Microsoft update blunders going out of control

[GeneO]

You can say that again! If anything, it's past due. Even if all M$ did was roll all the previous updates into a package and did nothing else, that would be hugely welcome!

I wouldn't hold your breath.

I'm not.

Neither am I. But it is what M$ should have done some time ago.

 

[Diosoth]

I haven't run a Windows update since mid 2013 after one of their updates conflicted with my video drivers and made the system nearly useless.

Reading this I am not regretting that decision. My system still runs fine, I have plenty of antimalware scanners and protection, and between Adblock Plus and NoScript I don't get hit by malware via browser. It sounds to me like the MS updates are borderline malware themselves, since they are causing too many problems.

 

[Callender]

Service Pack 2

You can say that again! If anything, it's past due. Even if all M$ did was roll all the previous updates into a package and did nothing else, that would be hugely welcome!

I wouldn't hold your breath.

I'm not.

Seems it is time for a service pack 2 final roll up.

You can say that again! If anything, it's past due. Even if all M$ did was roll all the previous updates into a package and did nothing else, that would be hugely welcome!

Interesting article here:

Waiting to Download Service Pack 2 (SP2) for Windows 7 and Server 2008 R2? - AskVG

I've never needed to use that download.

 

[Jonguy30]

I also haven't run a Windows Update in a long time. Last time I ran it was in October. And even then I was behind. While I've not had any incidents with WU on my computer yet you just never know when it'll break you. I've read about these Windows update errors every month now and it's become ridiculous. Every time there's been some BSOD or freezes or hangs or whatever. And then you're encouraged to uninstall the offending updates if you've installed it. And then I thought "I will not get involved in this mess!".

And since this is my only computer I don't want to risk it. I know it's "not recommended" but how often are you going to run into trouble because you have not updated? It seems to me that if you're careful there's a very low chance.

 

[Lady Fitzgerald]

I haven't run a Windows update since mid 2013 after one of their updates conflicted with my video drivers and made the system nearly useless.

Reading this I am not regretting that decision. My system still runs fine, I have plenty of antimalware scanners and protection, and between Adblock Plus and NoScript I don't get hit by malware via browser. It sounds to me like the MS updates are borderline malware themselves, since they are causing too many problems.

I also haven't run a Windows Update in a long time. Last time I ran it was in October. And even then I was behind. While I've not had any incidents with WU on my computer yet you just never know when it'll break you. I've read about these Windows update errors every month now and it's become ridiculous. Every time there's been some BSOD or freezes or hangs or whatever. And then you're encouraged to uninstall the offending updates if you've installed it. And then I thought "I will not get involved in this mess!".

And since this is my only computer I don't want to risk it. I know it's "not recommended" but how often are you going to run into trouble because you have not updated? It seems to me that if you're careful there's a very low chance.

Actually, you are at far greater risk for getting infected by NOT downloading and installing updates than you are by doing so every month. And being careful will not protect you nearly as much as you seem to think. As long as your computer is connected to the internet, unplugged security holes can let nasties sneak in without you even opening up a browser.

If you are paranoid about downloading and installing M$ updates (and I don't blame you; I am), you can always set Windows Updates to just notify you that updates are available, then wait until Saturday to download and install them, like I do. That way, you have time to learn if there were any problem updates or not. Besides, M$ almost always pulls problem updates before Saturday.

 

[DavidE]

Good advice Lady !

I'll also add, I always create a System Backup Image before installing updates.
If anything goes wrong I can quickly restore a backup image to recover from any problems.

 

[groze]

Actually, you are at far greater risk for getting infected by NOT downloading and installing updates than you are by doing so every month. And being careful will not protect you nearly as much as you seem to think. As long as your computer is connected to the internet, unplugged security holes can let nasties sneak in without you even opening up a browser.

Lady Fitzgerald,

I am actually mixed on this. I experiences issues both ways not so much with Windows 7 though. When I used 98se on my old computer not updated anymore, I got no viruses or malware that wasn't my fault. I used it on highspeed just a couple of months ago until surge damaged my network card. When I used xp even with virus protections I still got a couple of viruses that were not my fault & windows xp was updated at that time. I update it on a Tuesday because I have a backup, that I can go back to if needed. The only thing that makes me is the out of bounds updates like KB3025390. I may start waiting tell Saturday like you do.

The real issues is Microsoft needs to do further testing before releasing an update, even if it means extended mainstream support for Windows 7 for a couple of more months.

 

[Lady Fitzgerald]

Actually, you are at far greater risk for getting infected by NOT downloading and installing updates than you are by doing so every month. And being careful will not protect you nearly as much as you seem to think. As long as your computer is connected to the internet, unplugged security holes can let nasties sneak in without you even opening up a browser.

Lady Fitzgerald,

I am actually mixed on this. I experiences issues both ways not so much with Windows 7 though. When I used 98se on my old computer not updated anymore, I got no viruses or malware that wasn't my fault. I used it on highspeed just a couple of months ago until surge damaged my network card. When I used xp even with virus protections I still got a couple of viruses that were not my fault & windows xp was updated at that time. I update it on a Tuesday because I have a backup, that I can go back to if needed. The only thing that makes me is the out of bounds updates like KB3025390. I may start waiting tell Saturday like you do.

The real issues is Microsoft needs to do further testing before releasing an update, even if it means extended mainstream support for Windows 7 for a couple of more months.

M$ updates alone will not ensure that you will not get viruses. It takes a combination of M$ updates, an anti-virus program, and additional anti-malware programs to fig and using ht against infections, not to mention safe surfing habits. But even the most stringent (read anal) protection is no guarantee you will not ever get infected. However, you put the odds vastly in your favor by keeping up with M$ updates and using good AV and anti-malware programs.

As I already stated (here or somewhere else), there are literally thousands (if not millions) of possible combinations of software and hardware that M$ would have to test to be able to completely avoid conflict. That simply isn't possible. In fact, I find it remarkable that M$ does as well as it does. Even more remarkable is how quickly it responds to problems when they do occur. Adding to the mix are programs that actually use security holes as part of their programming or use Windows programming in ways M$ never intended.

I would much rather that M$ continue releasing non-scheduled updates when a really serious security hole has been discovered rather than leave us at risk for getting infected while waiting for the next scheduled batch of updates. Besides, the out of cycle updates don't happen often enough to really be that big of a deal anyway.

Despite keeping updated and running Avast Free, MBAM Pro, SAS and Spybot S&D, I still got hit with a virus a couple of weeks ago (the first one in several years) that was pegging my CPU usage at 100% and was dumping adware onto my computer (70-130 at a time). My AV/antimalware programs couldn't find a problem so it must have been a new nasty. I tracked it down to a process that replicating itself faster than I could delete it. When I would manage to delete the file that was creating the process and zap the adware it dumped on my computer, it would come back when I rebooted. I could find nothing anywhere on the interwebz about the process nor the file that was creating it (I don't remember the names now but they looked East European). After wasting time trying to track it down and zap it for good (my guess is it was in the System Reserve partition), I resorted to restoring an earlier image. That killed it for good.

 

[mjf]

If you are paranoid about downloading and installing M$ updates (and I don't blame you; I am), you can always set Windows Updates to just notify you that updates are available, then wait until Saturday to download and install them, like I do. That way, you have time to learn if there were any problem updates or not. Besides, M$ almost always pulls problem updates before Saturday.

I am doing this sort of thing now. Ultimately I will install the updates but have some system images to fall back on if things go pear shape.

 

[andrew129260]

Plus, there are the threats you do not see and do not announce themselves. Not patching windows and your browser is the worst thing you could possibly do.

Modern malware does not announce itself, it makes every attempt so you don't discover it.

 

[Lady Fitzgerald]

Plus, there are the threats you do not see and do not announce themselves. Not patching windows and your browser is the worst thing you could possibly do.

Modern malware does not announce itself, it makes every attempt so you don't discover it.

You got that right. The only reason I discovered the virus I recently had was the sound on my music player was breaking up a bit. I initially thought the DVD player (I was using my notebook at the time) was failing until I noticed one of my forums was running a bit jerky. That was when I went to the task manager and saw what was going on. Had that been my much more powerful desktop rig, I might never have had noticed it until I ran SAS (and all it could catch was the adware). Most malware nowadays is much more subtle.

 

[lehnerus2000]

There was another article just recently stating that a lot of malware can be "crippled" by running as a Standard user or Guest user.

 

[Dallas 7]

I really don't believe their will every be a SP-2 for Windows 7. My reasoning.

1. SP's take a lot of time to make and they are free. Microsoft wants to sell things.

2. SP-2 would make Windows 7 even better therefore slowing down sales to Window 8.xx and W-10.
In Microsoft's eyes that would not be a good thing.

Layback I think you're right on the money. After the way they got strung out with XP, MS just wants 7 to go away ASAP.
I agree with you, no SP2 coming. I'd love to be wrong though.

 

[GeneO]

Good advice Lady !

I'll also add, I always create a System Backup Image before installing updates.
If anything goes wrong I can quickly restore a backup image to recover from any problems.

+=1

I don't usually wait, I just read what they purport to do and mostly just install them. I always have an image backup that is not too old.

 

[andrew129260]

There was another article just recently stating that a lot of malware can be "crippled" by running as a Standard user or Guest user.

That is true. That is why UAC is so effective, and should be set to the always notify setting. Unfortunately, most people do not use UAC as intended, either turning it off, or using it under an admin account. The protection is better then not having it on at all, but UAC was made with the mindset of running as a standard user, and then using UAC to elevate yourself. But having it set to always notify on an admin account is a good decent step to protecting your pc if you do not want to bother putting in your password to elevate.

 

[Diosoth]

I have a new HDD on hand to replace my current one whenever it fails or I see fit- if and when I install the new drive and do a fresh OS install, I'll run the update package to current. Until then I'm not worried. If something there breaks the computer I can restart easily.

I hate how PCs and such try to decide what is best and override the end user's choices. I can understand patching holes, but for every one they patch, there are still many not found or new ones that come up. How long was Heartbleed out there before any security people noticed it? I'm also paranoid enough to think they don't want to patch too many holes- making a totally secure OS would neuter the antimalware industry. Plus it's Microsoft, a company that can't even make an OS that maintains my per-folder view settings. I want my GZDoom install folder to stay in list view sorted by date to find the new WAD packs easily- 7 seems to think that detail view sorted by letter is what I want and I am constantly changing this back. I have this hassle with many folders. Oh I have it on XP too, but at least there I have TweakUI to bypass it. I have tried every setting on 7 to stop this behavior yet it refuses to listen. I have a bit of a lack of faith in MS to really do things right when they can't even get simple things to work.

Flash player decided to disable itself the other day, forcing an update. No huge deal. Then I had to do the same on my XP computer as I use that as a Youtube media device. But for whatever reason, when I updated on the XP computer the Flash update decided to instal McAffee without my consent alongside it. I don't care for that. I don't think any company should install such programs without consent. It kills my faith in even reputable companies.

 

[Berton]

But for whatever reason, when I updated on the XP computer the Flash update decided to instal McAffee without my consent alongside it

This image shows examples of how that happens and why a user has to be diligent in paying attention:

 

[Ranger4]

But for whatever reason, when I updated on the XP computer the Flash update decided to instal McAffee without my consent alongside it

This image shows examples of how that happens and why a user has to be diligent in paying attention:

This certainly seems to be becoming a bigger & bigger problem. Updating often needs careful scrutiny & is like negotiating a mine field.
If I elect to update Adobe Reader I don't want the Google option included, so I have to opt out, whereas it should be the other way around, so if I want it I have to opt in.
If software companies persist with this irritating feature then I will start to look for alternatives that only provide the update & nothing else, which is all I want anyway.
If you inadvertently neglect to opt out of the inclusion then you have to go to a whole lot of trouble to uninstall it & hope that is all you have to do.

 

[RoasterMen]

People are complaining on the Limited Connectivity problem in Windows 8 and Microsoft didn't care about it.

 

[DavidE]

But for whatever reason, when I updated on the XP computer the Flash update decided to instal McAffee without my consent alongside it.

The Flash Player Standalone/Distributed installers don't have any of the Opt-in/Opt-out junk.
Adobe Flash runtimes / Adobe Flash Player Distribution

I've never had any McAfee or other addons installed using these to update Flash Player.
imho they are much simpler and easier to use - no checkboxes to uncheck.