Reinstall Win7 what updates to avoid for telemetry & winX preparation?

[JoWazzoo]

 

[Botard]

It's good to be curious, the more questions asked, the more you learn.

Yeah, just like now felt draining all my resources searching anywhere just to fix the issue of sound in my host. I think I need a break for this and have some coffee

I'm extremely curious, so I've learned a lot over the years.

You must be a nice person

 

[Marie SWE]

Yeah, just like now felt draining all my resources searching anywhere just to fix the issue of sound in my host. I think I need a break for this and have some coffee


You must be a nice person

I understand exactly what you mean.... I've been drinking a lot of coffee the last few days with a messy windows7 computer, updates and I'm trying to learn Linux at the same time. maybe you have seen my other threads about my windows computer.*hahaha*

Well I have the philosophy that if I'm being nice and happy, maybe it rubs off on others.
But I will not hide the fact that I also have a hot temper if someone is stupid or bitchy.

"Always be nice until it's time to not be nice". It is such a good expression as Patrick Swayze saying in the movie Road House.

 

[Marie SWE]

I plan to put the list in my first post soon so everyone easily can find the list
Is there anyone else who has a point of view or would like to add something to the list I posted on page 3? KB-list
I intend to include the CMD file as dg1261 created include dg1261's description as goes with it.

Any thoughts??

 

[Botard]

well i have the philosophy that if i'm being nice and happy, maybe it rubs off on others.
But i will not hide the fact that i also have a hot temper if someone is stupid or bitchy.

 

[Marie SWE]

Thanks, Marie, for the extensive list in post #30. I appreciate the brief description you added beside each KB update.

My preferred method of updating a clean install is via WSUS Offline Update, which downloads all currently active updates for offline installation on any system, not just the system on which the downloading is being done. It only concerns itself with critical/security updates, not the optional updates.

I've compared Marie's list with what WSUS Offline Update says are currently active updates, and only 11 of those on Marie's list appear to still be active:

KB971033
KB2670838
KB2830477
KB2834140
KB2882822
KB2923545
KB2976897
KB3042058
KB3086255
KB3159398
KB3161608
​

I think that implies the rest have been superceded and wouldn't be offered by WU anymore. It's also possible some on Marie's list might be categorized as optional (e.g., perhaps the time zone updates?), which could still be active but WSUS Offline isn't checking those.

Nevertheless, it's always preferable to have more information than too little, so Marie's legwork to pull together that list is appreciated. If nothing else, it can be useful for checking what updates might already be on your system and candidates for uninstallation.

If anyone is interested, I cut-and-pasted Marie's list (from KB894199 through KB3161647) and ran it through a quick perl script to convert it to a .cmd file that can be used to bulk uninstall the updates on Marie's list. (I didn't include Marie's monthly rollup list, because I think she only meant to list them, not necessarily uninstall them.)

To use the attached .cmd file, extract it and place it on your desktop. Right-click and choose to "Run as administrator". It will look for any updates on Marie's list and, if found, uninstall them. Finish with a system reboot.

Of course, it would be wise to make a backup image of your OS partition before doing this, just in case uninstalling one of those updates destabilizes your system. I tried the .cmd script on a Win7 VM, with no adverse effects, but better to be safe than sorry.

Hello again

To compliment your list of active KB updates, I was offered all of these from my list.
Some of them i did install.. It's not a pure bad, bad list, it's only a to be aware of the list

Note:: this is on a reinstalled HP with factory recovery discs OEM win7 Pro x64 SP1. So it may vary for you others with other OEM or retail installations.
This is with only IE9 installed. After I install IE11 it may be more.. But i have to wait 6 more hours so it becomes new date so I easy can identify sneaky KB's that comes with IE11

//Marie


------------------------------------------------------------------------------------

*KB971033 Update for activation and validation components in Windows Activation Technologies for Windows 7.

*KB2505438 - Slow performance in applications that use the DirectWrite API on a computer that is running Windows 7 or Windows Server 2008 R2 = It often breaks fonts (see also KB454826)
*KB2506928 fixes an issue in which a link in an .html file that you open in Outlook does not work. This issue occurs on a Win7 that has IE9
*KB2545698 (IE9)
*KB2592687 Remote desktop protocol

*KB2660075 Time and date if the time one is set to samoa
*KB2670838 - Platform update for Windows 7 SP1 and Windows Server 2008 R2 SP1 = breaks AERO functionality and gives you blurry fonts on some websites. And brakes Resource monitor in 125DPI in classic mode

*KB2719857 Fix for USB RNDIS device to connect to a 3G or 4G network in Windows 7 fix for a computer that is running Windows 7
*KB2726535 Adds South sudan to the list o countries
*KB2732059 fix for cannot open an .oxps file in Windows 7

*KB2830477 Remote Desktopp Connection (RDC) 8.1 client update
*KB2834140 Stop error "0x00000050" after you install update 2670838 on a computer that is running Windows 7 SP1
*KB2840149 security update for the Windows file system kernel-mode driver (ntfs.sys) Some have had some boot problems with it.

*KB2952664 - is the Windows 7 nagware patch that touts the Windows 10 upgrade. Prepares system for upgrade to Windows 10 (sends a bunch of telemetry data to M$, reported to corrupt system files)
*KB2966583–Improvements for the System Update Readiness Tool in Windows 7
*KB2970228 Russian ruble symbol

*KB3006137 Update changes the currency symbol of Lithuania from the Lithuanian litas (Lt) to the euro (€) in Windows
*KB3013531 Some says win10 ralated MS says to support copying .mkv files to Windows Phone from a computer that is running Windows
*KB3021917 – prepares system for upgrade to Windows 10 (CEIP) This update performs diagnostics in Windows 7 Service Pack 1 (SP1) in order to determine whether performance issues may be encountered when the latest Windows operating system is installed. Telemetry is sent back to Microsoft for those computers that participate in the Windows Customer Experience Improvement Program (CEIP).
*KB3040272 fix.. Start time increases after another language pack is added to Windows.. very little info.
*KB3042058 (microsoft claims its a security update, but it contains winlogon spying)
*KB3054476 A little bit fishy, no real info and many avoid it. MS says:This update helps Microsoft improve the experiences when users run stream.sys driver-based applications in Windows 7 Service Pack 1 (SP1
*KB3068708 – installs telemetry service, prepares system for upgrade to Windows 10
*KB3078667 Some says bad and win10 related. MS says: fix for System malfunction because memory leak occurs in dwm.exe in Windows 7
*KB3080079 Some have said bad win10/telemetry.. MS says: Update to add RDS support for TLS 1.1 and TLS 1.2 in Windows 7
*KB3080149 – Update for customer experience and diagnostic telemetry, CEIP
*KB3086255 (Flagged as an Important update. It disables SafeDisc games in Windows Vista, 7, and 8/8.1)

*Kb3112343 is the update for Windows 7 users. Both are for making your upgrade to windows 10 easier and better
*Kb3118401 Update Universal C Runtime (CRT) Windows 10 universal CRT
*KB3135445 it is a fix to the WU client (it maybe a Windows 10 Upgrade for Windows 7)
*KB3138612 win10 related (Fishy update to for Windows Updates)
*KB3139923 Found this info on ask woody. KB3075249 is no longer offered anymore as it is superseded by KB3139923-v2. MS says: Fix for Windows installer (MSI) repair doesn't work when MSI package is installed on an HTTP share in Windows
*KB3146706 - Security update for Windows OLE. Not needed. Break pirate copies of Windows 7.
*KB3159398 I read that several users have decided to postpone the patchKB3159398 for certain problems that it causes :
*KB3161102 Removes Windows Journal component.
*KB3170735 Is on many block lists. Says Win 10 related. MS says:July 2016 Update for Windows Journal... No real info about what it is in it.

---------------------------- Monthly rollups----------------
*KB3172605 July 2016 update rollup includes some new improvements and fixes including the improvements from June 2016 update roll up KB3161608 for the Windows 7 SP1

*KB3179573 August 2016 update rollup includes some new improvements and fixes for the Windows 7 Service Pack 1 (SP1)

*KB3184143 Remove software related to the Windows 10 free upgrade offer.

*KB3185278 September quality rollup The September 2016 update rollup includes some new improvements and fixes for the Windows 7 Service Pack 1 (SP1)
WindowsUpdateClient list of all the Win7 WUC updates (I've hidden them all):

 

[Marie SWE]

Hi everybody.
I'm sporadically back after a long break. It has been up and down in my life, with good and bad things.

My Win7 computers have no security updates since December 2017 because I wanted to avoid spectre and meltdown patch. so I kidnap my own thread with some questions... if that is okay?

So I wonder about these ones.. Which of these are safe to install since I want to avoid spectre and meltdown?

January 3, 2018—KB4056897 (Security-only update)Contains spectre/meltdown patch
February 13, 2018—KB4074587 (Security-only update)
March 13, 2018—KB4088878 (Security-only update)

March 1, 2018—KB4091290 <----- What does this do?

April 10, 2018—KB4093108 (Security-only update)
May 8, 2018—KB4103712 (Security-only update)
June 12, 2018—KB4284867 (Security-only update)
July 10, 2018—KB4338823 (Security-only update)
August 14, 2018—KB4343899 (Security-only update)
September 11, 2018—KB4457145 (Security-only update)
October 9, 2018—KB4462915 (Security-only update)
November 13, 2018—KB4467106 (Security-only update)
December 11, 2018—KB4471328 (Security-only update)
January 8, 2019—KB4480960 (Security-only update)
February 12, 2019—KB4486564 (Security-only update)

.


I thank you all for the answers in advance.
Kind regards. Marie

 

[Megahertz07]

Welcome back Marie.
I have installed the security only updates from MS catalog - Win 7 SP1 update history.
I have installed and run Spybot Anti-Beacon Spybot Anti-Beacon - Spybot Anti-Malware and Antivirus : Spybot Anti-Malware and Antivirus

You can use Dism++ (it will tell you witch update to avoid to skip telemetry. https://www.chuyu.me/en/index.html

 

[Lady Fitzgerald]

I stopped installing updates and rolled back to December 2017. There were just too many broken updates starting in 2018. The absolute worst was the "fix" for Spectre/Meltdown bug. It so badly crippled my computer, it was pretty much useless.

 

[Paul Black]

Welcome back Marie SWE .

 

[Marie SWE]

Welcome back Marie.
I have installed the security only updates from MS catalog - Win 7 SP1 update history.
I have installed and run Spybot Anti-Beacon Spybot Anti-Beacon - Spybot Anti-Malware and Antivirus : Spybot Anti-Malware and Antivirus

You can use Dism++ (it will tell you witch update to avoid to skip telemetry. https://www.chuyu.me/en/index.html

Thanks
I also only install security updates from MS catalog.
But it isn't obviously written in MS catalog if the updates contain specter and meltdown. and whether the updates cause more problems than they protect:huh:

I stopped installing updates and rolled back to December 2017. There were just too many broken updates starting in 2018. The absolute worst was the "fix" for Spectre/Meltdown bug. It so badly crippled my computer, it was pretty much useless.

I also stopped installing the updates in December 2017 just to wait for them to stop pushing the spectre-meltdown updates.
And in end of May 2018 my life started to become a bit stressful, so I didn't have the time or energy to think about my computers..
And it doesn't feel good to have computers with one year without security updates

Welcome back Marie SWE .

Thanks.

 

[Paul Black]

Hi Marie SWE,

A quick, safe and easy way to update is to use DISM++!

DISM++ - Basic Overview

DISM++ is a FREE implementation tool that has the ability to perform Windows Updates [WU]. Some of the advantages [but not all] are:

[1] The GUI is very easy to understand and use.
[2] It is much faster than M$’s WU because it uses a different engine.
[3] It downloads the latest WU DB from the M$ servers, scans your OS, and then lists the updates available.
[4] It doesn’t install superseded updates like M$ does.
[5] It gives you the option of what you want to install.
[6] The pre-ticked updates are what is recommended and are similar to the WU critical and recommended updates. The un-ticked updates are similar to the WU optional updates.

[7] It warns you if an update:

• Includes telemetry.
• Has known issues with certain hardware.
• Needs exclusive access.
• Is suspect.
• Your OS doesn't need it.
• Has any other known issues.

[8] It doesn’t require re-booting between updates.
[9] It can be used to either update an install.wim image OFFLINE, or to update the LIVE OS.

I hope this helps!

 

[Marie SWE]

Hi Marie SWE,

A quick, safe and easy way to update is to use DISM++!

DISM++ - Basic Overview

DISM++ is a FREE implementation tool that has the ability to perform Windows Updates [WU]. Some of the advantages [but not all] are:

[1] The GUI is very easy to understand and use.
[2] It is much faster than M$’s WU because it uses a different engine.
[3] It downloads the latest WU DB from the M$ servers, scans your OS, and then lists the updates available.
[4] It doesn’t install superseded updates like M$ does.
[5] It gives you the option of what you want to install.
[6] The pre-ticked updates are what is recommended and are similar to the WU critical and recommended updates. The un-ticked updates are similar to the WU optional updates.

[7] It warns you if an update:

• Includes telemetry.
• Has known issues with certain hardware.
• Needs exclusive access.
• Is suspect.
• Your OS doesn't need it.
• Has any other known issues.

[8] It doesn’t require re-booting between updates.
[9] It can be used to either update an install.wim image OFFLINE, or to update the LIVE OS.

I hope this helps!

Thank you for the tip.
I don't want to use third-party applications for windows updates. maybe I can have a lab computer running the program to get the messages, but to install the updates manually on my others computers.

I guess I have to use google and search the KB updates to see which of these KB's I listed, should and should not install.

 

[RoWin7]

I plan to put the list in my first post soon so everyone easily can find the list
Is there anyone else who has a point of view or would like to add something to the list I posted on page 3? KB-list
I intend to include the CMD file as dg1261 created include dg1261's description as goes with it.

Any thoughts??

The list i have from the fellow who built my computer, has 18 updates. You have only 11.

2952664 (Windows 10 Upgrade preparation)
2976978 (Windows 10 Upgrade preparation)
2977759 (Windows 10 Upgrade preparation)

2990214 (Windows 10 Upgrade preparation)
3021917 (Windows 10 Upgrade preparation + Telemetry)
3022345 (Telemetry); may affect System File Checker

3035583 (Windows 10 upgrade preparation)
3050265 (a June 2015 replacement for 2990214)
3065987 (a July 2015 replacement for 2990214) might allow a way to block other Win 10 related KBs.

3068708 (Telemetry) (a later replacement for 3022345)
3075249 (Telemetry); first seen 8/19/15
3080149 (Telemetry); first seen 8/19/15

3090045 (update revision)
3112343 (Windows 10 attack vector)
3123862 (Upgrade vector)

3133977 (Windows 7 'Bitlocker' = Asus landmine)
3139929 SECURITY update that includes ad-ware
317304 The final nag

 

[Marie SWE]

The list i have from the fellow who built my computer, has 18 updates. You have only 11.

2952664 (Windows 10 Upgrade preparation)
2976978 (Windows 10 Upgrade preparation)
2977759 (Windows 10 Upgrade preparation)

2990214 (Windows 10 Upgrade preparation)
3021917 (Windows 10 Upgrade preparation + Telemetry)
3022345 (Telemetry); may affect System File Checker

3035583 (Windows 10 upgrade preparation)
3050265 (a June 2015 replacement for 2990214)
3065987 (a July 2015 replacement for 2990214) might allow a way to block other Win 10 related KBs.

3068708 (Telemetry) (a later replacement for 3022345)
3075249 (Telemetry); first seen 8/19/15
3080149 (Telemetry); first seen 8/19/15

3090045 (update revision)
3112343 (Windows 10 attack vector)
3123862 (Upgrade vector)

3133977 (Windows 7 'Bitlocker' = Asus landmine)
3139929 SECURITY update that includes ad-ware
317304 The final nag

3173040 you missed a zero at the end.. i guess/hope it was a typo
All of this above is listed in my list on page 3
I didn't list 3133977 Bitlocker.. since it is not telemetry or windows 10 related.. and it's works on my computers
I thank you for your message. And I added your tip about 3133977.

 

[townsbg]

Remove telemetry updates for Windows 7 and 8.1 . GitHub

That has a list of updates to avoid and a script that will check for them. Check the last post.

 

[Lady Fitzgerald]

Hi Marie SWE,

A quick, safe and easy way to update is to use DISM++!

DISM++ - Basic Overview

DISM++ is a FREE implementation tool that has the ability to perform Windows Updates [WU]. Some of the advantages [but not all] are:

[1] The GUI is very easy to understand and use.
[2] It is much faster than M$’s WU because it uses a different engine.
[3] It downloads the latest WU DB from the M$ servers, scans your OS, and then lists the updates available.
[4] It doesn’t install superseded updates like M$ does.
[5] It gives you the option of what you want to install.
[6] The pre-ticked updates are what is recommended and are similar to the WU critical and recommended updates. The un-ticked updates are similar to the WU optional updates.

[7] It warns you if an update:

• Includes telemetry.
• Has known issues with certain hardware.
• Needs exclusive access.
• Is suspect.
• Your OS doesn't need it.
• Has any other known issues.

[8] It doesn’t require re-booting between updates.
[9] It can be used to either update an install.wim image OFFLINE, or to update the LIVE OS.

I hope this helps!

Do have a link and instructions for this?

 

[SIW2]

https://www.chuyu.me/en/index.html

The UI is very obvious.

I am just about to update install.wim, so will take some screenshots.

 

[SIW2]

To update the current running OS ( C: highlighted in blue ), just click updates in left pane, then scan at bottom right.




To install updates or Drivers into a wim - click File > Mount image




Browse to the wim file and the mount folder. Select which image to mount in the Target Image dropdown ( I selected 1. HomeBasic ). click ok.



It mounts in a few seconds. Make sure it is highlighted in blue, then click open session.

 

[SIW2]

Select Updates in left pane, then click Scan

[ OR if you want to add/remove drivers, select Drivers in the left pane]



It will download the MS database (wsusscn2.cab ) and scans the highlighted OS. Then pops up a list with recommended security already ticked




You can scroll down and tick some optionals, like this:



Then click install at bottom right and off she goes. If you have ticked something with telemetry or known issues, it will pop up a window so you can avoid installing it.