itself ALONE. As long as there is ANY OTHER update in the important update queue, it will not appear. So the other updates showed up and were installed then it showed up.
Why does it happen that way? Well consider Microsoft’s updates are, in a couple of words, messed up. So, you still need that update. Install it NOW, while it’s alone, before the next Patch Tuesday and it disappears again until AFTER the others are installed.
-
-
-
-
Finished updates yesterday on my reliable old dog HP dc7900 SFF:
Group A, Win7 Pro 32-bit Intel Wolfdale Core2 Duo E8400 w 2GB ddr2:
Did full image then run WU and found 4 Important items offered up with check-marks.
Installed KB4471318, KB4471987, KB4481387 and MSRT separately, with reboots and TrustedInstaller monitoring in between each of the four. I did note that Susan Bradley marked the .NET update as a “Hold for now,” but I decided to go for it based on others who have done so without issue.
I have not yet taken steps to adjust telemetry-mitigation settings, but will be doing so for the first time after I evaluate PC stability post-updates. Only thing I noticed was a one-time nearly 5 minute screen going black today and then eventually returning to the living while I was browsing with Firefox. I just let it percolate and it finally recovered. If this continues, I may undo some of the updates. I couldn’t get PC to respond to CNT-ALT-DEL during this “blackout” oddity.
Sending my appreciation to Woody, Susan Bradley, PKCano and the other MVPs and Loungers who take the time to share. All the best to each of you in 2019!
1 user thanked author for this post.
-
-
-
-
In this case, you only need 4483187, because as @paulk says it supersedes 4470199.
1 user thanked author for this post.
-
-
https://support.microsoft.com/en-us/help/20181219/ — states that 4483187 supersedes 4470199 for the various applicable combinations of IE9/10/11 @ Windows 7/8.1/10/Servers @ 32/x64/RT.
Top of list / scroll about 2/3 down / bottom of list.
Restart required.See also the Known issues here, for 8.1 and one Server system.
I did my December Windows 7 updates on 12/25, and was offered/installed only 4483187 (for the IE update).
1 user thanked author for this post.
-
-
-
-
-
Even if you don’t use IE as your browser, it is an integral part of the Operating System and other parts of the Windows OS use it. So, it you do not patch it, you leave your system vulnerable.
1 user thanked author for this post.
-
-
I believe you still get the updates it you turn off IE in Windows Features, because it only limits your access in the GUI, and not the access of the system and other programs that use it.
Edge is not integrated into the Win10 system like IE is.
1 user thanked author for this post.
-
-
-
-
Windows 7 Home Premium, 64-bit, Group B
Finally bit the bullet to do December 2018 updates before the New Year:
Downloaded kb4471328-x64 and kb4483187-x64 off of 2000003: Ongoing list of “Group B” monthly updates for Win7 and 8.1 by @pkcano.
First installed KB 4471328. After installation and clicking restart, for the first time ever, my screen showed “configuring windows update… do not turn off your computer” continuously for 20 minutes. No percentage of completion, nothing. Usually this phase only lasts less than 10 seconds. I then manually shut down computer. I waited 15 minutes, turned it back on and it immediately went into the desktop showing the same phrase “configuring windows update… do not turn off your computer”. I waited another 30 minutes, manually shut down the computer and waited 30 minutes. It went into desktop with same phrase, but then began showing percentage amounts of completion, went through normal cycle, and completed installation. I checked ‘Update history’ and the installation was successful. Waited 30 minutes. Breathed a huge sigh of relief.
Then installed kb4483187-x64. Not a hitch. In fact, so easy, it was peasy! Waited 30 minutes.
Checked Windows updates for any further KB’s. Only one important one showed up. It was ‘Security and Quality Rollup for .NET, KB4471987’ and it was checked. It installed without a problem. Waited 10 minutes. Checked Windows update once more. Nothing! Oh, had to redo the Media Player Settings to ‘recommended’. All Done. Happy New Years one and all!!
-
Glad it worked out! But had you just waited longer the first time — up to two, or even three hours — it’s likely your “stuck” installation would have eventually completed.
A couple months ago, after the updates had gone smoothly on two of my Windows 7 computers, I ended up at an apparently “stuck” “configuring” screen on the third computer. But I read about how it can sometimes take up to hours to finish. After nearly an hour I was ready to force-close anyway, when — sure enough — it finally started counting percentage completion, quickly finished and rebooted, with all updates successful.
1 user thanked author for this post.
-
-
-
-
I downloaded 1803–it went through the preparing to download, then downloading, and then installing. At 100% a big, rectangular blue sign came up saying something about their spiffy new updates and asked did I want to snooze, restart or delay. I had never seen that sign before, so I hit snooze.
Snooze is for three days, so when it reappears click on Restart now instead:
The “snooze” capability allows you to pause the update process completely for three days when you need uninterrupted time on your device.
Providing customers with more choice and control-
It sure would be nice if it explained that on the screen instead of off on a link you can’t get to because the thing that pops up freezes the computer so you can’t do anything else. “Pause install for three days” would at least let someone know what to expect (Snooze???).
I ran into that same thing yesterday upgrading 1709n to 1803 – had done several upgrades before and it was new to me. Didn’t have any idea how to get out of it without clicking on one of MS’s three choices (and I’m sorry, but I don’t trust MS enough to believe ANY of their choices won’t be a “gotcha”) or holding in the power button till it shut down. And I’m not your average user – I have a rudimentary technical background.
-
-
Dear PK Cano, “I don’t trust MS enough to believe ANY of their choices won’t be a “gotcha”
See my reply above. (Edit: weird, my reply to b .If it doesn’t I will need to re-post something similar) You are so correct on this one! I’m surprised I didn’t see anything on this, not that I spend a lot of my spare time on this nonsense now that I have predominantly moved to a Mac book and Ipad.
So many people around me, not professionally, but in my friends and acquaintances group have all had their updates turned off way back when the windows 10 campaign was started. A few had to get a Windows 10, but it is too much for them to deal with. I keep warning them they need to update and make sure they have protection, but they cannot deal with it. MS is not going to be luring any of them with their ease of maintenance these days!.
1 user thanked author for this post.
-
-
-
-
-
-
-
If Susan’s list says hold, then hold. She does the testing and she’s the expert.
Remember to check back – they are listed by the month.1 user thanked author for this post.
-
-
-
-
-
Apologies for being off topic, but has anyone seen or heard anything further about this? https://mspoweruser.com/microsoft-to-throw-windows-10-home-users-an-automatic-update-bone/
1 user thanked author for this post.
-
The ability for Windows 10 Home to pause all updates for 7 days was only noticed in Insider Preview Fast Ring Build 18309 (19H1) four days ago, and was not announced by Microsoft. So it could reach non-Insider Home users in version 19H1 in about three months (or it could be a beta build bug).
There is much misinformation on many sites about the possibility of it being increased to 30 (or even 35!) days when it reaches the masses; but I think that’s just confusion between pausing and deferring, so in my opinion that’s most unlikely.
1 user thanked author for this post.
-
-
Viewing 56 reply threads
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments. Click here for details and to sign up.
Recent Replies
PKCano on Outlook 2016 Loses Account Passwords
14 minutes ago- 25 minutes ago
Ken on Susan recommending version 2004
32 minutes ago- 34 minutes ago
- 45 minutes ago
- 53 minutes ago
Gunny on Susan recommending version 2004
1 hour, 3 minutes agogeekdom on Susan recommending version 2004
1 hour, 17 minutes agoDrBonzo on Firefox 85 released
1 hour, 24 minutes agoanonymous on Emotet malware disrupted
1 hour, 28 minutes ago- 1 hour, 30 minutes ago
- 1 hour, 32 minutes ago
- 1 hour, 32 minutes ago
- 1 hour, 32 minutes ago
- 1 hour, 32 minutes ago
berniec on Emotet malware disrupted
1 hour, 32 minutes ago- 1 hour, 34 minutes ago
- 1 hour, 36 minutes ago
- 1 hour, 36 minutes ago
- 1 hour, 37 minutes ago
- 1 hour, 40 minutes ago
- 1 hour, 43 minutes ago
- 1 hour, 54 minutes ago
MHCLV941 on What Linux is and why it has persisted
2 hours, Just now- 2 hours, 16 minutes ago
- 2 hours, 50 minutes ago
- 3 hours, 11 minutes ago
Susan Bradley on Susan recommending version 2004
3 hours, 38 minutes ago- 4 hours, 7 minutes ago
- 4 hours, 24 minutes ago