KB4056894, and KB4074598 Microsoft updates problem

I have just returned my computer to January 1st state by putting a
Macrium Reflect image on it.

I did this because MS updates January KB4056894 and February KB4074598
were causing problems (Failure of computer to restart after update
applied, and unacceptable slowing of the computer)

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have broken
my network which uses fixed IP addresses.

All these updates require the following Registry Key to install (Put
there by Avast Free Antivirus) ---

Key="HKEY_LOCAL_MACHINE"Subkey="SOFTWARE\Microsoft \Windows\CurrentVersion\QualityCompat"


Value Name="cadca5fe-87d3-4b96-b7fb-a231484277cc"

Type="REG_DWORD�

Data="0x00000000�

Is there some way to prevent these two updates from installing --
possibly by modifying the registry key or some other method. I can live
with the Meltdown / Spectre threat for the moment.

Is turning off updates completely, a viable option -- there are two
years to go for Win 7 pro support.

Any help would be appreciated.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

Maurice Helwig wrote:
I have just returned my computer to January 1st state by putting a
Macrium Reflect image on it.

I did this because MS updates January KB4056894 and February KB4074598
were causing problems (Failure of computer to restart after update
applied, and unacceptable slowing of the computer)

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have broken
my network which uses fixed IP addresses.

All these updates require the following Registry Key to install (Put
there by Avast Free Antivirus) ---

Key="HKEY_LOCAL_MACHINE"Subkey="SOFTWARE\Microsoft \Windows\CurrentVersion\QualityCompat"


Value Name="cadca5fe-87d3-4b96-b7fb-a231484277cc"

Type="REG_DWORD�

Data="0x00000000�

Is there some way to prevent these two updates from installing --
possibly by modifying the registry key or some other method. I can live
with the Meltdown / Spectre threat for the moment.

Is turning off updates completely, a viable option -- there are two
years to go for Win 7 pro support.

Any help would be appreciated.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

Windows 7 allows us to control updates.

https://www.isumsoft.com/it/wp-conte...or-updates.png

1) Use "Never check for updates"

2) Such a setting does not prevent you from clicking
the button in Windows Updates and scanning for updates.
In effect this is Manual Updating, where you get an
opportunity to tick boxes to select just the desired updates.

3) You can select an update in the list and "Hide" it.
There is a menu item for it. However, if the "version"
of that update is bumped by one, it will become unhidden.

*******

Windows 10 doesn't have the "Never check for updates" menu.

Windows 10 has a separate utility called "wu-show-hide.diagcab",
which is an absolutely horrible and absurd way to do things.

https://support.microsoft.com/en-ca/...lling-in-windo

Just be glad you're on Windows 7 :-)

Paul

On 23/03/2018 3:17 PM, Paul wrote:
Maurice Helwig wrote:
I have just returned my computer to January 1st state by putting a
Macrium Reflect image on it.

I did this because MS updates January KB4056894 and February KB4074598
were causing problems (Failure of computer to restart after update
applied, and unacceptable slowing of the computer)

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have
broken my network which uses fixed IP addresses.

All these updates require the following Registry Key to install (Put
there by Avast Free Antivirus) ---

Key="HKEY_LOCAL_MACHINE"Subkey="SOFTWARE\Microsoft \Windows\CurrentVersion\QualityCompat"


Value Name="cadca5fe-87d3-4b96-b7fb-a231484277cc"

Type="REG_DWORD�

Data="0x00000000�

Is there some way to prevent these two updates from installing --
possibly by modifying the registry key or some other method. I can
live with the Meltdown / Spectre threat for the moment.

Is turning off updates completely, a viable option -- there are two
years to go for Win 7 pro support.

Any help would be appreciated.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

Windows 7 allows us to control updates.

https://www.isumsoft.com/it/wp-conte...or-updates.png


1) Use "Never check for updates"

2) Such a setting does not prevent you from clicking
Â*Â* the button in Windows Updates and scanning for updates.
Â*Â* In effect this is Manual Updating, where you get an
Â*Â* opportunity to tick boxes to select just the desired updates.

3) You can select an update in the list and "Hide" it.
Â*Â* There is a menu item for it. However, if the "version"
Â*Â* of that update is bumped by one, it will become unhidden.

*******

Windows 10 doesn't have the "Never check for updates" menu.

Windows 10 has a separate utility called "wu-show-hide.diagcab",
which is an absolutely horrible and absurd way to do things.

https://support.microsoft.com/en-ca/...lling-in-windo


Just be glad you're on Windows 7 :-)

Â*Â* Paul

Thanks for the reply Paul.
I can do as you say but with the rollup type of updates now being used
in win 7, If I install March 2018 update I get the January 2018 and
February 2018 updates as well which I do not want.
Is there any way of selecting what updates I want without getting the
unwanted ones all rolled up into one.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

Maurice Helwig wrote:
On 23/03/2018 3:17 PM, Paul wrote:
Maurice Helwig wrote:
I have just returned my computer to January 1st state by putting a
Macrium Reflect image on it.

I did this because MS updates January KB4056894 and February
KB4074598 were causing problems (Failure of computer to restart after
update applied, and unacceptable slowing of the computer)

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have
broken my network which uses fixed IP addresses.

All these updates require the following Registry Key to install (Put
there by Avast Free Antivirus) ---

Key="HKEY_LOCAL_MACHINE"Subkey="SOFTWARE\Microsoft \Windows\CurrentVersion\QualityCompat"


Value Name="cadca5fe-87d3-4b96-b7fb-a231484277cc"

Type="REG_DWORD�

Data="0x00000000�

Is there some way to prevent these two updates from installing --
possibly by modifying the registry key or some other method. I can
live with the Meltdown / Spectre threat for the moment.

Is turning off updates completely, a viable option -- there are two
years to go for Win 7 pro support.

Any help would be appreciated.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

Windows 7 allows us to control updates.

https://www.isumsoft.com/it/wp-conte...or-updates.png


1) Use "Never check for updates"

2) Such a setting does not prevent you from clicking
the button in Windows Updates and scanning for updates.
In effect this is Manual Updating, where you get an
opportunity to tick boxes to select just the desired updates.

3) You can select an update in the list and "Hide" it.
There is a menu item for it. However, if the "version"
of that update is bumped by one, it will become unhidden.

*******

Windows 10 doesn't have the "Never check for updates" menu.

Windows 10 has a separate utility called "wu-show-hide.diagcab",
which is an absolutely horrible and absurd way to do things.

https://support.microsoft.com/en-ca/...lling-in-windo


Just be glad you're on Windows 7 :-)

Paul

Thanks for the reply Paul.
I can do as you say but with the rollup type of updates now being used
in win 7, If I install March 2018 update I get the January 2018 and
February 2018 updates as well which I do not want.
Is there any way of selecting what updates I want without getting the
unwanted ones all rolled up into one.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

Just make a backup and install March.

Did it boot ?

Done.

The Jan. and Feb. contents get "fixed" before
being shoved into March. A rollup is not exactly
equivalent to doing them separately. There are
possible temporal differences.

Paul

On 23/03/2018 4:03 PM, Paul wrote:
Maurice Helwig wrote:
On 23/03/2018 3:17 PM, Paul wrote:
Maurice Helwig wrote:
I have just returned my computer to January 1st state by putting a
Macrium Reflect image on it.

I did this because MS updates January KB4056894 and February
KB4074598 were causing problems (Failure of computer to restart
after update applied, and unacceptable slowing of the computer)

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have
broken my network which uses fixed IP addresses.

All these updates require the following Registry Key to install (Put
there by Avast Free Antivirus) ---

Key="HKEY_LOCAL_MACHINE"Subkey="SOFTWARE\Microsoft \Windows\CurrentVersion\QualityCompat"


Value Name="cadca5fe-87d3-4b96-b7fb-a231484277cc"

Type="REG_DWORD�

Data="0x00000000�

Is there some way to prevent these two updates from installing --
possibly by modifying the registry key or some other method. I can
live with the Meltdown / Spectre threat for the moment.

Is turning off updates completely, a viable option -- there are two
years to go for Win 7 pro support.

Any help would be appreciated.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

Windows 7 allows us to control updates.

https://www.isumsoft.com/it/wp-conte...or-updates.png


1) Use "Never check for updates"

2) Such a setting does not prevent you from clicking
Â*Â*Â* the button in Windows Updates and scanning for updates.
Â*Â*Â* In effect this is Manual Updating, where you get an
Â*Â*Â* opportunity to tick boxes to select just the desired updates.

3) You can select an update in the list and "Hide" it.
Â*Â*Â* There is a menu item for it. However, if the "version"
Â*Â*Â* of that update is bumped by one, it will become unhidden.

*******

Windows 10 doesn't have the "Never check for updates" menu.

Windows 10 has a separate utility called "wu-show-hide.diagcab",
which is an absolutely horrible and absurd way to do things.

https://support.microsoft.com/en-ca/...lling-in-windo


Just be glad you're on Windows 7 :-)

Â*Â*Â* Paul

Thanks for the reply Paul.
I can do as you say but with the rollup type of updates now being used
in win 7, If I install March 2018 update I get the January 2018 and
February 2018 updates as well which I do not want.
Is there any way of selecting what updates I want without getting the
unwanted ones all rolled up into one.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

Just make a backup and install March.

Did it boot ?

Done.

The Jan. and Feb. contents get "fixed" before
being shoved into March. A rollup is not exactly
equivalent to doing them separately. There are
possible temporal differences.

Â*Â* Paul

Thanks Paul

So if I wait a month or two the problems will be fixed in the later
Rollup. That explains why some folks are about three months behind in
their updates. I might try that on a regular basis.

Do you know anything about the reg key and possibly changing its
settings or removing it all together. What would happen.

~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~

Maurice Helwig wrote:

Thanks Paul

So if I wait a month or two the problems will be fixed in the later
Rollup. That explains why some folks are about three months behind in
their updates. I might try that on a regular basis.

Do you know anything about the reg key and possibly changing its
settings or removing it all together. What would happen.

~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~

As of today, that reg key in Windows 10, has been disabled.
It no longer gates updates. April 2018 Patch Tuesday does not need
to check for it.

However, for Windows 7, the same promise was not made. We
cannot remove the registry key in question quite yet. And
no reason for this was stated.

Paul

On 3/22/2018 6:38 PM, Maurice Helwig wrote [in part]:

[snipped]

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have broken
my network which uses fixed IP addresses.

[snipped]

KB4088875 showed up in my Windows Update. I went to the Web page for
additional details. That page cited several adverse "Known issues in
this update" that I consider seriously unacceptable. I marked the
update as "Hidden".

--
David E. Ross
http://www.rossde.com/

President Trump: Please stop using Twitter. We need
to hear your voice and see you talking. We need to know
when your message is really your own and not your attorney's.

In message , FredW
writes:
On Fri, 23 Mar 2018 15:50:05 +1000, Maurice Helwig
wrote:

Thanks for the reply Paul.
I can do as you say but with the rollup type of updates now being used
in win 7, If I install March 2018 update I get the January 2018 and
February 2018 updates as well which I do not want.
Is there any way of selecting what updates I want without getting the
unwanted ones all rolled up into one.


In stead of the Monthly Rollup, I do the Monthly Security Only updates.
Monthly Security Only updates are not cumulative.

http://wu.krelay.de/en/monthly.htm


Oh, are they not?

If they really aren't, _are_ there cumulative security ones available
somewhere, or does someone who has turned off updates but wants security
ones have to go back to when he last did them, and laboriously work
forwards from there, installing lots of them?
--
J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

Veni, Vidi, Vera (I came, I saw, we'll meet again) - Mik from S+AS Limited
), 1998

On 3/22/2018 9:38 PM, Maurice Helwig wrote:
I have just returned my computer to January 1st state by putting a
Macrium Reflect image on it.

I did this because MS updates January KB4056894 and February KB4074598
were causing problems (Failure of computer to restart after update
applied, and unacceptable slowing of the computer)

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have broken
my network which uses fixed IP addresses.

All these updates require the following Registry Key to install (Put
there by Avast Free Antivirus) ---

Key="HKEY_LOCAL_MACHINE"Subkey="SOFTWARE\Microsoft \Windows\CurrentVersion\QualityCompat"


Value Name="cadca5fe-87d3-4b96-b7fb-a231484277cc"

Type="REG_DWORD�

Data="0x00000000�

Is there some way to prevent these two updates from installing --
possibly by modifying the registry key or some other method. I can live
with the Meltdown / Spectre threat for the moment.

Is turning off updates completely, a viable option -- there are two
years to go for Win 7 pro support.

Any help would be appreciated.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

I use WSUS offline http://www.wsusoffline.net/. I checked "Security
Only" and "Windows Defender" and let it roll. Might help you.

jetjock wrote:
On Fri, 23 Mar 2018 11:24:24 -0400, Paul
wrote:

Maurice Helwig wrote:

Thanks Paul

So if I wait a month or two the problems will be fixed in the later
Rollup. That explains why some folks are about three months behind in
their updates. I might try that on a regular basis.

Do you know anything about the reg key and possibly changing its
settings or removing it all together. What would happen.

~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~
As of today, that reg key in Windows 10, has been disabled.
It no longer gates updates. April 2018 Patch Tuesday does not need
to check for it.

Was that something MS did, or you? If you, how? By "gates", what did
you mean?
However, for Windows 7, the same promise was not made. We
cannot remove the registry key in question quite yet. And
no reason for this was stated.

Paul

I don't have a primer on the mechanics here for those.

And I've not really seen evidence anyway, that adding that
registry key is making that much difference. Maybe someone
else got a positive result ? I noticed on my test setup
here, that once I installed MSEInstall in Windows 7,
I could get the 2018-02 Cumulative to show up in
Windows Update for Windows 7. I didn't try setting the
reg key manually to see if the same thing would happen.
I can't be 100% sure that registry key is all that is needed.

Your 2018-04 April Update will install, when Microsoft is
good and ready. There's no rush. There's still no sign of
an imminent thread from Meltdown/Spectre. About 200 samples
have shown up in Virustotal, showing that the Black Hats
are working on it. But no virulent and effective samples
have been seen. I haven't read the news for today yet...

Paul

On 24/03/2018 2:52 AM, David E. Ross wrote:
On 3/22/2018 6:38 PM, Maurice Helwig wrote [in part]:

[snipped]

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have broken
my network which uses fixed IP addresses.

[snipped]

KB4088875 showed up in my Windows Update. I went to the Web page for
additional details. That page cited several adverse "Known issues in
this update" that I consider seriously unacceptable. I marked the
update as "Hidden".


This update completely destroys a network using fixed IP addresses as I
am using. Since I re imaged my computer to Jan 1st 2018 It had not
appeared. I think MS may have pulled it (can anyone confirm this)

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

On 24/03/2018 5:18 AM, Thip wrote:
On 3/22/2018 9:38 PM, Maurice Helwig wrote:
I have just returned my computer to January 1st state by putting a
Macrium Reflect image on it.

I did this because MS updates January KB4056894 and February KB4074598
were causing problems (Failure of computer to restart after update
applied, and unacceptable slowing of the computer)

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have
broken my network which uses fixed IP addresses.

All these updates require the following Registry Key to install (Put
there by Avast Free Antivirus) ---

Key="HKEY_LOCAL_MACHINE"Subkey="SOFTWARE\Microsoft \Windows\CurrentVersion\QualityCompat"


Value Name="cadca5fe-87d3-4b96-b7fb-a231484277cc"

Type="REG_DWORD�

Data="0x00000000�

Is there some way to prevent these two updates from installing --
possibly by modifying the registry key or some other method. I can
live with the Meltdown / Spectre threat for the moment.

Is turning off updates completely, a viable option -- there are two
years to go for Win 7 pro support.

Any help would be appreciated.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

I use WSUS offline http://www.wsusoffline.net/.Â* I checked "Security
Only" and "Windows Defender" and let it roll.Â* Might help you.

Thank you for the wsusoffline link. I will look at that.
Can I set up windows 7 pro to receive "Security only" updates, or does
one have to use wsusoffline or do it manually.

Security updates is really all I need. but they must not break my
computer in the process. The quality of the updates is of course MS
responsibility. I don't think they are doing a good job at all lately
and getting worse by the month.

~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~

In article , (Maurice
Helwig) wrote:

*From:* Maurice Helwig
*Date:* Sat, 24 Mar 2018 08:36:53 +1000

On 24/03/2018 2:52 AM, David E. Ross wrote:
On 3/22/2018 6:38 PM, Maurice Helwig wrote [in part]:

[snipped]

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would
have broken
my network which uses fixed IP addresses.

[snipped]

KB4088875 showed up in my Windows Update. I went to the Web page
for
additional details. That page cited several adverse "Known
issues in
this update" that I consider seriously unacceptable. I marked the
update as "Hidden".


This update completely destroys a network using fixed IP addresses
as I am using. Since I re imaged my computer to Jan 1st 2018 It had
not appeared. I think MS may have pulled it (can anyone confirm
this)

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~


MS have released a replacement for part of the March rollup this evening (UK time),
but it looks as if it only includes IE11. It's KB4096040. See:
http://tinyurl.com/yavtn8yh
Available from the Catalog at
https://www.catalog.update.microsoft...px?q=KB4096040

--
Regards
John ) Remove the obvious to reply...

On 24/03/2018 10:24 AM, John K.Eason wrote:
In article , (Maurice
Helwig) wrote:

*From:* Maurice Helwig
*Date:* Sat, 24 Mar 2018 08:36:53 +1000

On 24/03/2018 2:52 AM, David E. Ross wrote:
On 3/22/2018 6:38 PM, Maurice Helwig wrote [in part]:

[snipped]

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would
have broken
my network which uses fixed IP addresses.

[snipped]

KB4088875 showed up in my Windows Update. I went to the Web page
for
additional details. That page cited several adverse "Known
issues in
this update" that I consider seriously unacceptable. I marked the
update as "Hidden".


This update completely destroys a network using fixed IP addresses
as I am using. Since I re imaged my computer to Jan 1st 2018 It had
not appeared. I think MS may have pulled it (can anyone confirm
this)

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~


MS have released a replacement for part of the March rollup this evening (UK time),
but it looks as if it only includes IE11. It's KB4096040. See:
http://tinyurl.com/yavtn8yh
Available from the Catalog at
https://www.catalog.update.microsoft...px?q=KB4096040


Thank you. I will look out for it. I may take a few days to present
itself for instalation.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~~

On 23/03/2018 01:38, Maurice Helwig wrote:

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have broken
my network which uses fixed IP addresses.

Didn't break the four PCs I installed it on at work, all four have fixed
IPs.

--

Brian Gregory (in England).