Reinstall Win7 what updates to avoid for telemetry & winX preparation?

Hello. :)
I know there is hundreds of this threads, but when i search i didn't find what I was looking for. Just blind or bad at searching,

I'm forced to reinstall my computer after the patch spectre/meltdown..
So this time I thought I'm going to do this right. I'm not interesting of "improve" my Windows 7 proSP1, so i know that I should avoid the monthly quality rollups.
But there is hundreds of updates to get before i get to the monthly security updates.

So what updates to avoid?
And finely, Is it only January security update I should avoid for spectre/meltdown patch? Last time it made my computer fail.

Thanks for all the answers in advance. :)
//Marie

Edit: Adding my post: #30 Reinstall Win7 what updates to avoid for telemetry & winX preparation? in to this one, so it get easier for other users to find.





-------------- Original post 30# ---------------

Hello again. :)

Okay.. Here is my version of "be aware of list"..

This list is focused on Win7, but there are also some Win8 KB's
It's KB's both for telemetry, Win10 related and some just a little naughty and can mess with the computer. As well as all KB's on windows update clients are listed at the end.
And a link to MS to windows update history and the KB's up to now.

I don't like MS ways to embed telemetry and the OS upgrade, so I have edited some posts in scheduler which collects the data. As a side effect, it has also calmed down the hard drive's activity. I also have edited a few posts in some reg files.
Since my operating system is in Swedish, then I didn't do any print screens to post.
And the most important Disabled WUC windows update client's automatic downloads of updates
I have also added two domain names to win telemetry that I have blocked in my Host file. And I have blocked googles spying also.

I hope this list is helpful and it's okay that i typed the KB-numbers in sequence rather than in categories. If you all think the list is okay/good, then I can put it in my first post in this thread, so it will be easy to find in the future.

Regards Marie :)


References for this list is.
Windows 7 Help Forums
https://www.********.com (ask woody but the forum censured the link)
Microsoft Support
Resources and Tools for IT Professionals | TechNet
Microsoft Community

-------------------------------------------------------- Marie's be aware of KB-list -----------------------------------------------------
KB894199 hmm.. Description of Software Update Services and Windows Server Update Services changes in content for 2018
KB947821 System Update Readiness tool. This update can be useful in some situations: an update or SP1 might not install if a system file is damaged. The DISM or System Update Readiness tool may help to fix some Windows corruption errors
KB949810 Office Genuine Advantage Notification
KB971033 Update for activation and validation components in Windows Activation Technologies for Windows 7.

KB2505438 - Slow performance in applications that use the DirectWrite API on a computer that is running Windows 7 or Windows Server 2008 R2 = It often breaks fonts
KB2506928 fixes an issue in which a link in an .html file that you open in Outlook does not work. This issue occurs on a Win7 that has IE9
KB2545698 (IE9)
KB2592687 Remote desktop protocol

KB2660075 Time and date if the time one is set to samoa
KB2670838 - Platform update for Windows 7 SP1 and Windows Server 2008 R2 SP1 = breaks AERO functionality and gives you blurry fonts on some websites. And brakes Resource monitor in 125DPI in classic mode

KB2719857 Fix for USB RNDIS device to connect to a 3G or 4G network in Windows 7 fix for a computer that is running Windows 7
KB2726535 Adds South sudan to the list o countries
KB2732059 fix for cannot open an .oxps file in Windows 7

KB2830477 Remote Desktop Connection (RDC) 8.1 client update
KB2834140 Stop error "0x00000050" after you install update 2670838 on a computer that is running Windows 7 SP1
KB2840149 security update for the Windows file system kernel-mode driver (ntfs.sys) Some have had some boot problems with it.
KB2876229 SKYPE
KB2882822 as of 07.10.13 Diagnostics Tracking Service, replaced by KB3068708; (Very fishy update that just popped up with not enough detail about it)

KB2902907 microsot security essentials ???? questionable or??++ win defender with not enough details...
KB2922324 – (reportedly pulled, uninstall it anyway if already installed)
KB2923545 RDP Remote desktop protocol
KB2938066 An update to harden Windows Server Update Services that further improves the security of Windows Server Update Services (WSUS) and the Windows Update Agent (WUA) (Fishy info)
KB2952664 - is the Windows 7 nagware patch that touts the Windows 10 upgrade. Prepares system for upgrade to Windows 10 (sends a bunch of telemetry data to M$, reported to corrupt system files)
KB2966583–Improvements for the System Update Readiness Tool in Windows 7
KB2970228 Russian ruble symbol
KB2976897 Recomended to uninstall from microsoft
KB2976978 - the Windows 8/8.1 nagware patch that touts the Windows 10 upgrade.
KB2976987 telemetry?? Description not available on Microsoft
prepares system for upgrade to Windows 10 (sends a bunch of telemetry data to M$, reported to corrupt system files)
KB2977759 – prepares system for upgrade to Windows 10, installs telemetry
KB2978092 Graphics software or applications crash
KB2982791 Recomended to uninstall from microsoft
KB2990214 - update that supports you to upgrade to a later version of Windows Win7
KB2994023 Remote desktop session constantly disconnects and reconnects
KB2999226 win10 universal CRT

KB3006137 Update changes the currency symbol of Lithuania from the Lithuanian litas (Lt) to the euro (€) in Windows
KB3012973 Force trigger download and install of win10
KB3013531 Some says win10 ralated MS says to support copying .mkv files to Windows Phone from a computer that is running Windows
KB3014406 Some says fishy MS says: fix for Startup delay occurs after you disable IPv6 in Windows
KB3014460 – Windows 8 - Nags you to install Windows 10 technical preview
KB3015249 – Telemetry, reports UAC prompt choices when making changes to the system
KB3021917 – prepares system for upgrade to Windows 10 (CEIP) This update performs diagnostics in Windows 7 Service Pack 1 (SP1) in order to determine whether performance issues may be encountered when the latest Windows operating system is installed. Telemetry is sent back to Microsoft for those computers that participate in the Windows Customer Experience Improvement Program (CEIP).
KB3022345 – installs diagnostic/usage tracking service, reported to corrupt system files, went through 3 versions
KB3029606 Telemetry?? Update to improve Bluetooth driver diagnosis in Windows 8.1
KB3032359 IE update that can mess some..
KB3035583 – "Get Windows 10" App (System Tray Nagware/Telemetry) pitches the free Windows 10 upgrade
KB3038314 messing with set default search provider..
KB3040272 fix.. Start time increases after another language pack is added to Windows.. very little info.
KB3042058 (microsoft claims its a security update, but it contains winlogon spying)
KB3044374 - update that supports you to upgrade to a later version of Windows Win8
KB3045645 Some says win10 related. MS says: Update to force a UAC prompt when a customized .sdb file is created in Windows. little info.
kb3046480 Update helps to determine whether to migrate thr .net Framework 1.1 when you upgrade windows8.1 or windows7 more info
KB3048043 Some had problems with corrupted files when installed. MS Says: fix for Screen flickers or becomes blank when you drag tiles on the Start screen in Windows
KB3050265 - Windows Update Client for Windows 7: June 2015 = WU service updated to accept upgrade to W10 + other fixes
KB3050267 – Windows 8 - prepares system for upgrade to Windows 10
KB3054476 A little bit fishy, no real info and many avoid it. MS says:This update helps Microsoft improve the experiences when users run stream.sys driver-based applications in Windows 7 Service Pack 1 (SP1
KB3064683 (Windows 10 Upgrade for Windows 8)
KB3065987 – win7 makes “improvements” to the windows update client (really Windows 10 Upgrade for Windows 7)
KB3065988 - win8 makes “improvements” to the windows update client (really Windows 10 Upgrade for Windows 8)
KB3068707 - Customer experience telemetry points (update appears to be nuked from microsoft.com)
KB3068708 – installs telemetry service, prepares system for upgrade to Windows 10
KB3070773 Telemetry Win o IE
KB3072318 (Windows 10 Upgrade preparation for Windows 8)
KB3074677 (Windows 10 Upgrade preparation)
KB3075249 – Telemetry, reports UAC prompts to Microsoft
KB3075851 – makes “improvements” to the windows update client (really Windows 10 Upgrade for Windows 7)
KB3075853 - updated Windows Update stuff for the upgrade process (really Windows 10 Upgrade for Windows 8)
KB3077715 Some says bad and win10 related MS says: August 2015 cumulative time zone update for Windows operating systems
KB3078667 Some says bad and win10 related. MS says: fix for System malfunction because memory leak occurs in dwm.exe in Windows 7
KB3080079 Some have said bad win10/telemetry.. MS says: Update to add RDS support for TLS 1.1 and TLS 1.2 in Windows 7
KB3080149 – Update for customer experience and diagnostic telemetry, CEIP
KB3080351 Win10 related
KB3081437 (Windows 10 Upgrade preparation)
KB3081454 (Windows 10 Upgrade preparation)
KB3081954 (Telemetry Update for Windows 7)
KB3083225 Some says Telemetry. No info avalible on MS
KB3083324 (Windows 10 Upgrade preparation for Windows 7)
KB3083325 (Windows 10 Upgrade preparation for Windows 8)
KB3083710 replacing kb3083324
KB3083711 Windows Update Client for Windows 8.1 and Windows Server 2012 R2: October 2015 ()
KB3086255 (Flagged as an Important update. It disables SafeDisc games in Windows Vista, 7, and 8/8.1)
KB3088195 (Miscorosft Claims it's a security update but also has a key logger on the Kernel Level)
KB3090045 (Windows 10 Upgrade Update for Windows 7/8)
KB3093983 (Microsoft claims it's a security update but it contains IE spying)
KB3095649 Some says win10 related MS says: Fixes a crash in Win32k.sys in Windows 7 SP1
KB3097877 can get desktop gadgets stop working
KB3097966 Some says Telemetry and win10 related.. MS says:Microsoft security advisory: Inadvertently disclosed digital certificates could allow spoofing: October 13, 2015

KB3102429 Update that supports Azerbaijani Manat and Georgian Lari currency symbols in Windows
KB3102810 May be sensible .. in some cases .. (Fixes an issue regarding long wait while searching for Windows Updates but also has Windows 10 Upgrade preparation for Windows 7)
KB3102812 (Fixes an issue regarding long wait while searching for Windows Updates but also has Windows 10 Upgrade preparation for Windows 8)
KB3106614 Security update for Silverlight to address remote code execution: December 8, 2015
KB3107998 (Removes Lenovo USB Blocker)
KB3112148 December 2015, cumulative time zone update for Windows operating systems
KB3112336 is update for Windows 8.1 users. Both are for making your upgrade to windows 10 easier and better
KB3112343 is the update for Windows 7 users. Both are for making your upgrade to windows 10 easier and better
KB3114409 May cause Outlook 2010 to crash
KB3118401 Update Universal C Runtime (CRT) Windows 10 universal CRT
KB3123862 Telemetry adds capabilities to some computers that lets users easily learn about Windows 10 or start an upgrade to Windows 10. (Windows 10 Upgrade for Windows 7 & 8)
KB3124263 Cumulative security update for Windows 10
KB3125574 win7 SP2?? Ms call it Convenience rollup update for Windows 7 SP1.(((if you do want total control over the updates that may contains telemetry and so on. Skip this one and take them one by one.)))
KB3133977 Windows 7 Bitlocker... can be a Asus landmine Tip from: RoWin7
KB3135445 it is a fix to the WU client (it maybe a Windows 10 Upgrade for Windows 7)
KB3135449 (Windows 10 Upgrade for Windows 8)
KB3138612 win10 related (Fishy update to for Windows Updates)
KB3138615 win10 related
KB3139923 Found this info on ask woody. KB3075249 is no longer offered anymore as it is superseded by KB3139923-v2. MS says: Fix for Windows installer (MSI) repair doesn't work when MSI package is installed on an HTTP share in Windows
KB3139929 Cumulative security update for IE, carries KB3146449, Woody says avoid (Fishy update for Windows 7/8 to Windows 10 Upgrade)
KB3141092 Installed itself on LH computer 3/3/16 even though not selected, reportedly piggybacks on Security Update KB3134814 if IE11 is installed
KB3143736 After you install security update 3093983, Oracle Siebel CRM crashes in the Mshtml.dll file and returns code "c0000602" in Internet Explorer.
KB3146449 (Windows 10 Upgrade for Windows 7/8)
KB3146706 - Security update for Windows OLE. Not needed. Break pirate copies of Windows 7.
KB3148198 important but worrying - Cumulative update for IE11. Includes previous Windows 10 preparation.
KB3150513 this one only gets offered if you have one of the previous Telemetry updates installed (KB2977759, KB2952664, or KB2976978), so it hasn't shown up on any of my systems
KB3150513 Looks like it needs to be added to the list of updates to block/prevent.
KB3154996 After you install security update 3100773, you discover that you can't type Korean characters correctly by using the Korean Hangul input method editor (IME) in Internet Explorer 11.
KB3156417 -May 2016 non security update rollup for Windows 7 SP1
KB3159398 I read that several users have decided to postpone the patch KB3159398 for certain problems that it causes :
KB3159706 is intended to sync and distribute Windows 10 upgrades
KB3161102 Removes Windows Journal component.
KB3161608 - June 2016 Update Rollup for Windows 7 SP1 (Includes Windows Update Client for Windows 7: June 2016) contains some telemetry.
KB3167679 MS-says: Description of the security update for Windows authentication methods: August 9, 2016.. But,KB3167679 breaks password changing on Win7 joined in NT style domain (samba 3.6.23)(This info found on Microsoft TechNet)
3170735 Is on many block lists. Says Win 10 related. MS says:July 2016 Update for Windows Journal... No real info about what it is in it.
KB3173040 - Windows 8.1 and Windows 7 SP1 end of free upgrade offer notification

--------> KB3184143 Remove software related to the Windows 10 free upgrade offer. <-----------

------------------------------------------------------------
Windows Update Client list Win7 WUC updates.

KB2990214 - Apr '15 - WUC: enables ability to upgrade to Win10
KB3050265 - Jun '15 - WUC: allows Group Policy to set "DisableOS Upgrade" key (replaces 2990214)
KB3065987 - Jul '15 - WUC: unspecified "improvements" (replaces 3050265)
KB3075851 - Aug '15 - WUC: fixes mess due to KB3065987 [cuts down WUC memory usage, but hides Update notifications if GWX app is active] (replaces 3065987)
KB3083324 - Sep '15 - WUC: unspecified "improvements" (replaces 3075851)
KB3083710 - Oct '15 - WUC: unspecified "improvements" (replaces 3083324)
KB3102810 - Nov '15 - WUC: fixes slow updates & high CPU usage (doesn't replace any previous updates)
KB3112343 Dec '15 WUC: fix for issues with 3050265, e.g., "8007000E" error message (doesn't replace any previous updates)
KB3135445 - Windows Update Client for Windows 7: February 2016
KB3138612 - Windows Update Client for Windows 7: March 2016
KB3161647 Windows Update Client for Windows 7 and Windows Server 2008 R2: June 2016

------------------------------------------
Block win telemetry domains in Host file.

vortex-win.data.microsoft.com
settings-win.data.microsoft.com


---------------------------- Monthly rolups begin here ----------------
KB3172605 July 2016 update rollup includes some new improvements and fixes including the improvements from June 2016 update roll up KB3161608 for the Windows 7 SP1

KB3179573 August 2016 update rollup includes some new improvements and fixes for the Windows 7 Service Pack 1 (SP1)

KB3185278 September qality rollup The September 2016 update rollup includes some new improvements and fixes for the Windows 7 Service Pack 1 (SP1)

-------- Download rollups.. Listing both security only AND monthly quality rollups. -----------
Windows 7 SP1 and Windows Server 2008 R2 SP1 update history https://support.microsoft.com/en-us/...update-history
Microsoft Update Catalog

2018-02 Preview of Monthly Rollup - KB4075211
2018-02 Monthly Rollup - KB4074598 Unknown if it has spectre/meltdown patch
2018-02 Security-only update - KB4074587 Unknown if it has spectre/meltdown patch
2018-01 Preview of Monthly Rollup - KB4057400
2018-01 Monthly Rollup - KB4056894 Contains spectre/meltdown patch
2018-01 Security-only update - KB4056897 Contains spectre/meltdown patch
2017-12 Monthly Rollup - KB4054518
2017-12 Security-only update - KB4054521
2017-11 Preview of Monthly Rollup - KB4051034
2017-11 Monthly Rollup - KB4048957
2017-11 Security-only update - KB4048960
2017-10 Preview of Monthly Rollup - KB4041686
2017-10 Monthly Rollup - KB4041681
2017-10 Security-only update - KB4041678
2017-09 Preview of Monthly Rollup - KB4038803
2017-09 Monthly Rollup - KB4038777
2017-09 Security-only update - KB4038779
2017-08 Preview of Monthly Rollup - KB4034670
2017-08 Monthly Rollup - KB4034664
2017-08 Security-only update - KB4034679
2017-07 Preview of Monthly Rollup - KB4025340
2017-07 Monthly Rollup - KB4025341
2017-07 Security-only update - KB4025337
2017-06 Preview of Monthly Rollup - KB4022168
2017-06 Monthly Rollup - KB4022719
2017-06 Security-only update - KB4022722
2017-05 Preview of Monthly Rollup - KB4019265
2017-05 Monthly Rollup - KB4019264
2017-05 Security-only update - KB4019263
2017-04 Preview of Monthly Rollup - KB4015552
2017-04 Security-only update - KB4015546
2017-04 Monthly Rollup - KB4015549
2017-03 Preview of Monthly Rollup - KB4012218
2017-03 Monthly Rollup - KB4012215
2017-03 Security-only Update - KB 4012212
2017-01 Monthly Rollup - KB3212646
2017-01 Security-only update - KB3212642
2016-12 Monthly Rollup - KB3207752
2016-12 Security-only update - KB3205394
2016-11 Preview of Monthly Rollup - KB3197869
2016-11 Security-only update - KB3197867
2016-11 Monthly Rollup - KB3197868
2016-10 Preview of Monthly Rollup - KB3192403
2016-10 Security only update - KB3192391
2016-10 Monthly rollup - KB3185330
2016-09 - KB3185278
2016-08 - KB3179573
2016-07 - KB3172605

If you want to avoid any updates, you have to go through them 1 by 1 and read each`s description, I`m sorry but there is no other way around that.

I had to do that when the W10 upgrade was out, talk about a nightmare, that was no fun at all.

And what do you mean you HAVE TO reinstall W7 because of this Patch ? How did your PC fail ?

Spectre and Meltdown explained: What they are, how they work, whats at risk | CSO Online

My install is fully updated and runs perfectly.

The only updates I don`t install now are the monthly "Preview" updates.

And update 6644 keeps popping up now and then, I don`t install that.

Had many problems with WU.
To avoid undesired updates, turn WU to Never Check and on services to Manual. Install Security Only updates from MS catalog.
MS releases SP2 for Windows 7 - Windows 7 Help Forums

To clean all spy use Spybot Anti-Beacon for Windows

Hello again.
After three days of searching this forum, I finally found the four threads in here that are about the KB updates to avoid win10 related and telemetry and the settings in Windows to turn off and registry settings.

So now my computers are reinstalled and I have made me a document with all KB-numbers to avoid in windows update list to win10-software-related + telemetry/diagnostic and just unnecessary things that only slows down the computer.

I did update the computers up to December security only updates
January and newer, I don't dare to install because I do not know which ones contains spectre/meltdown patches.
So I hope they don't attach that update to future security only updates .. so I can install security updates in the future again.

AddRAM said:

If you want to avoid any updates, you have to go through them 1 by 1 and read each`s description, I`m sorry but there is no other way around that.

I had to do that when the W10 upgrade was out, talk about a nightmare, that was no fun at all.

And what do you mean you HAVE TO reinstall W7 because of this Patch ? How did your PC fail ?

Spectre and Meltdown explained: What they are, how they work, whats at risk | CSO Online

My install is fully updated and runs perfectly.

The only updates I don`t install now are the monthly "Preview" updates.

And update 6644 keeps popping up now and then, I don`t install that.

Hello :)
Yes, I know I have to go through them one by one. I've always done that and windows update is set to never search. And windows update is disabled in services. I only activate windows update service when I need to install an update

The computer that crashed by the update has an AMD CPU.

I read that the windows spectre/meltdown patch affect an performance loss up to 5-30%. So is it really needed?
The other two computers with win7(intel dual core) are not used for anything that I think can be exploited by spectre and meltdown.
One is a media computer, It's only used for looking on movies/TV-series and listening to music. It's connected to internet so i want to have security only updates in that one. I don't use a web-browser in that one
The other one is only for secured e-mail and banking(VPN), and it's not used for any wide web browsing or online accounts.
so do those two computers really need the that specific update? I really asking this?


Whats at risk.
So what needs to happen for spectre and meltdown security holes to be exploited.
First, I have to surf a webpage that has a malicious code or download som infected software.
That code should not be detected by either my firewall's IPS or by Norton internet security or Spybot Anti-Beacon
And if, right then in that moment it happens they can get access to my computers virtual memory. And IF i in that specific moment have any useful information in my virtual memory and if my firewalls accept the outgoing traffic to the hackers, then they could use the information.

It's a lot of If's, as i have understand it. Or am I wrong?

Megahertz07 said:

Had many problems with WU.
To avoid undesired updates, turn WU to Never Check and on services to Manual. Install Security Only updates from MS catalog.
MS releases SP2 for Windows 7 - Windows 7 Help Forums

To clean all spy use Spybot Anti-Beacon for Windows

Hello :)
Yes I have done it since windows started with windows update.. was it in win95? or was it in 2000?I don't remember.
Tanks for the tip. I already use it. :)

dg1261 said:

And now that you've done the work to rebuild your OS partition, you will no doubt make an image backup (using Macrium or similar), right? That will save a lot of time and effort the next time this happens (because you know it will).

Hello :)
Oh yes. I will do three different backups clones if the hard disk breaks or if I just need to reinstall the computer.
one with only windows and all updates up to december 2017
one with windows + updates + basic software.
and one that I update on a regular basis.

JoWazzoo said:

Marie, in addition to all the great information here, a site that does a great job WRT updates is Ask Woody. He goes thru them in meticulous detail. Here:

https://www.********.com/

If it is any saving grace to you, my Win 7 box got Borked by the Jan & Feb Updates. Took me ~ 8 hours total to clean up the freaking mess.

BTW based on your description above your chances of getting Meltdown or Spectre 1 - 3 are ~ Nil. Sorry about your AMD box.

Hello :)
oh yes, this site is great and it's so many computer skilled people in here. And all the information that's in here is worth gold. It's a shame that it is so difficult to find all the information.. I'm so bad in searching so it took me several days to find the info... even that I knew what I was looking for. I knew that I had seen the threads about a year ago..

Yes ask woody's site is bookmarked in my AMD computer(backups). Now days I'm going to use linux to surf the internet. It's safer with all uBlock and adblock and there is no flash installed and so on... And no virus can infect the other drives when they are not mounted as default.
I'm trying to learn Linux before 2020.. So it's going to be dual boot on every computer when EOL comes. No win8 or 10 on my machines.

Thanks But it was okay that my AMD cached.. I did needed to change the C-drive and make a fresh install. It was about 5years ago since I installed win7 on it. So maybe winupdate did me a favor.*hahaha*

So what after 2020.. my win7 is going to be around, but not as primary out on the internet