Undesirable windows updates

M$ puts out a so called spec page on these updates and for the general public, that's all we know. That's why some here don't install the rollups. Updates without rollups

See post 8.

Hi townsbg,

townsbg said:

M$ puts out a so called spec page on these updates and for the general public, that's all we know. That's why some here don't install the rollups. Updates without rollups

See post 8.

What a brilliant post, thanks for sharing that with us townsbg .

Hi goopy,

goopy said:

Here's a list of updates deemed undesirable by DISM++.
Can anyone kindly advise if any of them gets included in the monthly rollup?

Code:

3126587
3021917
3068708
3080149
3133977
3161102
3184143
971033
3150513

If you usually download the Monthly Rollup, you can easily check to see if any of them have already been installed.
Click Start > Control Panel > Windows Update > View Update History.

I hope this helps!

Paul Black said:

Hi goopy,



If you usually download the Monthly Rollup, you can easily check to see if any of them have already been installed.
Click Start > Control Panel > Windows Update > View Update History.

I hope this helps!

How is that going to help if the same code is integrated into the rollups which, if they include those updates, is likely how they would do it?

townsbg said:

M$ puts out a so called spec page on these updates and for the general public, that's all we know. That's why some here don't install the rollups. Updates without rollups
See post 8.

Thanks for the kind reply, townsbg.
Have a test system here that appears to be uncompromised so far (the listed updates are still being offered when running WU). Curious to know if it's possible to keep it this way. Here's my summary of the "considered opinion" on the matter after reading the thread:

1. While the monthly Securities Only updates are free of contamination, the unwanted stuff can be slipped thru the Rollups unannounced.
2. Applying the Securities Only updates is not a viable solution long term as the system would somehow cease operation sooner or later.
3. The Rollup is no longer a collection of individual updates. Can't pick and choose the required updates anymore.
4. It's not possible for utilities like DISM++ to offer new updates as they are no longer made available by MS.
5. Resistance is futile.


Is this correct?

Many thanks and best regards,

goopy said:

Thanks for the kind reply, townsbg.
Have a test system here that appears to be uncompromised so far (the listed updates are still being offered when running WU). Curious to know if it's possible to keep it this way. Here's my summary of the "considered opinion" on the matter after reading the thread:

1. While the monthly Securities Only updates are free of contamination, the unwanted stuff can be slipped thru the Rollups unannounced.
2. Applying the Securities Only updates is not a viable solution long term as the system would somehow cease operation sooner or later.
3. The Rollup is no longer a collection of individual updates. Can't pick and choose the required updates anymore.
4. It's not possible for utilities like DISM++ to offer new updates as they are no longer made available by MS.
5. Resistance is futile.


Is this correct?

Many thanks and best regards,

#2, are you referring to Windows Update or your OS? If you are referring to Windows update there is an end date after which M$ won't offer any more updates for the OS itself. Note that any other M$ products installed that are still supported at that time will continue to receive updates. Your OS will continue to work but not receive updates. I'm not going to speak to #1 because we don't know what they put in the updates other than what they publish and for the most part there aren't many new individual updates for Windows or .net. Office updates and MSE/defender definition updates are separate.

#3, your only choice is what shows up in Windows update and whether or not you choose to install the updates. Just a disclaimer, whether or not you choose not to install the rollups is up to you and not an official recommendation from myself or anyone else here. I personally will not make a recommendation either way anymore. You'll find some here who aren't installing updates and some who are. This topic has been going on for months here regularly in one form or another since M$ started the whole rollup model.

You might want to read this guide on how to "disable" CEIP. Turn off the Windows Customer Experience program - gHacks Tech News

The only way to be absolutely safe is to be to unplugged from the net on Windows. Some are dual booting with Linux. I'm not sure though if there is anyone here running Linux specifically for internet use but it is a possibility.

Hi goopy,

goopy said:

1. Are the updates contained in the monthly rollup made available in individual packages accessible by third party apps such as DISM++?

Take this month for example. If you click the Microsoft Update Catalog link => 2018-10 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4462923), click the appropriate version, and click the Package Details tab, it will list all the updates contained in that package. You can of course investigate all of the individual updates, but this would be time consuming. Additionally, all previous updates [being cumulative] prior to this also has an impact.

One of the advantages of DISM++ is that it can update a LIVE OS. If you don't want to install the Security Monthly Quality Rollup, then just uncheck that particular update box and scan for updates again. DISM++ excludes any suspect and Telemetry updates, and any updates that have known issues.

I hope this helps!

goopy said:

Thanks fro the kind reply, townsbg.


2 questions:
1. Are the updates contained in the monthly rollup made available in individual packages accessible by third party apps such as DISM++?
2. Any other similar apps that you would recommend?


Many thanks and best regards,

Work with Paul Black on that. I don't have an answer to your questions.