Details coming in Computerworld.[See the full post at: MS-DEFCON 4: Watch out for .NET and Office patches, but get caught up]
|
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it. |
-
MS-DEFCON 4: Watch out for .NET and Office patches, but get caught up
- This topic has 160 replies, 39 voices, and was last updated 7 years, 4 months ago.
Viewing 43 reply threadsAuthor-
-
Thanks Woody.
I installed without incident:
Windows Malicious Software Removal Tool – October 2017 (KB890830)
2017-10 Security Monthly Quality Rollup for Windows 7 (KB4041681)I did NOT install the optional .NET rollup, which did not include any security updates this month.
In addition, in a recent blog post about paint.net 4.0.20 and .NET 4.7 developer Rick Brewster notes:
Just a quick heads up: the next update, version 4.0.20, will start using and requiring the .NET Framework 4.7 (previously, .NET 4.6 was required). If you’re using a supported version of Windows then the Paint.NET updater will automatically install .NET 4.7.1 if you don’t yet have .NET 4.7 or .NET 4.7.1 installed already.
Since I currently have .NET 4.6.1 installed, I’m just going sit tight for now and let paint.net take care of this upgrade. Rick says 4.0.20 will be available, “within the next few weeks.”
-
Woody, can’t bring myself to mezzo-grade from 1511 to 1709. Have to admit I’m tempted, but will definitely wait at least a month. Still conducting my experiment – will MS force an upgrade on me? Then it occurred that there are two sides to that coin – they force me to change versions – and/or they prohibit me from changing versions later, effectively stranding me. All I want is stability – predictability. I want the machine to fade away and my work to remain – read Noel (October 27, 2017 at 10:37 am) – he says it so elegantly and passionately. Thanks for bringing some sanity to the WINX world.
1 user thanked author for this post.
-
“this post” says:
modifi\y the registry as follows:
1/ using regedit Navigate to KEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\
2/ If it does not exist, add New Key and label it OSUpgrade
3/ Add New > DWORD (32-bit) Value. Name it DisableOSUpgrade. Value=0
Restart.
This is the same Registry change Josh Mayfield used in GWX Control Panel to prevent Win10 forced upgrade.
-
That is because the value 0 means no/do not execute. The value of 1 will tell system to execute command “DisableOSUpdate”
1 user thanked author for this post.
-
-
-
-
-
-
KB 4043766 is a cumulative update. If you install it, there’s no reason to install (or hide) any previous .NET update.
3 users thanked author for this post.
-
-
-
Last month I was advised to hide and ignore KB3186497 Microsoft .NET Framework 4.7 for Windows 7 and Windows Server 2008 R2 for x64. My PC has NET 4.6.1 installed…..so am I now being advised to install that update? If so should I install that one before installing this month’s 2017-10 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 on Windows 7 and Server 2008 R2 for x64 (KB4043766)?
I’m in the same boat as you. I’m running Windows 7 x64 and .NET 4.6.1. I did not install the .NET rollup this month because it’s optional (no security fixes). I plan to install .NET 4.7.1 in few weeks when I upgrade my paint.net program. If you check the comments on this blog entry, you’ll see that there is a dependency issue when installing .NET 4.7 on Windows 7 that is fixed in .NET 4.7.1. Apparently .NET 4.7.1. will be pushed out to Windows Update in a few weeks. You may want to wait until that’s available from Windows Update, which should also be in a few weeks.
-
-
alpha128 I am not sure why you have an “optional” (no security update) for NET according to my WU I have KB4043766 (2017-10 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 on Windows 7 and Server 2008 R2 for x64) which says it is a “security” update and my box is checked! The only “optional” updates that I have are: KB4041686 (Preview of the Monthly Quality update for windows 7 for 64 bit) and KB4042076 (Preview for the Quality Rollup for NET Framework).
On my computer KB4043766 is shown as an optional, unchecked, update despite the “Security” in its name. If it truly included security updates, it would have been checked and appeared with the other “Important” updates. The treatment in Windows Update might have something to do with what version of .NET you have installed. I’ve read that the only new fixes in the October rollup are for 4.7, and I’m still on 4.6.1.
I have a Paint program on my PC (it was there when I purchased it) so I have no idea if it is Paint.net.
My guess is you have the Windows Paint program provided by Microsoft. Paint.NET is a more elaborate program that is free, but you have to download it. Paint.NET is the only program I have that makes extensive use of the .NET framework, so I let it drive which version of .NET I install.
1 user thanked author for this post.
-
First time seeing DEFCON 4. Read about it, just never saw it in action, sweet. Kinda makes me wonder if that’s a good sign that things are improving.
Win 8.1 (home & pro) Group B, W10/11 Avoider, Linux Dabbler
1 user thanked author for this post.
-
KB4043766 is the Rollup for .NET and should be offered through Windows Update if it is required.
1 user thanked author for this post.
-
-
-
.NET 4.7 is the only .NET that had an update. But it is a Rollup, and as such includes no fixes for the others versions. See this article for What’s happening with .NET
1 user thanked author for this post.
-
We’re not giving up on Group B. But we have found that the procedure we have been following no longer works as previously laid out. So we are working on a revision. These topics explain it if you want to wade through the discussions:
https://askwoody.com/forums/topic/group-b-win78-1-missing-updates-hiding-rollups-security-only-patches/
https://askwoody.com/forums/topic/what-issues-can-result-from-hiding-a-windows-update/
It will not be as easy as it has in the past. -
We’re not giving up on Group B.
Good to hear, since Woody’s Computerworld article says
The old “Group B” – security patches only – isn’t dead, but it’s no longer within the grasp of typical Windows customers. We’re actively discussing whether it’s worthwhile continuing to post information about the security-only patching path.
3 users thanked author for this post.
-
Win7 Pro x64 on Zbook 17 Workstation. Office 2010. Group B since the beginning.
Downloaded and installed the Security Only update off this site. The IE 11 update wasn’t for my machine. Got the correct Oct., 2017 from the Update Catalog. Maybe I clicked on the wrong link or the x64 IE 11 msu on the link was wrong…
Turned on WU “check and let me choose”, hid the Security Rollup and .Net Rollup. Installed the Office 2010 security stuff and MSR. Re-checked for updates; no important updates found. Have been doing it this way from the get-go.
After the fiasco last month with the .Net Rollup, installed the .Net Security Only update last month so as NOT to compromise my photo-editing software.
At this point am ONLY interested in vetted Security Only updates, no MS “enhancements” required/desired. Touch wood, my machine is stable!
Would be nice if in future any Security Only .Net links were added to Group B so that I don’t have to go digging for them.
2 users thanked author for this post.
-
Would be nice if in future any Security Only .Net links were added to Group B so that I don’t have to go digging for them.
According to Description of Software Update Services and Windows Server Update Services changes in content for 2017, the last security-only .NET updates were issued on 12 September.
PS There is a topic for .NET updates, but with recent site issues, the security-only updates were posted elsewhere. It is in the Developers Lounge, as .NET security-only updates have been considered as suitable mainly for more technical users.
-
-
I was surprised to read that our host is considering ending support for Group B. Every time he has suggested that Group B is too difficult for most people to handle, he gets a chorus of replies that it’s not. I am not especially sophisticated but I can do the drill once a month without difficulty so long as someone points me to the correct KB’s. (And before that, I learned how to find them.) Thirty minutes tops for two machines, while I’m doing other things.
This includes running Windows Update. It usually presents me with one or two recommended updates and a short list of optional, unchecked updates. The recommended updates are usually the ones I expect, like MSRT, and the optional updates typically consist of a short list of known malefactors like KB2952664. I accept what I need and ignore the others. I quit hiding anything after Microsoft turned that into a game of whack-a-mole.
As for whether we should agonize over supersedence and bug fixes that are included in rollups rather than delivered down the security-only chute, I’ll be more impressed with that when someone demonstrates that Microsoft has its act together–when this site no longer brings almost daily revelations of [mess]ed-up patches. The notion that Windows is some elegant, integrated, flawless system is a crock.
The alternative to Group B is Group W.
-
Every time he has suggested that Group B is too difficult for most people to handle, he gets a chorus of replies that it’s not.
We are not giving up on Group B. But you are talking about the EXISTING method for Group B which we have found no longer works.
We are looking at revising the Group B method. And the REVISED method will not be as easy.
As for whether we should agonize over supersedence
This is the whole crux of the problem. You can read the discussion at:
https://askwoody.com/forums/topic/group-b-win78-1-missing-updates-hiding-rollups-security-only-patches/
and
https://askwoody.com/forums/topic/what-issues-can-result-from-hiding-a-windows-update/ -
-
There are two issues. The second issue – exclusivity of some updates – affects both Group A and Group B. The first issue – update supersedence – is known to affect those who install either Windows security-only updates or .NET security-only updates. There may be other scenarios in which the first issue affects either Group A or Group B.
My unofficial modifications to Group A and B instructions that hopefully address both of these issues are at https://askwoody.com/forums/topic/new-directions-for-win-7-and-8-1-patching/#post-138998. Alteration to above algorithms for those who want to hide fewer updates: https://askwoody.com/forums/topic/new-directions-for-win-7-and-8-1-patching/#post-140373.
5 users thanked author for this post.
-
Have just followed MrBrian’s excellent instructions for updating Group B-style and I cannot say I found the procedure particularly time-consuming or arduous. Had a laugh examining and hiding all the optional updates I am never, ever going to want to install. Subsequent WU searches only revealed further previews……………..and further previews………………… which I am defintely never, ever going to want to install. Unhid and installed kb4041083 because, although unchecked, it was marked Important and unhid and left the .Net 4.7 installer, just in case I want to go there one day.
Now everything is wonderfully neat and tidy and I’m up-to-date. Managed to alter a pair of trousers at the same time – but then I like multi-tasking. This is supposed to be difficult?
-
-
I am not especially sophisticated but I can do the drill once a month without difficulty so long as someone points me to the correct KB’s.
When I was doing the security-only updates, I had Windows Update set to check for updates but let me decide whether to install them. When one of the security and quality rollups would appear in the list, I would click the “more information” link on the right side of the Windows Update window. That launches a web page, and in the first few paragraphs was always a description that described the security-only version of that particular rollup and provided a link. Follow that link, download your update, and away you go.
After that, I would hide the rollup for that month, and wait for the next one to arrive in a month.
Dell XPS 13/9310, i5-1135G7/16GB, KDE Neon 6.2
XPG Xenia 15, i7-9750H/32GB & GTX1660ti, Kubuntu 24.04
Acer Swift Go 14, i5-1335U/16GB, Kubuntu 24.04 (and Win 11)I installed the 2 Group B security only patches (IE Rollup and the October Security Only, no issues.
I installed all the Office 2010 patches served up by WU, no issues. I did the October .NET rollup and no issues.
Nothing hidden except hardware drivers and that single errent MSE definitions update that kept trying to re-install. Belarc Advisor reports A-OK for security.
I give a big thank you to Woody, PKCano, and others for their patience and dedication.
1 user thanked author for this post.
-
Woody advised to patch carefully on September 29th – you can find the ComputerWorld article here:
https://www.computerworld.com/article/3229748/microsoft-windows/its-time-to-install-the-september-patches-for-windows-and-office.htmlFor details about the October patches, the ComputerWorld article is here:
https://www.computerworld.com/article/3235289/microsoft-windows/get-windows-and-office-patched-but-watch-out-for-creepy-crawlies.html1 user thanked author for this post.
-
-
-
-
-
-
-
-
-
-
-
-
In response to your query about MSRT, the latest update includes previous threats, so you only require the latest version, not a previous months’.
1 user thanked author for this post.
-
Thanks for your list! The Windows 7 Important (all checked by default): the Office updates are from both September (6) and October (4). Since they all appear, I would install all of them.
KB4041083 – I installed this in September without issues.
Kirsty answered your question about MSRT.
KB4043766 – since it’s unchecked, I would leave it unchecked.
Optional: updates: As for the language packs, you might want to hide them so that they don’t appear each time you check Windows Update. Same with snooping patch KB2952664!
I can’t speak to 8.1 . . .
Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'1 user thanked author for this post.
-
-
What issues can result from hiding a Windows update?
For some updates, such as KB2952664, there are often newer versions. That’s why such updates appear to become unhidden by themselves.
1 user thanked author for this post.
-
-
-
-
-
I’m not sure there’s anything you can check regarding potential .net issues. I can only tell you that I have not encountered any issues after I installed KB4041083 a month ago.
Good question — do you really want to know 😉
Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'1 user thanked author for this post.
-
-
-
Which Windows version are you using, and are you using the Group A rollups update method?
(in the meantime, backing up your computer before any update is a first step to minimising disruptions that may be caused by updates)
-
-
-
If you installed the Security Monthly Quality “ROLLUP” you are in group A, you’re not in group B. Group B does not install Security Monthly Quality “ROLLUPS”… Group B installs Security Only Monthly UPDATES.
1 user thanked author for this post.
-
-
With a NVidia vulnerability mentioned in last week’s NCAS Weekly Vulnerability Summary, I would suggest you check their website for your update, as it is probably security related.
-
Thanks Kirsty, but it looks like the latest Nvidia security alert was in fact to do with Linux vulnerabilities, and the latest drivers relate solely to enhanced performance in a couple of games I don’t play.
I find that security vulnerabilities in graphics drivers tend to be (a) constant and (b) extremely theoretical. Important tho’ they may be, it’s impossible in practice to put such considerations above the need with graphics drivers for effective performance and temperature control especially for gaming. Does anyone have any recollection of actual security problems arising in practice from graphics drivers as opposed to theoretical vulnerabilities being reported?
I appreciate the heads up, tho’!
-
Moreover, for the fourth time in the last twelve months or so, the new NVIDIA driver (388.00 WHQL released on 23.10.2017) again contains an out-of-date version of Node.js (this month apparently because Node.js was updated a few days after the driver was built, tested and released).
The current version is 8.8.1 (x32 & x64), and can be downloaded from https://nodejs.org/en/ (full changelog: http://www.softpedia.com/progChangelog/Node-Changelog-192241.html).
Do be aware that for the NVIDIA driver, it must be installed to the appropriate location (on my Windows 7 machines for example, it is installed to C:\NVIDIA\DisplayDriver\388.00\Win8_Win7_64\International\nodejs).
-
-
-
I have found that many of nVidia’s vulnerabilities relate to features of their driver package which I have never installed, such as G-Force Experience, Shield Controller software, etc.
I always install an nVidia driver downloaded directly from their site (always a week or two after issue) and I never allow the “Express install”, but choose manual and only installed or updated the video driver itself and sometimes physx (if a newer version).
That said, even doing it that way, the installer does install ALL of the components to the C:/NVIDIA folder. I have read a number of articles on how to remove certain components pre-install, but have not had success. I also manually delete all older drivers in the C:/NVIDIA folder about a week after testing.
I have also found that many of the newer nVidia drivers version do create frame rate lag at times during play in some games. Their driver packages have been developing a serious bloat issue, growing from an average of under 300MB to 400MB.
-
In addition to following this excellent approach, one may also wish to disable the “NVIDIA Telemetry Container” in Windows Services (see https://www.ghacks.net/2016/11/07/nvidia-telemetry-tracking/).
-
-
If you decide to move from Group B to Group A, I have posted a suggested method here. This is basically what I used recently to move my machines to Group A. Group B is getting more and more difficult, even for tech-savvy people. There are other ways to control telemetry while being sure your computer is correctly patched.
-
The two known issues listed in .NET Framework September 2017 Security and Quality Rollup were fixed in the .NET Framework October 2017 Security and Quality Rollup according to https://support.microsoft.com/en-us/help/4043564/certain-net-framework-4-5-2-updates-contain-pseudo-non-english-charact and https://support.microsoft.com/en-us/help/4043601/rendering-issues-after-the-september-12-2017-net-security-and-quality.
“If you really want to stay with .NET 4.5.2, you have to manually install updates.”
I believe that is incorrect. From https://support.microsoft.com/en-us/help/17455/lifecycle-faq-net-framework: “Support for .NET Framework 4.5.2 will follow the Lifecycle Policy of the Windows operating system, and will be supported as a component on the latest required operating system update.”
1 user thanked author for this post.
-
Due to some reported problems last month, I did not install KB4041083 (September 12). My WU is still showing that update, not KB4043766 which I thought was the latest .NET update. Any idea why KB4043766 isn’t there? – Marty
The 2017-09 Security and Quality Rollup for .NET (KB4041083) is labelled “Important” because it includes security updates.
2017-10 Security and Quality Rollup for .NET (KB4043766) is “Optional” but “Recommended” because it contains no new security fixes, only bug fixes, and only for .NET 4.7.
If, like me, you are running .NET 4.6, you’ll want to install KB4041083 and can safely skip KB4043766.
-
Take Woody’s advice on the Office patches. See the ComputerWorld article.
1 user thanked author for this post.
-
About that setting:
https://www.stigviewer.com/stig/microsoft_word_2007/2014-04-03/finding/V-17811
https://wordribbon.tips.net/T006115_Updating_Automatic_Links.html
1 user thanked author for this post.
-
The October 2017 .NET Framework updates fix those issues. See https://askwoody.com/forums/topic/ms-defcon-4-watch-out-for-net-and-office-patches-but-get-caught-up/#post-141333 for more details.
1 user thanked author for this post.
-
-
“The two known issues listed in .NET Framework September 2017 Security and Quality Rollup were fixed in the .NET Framework October 2017 Security and Quality Rollup according to https://support.microsoft.com/en-us/help/4043564/certain-net-framework-4-5-2-updates-contain-pseudo-non-english-charact and https://support.microsoft.com/en-us/help/4043601/rendering-issues-after-the-september-12-2017-net-security-and-quality.”
1 user thanked author for this post.
-
-
-
-
-
I recommend installing all of the updates that you mentioned, and you’re welcome :).
1 user thanked author for this post.
-
-
? says:
on my last of 5 win 7 pro’s, it went like this:
Latest MSE definition update , then Flash 27.0.0.183, then manually installed KB4041678, KB4040685, reboot, then seek fresh updates, 2 Important KB4041681 Oct. roll-up (hid), KB890830 Oct. MSRT (installed), 4 Optional, all unchecked KB4041686 Oct. preview roll-up (hid), KB4042076 Oct. .Net (all) preview roll-up (hid), KB4043766 Oct. .Net roll-up (all), left it for after I installed KB3186797 .Net 4.7 (no reboot necessary), then checked for more updates, KB4041083 September .Net Security and Quality roll-up appeared, installed KB4041083 and KB4043766 at the same time, three minutes later with no reboot i finished updating with a final check, nothing else was offered, so off went windows update until a more opportune time (next month) and i’m writing this while the .Net mscorsvw.exe finishes it’s procedure, oh, looks like it is done and now time to clean up the mess Bill’s ghost left behind. Happy Halloween!
1 user thanked author for this post.
Having read the 81 posts (so far) in this thread while trying to keep the information all sorted out, I am now going to take a couple of aspirins.
Data points indicating success:
Win 8.1 x64 Pro/MCE on my workstation: Patched Friday evening, running perfectly.
Win 7 X64 Ultimate on my small business server: Patched Saturday morning, running fine.
Win 10 v1709 x64 Pro in a VM. Patched today, only a VS 2005 runtime patch was received. Build number shows 16299.19.
All patches done “Group A” style, with the exception that I did NOT install KB4041686 (Preview of Monthly Rollup) on my Win 7 system, since it’s known to cause a new SFC /SCANNOW error.
-Noel
-
When you boot your computer, if you have anything but “Never check” set, Win Update will periodically check for updates. If you try to search while WU is searching, sometimes you get an error.
Try waiting a while and check again.Here is a link to Windows Update Error Codes.
And another link that may be helpful.
1 user thanked author for this post.
-
-
-
-
CEIP is on all Win7
Turn off CEIP:
Action Center\Change Action Center Settings\Customer Experience Improvement Program settings – Set “No”
Control Panel\Administrative Tools\Task Scheduler\Library\Microsoft\Windows\CEIP –
Disable all tasks
Under Application Experience – Disable all tasks5 users thanked author for this post.
-
-
-
CEIP in built-in Windows since Vista, so those tasks exist inbox
1 user thanked author for this post.
I have two Boot-Camped Macs running Windows 7, one as 64 bit, the other, 32. I don’t have any other Microsoft software, such as Office, on either machine, but I have installed IE11, which I never use. I’ve been a Group B updater since all the GWX nonsense started way back when.
This last weekend, I followed the “new” Group B rules, and used the Windows Update Mini-Tool (WUMT) to adjust all the revealing/hiding.
NOTE: New users of this program should be aware that upon its first start-up, it will change your Update preference to “Automatic”, and if you leave it there, when you go to the regular Windows Update, the option for “Never check…” will not be available. This freaked me out, until I realized what had happened, and quickly went back to WUMT and changed the selection box in the lower left corner, back to “Never” – Bullet dodged.
After that was done, I looked over all uninstalled and hidden updates, and found that I had not installed two from last year which Woody recommends – KB3177467 (the Servicing Stack for Win7 SP1 which supersedes KB3020369) and KB3172605 (the July 2016 Roll-up). I have not been experiencing any slow response to use of Windows Update, probably because I had installed KB3161647 instead of the July 2016 Roll-up, but I decided that moving forward, I should be on the same page as the advice given here, so I can persevere with Group B updating. I un-hid those two, and then hid everything else up to the end of Sept. of this year. Then I quit WUMT.
I manually installed both of this month’s Security Updates (KB4041678 and KB4040685 for IE11), and then started Windows Update, which showed this month’s Quality and Security Roll-up, the MSRT (KB890830) for October, and KB1377467. It also showed this month’s .NET Quality and Security update as Optional, so I left it unchecked, and then hid it. Back to the “Recommended” page, I hid the Roll-up, then applied the MSRT by itself, and waited for it to finish, at which point I installed KB1377467.
Following the re-boot, I ran WU once again, where I found KB3172605 shown as an Optional Update, which I went ahead and installed, then re-booted yet again.
After that, Windows Update showed that there were “No Available Updates”.
There is still a long list of hidden updates on my machines, mostly with “Quality”, “Roll-up” or “Preview” in the title, but there are quite a few which are just labeled as updates for Win7. Most of them are from last year, and since my machines have been running fine since then, I’ll just pick through the list of hidden items at my leisure, to establish what each does and whether or not I need it.
Meanwhile, both machines are rock solid for now. I’m considering whether or not to uninstall KB3172605 – other than fixing the WU slowdown (which I was not experiencing), is there any compelling reason to keep it?
Mac Mini v. 6.2 (2012) with Win10 Pro 64 bit v. 1809
MacBook Pro v. 3.1 (2007) with Win7 32 bit - Group B Updater-
Thank you for noting the issue with Windows Update MiniTool :). I will change the modified instructions soon. Note that those instructions are unofficial and not officially endorsed by this site.
-
I’m really glad you did some testing with WUMT, MrBrian, as I’ve been reluctant to try it. And thank you to @ fl for his/her feedback on using this tool. I have a Home version of Windows 7 and also have “Never check for Updates” selected in MS’ Windows Update.
‘Group Policy’ is irrelevant in Home versions and, as I understand it, that’s what the options within the “Automatic Updates” drop-down menu in WUMT modify. I was concerned that the ‘Automatically’ option in WUMT might change my intended setting in MS’ Windows Update.
I did not see a ‘Never’ option in WUMT that fl referenced, only these options:
Automatically
Disabled
Notification mode
Download only
Scheduled
Managed by AdministratorMany thanks for clearing this up!
Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'1 user thanked author for this post.
-
Did I say “Never”? I must have meant “Disabled”…
Mac Mini v. 6.2 (2012) with Win10 Pro 64 bit v. 1809
MacBook Pro v. 3.1 (2007) with Win7 32 bit - Group B Updater1 user thanked author for this post.
-
-
-
This “unclear” translation can be fixed with wumt_lang.ini placed next to the executable
http://www.host-a.net/u/abbodi86/wumt_lang.zip
you can edit it to suit you 🙂
1 user thanked author for this post.
-
-
1 user thanked author for this post.
-
-
I wanted to wait until DEFCON 3 (or higher) before I used MrBrian’s new instructions to update my Group B computer. I’m pleased to report that all went well! I am one of the many who did not hide any updates in the past, other than Windows 10-related updates. So I wanted to make sure my computer was totally update-to-date prior to installing October’s updates. Before I started, I decided to “unhide” any hidden updates. To my surprise, there were none, even though I had hidden many over the past couple of years (and have the list).
Not 100% sure of using the Windows Update MiniTool (yet), I decided to go through the process of “checking for updates & then hiding unwanted updates” and did so repeatedly 11 times, including the initial check. Each of the subsequent 10 checks took 1 minute each (and hiding took even less time), making the entire process very manageable and not time-consuming.
As a result, I installed the following 5 Important updates and then rebooted:
– Security Update for Microsoft Office 2010 (KB2553338) 32-Bit Edition
– Security Update for Microsoft Office 2010 (KB2837599) 32-Bit Edition
– Security Update for Microsoft Outlook 2010 (KB4011196) 32-Bit Edition
– Security Update for Microsoft Word 2010 (KB3213630) 32-Bit Edition
– Windows Malicious Software Removal Tool x64 – October 2017 (KB890830)After checking for updates again, I installed the following 1 Important update (no need to reboot):
– Update for Windows 7 for x64-based Systems (KB3177467) from 10/11/16
[Note: Servicing stack update for Windows 7 SP1 SP1]Interestingly, this is the same “missing” update that both Elly and fl also found after going through this process.
Afterwards, I compiled a list of all Hidden updates (1 Office 2010 and 47 Windows 7), and then unhid the following:
Optional:
– 2017-10 Security and Quality Rollup for .NET Framework 4.6.1, 4.6.2, 4.7 on Windows 7 (KB4043766)
– Microsoft .NET Framework 4.7 for Windows 7 for x64 (KB3186497)Note: I get Recommended Updates as Optional Updates
I bet next month’s process will be quicker, now that all past Previews and Windows Rollups are now hidden . . .
Group B — and the beat [still] goes on 🙂
“Thank you” once again to MrBrian, Woody, PKCano, and everyone else who contributes their time and expertise to AskWoody!
Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'-
Hi @SueW , I only wanted to add an explanation for this early part of your comment:
” Before I started, I decided to “unhide” any hidden updates. To my surprise, there were none, even though I had hidden many over the past couple of years (and have the list). ”
I do not remember when I first saw this, but I do think it is a change from long ago. I believe your hidden list is now kept on the Microsoft servers in Redmond, or wherever. If you request to ‘Restore hidden updates’ before requesting the first ‘Check for updates’; then you will see a blank list with the message something like, You have no hidden updates.
It is after your system has compared notes with Microsoft servers by an inquiry and response that is performed during the ‘Check for updates’, that both lists are populated. That is to say both your Hidden Updates and your Current Offerings lists are generated from those servers instead of being kept on your local machine.
I am not sure if this is only for systems set for ‘Never Check for Updates (not recommended)’ like mine. Which I do recommend.
I hope this helps explain what you will see again next time.
-
Paul has good advice about what to do if no hidden updates are shown but yet you’re pretty sure you’ve hidden updates. One correction though: the list of hidden updates is stored locally in a file called datastore.edb.
-
-
-
Hi @ Paul — thank you very much for your explanation! That would explain why I was seeing what I was seeing, and when 😉 Indeed, my current “Hidden” list does include my original list + those updates I hid today.
And @ MrBrian — I will check out the local “hideout” on my computer. The idea that Microsoft might be keeping a list of my formerly hidden updates is downright scary!!
Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'1 user thanked author for this post.
-
I always have WU set on “Never check for updates (not recommended)”. I found out, in a round about way, that every time I shut down my computer and boot it back-up, I would lose my hidden update list. I figured out that if I “Checked for updates” in WU the hidden update list would repopulate. I think the “Never check for updates (not recommended)” setting is the the only setting that erases your hidden update list after shutting down your computer. (At least in the “Restore hidden updates” control panel window). Now according to MrBrian they are stored in a file called DataStore.edb. I found the file but I’m not smart enough to know how to open it.
Dell, W10 Professional, 64-bit, Intel Core i7 Quad, Group A
HP, W7 Home Premium, 64-bit, AMD Phenom II, Group A
-
Windows 7×64, Group B. Thought I’d share my experience. After installing the two October security-only patches like usual, I followed MrBrian’s instructions of checking and hiding and rechecking for updates. This was a little repetitive, but each check took only about 30 seconds (sometimes fewer) and the whole thing was over before I knew it. Most importantly, zero Security Updates popped up; only 8 of the normal “Updates” appeared in the Important tab—the kind I was never installing anyway. I unhid them after the whole thing was over, but I’m not going to worry about them. In the end I only had the MSRT and two Office Security Updates to install, and didn’t even have to reboot.
Needless to say I’m quite relieved and plan to stay in Group B, even if I have to do this hide-and-recheck business every month. (Not sure if that’s what we’re meant to do.) Thanks to everyone for their input.
Correction to my earlier post:“The two known issues listed in .NET Framework September 2017 Security and Quality Rollup were fixed in the .NET Framework October 2017 Security and Quality Rollup according to https://support.microsoft.com/en-us/help/4043564/certain-net-framework-4-5-2-updates-contain-pseudo-non-english-charact and https://support.microsoft.com/en-us/help/4043601/rendering-issues-after-the-september-12-2017-net-security-and-quality.”It now appears that these fixes are not included in the .NET Framework October 2017 monthly rollups but instead might be included in the October 2017 .NET Framework preview monthly rollups.1 user thanked author for this post.
Edit: My earlier post may have been correct.
1 user thanked author for this post.
From Security update for Adobe Flash Player: October 17, 2017: “Issue:
After installing this security update, some users may observe a content crash when loading applications that use Adobe Flash Player.”-
-
For Win7, Flash Player is from Adobe download.
For Win8.1 and Win10, Flash Player for IE11 is through MS and Windows Update.
Adobe has updated their Player. MS has not – will have to issue another update for IE11.1 user thanked author for this post.
-
-
If you are a Security Only Group B follower, the windows6.1-kb4041681-x64 update is the wrong update for your 3 computers… KB4041681 is not the October Windows Security Only update, it’s the October Monthly Rollup update that you would install if you were in Group A. Windows Update doesn’t offer “Group B” monthly updates for Win7 and 8.1. The 2 updates you want are, KB4041678 for windows, and KB4040685 for IE11. The easiest way to get these updates is by going to 2000003: Ongoing list of “Group B” monthly updates for Win7 and 8.1 which is maintained by @pkcano. The other way is to download and install them from the Windows Update Catalog.
Your message indicates the you have 3 W7 x64 computers, of which you were able to install KB4041681 rollup on 2 of them. Assuming this is the first and only time you’ve inadvertently installed the monthly rollup instead of the security only updates, just uninstall it and then you can download and install the 2 security only updates. If it’s not the first time you’ve inadvertently done this, you should probably ask others how to go about removing all the other prior monthly rollups so that you can then go ahead install the required security only updates. Either that or you just became a Group A follower.
1 user thanked author for this post.
“NVIDIA – Display – 9/25/2017 12:00:00 AM – 22.21.13.8573”
No MS support or help info on the links. ZIP! And it’s IMPORTANT. Pity the unwary…
1 user thanked author for this post.
-
-
-
Have you visited the NVIDIA site – http://www.nvidia.com/content/global/global.php?
If you navigate through, you should end up at http://www.nvidia.com/download/driverResults.aspx/126786/en-us, where you will find that your Quadro driver was updated to version R384 U5 (385.90) WHQL on 2017.11.06.
1 user thanked author for this post.
-
-
Viewing 43 reply threads
Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Recent Topics
-
Windows 11 Insider Preview build 26200.5600 released to DEV
by 2 hours, 27 minutes ago
-
Windows 11 Insider Preview build 26120.3964 (24H2) released to BETA
by 2 hours, 29 minutes ago
-
Drivers suggested via Windows Update
by 2 hours, 20 minutes ago
-
Thunderbird release notes for 128 esr have disappeared
by 4 minutes ago
-
CISA mutes own website, shifts routine cyber alerts to X, RSS, email
by 9 hours, 20 minutes ago
-
Apple releases 18.5
by 3 hours, 45 minutes ago
-
Fedora Linux 40 will go end of life for updates and support on 2025-05-13.
by 10 hours, 46 minutes ago
-
How a new type of AI is helping police skirt facial recognition bans
by 11 hours, 23 minutes ago
-
Windows 7 ISO /Windows 10 ISO
by 15 minutes ago
-
No HP software folders
by 19 hours, 5 minutes ago
-
Which antivirus apps and VPNs are the most secure in 2025?
by 3 hours, 1 minute ago
-
Stay connected anywhere
by 1 day ago
-
Copilot, under the table
by 15 hours, 40 minutes ago
-
The Windows experience
by 1 day, 6 hours ago
-
A tale of two operating systems
by 21 hours, 38 minutes ago
-
Microsoft : Resolving Blue Screen errors in Windows
by 1 day, 12 hours ago
-
Where’s the cache today?
by 2 days, 3 hours ago
-
Ascension says recent data breach affects over 430,000 patients
by 1 day, 20 hours ago
-
Nintendo Switch 2 has a remote killing switch
by 20 hours, 27 minutes ago
-
Blocking Search (on task bar) from going to web
by 2 hours, 45 minutes ago
-
Windows 10: Microsoft 365 Apps will be supported up to Oct. 10 2028
by 2 days, 20 hours ago
-
Add or Remove “Ask Copilot” Context Menu in Windows 11 and 10
by 2 days, 20 hours ago
-
regarding april update and may update
by 2 days, 22 hours ago
-
MS Passkey
by 2 days ago
-
Can’t make Opera my default browser
by 3 days, 5 hours ago
-
*Some settings are managed by your organization
by 2 days, 16 hours ago
-
Formatting of “Forward”ed e-mails
by 3 days, 4 hours ago
-
SmartSwitch PC Updates will only be supported through the MS Store Going Forward
by 4 days ago
-
CISA warns of hackers targeting critical oil infrastructure
by 4 days, 9 hours ago
-
AI slop
by 2 days, 3 hours ago
Remembering Woody
