KB4056894, and KB4074598 Microsoft updates problem

On 24/03/2018 5:18 AM, Thip wrote:
On 3/22/2018 9:38 PM, Maurice Helwig wrote:
I have just returned my computer to January 1st state by putting a
Macrium Reflect image on it.

I did this because MS updates January KB4056894 and February KB4074598
were causing problems (Failure of computer to restart after update
applied, and unacceptable slowing of the computer)

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have
broken my network which uses fixed IP addresses.

All these updates require the following Registry Key to install (Put
there by Avast Free Antivirus) ---

Key="HKEY_LOCAL_MACHINE"Subkey="SOFTWARE\Microsoft \Windows\CurrentVersion\QualityCompat"


Value Name="cadca5fe-87d3-4b96-b7fb-a231484277cc"

Type="REG_DWORD�

Data="0x00000000�

Is there some way to prevent these two updates from installing --
possibly by modifying the registry key or some other method. I can
live with the Meltdown / Spectre threat for the moment.

Is turning off updates completely, a viable option -- there are two
years to go for Win 7 pro support.

Any help would be appreciated.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

I use WSUS offline http://www.wsusoffline.net/.Â* I checked "Security
Only" and "Windows Defender" and let it roll.Â* Might help you.

Just a question --

I have just downloaded and run WSUS offline.
If I apply the updates (security only) to my existing win 7 installation
(which is up to date to December 2017) will WSUS install all the updates
it has downloaded, or only the ones that are not installed, ie will it
check for existing updates installed.

~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~

On 23/03/2018 22:36, Maurice Helwig wrote:
This update completely destroys a network using fixed IP addresses as I
am using. Since I re imaged my computer to Jan 1st 2018 It had not
appeared. I think MS may have pulled it (can anyone confirm this)

Yes it is pulled. But no it doesn't necessarily cause problems with PCs
that are configured with fixed IP addresses. I've installed it on 4 PCs
configured with fixed IPs at work with no problem caused at all. Don't
believe every scaremonger's blog you read online, people guess what the
problem is. It's often nowhere near as simple as they guess.

--

Brian Gregory (in England).

On 24/03/2018 11:03 AM, Brian Gregory wrote:
On 23/03/2018 01:38, Maurice Helwig wrote:

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have
broken my network which uses fixed IP addresses.

Didn't break the four PCs I installed it on at work, all four have fixed
IPs.


Thanks for the info.
I was not prepared to take the risk when I read about the problem, and
then the update disappeared, so I presumed that it was removed for
modifications by MS.

~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~

On 24/03/2018 11:13 AM, Brian Gregory wrote:
On 23/03/2018 22:36, Maurice Helwig wrote:
This update completely destroys a network using fixed IP addresses as
I am using. Since I re imaged my computer to Jan 1st 2018 It had not
appeared. I think MS may have pulled it (can anyone confirm this)

Yes it is pulled. But no it doesn't necessarily cause problems with PCs
that are configured with fixed IP addresses. I've installed it on 4 PCs
configured with fixed IPs at work with no problem caused at all. Don't
believe every scaremonger's blog you read online, people guess what the
problem is. It's often nowhere near as simple as they guess.


Yes There are scaremongers out there but MS are not doing their job
properly either. A little more explanation as to what the updates do
would be very helpful. Their explanations are brief and confusing which
only adds to the problem. I don't want to be spending all day playing
with updates.

~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~

On 3/23/2018 6:22 PM, Maurice Helwig wrote:
On 24/03/2018 11:13 AM, Brian Gregory wrote:
On 23/03/2018 22:36, Maurice Helwig wrote:
This update completely destroys a network using fixed IP addresses as
I am using. Since I re imaged my computer to Jan 1st 2018 It had not
appeared. I think MS may have pulled it (can anyone confirm this)

Yes it is pulled. But no it doesn't necessarily cause problems with
PCs that are configured with fixed IP addresses. I've installed it on
4 PCs configured with fixed IPs at work with no problem caused at all.
Don't believe every scaremonger's blog you read online, people guess
what the problem is. It's often nowhere near as simple as they guess.


Yes There are scaremongers out there but MS are not doing their job
properly either. A little more explanation as to what the updates do
would be very helpful. Their explanations are brief and confusing which
only adds to the problem. I don't want to be spending all day playing
with updates.

~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~
Problems happen where you don't look.
Things you look at, evaluate, stress test in many different configurations,
are less likely to cause problems in the AREAS YOU TESTED.
The problem with something as huge and complex as an operating
system is that there's no way to test everything in every
possible configuration. Tiny changes can have far-reaching
consequences.

I just spent several days trying to figure out why my laptop
wouldn't wake from sleep in win10, or win7, or XP.
Turned out to be a BIOS problem...but not just any BIOS.
If you updated to the latest, you bricked the OS...
unless you had preinstalled some driver...or so they say.
I wasn't willing to risk it and the mid-BIOS fixed my problem.
How would the developer known about that from his limited
view of the biosphere?

The issues with disclosing update contents are many:
Many of us would not understand it anyway.
Exposing the details of a vulnerability may help hackers.
MS could not sneak in 'features' that we wouldn't accept if we had a
choice.

If you think MS is evil for that, you've never
read any document describing a law. Who could have predicted
that my water bill would eventually have charges for street repair and
parks and recreation? I'm sure it was buried somewhere in the
bill to fund schools. Somehow it never made it into the description
on the ballot.

The internet is a contentious place. NO MATTER WHAT YOU SAY,
there's a large contingent of complainers itching to discuss how
horrible you are.

Once we decide to embrace the fact that MS owns us, having every
system the same is a good thing for everybody...and a LOT better
for MS.

Be glad you're still using win7. Win10 continuous change is
approaching the chaos of linux. Wonder if anybody has tried to
estimate the total $$ cost to the economy of managing the chaos.

"Sorry mam, I understand your house is on fire...I'll dispatch
the fire department as soon as windows finishes updating."

On 24/03/2018 12:50 PM, mike wrote:
Be glad you're still using win7.* Win10 continuous change is
approaching the chaos of linux.* Wonder if anybody has tried to
estimate the total* $$ cost to the economy of managing the chaos.

Thanks for your input. The problems of continuous change in windows 10
is just the reason why I have not gone there. I think that the 5th major
update of win 10 is due out in April. my son has moved to Linux Mint to
get away from it all, but I wonder.......

--
~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~

On 3/23/2018 9:14 PM, Maurice Helwig wrote:
On 24/03/2018 12:50 PM, mike wrote:
Be glad you're still using win7. Win10 continuous change is
approaching the chaos of linux. Wonder if anybody has tried to
estimate the total $$ cost to the economy of managing the chaos.

Thanks for your input. The problems of continuous change in windows 10
is just the reason why I have not gone there. I think that the 5th major
update of win 10 is due out in April. my son has moved to Linux Mint to
get away from it all, but I wonder.......

Linux just puts you into a larger domain of different chaos.
If I lived in a bubble and didn't have to be compatible with
90% of the desktop users or use software that isn't compatible
Linux would be fine for me.

But statistics can be deceiving.
I estimate that 99+% of the stuff I do regularly could be done
effectively with linux.
BUT
It's rare that I go more than a few hours before I want
something I can't get with linux.
By can't get, I mean that the function I want is unavailable
in a manner to which I've become accustomed, using data files
that I have and might interact with other non-geeks.

Sure, I can do schematic entry with linux. Problem is that
I can't modify the schematics I created decades ago
using windows apps that still work.

Win10 is mired in chaos. Eventually, we'll all have to move to it.
The good news is that we're finding ways to prevent the chaos
from dominating our computer at inopportune times. That's a BIG
step. Not big enough to get me to change from win7...yet...but
the day will come when the benefits exceed the costs.

I have several win 10 computers and enough experience to suggest
that I could survive a switch to it.

If you want to get off the windows train, now is as good a time
as any to switch to linux. History (windows me, vista, windows 8, etc)
suggests that most people will not jump ship. I've tried more than
once and it's just not worth the hassle. Inertia is a heavy thing.

On 3/23/2018 9:08 PM, Maurice Helwig wrote:
On 24/03/2018 5:18 AM, Thip wrote:
On 3/22/2018 9:38 PM, Maurice Helwig wrote:
I have just returned my computer to January 1st state by putting a
Macrium Reflect image on it.

I did this because MS updates January KB4056894 and February
KB4074598 were causing problems (Failure of computer to restart after
update applied, and unacceptable slowing of the computer)

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have
broken my network which uses fixed IP addresses.

All these updates require the following Registry Key to install (Put
there by Avast Free Antivirus) ---

Key="HKEY_LOCAL_MACHINE"Subkey="SOFTWARE\Microsoft \Windows\CurrentVersion\QualityCompat"


Value Name="cadca5fe-87d3-4b96-b7fb-a231484277cc"

Type="REG_DWORD�

Data="0x00000000�

Is there some way to prevent these two updates from installing --
possibly by modifying the registry key or some other method. I can
live with the Meltdown / Spectre threat for the moment.

Is turning off updates completely, a viable option -- there are two
years to go for Win 7 pro support.

Any help would be appreciated.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

I use WSUS offline http://www.wsusoffline.net/.Â* I checked "Security
Only" and "Windows Defender" and let it roll.Â* Might help you.

Just a question --

I have just downloaded and run WSUS offline.
If I apply the updates (security only) to my existing win 7 installation
(which is up to date to December 2017) will WSUS install all the updates
it has downloaded, or only the ones that are not installed, ie will it
check for existing updates installed.

~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~


It will check your current updates and only download/apply those you
don't have.

On 24/03/2018 5:22 PM, mike wrote:
On 3/23/2018 9:14 PM, Maurice Helwig wrote:
On 24/03/2018 12:50 PM, mike wrote:
Be glad you're still using win7.* Win10 continuous change is
approaching the chaos of linux.* Wonder if anybody has tried to
estimate the total* $$ cost to the economy of managing the chaos.

Thanks for your input. The problems of continuous change in windows 10
is just the reason why I have not gone there. I think that the 5th major
update of win 10 is due out in April. my son has moved to Linux Mint to
get away from it all, but I wonder.......

Linux just puts you into a larger domain of different chaos.
If I lived in a bubble and didn't have to be compatible with
90% of the desktop users or use software that isn't compatible
Linux would be fine for me.

But statistics can be deceiving.
I estimate that 99+% of the stuff I do regularly could be done
effectively with linux.
BUT
It's rare that I go more than a few hours before I want
something I can't get with linux.
By can't get, I mean that the function I want is unavailable
in a manner to which I've become accustomed, using data files
that I have and might interact with other non-geeks.

Sure, I can do schematic entry with linux.* Problem is that
I can't modify the schematics I created decades ago
using windows apps that still work.

Win10 is mired in chaos.* Eventually, we'll all have to move to it.
The good news is that we're finding ways to prevent the chaos
from dominating our computer at inopportune times.* That's a BIG
step.* Not big enough to get me to change from win7...yet...but
the day will come when the benefits exceed the costs.

I have several win 10 computers and enough experience to suggest
that I could survive a switch to it.

If you want to get off the windows train, now is as good a time
as any to switch to linux.* History (windows me, vista, windows 8, etc)
suggests that most people will not jump ship.* I've tried more than
once and it's just not worth the hassle.* Inertia is a heavy thing.

Yes, what you have learned is always easier than something new and
different. My son has successfully made the transition to linux mint.

--
~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~

On 24/03/2018 10:47 PM, Thip wrote:
On 3/23/2018 9:08 PM, Maurice Helwig wrote:
On 24/03/2018 5:18 AM, Thip wrote:
On 3/22/2018 9:38 PM, Maurice Helwig wrote:
I have just returned my computer to January 1st state by putting a
Macrium Reflect image on it.

I did this because MS updates January KB4056894 and February
KB4074598 were causing problems (Failure of computer to restart
after update applied, and unacceptable slowing of the computer)

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have
broken my network which uses fixed IP addresses.

All these updates require the following Registry Key to install (Put
there by Avast Free Antivirus) ---

Key="HKEY_LOCAL_MACHINE"Subkey="SOFTWARE\Microsoft \Windows\CurrentVersion\QualityCompat"


Value Name="cadca5fe-87d3-4b96-b7fb-a231484277cc"

Type="REG_DWORD�

Data="0x00000000�

Is there some way to prevent these two updates from installing --
possibly by modifying the registry key or some other method. I can
live with the Meltdown / Spectre threat for the moment.

Is turning off updates completely, a viable option -- there are two
years to go for Win 7 pro support.

Any help would be appreciated.

~~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~~

I use WSUS offline http://www.wsusoffline.net/.Â* I checked "Security
Only" and "Windows Defender" and let it roll.Â* Might help you.

Just a question --

I have just downloaded and run WSUS offline.
If I apply the updates (security only) to my existing win 7
installation (which is up to date to December 2017) will WSUS install
all the updates it has downloaded, or only the ones that are not
installed, ie will it check for existing updates installed.

~~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~


It will check your current updates and only download/apply those you
don't have.

Thanks -- I will have a play with it. It seems to have some advantages.
--
~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~

On 24/03/2018 11:14 AM, Maurice Helwig wrote:
On 24/03/2018 11:03 AM, Brian Gregory wrote:
On 23/03/2018 01:38, Maurice Helwig wrote:

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have
broken my network which uses fixed IP addresses.

Didn't break the four PCs I installed it on at work, all four have
fixed IPs.


Thanks for the info.
I was not prepared to take the risk when I read about the problem, and
then the update disappeared, so I presumed that it was removed for
modifications by MS.

~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~

This morning (Sunday 2018-03-25) an optional update was presented for me
to install --

2018-03 Preview of Monthly Quality Rollup for Windows 7 for x64-based
Systems (KB4088881)

I do not install Preview updates ever but a look at the MS information
site on this KB shows that the IP address issue is acknowledged by MS
and is yet to be fixed.

http://support.microsoft.com/help/4088881

While others may have installed KB4088875 without any network problems,
I am not prepared to do so until it is fixed.
Have a look at --
https://www.askwoody.com/category/mi...ches-security/

Can anyone tell me how to remove the "ALLOW REGKEY" which is required
for these updates to install.

--
~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~

Maurice Helwig wrote:
On 24/03/2018 11:14 AM, Maurice Helwig wrote:
On 24/03/2018 11:03 AM, Brian Gregory wrote:
On 23/03/2018 01:38, Maurice Helwig wrote:

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have
broken my network which uses fixed IP addresses.

Didn't break the four PCs I installed it on at work, all four have
fixed IPs.


Thanks for the info.
I was not prepared to take the risk when I read about the problem, and
then the update disappeared, so I presumed that it was removed for
modifications by MS.

~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~

This morning (Sunday 2018-03-25) an optional update was presented for me
to install --

2018-03 Preview of Monthly Quality Rollup for Windows 7 for x64-based
Systems (KB4088881)

I do not install Preview updates ever but a look at the MS information
site on this KB shows that the IP address issue is acknowledged by MS
and is yet to be fixed.

http://support.microsoft.com/help/4088881

While others may have installed KB4088875 without any network problems,
I am not prepared to do so until it is fixed.
Have a look at --
https://www.askwoody.com/category/mi...ches-security/

Can anyone tell me how to remove the "ALLOW REGKEY" which is required
for these updates to install.

I thought Windows 7 had a Windows Update setting that basically
disabled Windows Update. Then, you could click the button to have
Windows Update scan for updates, then go through the list manually,
and selected the updates you want.

That should give sufficient control without "hiding" the updates.

AFAIK, if you hide an update and the version number of the update
changes, the update will be re-offered. This is one reason that
hiding updates is not "ultimately effective". If you leave Windows
Update in one of its Automatic modes, you could end up installing
an update you had hidden previously.

Just switch WU off, make a list of KB number versus the problems
with it, and you can review the state next month, of what is safe
to install.

Paul

On 25/03/2018 3:31 PM, Paul wrote:
Maurice Helwig wrote:
On 24/03/2018 11:14 AM, Maurice Helwig wrote:
On 24/03/2018 11:03 AM, Brian Gregory wrote:
On 23/03/2018 01:38, Maurice Helwig wrote:

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have
broken my network which uses fixed IP addresses.

Didn't break the four PCs I installed it on at work, all four have
fixed IPs.


Thanks for the info.
I was not prepared to take the risk when I read about the problem,
and then the update disappeared, so I presumed that it was removed
for modifications by MS.

~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~

This morning (Sunday 2018-03-25) an optional update was presented for
me to install --

2018-03 Preview of Monthly Quality Rollup for Windows 7 for x64-based
Systems (KB4088881)

I do not install Preview updates ever but a look at the MS information
site on this KB shows that the IP address issue is acknowledged by MS
and is yet to be fixed.

http://support.microsoft.com/help/4088881

While others may have installed KB4088875 without any network
problems, I am not prepared to do so until it is fixed.
Have a look at --
https://www.askwoody.com/category/mi...ches-security/

Can anyone tell me how to remove the "ALLOW REGKEY" which is required
for these updates to install.

I thought Windows 7 had a Windows Update setting that basically
disabled Windows Update. Then, you could click the button to have
Windows Update scan for updates, then goÂ* through the list manually,
and selected the updates you want.

That should give sufficient control without "hiding" the updates.

AFAIK, if you hide an update and the version number of the update
changes, the update will be re-offered. This is one reason that
hiding updates is not "ultimately effective". If you leave Windows
Update in one of its Automatic modes, you could end up installing
an update you had hidden previously.

Just switch WU off, make a list of KB number versus the problems
with it, and you can review the state next month, of what is safe
to install.

Â*Â* Paul

Yes my windows 7 computer has a "Never check for updates (Not
Recommended)" setting and that is where it is now set, so that I can
avoid any accidental installations of unwanted updates.

And yes hiding updates needs to be handled carefully as you have said.

I would like to continue with updates but the quality of them coming out
of MS is a worry. I am thinking seriously about setting all my computers
to "Never check for updates (Not Recommended)" and forgetting about
updating all together.

This might not be wise but It may be the only option at the moment.
--
~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~~

On 3/24/2018 10:31 PM, Paul wrote:
Maurice Helwig wrote:
On 24/03/2018 11:14 AM, Maurice Helwig wrote:
On 24/03/2018 11:03 AM, Brian Gregory wrote:
On 23/03/2018 01:38, Maurice Helwig wrote:

The March update (KB4088875) was presented for download and then
disappeared. I was pleased about this as apparently it would have
broken my network which uses fixed IP addresses.

Didn't break the four PCs I installed it on at work, all four have
fixed IPs.


Thanks for the info.
I was not prepared to take the risk when I read about the problem,
and then the update disappeared, so I presumed that it was removed
for modifications by MS.

~~~~~~~~~~~~
Maurice Helwig
~~~~~~~~~~~

This morning (Sunday 2018-03-25) an optional update was presented for
me to install --

2018-03 Preview of Monthly Quality Rollup for Windows 7 for x64-based
Systems (KB4088881)

I do not install Preview updates ever but a look at the MS information
site on this KB shows that the IP address issue is acknowledged by MS
and is yet to be fixed.

http://support.microsoft.com/help/4088881

While others may have installed KB4088875 without any network
problems, I am not prepared to do so until it is fixed.
Have a look at --
https://www.askwoody.com/category/mi...ches-security/

Can anyone tell me how to remove the "ALLOW REGKEY" which is required
for these updates to install.

I thought Windows 7 had a Windows Update setting that basically
disabled Windows Update. Then, you could click the button to have
Windows Update scan for updates, then go through the list manually,
and selected the updates you want.

That should give sufficient control without "hiding" the updates.

That does work. But deciding which ones to hide is a daunting task.
All I could do is rely on lists posted by others.

AFAIK, if you hide an update and the version number of the update
changes, the update will be re-offered. This is one reason that
hiding updates is not "ultimately effective". If you leave Windows
Update in one of its Automatic modes, you could end up installing
an update you had hidden previously.

Just switch WU off, make a list of KB number versus the problems
with it, and you can review the state next month, of what is safe
to install.

Paul

mike wrote:

That does work. But deciding which ones to hide is a daunting task.
All I could do is rely on lists posted by others.

That's how the current Quality Assurance system works.

On Patch Tuesday, unsuspecting users (with Windows Update set to
full Auto) "test" the latest Cumulative Updates for us.

If a machine is bricked, or some strange behavior is
seen, it's reported in popular forums (or on USENET) so others
can benefit from the misfortune of the testers.

Then, Microsoft pulls the update, Microsoft visits the forum and
gets the list of problems, the developer works on it and re-releases
it. This avoids the need to dog-food the updates on Microsoft desktops,
or pay testers on the premises to do the testing.

The fact that Microsoft has the cheek to release Preview updates
for the month after, tells you how institutionalized this thinking is.
"We'll catch it in Field Test".

*******

How should a user respond to this kind of delivery system ?

Barge pole, 10 foot long.

Apply the updates, sure. But some time after they're released.

Paul