Uninstalling certain Windows Updates?

[teckneeculler]

Hi guys. I'm planning to build a new W7 integrated installer package.

But I'm getting totally confused about which updates are currently good, bad or ugly.

So I'm trying a new tack and downloading (onto my testbed machine) every update that M$ has on offer.

(With the exception of 971033, of course, and Defender Updates)

My questions, then, are:
1) Once the install finishes and settles down, which updates should I uninstall?
and...
2) Having never tried the 'wusa uninstall' method, does it work on all updates?

 

[ThrashZone]

Hi,
Pretty interesting list here
Updates - which to avoid ?

 

[Eric3742]

(With the exception of 971033, of course, and Defender Updates)

This can be removed if you have a antivirus program.

Avoid uninstall those updates as critical or protection against virus & malware.

I am using windows updates option 1: Automatically (Recommended)
Most of the updates are critical & protection against virus & malware.

 

[teckneeculler]

Thanks Thrash.

 

[ThrashZone]

Hi,
Here's a little shorter list

 

[TomF]

kind of in the same boat, here are my results:

1) from-scratch install from en_windows_7_professional_with_sp1_x64_dvd_u_676939.iso
sha1sum: 0bcfc54019ea175b1ee51f6d2b207a3d14dd2b58

2) dbl-click install KB3020369
3) dbl-click install KB3172605

4) bring the install up-to-date using WU, installing only critical updates, excluding rollups, WMSRT, WD, ...

5) according to systeminfo.exe, there are 159 patches installed:

2479943 2491683 2506014 2506212 2509553 2532531 2533552 2534111 2552343 2560656 2564958 2579686 2585542 2604115
2620704 2621440 2631813 2653956 2654428 2656356 2667402 2670838 2676562 2685939 2690533 2698365 2705219 2706045
2727528 2729094 2729452 2736422 2742599 2758857 2770660 2786081 2789645 2798162 2807986 2813430 2834140 2836942
2836943 2840149 2840631 2841134 2847927 2849696 2849697 2861698 2862152 2862330 2862335 2864202 2868038 2868116
2871997 2882822 2884256 2888049 2892074 2893294 2894844 2900986 2911501 2912390 2929733 2931356 2937610 2943357
2957189 2968294 2972100 2972211 2973112 2973201 2973351 2977292 2978120 2978742 2984972 2991963 2992611 2993651
3003743 3004361 3004375 3010788 3011780 3019978 3020369 3021674 3022777 3023215 3030377 3035126 3035132 3037574
3042553 3045685 3046017 3046269 3055642 3059317 3060716 3067903 3071756 3072305 3074543 3075220 3076895 3078601
3080446 3084135 3086255 3092601 3093513 3097989 3101722 3108371 3108381 3108664 3108670 3109094 3109103 3109560
3110329 3115858 3122648 3123479 3124275 3126587 3127220 3135983 3138612 3138910 3139398 3139914 3142024 3146706
3146963 3149090 3150220 3155178 3156016 3156017 3156019 3159398 3161561 3161949 3161958 3163245 3164035 3170455
3172605 3177186 3185911 3188740 976902


6) that list of 159 patches has 1 'Bad KBs' according to CodeMason's list of 32:

2670838

https://github.com/CodeMason/aegis-voat/blob/master/uninstall.ps1

7) that list of 159 patches has 5 'Bad KBs' according to SummGuy's list of 99, namely:

2670838 2840149 2882822 3086255 3138612

https://support.microsoft.com/en-us/kb/2670838
Platform update for Windows 7 SP1 and Windows Server 2008 R2 SP1

https://support.microsoft.com/en-us/kb/2840149
MS13-036: Description of the security update for the Windows file system kernel-mode driver (ntfs.sys): April 9, 2013

https://support.microsoft.com/en-us/kb/2882822
Update adds ITraceRelogger interface support to Windows Embedded Standard 7 SP1, Windows 7 SP1 and Windows Server 2008 R2 SP1

https://support.microsoft.com/en-us/kb/3086255
MS15-097: Description of the security update for the graphics component in Windows: September 8, 2015

https://support.microsoft.com/en-us/kb/3138612
Windows Update Client for Windows 7 and Windows Server 2008 R2: March 2016

 

[AddRAM]

My list, from an install barely a week old. Almost identical to Mike`s. With a perfect SFC

Microsoft has removed a lot of updates

 

[teckneeculler]

Thanks, guys, this is getting interesting.
To add my 5c worth, here's how I built my February 2016 installer package.
The base file was an original W7 64bit ISO from May 2012.
Using NTLite, I added the updates in the list below, and burnt the compilation to DVD.
Note: This collection was very carefully selected. It doesn't contain any nasties.

Note: To repeat, my collection was assembled in February 2016. The yellow highlighted files were included in the subsequent April 2016 Rollup 3125574.

 

[teckneeculler]

My next and current task, is to assemble all the 'non-sinister' updates that have been issued since April 2016, and re-compile them into a new installer package.

Any and all commentary would be very welcome.

BTW: On my long-suffering test-bed laptop, I recently installed my February 2016 compilation, then searched for updates. There were around 65 on offer.

Then, because I hadn't fully documented the installation, I wiped the HDD and repeated the process. This time M$ offered me 219 updates! I'm still trying to analyze this oddity :shock: ??

 

[ThrashZone]

Hi,
If all your going for is April I believe this does that much
How to make an updated ISO with Windows 7 SP2 Convenience Rollup so Windows Update works

 

[teckneeculler]

Thrash, I'm not sure you read my two preceding posts. I'm not just 'going for April' - I'm rebuilding my installer to include all updates (that I consider to be 'clean') right up until the present day.

I've documented my progress to date in case it helps someone else put together their own installer package.