Undesirable windows updates

[goopy]

Greetings.
Here's a list of updates deemed undesirable by DISM++.
Can anyone kindly advise if any of them gets included in the monthly rollup?
Many thanks and best regards,

3126587
3021917
3068708
3080149
3133977
3161102
3184143
971033
3150513

 

[townsbg]

M$ puts out a so called spec page on these updates and for the general public, that's all we know. That's why some here don't install the rollups. Updates without rollups

See post 8.

 

[Paul Black]

Hi townsbg,

M$ puts out a so called spec page on these updates and for the general public, that's all we know. That's why some here don't install the rollups. Updates without rollups

See post 8.

What a brilliant post, thanks for sharing that with us townsbg .

 

[Paul Black]

Hi goopy,

Here's a list of updates deemed undesirable by DISM++.
Can anyone kindly advise if any of them gets included in the monthly rollup?

3126587
3021917
3068708
3080149
3133977
3161102
3184143
971033
3150513

If you usually download the Monthly Rollup, you can easily check to see if any of them have already been installed.
Click Start > Control Panel > Windows Update > View Update History.

I hope this helps!

 

[townsbg]

Hi goopy,



If you usually download the Monthly Rollup, you can easily check to see if any of them have already been installed.
Click Start > Control Panel > Windows Update > View Update History.

I hope this helps!

How is that going to help if the same code is integrated into the rollups which, if they include those updates, is likely how they would do it?

 

[goopy]

M$ puts out a so called spec page on these updates and for the general public, that's all we know. That's why some here don't install the rollups. Updates without rollups
See post 8.

Thanks for the kind reply, townsbg.
Have a test system here that appears to be uncompromised so far (the listed updates are still being offered when running WU). Curious to know if it's possible to keep it this way. Here's my summary of the "considered opinion" on the matter after reading the thread:

1. While the monthly Securities Only updates are free of contamination, the unwanted stuff can be slipped thru the Rollups unannounced.
2. Applying the Securities Only updates is not a viable solution long term as the system would somehow cease operation sooner or later.
3. The Rollup is no longer a collection of individual updates. Can't pick and choose the required updates anymore.
4. It's not possible for utilities like DISM++ to offer new updates as they are no longer made available by MS.
5. Resistance is futile.


Is this correct?

Many thanks and best regards,

 

[townsbg]

Thanks for the kind reply, townsbg.
Have a test system here that appears to be uncompromised so far (the listed updates are still being offered when running WU). Curious to know if it's possible to keep it this way. Here's my summary of the "considered opinion" on the matter after reading the thread:

1. While the monthly Securities Only updates are free of contamination, the unwanted stuff can be slipped thru the Rollups unannounced.
2. Applying the Securities Only updates is not a viable solution long term as the system would somehow cease operation sooner or later.
3. The Rollup is no longer a collection of individual updates. Can't pick and choose the required updates anymore.
4. It's not possible for utilities like DISM++ to offer new updates as they are no longer made available by MS.
5. Resistance is futile.


Is this correct?

Many thanks and best regards,

#2, are you referring to Windows Update or your OS? If you are referring to Windows update there is an end date after which M$ won't offer any more updates for the OS itself. Note that any other M$ products installed that are still supported at that time will continue to receive updates. Your OS will continue to work but not receive updates. I'm not going to speak to #1 because we don't know what they put in the updates other than what they publish and for the most part there aren't many new individual updates for Windows or .net. Office updates and MSE/defender definition updates are separate.

#3, your only choice is what shows up in Windows update and whether or not you choose to install the updates. Just a disclaimer, whether or not you choose not to install the rollups is up to you and not an official recommendation from myself or anyone else here. I personally will not make a recommendation either way anymore. You'll find some here who aren't installing updates and some who are. This topic has been going on for months here regularly in one form or another since M$ started the whole rollup model.

You might want to read this guide on how to "disable" CEIP. Turn off the Windows Customer Experience program - gHacks Tech News

The only way to be absolutely safe is to be to unplugged from the net on Windows. Some are dual booting with Linux. I'm not sure though if there is anyone here running Linux specifically for internet use but it is a possibility.

 

[goopy]

Thanks fro the kind reply, townsbg.


2 questions:
1. Are the updates contained in the monthly rollup made available in individual packages accessible by third party apps such as DISM++?
2. Any other similar apps that you would recommend?


Many thanks and best regards,

 

[Paul Black]

Hi goopy,

1. Are the updates contained in the monthly rollup made available in individual packages accessible by third party apps such as DISM++?

Take this month for example. If you click the Microsoft Update Catalog link => 2018-10 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4462923), click the appropriate version, and click the Package Details tab, it will list all the updates contained in that package. You can of course investigate all of the individual updates, but this would be time consuming. Additionally, all previous updates [being cumulative] prior to this also has an impact.

One of the advantages of DISM++ is that it can update a LIVE OS. If you don't want to install the Security Monthly Quality Rollup, then just uncheck that particular update box and scan for updates again. DISM++ excludes any suspect and Telemetry updates, and any updates that have known issues.

I hope this helps!

 

[townsbg]

Thanks fro the kind reply, townsbg.


2 questions:
1. Are the updates contained in the monthly rollup made available in individual packages accessible by third party apps such as DISM++?
2. Any other similar apps that you would recommend?


Many thanks and best regards,

Work with Paul Black on that. I don't have an answer to your questions.

 

[goopy]

Thanks fro the kind reply, townsbg.
2 questions:
1. Are the updates contained in the monthly rollup made available in individual packages accessible by third party apps such as DISM++?
2. Any other similar apps that you would recommend?
Many thanks and best regards,

Ran DISM++ yesterday, and it picked up the October rollup. Seems to indicate that individual updates are no longer made available by MS.

 

[Paul Black]

Hi goopy,

Ran DISM++ yesterday, and it picked up the October rollup. Seems to indicate that individual updates are no longer made available by MS.

Did you un-check the October Monthly Quality Rollup as I suggested below?

One of the advantages of DISM++ is that it can update a LIVE OS. If you don't want to install the Security Monthly Quality Rollup, then just uncheck that particular update box and scan for updates again. DISM++ excludes any suspect and Telemetry updates, and any updates that have known issues.

I hope this helps!

 

[goopy]

Not sure if you're following the discussion, Paul.


The issue here is whether the monthly rollup consists of discrete updates that can be accessible individually. Going by the limited evidence available, the answer is negative.


Thanks and best regards,

 

[Paul Black]

Hi goopy,

The issue here is whether the monthly rollup consists of discrete updates that can be accessible individually. Going by the limited evidence available, the answer is negative.

I assume that you are asking if there are any un-desirable updates included in the Monthly Rollup, particularly those that you have stated in you initial post below?

Here's a list of updates deemed undesirable by DISM++.

3126587
3021917
3068708
3080149
3133977
3161102
3184143
971033
3150513

What you can do is to look at the update in question in the Microsoft Update Catalog, then click on the update and select Package Details. There it will list ALL the updates included in that particularly update. Just search the list to see if any match your criteria above.

I hope this helps!