Reinstall Win7 what updates to avoid for telemetry & winX preparation?

[Marie SWE]

If the OP posts the list can you repost it using black letters ? I can't read her posts cause the purple color cause Bat headaches due to the brain damage

Of corse I will post the list in Black
It was sad that you can not tolerate that color, I who love purple and writes with purple text color in all the forums that I am a member on.
A question is this purple color okay? Testing


Best Regards Marie

 

[Bat 1]

Of corse I will post the list in Black
It was sad that you can not tolerate that color, I who love purple and writes with purple text color in all the forums that I am a member on.
A question is this purple color okay? Testing


Best Regards Marie

You're free to post in whatever color, text size etc. is allowed. I just means that I won't be able to read the posts. Nothing else. It's a contrast thing due to brain damage from a case of meningitis I had a long time ago back in 2007. I had two offers to repost so no problems. One of my Best Mates on another forum always posts is Big Green Letters and that doesn't bother Me so who knows maybe one day I'll be able to tolerate purple and bright blue ? Don't think I'll ever tolerate a Dark Theme though

 

[Lady Fitzgerald]

Many people are color blind, including me. I find the dark purple text very hard to read.

 

[Marie SWE]

You're free to post in whatever color, text size etc. is allowed. I just means that I won't be able to read the posts. Nothing else. It's a contrast thing due to brain damage from a case of meningitis I had a long time ago back in 2007. I had two offers to repost so no problems. One of my Best Mates on another forum always posts is Big Green Letters and that doesn't bother Me so who knows maybe one day I'll be able to tolerate purple and bright blue ? Don't think I'll ever tolerate a Dark Theme though

Okay, I understand. My sister had meningitis when she was little .. it's a really nasty thing to get.
Yes, I saw someone offered to post in black, but it's more fun for me if everyone can see what I'm writing.
So from now on, all my posts will become black in here, so it fits all people and forum themes.
Guess what I have for color themes in my computers .. both in Linux and Windows.

 

[Marie SWE]

Many people are color blind, including me. I find the dark purple text very hard to read.

Okay. I haven't change the forum themes, so i have a white background so dark purple "feels" easy to read on white. but now I will stick to black text, when I know how you all feel for my colorful color choices.

 

[Bat 1]

 

[Marie SWE]

My document It's almost completely translated now and I've looked up some more facts.
But I'm sorry, I do not have time to complete it and post it now .. It's almost 04:00 o'clock and it's time for me to get some sleep.
tomorrow, tomorrow I will be back tomorrow.


see ya.

 

[AddRAM]

You can't even read his writing using the black wide skin.

It's cool use what you want

Whenever I can`t see the font I just change the skin to read it, but I don't use the white themes, too much on my eyes

 

[Lady Fitzgerald]

Okay. I haven't change the forum themes, so i have a white background so dark purple "feels" easy to read on white. but now I will stick to black text, when I know how you all feel for my colorful color choices.

Thank you. It's not how we feel about your colorful color choices; it's a matter of being able to read your posts.

 

[Marie SWE]

Hello again.

Okay.. Here is my version of "be aware of list"..

This list is focused on Win7, but there are also some Win8 KB's
It's KB's both for telemetry, Win10 related and some just a little naughty and can mess with the computer. As well as all KB's on windows update clients are listed at the end.
And a link to MS to windows update history and the KB's up to now.

I don't like MS ways to embed telemetry and the OS upgrade, so I have edited some posts in scheduler which collects the data. As a side effect, it has also calmed down the hard drive's activity. I also have edited a few posts in some reg files.
Since my operating system is in Swedish, then I didn't do any print screens to post.
And the most important Disabled WUC windows update client's automatic downloads of updates
I have also added two domain names to win telemetry that I have blocked in my Host file. And I have blocked googles spying also.

I hope this list is helpful and it's okay that i typed the KB-numbers in sequence rather than in categories. If you all think the list is okay/good, then I can put it in my first post in this thread, so it will be easy to find in the future.

Regards Marie


References for this list is.
Windows 7 Help Forums
https://www.********.com (ask woody but the forum censured the link)
https://support.microsoft.com
Resources and Tools for IT Professionals | TechNet
Microsoft Community

-------------------------------------------------------- Marie's be aware of KB-list -----------------------------------------------------
KB894199 hmm.. Description of Software Update Services and Windows Server Update Services changes in content for 2018
KB947821 System Update Readiness tool. This update can be useful in some situations: an update or SP1 might not install if a system file is damaged. The DISM or System Update Readiness tool may help to fix some Windows corruption errors
KB949810 Office Genuine Advantage Notification
KB971033 Update for activation and validation components in Windows Activation Technologies for Windows 7.

KB2505438 - Slow performance in applications that use the DirectWrite API on a computer that is running Windows 7 or Windows Server 2008 R2 = It often breaks fonts
KB2506928 fixes an issue in which a link in an .html file that you open in Outlook does not work. This issue occurs on a Win7 that has IE9
KB2545698 (IE9)
KB2592687 Remote desktop protocol

KB2660075 Time and date if the time one is set to samoa
KB2670838 - Platform update for Windows 7 SP1 and Windows Server 2008 R2 SP1 = breaks AERO functionality and gives you blurry fonts on some websites. And brakes Resource monitor in 125DPI in classic mode

KB2719857 Fix for USB RNDIS device to connect to a 3G or 4G network in Windows 7 fix for a computer that is running Windows 7
KB2726535 Adds South sudan to the list o countries
KB2732059 fix for cannot open an .oxps file in Windows 7

KB2830477 Remote Desktop Connection (RDC) 8.1 client update
KB2834140 Stop error "0x00000050" after you install update 2670838 on a computer that is running Windows 7 SP1
KB2840149 security update for the Windows file system kernel-mode driver (ntfs.sys) Some have had some boot problems with it.
KB2876229 SKYPE
KB2882822 as of 07.10.13 Diagnostics Tracking Service, replaced by KB3068708; (Very fishy update that just popped up with not enough detail about it)

KB2902907 microsot security essentials ???? questionable or??++ win defender with not enough details...
KB2922324 – (reportedly pulled, uninstall it anyway if already installed)
KB2923545 RDP Remote desktop protocol
KB2938066 An update to harden Windows Server Update Services that further improves the security of Windows Server Update Services (WSUS) and the Windows Update Agent (WUA) (Fishy info)
KB2952664 - is the Windows 7 nagware patch that touts the Windows 10 upgrade. Prepares system for upgrade to Windows 10 (sends a bunch of telemetry data to M$, reported to corrupt system files)
KB2966583–Improvements for the System Update Readiness Tool in Windows 7
KB2970228 Russian ruble symbol
KB2976897 Recomended to uninstall from microsoft
KB2976978 - the Windows 8/8.1 nagware patch that touts the Windows 10 upgrade.
KB2976987 telemetry?? Description not available on Microsoft
prepares system for upgrade to Windows 10 (sends a bunch of telemetry data to M$, reported to corrupt system files)
KB2977759 – prepares system for upgrade to Windows 10, installs telemetry
KB2978092 Graphics software or applications crash
KB2982791 Recomended to uninstall from microsoft
KB2990214 - update that supports you to upgrade to a later version of Windows Win7
KB2994023 Remote desktop session constantly disconnects and reconnects
KB2999226 win10 universal CRT

KB3006137 Update changes the currency symbol of Lithuania from the Lithuanian litas (Lt) to the euro (€) in Windows
KB3012973 Force trigger download and install of win10
KB3013531 Some says win10 ralated MS says to support copying .mkv files to Windows Phone from a computer that is running Windows
KB3014406 Some says fishy MS says: fix for Startup delay occurs after you disable IPv6 in Windows
KB3014460 – Windows 8 - Nags you to install Windows 10 technical preview
KB3015249 – Telemetry, reports UAC prompt choices when making changes to the system
KB3021917 – prepares system for upgrade to Windows 10 (CEIP) This update performs diagnostics in Windows 7 Service Pack 1 (SP1) in order to determine whether performance issues may be encountered when the latest Windows operating system is installed. Telemetry is sent back to Microsoft for those computers that participate in the Windows Customer Experience Improvement Program (CEIP).
KB3022345 – installs diagnostic/usage tracking service, reported to corrupt system files, went through 3 versions
KB3029606 Telemetry?? Update to improve Bluetooth driver diagnosis in Windows 8.1
KB3032359 IE update that can mess some..
KB3035583 – "Get Windows 10" App (System Tray Nagware/Telemetry) pitches the free Windows 10 upgrade
KB3038314 messing with set default search provider..
KB3040272 fix.. Start time increases after another language pack is added to Windows.. very little info.
KB3042058 (microsoft claims its a security update, but it contains winlogon spying)
KB3044374 - update that supports you to upgrade to a later version of Windows Win8
KB3045645 Some says win10 related. MS says: Update to force a UAC prompt when a customized .sdb file is created in Windows. little info.
kb3046480 Update helps to determine whether to migrate thr .net Framework 1.1 when you upgrade windows8.1 or windows7 more info
KB3048043 Some had problems with corrupted files when installed. MS Says: fix for Screen flickers or becomes blank when you drag tiles on the Start screen in Windows
KB3050265 - Windows Update Client for Windows 7: June 2015 = WU service updated to accept upgrade to W10 + other fixes
KB3050267 – Windows 8 - prepares system for upgrade to Windows 10
KB3054476 A little bit fishy, no real info and many avoid it. MS says:This update helps Microsoft improve the experiences when users run stream.sys driver-based applications in Windows 7 Service Pack 1 (SP1
KB3064683 (Windows 10 Upgrade for Windows 8)
KB3065987 – win7 makes “improvements” to the windows update client (really Windows 10 Upgrade for Windows 7)
KB3065988 - win8 makes “improvements” to the windows update client (really Windows 10 Upgrade for Windows 8)
KB3068707 - Customer experience telemetry points (update appears to be nuked from microsoft.com)
KB3068708 – installs telemetry service, prepares system for upgrade to Windows 10
KB3070773 Telemetry Win o IE
KB3072318 (Windows 10 Upgrade preparation for Windows 8)
KB3074677 (Windows 10 Upgrade preparation)
KB3075249 – Telemetry, reports UAC prompts to Microsoft
KB3075851 – makes “improvements” to the windows update client (really Windows 10 Upgrade for Windows 7)
KB3075853 - updated Windows Update stuff for the upgrade process (really Windows 10 Upgrade for Windows 8)
KB3077715 Some says bad and win10 related MS says: August 2015 cumulative time zone update for Windows operating systems
KB3078667 Some says bad and win10 related. MS says: fix for System malfunction because memory leak occurs in dwm.exe in Windows 7
KB3080079 Some have said bad win10/telemetry.. MS says: Update to add RDS support for TLS 1.1 and TLS 1.2 in Windows 7
KB3080149 – Update for customer experience and diagnostic telemetry, CEIP
KB3080351 Win10 related
KB3081437 (Windows 10 Upgrade preparation)
KB3081454 (Windows 10 Upgrade preparation)
KB3081954 (Telemetry Update for Windows 7)
KB3083225 Some says Telemetry. No info avalible on MS
KB3083324 (Windows 10 Upgrade preparation for Windows 7)
KB3083325 (Windows 10 Upgrade preparation for Windows 8)
KB3083710 replacing kb3083324
KB3083711 Windows Update Client for Windows 8.1 and Windows Server 2012 R2: October 2015 ()
KB3086255 (Flagged as an Important update. It disables SafeDisc games in Windows Vista, 7, and 8/8.1)
KB3088195 (Miscorosft Claims it's a security update but also has a key logger on the Kernel Level)
KB3090045 (Windows 10 Upgrade Update for Windows 7/8)
KB3093983 (Microsoft claims it's a security update but it contains IE spying)
KB3095649 Some says win10 related MS says: Fixes a crash in Win32k.sys in Windows 7 SP1
KB3097877 can get desktop gadgets stop working
KB3097966 Some says Telemetry and win10 related.. MS says:Microsoft security advisory: Inadvertently disclosed digital certificates could allow spoofing: October 13, 2015

KB3102429 Update that supports Azerbaijani Manat and Georgian Lari currency symbols in Windows
KB3102810 May be sensible .. in some cases .. (Fixes an issue regarding long wait while searching for Windows Updates but also has Windows 10 Upgrade preparation for Windows 7)
KB3102812 (Fixes an issue regarding long wait while searching for Windows Updates but also has Windows 10 Upgrade preparation for Windows 8)
KB3106614 Security update for Silverlight to address remote code execution: December 8, 2015
KB3107998 (Removes Lenovo USB Blocker)
KB3112148 December 2015, cumulative time zone update for Windows operating systems
KB3112336 is update for Windows 8.1 users. Both are for making your upgrade to windows 10 easier and better
KB3112343 is the update for Windows 7 users. Both are for making your upgrade to windows 10 easier and better
KB3114409 May cause Outlook 2010 to crash
KB3118401 Update Universal C Runtime (CRT) Windows 10 universal CRT
KB3123862 Telemetry adds capabilities to some computers that lets users easily learn about Windows 10 or start an upgrade to Windows 10. (Windows 10 Upgrade for Windows 7 & 8)
KB3124263 Cumulative security update for Windows 10
KB3125574 win7 SP2?? Ms call it Convenience rollup update for Windows 7 SP1.(((if you do want total control over the updates that may contains telemetry and so on. Skip this one and take them one by one.)))
KB3133977 Windows 7 Bitlocker... can be a Asus landmine Tip from: RoWin7
KB3135445 it is a fix to the WU client (it maybe a Windows 10 Upgrade for Windows 7)
KB3135449 (Windows 10 Upgrade for Windows 8)
KB3138612 win10 related (Fishy update to for Windows Updates)
KB3138615 win10 related
KB3139923 Found this info on ask woody. KB3075249 is no longer offered anymore as it is superseded by KB3139923-v2. MS says: Fix for Windows installer (MSI) repair doesn't work when MSI package is installed on an HTTP share in Windows
KB3139929 Cumulative security update for IE, carries KB3146449, Woody says avoid (Fishy update for Windows 7/8 to Windows 10 Upgrade)
KB3141092 Installed itself on LH computer 3/3/16 even though not selected, reportedly piggybacks on Security Update KB3134814 if IE11 is installed
KB3143736 After you install security update 3093983, Oracle Siebel CRM crashes in the Mshtml.dll file and returns code "c0000602" in Internet Explorer.
KB3146449 (Windows 10 Upgrade for Windows 7/8)
KB3146706 - Security update for Windows OLE. Not needed. Break pirate copies of Windows 7.
KB3148198 important but worrying - Cumulative update for IE11. Includes previous Windows 10 preparation.
KB3150513 this one only gets offered if you have one of the previous Telemetry updates installed (KB2977759, KB2952664, or KB2976978), so it hasn't shown up on any of my systems
KB3150513 Looks like it needs to be added to the list of updates to block/prevent.
KB3154996 After you install security update 3100773, you discover that you can't type Korean characters correctly by using the Korean Hangul input method editor (IME) in Internet Explorer 11.
KB3156417 -May 2016 non security update rollup for Windows 7 SP1
KB3159398 I read that several users have decided to postpone the patch KB3159398 for certain problems that it causes :
KB3159706 is intended to sync and distribute Windows 10 upgrades
KB3161102 Removes Windows Journal component.
KB3161608 - June 2016 Update Rollup for Windows 7 SP1 (Includes Windows Update Client for Windows 7: June 2016) contains some telemetry.
KB3167679 MS-says: Description of the security update for Windows authentication methods: August 9, 2016.. But,KB3167679 breaks password changing on Win7 joined in NT style domain (samba 3.6.23)(This info found on Microsoft TechNet)
3170735 Is on many block lists. Says Win 10 related. MS says:July 2016 Update for Windows Journal... No real info about what it is in it.
KB3173040 - Windows 8.1 and Windows 7 SP1 end of free upgrade offer notification

--------> KB3184143 Remove software related to the Windows 10 free upgrade offer. <-----------

------------------------------------------------------------
Windows Update Client list Win7 WUC updates.

KB2990214 - Apr '15 - WUC: enables ability to upgrade to Win10
KB3050265 - Jun '15 - WUC: allows Group Policy to set "DisableOS Upgrade" key (replaces 2990214)
KB3065987 - Jul '15 - WUC: unspecified "improvements" (replaces 3050265)
KB3075851 - Aug '15 - WUC: fixes mess due to KB3065987 [cuts down WUC memory usage, but hides Update notifications if GWX app is active] (replaces 3065987)
KB3083324 - Sep '15 - WUC: unspecified "improvements" (replaces 3075851)
KB3083710 - Oct '15 - WUC: unspecified "improvements" (replaces 3083324)
KB3102810 - Nov '15 - WUC: fixes slow updates & high CPU usage (doesn't replace any previous updates)
KB3112343 Dec '15 WUC: fix for issues with 3050265, e.g., "8007000E" error message (doesn't replace any previous updates)
KB3135445 - Windows Update Client for Windows 7: February 2016
KB3138612 - Windows Update Client for Windows 7: March 2016
KB3161647 Windows Update Client for Windows 7 and Windows Server 2008 R2: June 2016

------------------------------------------
Block win telemetry domains in Host file.

vortex-win.data.microsoft.com
settings-win.data.microsoft.com


---------------------------- Monthly rolups begin here ----------------
KB3172605 July 2016 update rollup includes some new improvements and fixes including the improvements from June 2016 update roll up KB3161608 for the Windows 7 SP1

KB3179573 August 2016 update rollup includes some new improvements and fixes for the Windows 7 Service Pack 1 (SP1)

KB3185278 September qality rollup The September 2016 update rollup includes some new improvements and fixes for the Windows 7 Service Pack 1 (SP1)

-------- Download rollups.. Listing both security only AND monthly quality rollups. -----------
Windows 7 SP1 and Windows Server 2008 R2 SP1 update history Access Denied
Microsoft Update Catalog

2018-02 Preview of Monthly Rollup - KB4075211
2018-02 Monthly Rollup - KB4074598 Unknown if it has spectre/meltdown patch
2018-02 Security-only update - KB4074587 Unknown if it has spectre/meltdown patch
2018-01 Preview of Monthly Rollup - KB4057400
2018-01 Monthly Rollup - KB4056894 Contains spectre/meltdown patch
2018-01 Security-only update - KB4056897 Contains spectre/meltdown patch
2017-12 Monthly Rollup - KB4054518
2017-12 Security-only update - KB4054521
2017-11 Preview of Monthly Rollup - KB4051034
2017-11 Monthly Rollup - KB4048957
2017-11 Security-only update - KB4048960
2017-10 Preview of Monthly Rollup - KB4041686
2017-10 Monthly Rollup - KB4041681
2017-10 Security-only update - KB4041678
2017-09 Preview of Monthly Rollup - KB4038803
2017-09 Monthly Rollup - KB4038777
2017-09 Security-only update - KB4038779
2017-08 Preview of Monthly Rollup - KB4034670
2017-08 Monthly Rollup - KB4034664
2017-08 Security-only update - KB4034679
2017-07 Preview of Monthly Rollup - KB4025340
2017-07 Monthly Rollup - KB4025341
2017-07 Security-only update - KB4025337
2017-06 Preview of Monthly Rollup - KB4022168
2017-06 Monthly Rollup - KB4022719
2017-06 Security-only update - KB4022722
2017-05 Preview of Monthly Rollup - KB4019265
2017-05 Monthly Rollup - KB4019264
2017-05 Security-only update - KB4019263
2017-04 Preview of Monthly Rollup - KB4015552
2017-04 Security-only update - KB4015546
2017-04 Monthly Rollup - KB4015549
2017-03 Preview of Monthly Rollup - KB4012218
2017-03 Monthly Rollup - KB4012215
2017-03 Security-only Update - KB 4012212
2017-01 Monthly Rollup - KB3212646
2017-01 Security-only update - KB3212642
2016-12 Monthly Rollup - KB3207752
2016-12 Security-only update - KB3205394
2016-11 Preview of Monthly Rollup - KB3197869
2016-11 Security-only update - KB3197867
2016-11 Monthly Rollup - KB3197868
2016-10 Preview of Monthly Rollup - KB3192403
2016-10 Security only update - KB3192391
2016-10 Monthly rollup - KB3185330
2016-09 - KB3185278
2016-08 - KB3179573
2016-07 - KB3172605


Edit:
Added information about update KB947821

 

[Botard]

Speaking of telemetry, firefox browser has also a telemetry that can modify it. For other browsers, I don't know.

And if, right then in that moment it happens they can get access to my computers virtual memory. And IF i in that specific moment have any useful information in my virtual memory and if my firewalls accept the outgoing traffic to the hackers, then they could use the information.

It's a lot of If's, as i have understand it. Or am I wrong?

I'm not familiar with virtual memory, but if it is refer to hardware or chips, there's no any information in there, only data or a string of bits (101010111) reside in it temporarily. I don't think is possible a source of information remotely

By the way, If appropriate, I have a question to ask here about these vulnerability of spectre and meltdown and telemetry, what would be the effect if the OS is in a virtual environment? Is the host become vulnerable too? Or is okay to update all updates?

Thanks,

 

[dg1261]

Thanks, Marie, for the extensive list in post #30. I appreciate the brief description you added beside each KB update.

My preferred method of updating a clean install is via WSUS Offline Update, which downloads all currently active updates for offline installation on any system, not just the system on which the downloading is being done. It only concerns itself with critical/security updates, not the optional updates.

I've compared Marie's list with what WSUS Offline Update says are currently active updates, and only 11 of those on Marie's list appear to still be active:

KB971033
KB2670838
KB2830477
KB2834140
KB2882822
KB2923545
KB2976897
KB3042058
KB3086255
KB3159398
KB3161608
​

I think that implies the rest have been superceded and wouldn't be offered by WU anymore. It's also possible some on Marie's list might be categorized as optional (e.g., perhaps the time zone updates?), which could still be active but WSUS Offline isn't checking those.

Nevertheless, it's always preferable to have more information than too little, so Marie's legwork to pull together that list is appreciated. If nothing else, it can be useful for checking what updates might already be on your system and candidates for uninstallation.

If anyone is interested, I cut-and-pasted Marie's list (from KB894199 through KB3161647) and ran it through a quick perl script to convert it to a .cmd file that can be used to bulk uninstall the updates on Marie's list. (I didn't include Marie's monthly rollup list, because I think she only meant to list them, not necessarily uninstall them.)

To use the attached .cmd file, extract it and place it on your desktop. Right-click and choose to "Run as administrator". It will look for any updates on Marie's list and, if found, uninstall them. Finish with a system reboot.

Of course, it would be wise to make a backup image of your OS partition before doing this, just in case uninstalling one of those updates destabilizes your system. I tried the .cmd script on a Win7 VM, with no adverse effects, but better to be safe than sorry.

 

[Paul Black]

WOW Marie SWE, what a briiliant job, it is really appreciated .
I will spend some tme today hopefully looking through the list in more detail.

Hi dg1261,

I've compared Marie's list with what WSUS Offline Update says are currently active updates, and only 11 of those on Marie's list appear to still be active:

KB971033
KB2670838
KB2830477
KB2834140
KB2882822
KB2923545
KB2976897
KB3042058
KB3086255
KB3159398
KB3161608
​

I think that implies the rest have been superceded and wouldn't be offered by WU anymore. It's also possible some on Marie's list might be categorized as optional (e.g., perhaps the time zone updates?), which could still be active but WSUS Offline isn't checking those.

That is an excellent bit of detective work.
Just as a side mention dg1261, I have a thread open about Batch .CMD script if you could have a quick look at it for me please.

 

[Marie SWE]

Speaking of telemetry, firefox browser has also a telemetry that can modify it. For other browsers, I don't know.



I'm not familiar with virtual memory, but if it is refer to hardware or chips, there's no any information in there, only data or a string of bits (101010111) reside in it temporarily. I don't think is possible a source of information remotely

By the way, If appropriate, I have a question to ask here about these vulnerability of spectre and meltdown and telemetry, what would be the effect if the OS is in a virtual environment? Is the host become vulnerable too? Or is okay to update all updates?

Thanks,

Yes, Firefox also has telemetry as all web browsers, but not to the same extent and it's not hidden.
If you open about: config in Firefox and search for telemetry, you can easily erase the address of the telemetry server so it has nothing to connect with. Try that with an other web browser.

I'm far,far,far from an expert on binary code. But from what I have understood from what I have read about spectre/meltdown, the binary code is not encrypted in the virtual memory. From there it is fully readable. The letter: A = 01000001 and a = 01100001 So it's just about translating binary code into text.
And yes, the data in the virtual memory is only temporary, that's why a wrote IF and IF if happens in the right moment then its possible to extract passwords and other keys.

To run a OS in a VM environment doesn't matter if you have access to internet.

----->If I'm wrong about any thing in this statement in this post, please correct me. <------

 

[Marie SWE]

Thanks, Marie, for the extensive list in post #30. I appreciate the brief description you added beside each KB update.

My preferred method of updating a clean install is via WSUS Offline Update, which downloads all currently active updates for offline installation on any system, not just the system on which the downloading is being done. It only concerns itself with critical/security updates, not the optional updates.

I've compared Marie's list with what WSUS Offline Update says are currently active updates, and only 11 of those on Marie's list appear to still be active:

KB971033
KB2670838
KB2830477
KB2834140
KB2882822
KB2923545
KB2976897
KB3042058
KB3086255
KB3159398
KB3161608
​

I think that implies the rest have been superceded and wouldn't be offered by WU anymore. It's also possible some on Marie's list might be categorized as optional (e.g., perhaps the time zone updates?), which could still be active but WSUS Offline isn't checking those.

Nevertheless, it's always preferable to have more information than too little, so Marie's legwork to pull together that list is appreciated. If nothing else, it can be useful for checking what updates might already be on your system and candidates for uninstallation.

If anyone is interested, I cut-and-pasted Marie's list (from KB894199 through KB3161647) and ran it through a quick perl script to convert it to a .cmd file that can be used to bulk uninstall the updates on Marie's list. (I didn't include Marie's monthly rollup list, because I think she only meant to list them, not necessarily uninstall them.)

To use the attached .cmd file, extract it and place it on your desktop. Right-click and choose to "Run as administrator". It will look for any updates on Marie's list and, if found, uninstall them. Finish with a system reboot.

Of course, it would be wise to make a backup image of your OS partition before doing this, just in case uninstalling one of those updates destabilizes your system. I tried the .cmd script on a Win7 VM, with no adverse effects, but better to be safe than sorry.

You're welcome, and thank you for the link to WSUS.
Yes, I felt that a brief description was necessary, as I get so frustrated to see a text that KBxxxxx is bad to install. But then it's noting about why? perhaps it is something that is good for me but bad to the other person.

You're right, it's mixed critical and optional updates I did so as some optional updates can be good in some situations. so then it might be good to know what's what.
And this is a Be aware of list.. not all bad bad updates
spot on you are right, there are not many who are active. But if you have a computer with a 2-5 year old installation and do not want or are too lazy to reinstall it. Then the old ones can also be good to know about.
I'm so lazy and I'm refuse to reinstall my computers if I'm not forced,forced,forced to do it.. as I am now with two of my win7 computers. *hahaha*
One of my computers have a 14 year old installation and it works but can be a "little" slow sometimes, but I'm really too lazy to reinstall it .. it still works even though it takes about 4 minutes to boot it *Hahaha*

Thank you very much for your job to make a .cmd file.
Oh yes.. backup,backup,backup, always make a backup. I learned that lesson the hard way with my AMD computer and January's security update

 

[Marie SWE]

WOW Marie SWE, what a briiliant job, it is really appreciated .
I will spend some tme today hopefully looking through the list in more detail.

That is an excellent bit of detective work.

Thank you very much and you are welcome.
Yes, it took three almost four days to make the list, but it's worth all the time now afterwards.

 

[Botard]

If anyone is interested, I cut-and-pasted Marie's list (from KB894199 through KB3161647) and ran it through a quick perl script to convert it to a .cmd file that can be used to bulk uninstall the updates on Marie's list. (I didn't include Marie's monthly rollup list, because I think she only meant to list them, not necessarily uninstall them.)

To use the attached .cmd file, extract it and place it on your desktop. Right-click and choose to "Run as administrator". It will look for any updates on Marie's list and, if found, uninstall them. Finish with a system reboot.

Of course, it would be wise to make a backup image of your OS partition before doing this, just in case uninstalling one of those updates destabilizes your system. I tried the .cmd script on a Win7 VM, with no adverse effects, but better to be safe than sorry.

Thank you for this. I downloaded the updates for the first time in VM. When it finish, I'm going to use the cmd file to check the candidates and uninstall them. I just made up my mind I have to reverse my OS just to harden my host files. The Windows will take charge the browser and email that connects the internet. Then subscribing the free trial of anti-malware programs, and see if I can extend it.

 

[Botard]

Hi there Marie, Thanks for your feedback of my comments. I really appreciate it. Maybe you are right just like what happened in our "automate" last election here. There was a controversy that some machine sent information to the server unknowingly during election. In fact the senate want to investigate this allegation.

For me, I just wondering asking question based on my understanding for what I read of some articles about cyber thief, most of the details is because of a middle man. And all I know when it comes to hardware memory is basically needs an expensive apparatus to translate the code like in digital forensic device. Anyway, I'll try to search other browser you say

 

[Botard]

To use the attached .cmd file, extract it and place it on your desktop. Right-click and choose to "Run as administrator". It will look for any updates on Marie's list and, if found, uninstall them. Finish with a system reboot.

The internet explorer 10 was gone, I have to reinstall it again since we have a program used for taxes need IE9 or IE10.

 

[Marie SWE]

Hi there Marie, Thanks for your feedback of my comments. I really appreciate it. Maybe you are right just like what happened in our "automate" last election here. There was a controversy that some machine sent information to the server unknowingly during election. In fact the senate want to investigate this allegation.

For me, I just wondering asking question based on my understanding for what I read of some articles about cyber thief, most of the details is because of a middle man. And all I know when it comes to hardware memory is basically needs an expensive apparatus to translate the code like in digital forensic device. Anyway, I'll try to search other browser you say

It's good to be curious, the more questions asked, the more you learn. Sometimes some may be annoyed by asking, but it's worth as long as you, I and everybody accept if people not want to answer sometimes
I'm extremely curious, so I've learned a lot over the years.