KB2952664 installed "automatically" after uninstalling certain updates

Hello,

Recently I've been troubleshooting random hangs which one of the solution was to uninstall the following updates if I had any of them installed:
- KB2952664
- KB2990214
- KB3035583
I had KB2952664 and KB2990214 installed on 6th of April 2015 which after creating an restore point I successfully uninstalled them via control panel.

When I checked the installed update, those updates were gone for good. However I've noticed two significant changes after uninstalling:
- KB2952664 has been installed right after the uninstalling process. I'm not sure when it was exactly installed (before or after restart). It's been dated as today (23rd of June 2015) which it shows up on the installed updates
- When I checked the "Windows update" tab it says I've never checked for any updates nor installed one. The update history and hidden updates has been wiped out as well.

For the second point, I was able to check for updates which brought back all the hidden updates (I kept running the scans until there were no updates found).

As for the first point I don't know what caused to install KB2952664 again automatically. I've tried uninstalling this freshly installed update however it's still there listed on the installed updates. I'm not sure how to check if the uninstalling has been successful or not but the process was smooth (no endless waits or errors popped during the process) as well as two restore point has been created: one for the initial removal (dated 6th of April) and the other one for the newly installed KB2952664 (dated today).

As a result is there a way to fix this "problem" or better yet, remove KB2952664 completely?


P.S For the second point I've mentioned above, is that normal occurrence? It's weird that everything has been wiped out like that in windows update after uninstalling the initial updates.

NoelDP said:

How did you actually do the uninstall of KB2952664? using Control Panel>Installed Updates, or the WUSA command?
Try using the following command in an Elevated Command Prompt:


wusa /uninstall /kb:2952664

reboot once it's finished, then do a Check for Updates, and hide the KB when it's found again.

Hey Noel sorry if I'm causing you any troubles for asking questions again.

I've used "control Panel>installed" method.

I just tried wusa method though it produced the same result. The update was "installed" just now as well as restore point was created for this uninstall process.

NoelDP said:

OK - let's see if we can work out what's happening - it shouldn't be reinstalling in that way.

SURT ran successfully, SFC detected no violations and there are no error messages in Windows update.

I've attached sfc and windowsUpdate log though for CBS, the file is too big to upload it here. The latest CBSpersist cab file (CbsPersist_20150623175641.log) is 9.67MB and when I uncompressed and compressed into .zip it's still 9.10MB.
As such I've uploaded it on mediafire. I'm not sure if I'm allowed to post links from external file storage site though if there's a way to reduce the size please let me know so that I can upload it here directly. The .zip file uploaded in mediafire includes the whole folder of "CBS" excluding the older CBSpersist cab files.

NoelDP said:

Please post the C:\Windwos\Logs\CBS\CheckSUR.log file - CheckSUR doesn't advertise its results well enough :)
I really also need the full CBS.log rather than just the SFCDetails extracts, since it carries a lot more load than just that. - please upload it to a fileshare site (preferably OneDrive or DropBox), and post a link.


According to the windowsupdate.log file, KB2952664 hasn't been reinstalled at all (at least by WU) - since before the start of the current log on 2nd June.

Here's the new link from OneDrive: https://onedrive.live.com/redir?resi...int=file%2czip

The zip contains everything in "CBS" file (including CheckSUR.log and CBS.log) except for older CBSpersist files.

NoelDP said:

Thanks - unfortunately, it's not very informative, as there are NO errors in any of the CBS data, and the CheckSUR scans are (mostly) clear as well.
I do see that you have Kaspersky installed - perhaps that is interfering? try switching it off before uninstalling the update once again (make sure that you set it to stay off on the reboot! - switch it back on manually after the reboot is complete)

This is weird... I've just tried both method (control panel and wusa) with Kaspersky turned off (before and after restart) and yet it was reinstalled again:


As usual two restore points was created so there's no doubt it was successfully uninstalled for both method.