Anything undesirable in KB3185330 or KB3188740?

ThrashZone said:

Hi,
I like many others have their avoid list :)

Are you saying you keep your own avoid list or...?

SevenOfNine said:

Do either of these Windows Updates include any telemetry or other undesirable crap?:

• October, 2016 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB3185330)
• October, 2016 Security and Quality Rollup for .NET Framework 3.5.1 on Windows 7 SP1 and Windows Server 2008 R2 SP1 for x64 (KB3188740)

My understanding is that both, despite their names, contain a lot of non-security updates... but I haven't been able to find a clear explanation of whether or not either contains any telemetry or other junk.

I have found that when installed KB3185330 will cause my system to lock up in an odd way after I restart my system. The first 30 seconds or so after boot I can load any programs but then at some point I can't load any apps that are not already loaded. I can use the apps that are loaded fine but starting a new process that launches a new window will not work.

It took me a very long time to figure out what the issue was but after a good week of trial and error my system is stable with all other patches installed but this one removed. This is the first time I have ever had to not install a windows security patch so otherwise my windows 7 64 bit is fully patches.

Because I can't find a way to download the individual components in this patch (it is an all or nothing) I don't know what one of the many fixes inside this patch are causing the issue.

Things inside this patch are!
MS16-101 Security update for Windows authentication methods
MS16-118 Cumulative security update for Internet Explorer
MS16-120 Security update for Microsoft graphics component
MS16-122 Security update for Microsoft video control
MS16-123 Security update for kernel-mode drivers
MS16-124 Security update for Windows registry
MS16-126 Security update for Microsoft Internet Messaging API

I would normally go through each one and install them individually to see what one is the issue.

I am using an i7 920 on a 2008 computer so my system is old I know but it is doing what I want.

Anyway anyone with suggestions I would love to know.

P.S. with the patch installed safe mode still works so I just uninstall it from within safe mode.

SevenOfNine said:

Do either of these Windows Updates include any telemetry or other undesirable crap?:

• October, 2016 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB3185330)
• October, 2016 Security and Quality Rollup for .NET Framework 3.5.1 on Windows 7 SP1 and Windows Server 2008 R2 SP1 for x64 (KB3188740)

My understanding is that both, despite their names, contain a lot of non-security updates... but I haven't been able to find a clear explanation of whether or not either contains any telemetry or other junk.

I'd like to add my 2 cents to the Telemetry discussion. The measures I take are:

1. I keep GWX control panel running

2. In my Hosts file, I have limited the following to to Local loopback IP 127.0.0.1:

vortex-win.data.microsoft.com
settings-win.data.microsoft.com

3. I have placed the above domains in the URL filter in my Router Firewall.

4. I employ the plus version of Windows 10 Firewall Control ($24 - works in Win7, Win8). This allows me to monitor and control all outbound traffic, including system files. It also includes the ability to block specific programs and block traffic to specific IP addresses. You can be notified via systray balloon whenever an outbound attempt is made.
W10 FC works with Windows firewall. Windows FW only blocks inbound traffic, W10 FC only blocks outbound traffic. so no need to disable windows FW.

msalton1 said:

SevenOfNine said:

Do either of these Windows Updates include any telemetry or other undesirable crap?:

• October, 2016 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB3185330)
• October, 2016 Security and Quality Rollup for .NET Framework 3.5.1 on Windows 7 SP1 and Windows Server 2008 R2 SP1 for x64 (KB3188740)

My understanding is that both, despite their names, contain a lot of non-security updates... but I haven't been able to find a clear explanation of whether or not either contains any telemetry or other junk.

I'd like to add my 2 cents to the Telemetry discussion. The measures I take are:

1. I keep GWX control panel running

2. In my Hosts file, I have limited the following to to Local loopback IP 127.0.0.1:

vortex-win.data.microsoft.com
settings-win.data.microsoft.com

3. I have placed the above domains in the URL filter in my Router Firewall.

4. I employ the plus version of Windows 10 Firewall Control ($24 - works in Win7, Win8). This allows me to monitor and control all outbound traffic, including system files. It also includes the ability to block specific programs and block traffic to specific IP addresses. You can be notified via systray balloon whenever an outbound attempt is made.
W10 FC works with Windows firewall. Windows FW only blocks inbound traffic, W10 FC only blocks outbound traffic. so no need to disable windows FW.

Thanks. First, just a quick note. Windows Firewall can be configured to block inbound and outbound traffic.

Did you install KB3185330 and KB3188740? If so, have you logged connection attempts to:
vortex-win.data.microsoft.com
settings-win.data.microsoft.com
or any other telemetry hosts?

I'm not sure how it will show up in your W10FC logs, since you are redirecting those hosts to localhost.

Oh, and if anyone is confused, W10FC, despite it's name, can be used on Win7 too.

SevenOfNine said:

Thanks. First, just a quick note. Windows Firewall can be configured to block inbound and outbound traffic.

Yes, you can manually configure outbound rules in WFC. But W10 FC (Plus) is pre-configured to block all outbound connections except for those essential to Windows operation (The free version blocks all but system events, and system events can't be blocked).

A popup dialog allows one to make a decision as to whether the program, Event or Connection should be blocked or allowed, and if allowed, what zone of allowance should be used (again, plus version...free version allows only enable or disable). Zones are a set of rules configured to greater or lesser degrees of restriction, I.E., webrowser zone, LAN zone, etc.). Specific IPs can be blocked so that not event or program can connect.

As time goes on, the popups diminish and go away as W10 FC becomes configured by your choices. New & unconfigured events, programs and connections produce the popup.

You probably already know this, but I post it for the interest of those who don't.

Did you install KB3185330 and KB3188740? If so, have you logged connection attempts to:
vortex-win.data.microsoft.com
settings-win.data.microsoft.com
or any other telemetry hosts?

No, I've not installed either. I'm set to manually download and install updates, and, since MS has resorted to Win 10 and Telemetric sneak attacks, it has to wait until the updates have been in play long enough to be reasonably sure of their legitimacy and until I have the time to sift through the updates and to determine what I'm getting.

I'm not sure how it will show up in your W10FC logs, since you are redirecting those hosts to localhost.

It hasn't

Oh, and if anyone is confused, W10FC, despite it's name, can be used on Win7 too.

That's correct. It works great in Win 7, 8 or 10. I recommend it highly.
The free version is powerful, but the Plus version is very useful and powerful.

msalton1 said:

Is there a reference list of unsavory updates to be avoided? I google every update. It does get tedious. It sure would be nice to have a site to visit that maintains a list of the ones to avoid.

I second this question. :)

I too have also avoided installing KB3185330 and KB3188740 pending anyone stating if they do (or don't) snoop on my PC.

Jdawson : for some it caused problems with the audio(with updated drivers). apparently it can also affect other things :/

But it can not be that bad. Who are encouraged to say and confirm: I have installed and no problems :)

msalton1 said:

SevenOfNine said:

Do either of these Windows Updates include any telemetry or other undesirable crap?:

• October, 2016 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB3185330)
• October, 2016 Security and Quality Rollup for .NET Framework 3.5.1 on Windows 7 SP1 and Windows Server 2008 R2 SP1 for x64 (KB3188740)

My understanding is that both, despite their names, contain a lot of non-security updates... but I haven't been able to find a clear explanation of whether or not either contains any telemetry or other junk.

I'd like to add my 2 cents to the Telemetry discussion. The measures I take are:

1. I keep GWX control panel running

2. In my Hosts file, I have limited the following to to Local loopback IP 127.0.0.1:

vortex-win.data.microsoft.com
settings-win.data.microsoft.com

3. I have placed the above domains in the URL filter in my Router Firewall.

4. I employ the plus version of Windows 10 Firewall Control ($24 - works in Win7, Win8). This allows me to monitor and control all outbound traffic, including system files. It also includes the ability to block specific programs and block traffic to specific IP addresses. You can be notified via systray balloon whenever an outbound attempt is made.
W10 FC works with Windows firewall. Windows FW only blocks inbound traffic, W10 FC only blocks outbound traffic. so no need to disable windows FW.

I hate to intrude/hi-jack this thread, but I had the urge to contact you in some way or another (I cannot send you a PM or post a visitor comment on your profile).

Can you please screenshot which updates you have installed on your system? I feel as if you may have more knowledge than most of us on which updates are necessary and which aren't.

I have a list of my own, but I'm not sure it is as complete as the one you may have. (This is a list of ones that I avoid installing)

Code:

wusa /uninstall /kb:971033 /quiet /norestart
wusa /uninstall /kb:2505438 /quiet /norestart
wusa /uninstall /kb:2670838 /quiet /norestart
wusa /uninstall /kb:2882822 /quiet /norestart
wusa /uninstall /kb:2902907 /quiet /norestart
wusa /uninstall /kb:2919355 /quiet /norestart
wusa /uninstall /kb:2922324 /quiet /norestart
wusa /uninstall /kb:2952664 /quiet /norestart
wusa /uninstall /kb:2976978 /quiet /norestart
wusa /uninstall /kb:2977759 /quiet /norestart
wusa /uninstall /kb:2990214 /quiet /norestart
wusa /uninstall /kb:3012973 /quiet /norestart
wusa /uninstall /kb:3015249 /quiet /norestart
wusa /uninstall /kb:3021917 /quiet /norestart
wusa /uninstall /kb:3022345 /quiet /norestart
wusa /uninstall /kb:3035583 /quiet /norestart
wusa /uninstall /kb:3042058 /quiet /norestart
wusa /uninstall /kb:3044374 /quiet /norestart
wusa /uninstall /kb:3045999 /quiet /norestart
wusa /uninstall /kb:3050265 /quiet /norestart
wusa /uninstall /kb:3050267 /quiet /norestart
wusa /uninstall /kb:3064683 /quiet /norestart
wusa /uninstall /kb:3065987 /quiet /norestart
wusa /uninstall /kb:3065988 /quiet /norestart
wusa /uninstall /kb:3068708 /quiet /norestart
wusa /uninstall /kb:3072318 /quiet /norestart
wusa /uninstall /kb:3072630 /quiet /norestart
wusa /uninstall /kb:3074677 /quiet /norestart
wusa /uninstall /kb:3075249 /quiet /norestart
wusa /uninstall /kb:3075851 /quiet /norestart
wusa /uninstall /kb:3075853 /quiet /norestart
wusa /uninstall /kb:3080149 /quiet /norestart
wusa /uninstall /kb:3081437 /quiet /norestart
wusa /uninstall /kb:3081454 /quiet /norestart
wusa /uninstall /kb:3081954 /quiet /norestart
wusa /uninstall /kb:3083324 /quiet /norestart
wusa /uninstall /kb:3083325 /quiet /norestart
wusa /uninstall /kb:3083710 /quiet /norestart
wusa /uninstall /kb:3083711 /quiet /norestart
wusa /uninstall /kb:3086255 /quiet /norestart
wusa /uninstall /kb:3088195 /quiet /norestart
wusa /uninstall /kb:3090045 /quiet /norestart
wusa /uninstall /kb:3093513 /quiet /norestart
wusa /uninstall /kb:3093983 /quiet /norestart
wusa /uninstall /kb:3102810 /quiet /norestart
wusa /uninstall /kb:3102812 /quiet /norestart
wusa /uninstall /kb:3107998 /quiet /norestart
wusa /uninstall /kb:3112336 /quiet /norestart
wusa /uninstall /kb:3112343 /quiet /norestart
wusa /uninstall /kb:3118401 /quiet /norestart
wusa /uninstall /kb:3122649 /quiet /norestart
wusa /uninstall /kb:3123862 /quiet /norestart
wusa /uninstall /kb:3127221 /quiet /norestart
wusa /uninstall /kb:3133977 /quiet /norestart
wusa /uninstall /kb:3135445 /quiet /norestart
wusa /uninstall /kb:3135449 /quiet /norestart
wusa /uninstall /kb:3138612 /quiet /norestart
wusa /uninstall /kb:3138615 /quiet /norestart
wusa /uninstall /kb:3139929 /quiet /norestart
wusa /uninstall /kb:3146449 /quiet /norestart
wusa /uninstall /kb:3148198 /quiet /norestart
wusa /uninstall /kb:3150513 /quiet /norestart
wusa /uninstall /kb:3173040 /quiet /norestart
wusa /uninstall /kb:3184143 /quiet /norestart
wusa /uninstall /kb:3188740 /quiet /norestart
color 07