KB 4056897

Topic

New Reply

I have been following Ask Woody for a long time and am a subscriber to Windows Secrets Newsletter. Susan Barnes in the Newsletter of 1/4/18 talks about this KB, patch it if the anti-virus has changed the register…. I have not seen any mention of this KB in Ask Woody, only see that we are at Defcon 2….. what do I do? My antivirus has changed the register as Susan indicates.

Reply | Quote

Replies

KB4056897 is the Security Only Quality Update for Win7.

The Security Qulaity Monthly Rollup for Win7, which is offered through Windows Update, is composed of three parts: non-security, security, and IE11 cumulative updates.

KB4056897 is the security component. But is is NOT offered through Windows Update. It must be downloaded and manually installed. It is one of the patches used by Group B (AskWoody invention), who do not want to install non-security features/fixes offered by Microsoft.

Reply | Quote

@PKCano: These security-only updates, such as KB4056897, are not rollups, or are they? They don’t contain all previous sec updates, right?

I’m on Win7 and Kaby Lake, so I stopped installing the monthly rollups after March, to prevent the KL-update-blocking by MS, but I want the security updates. Just installed this one, but I guess it’s not enough, right? Do I have to download each monthly sec-only update released after march and install them one by one? Or is there a rollup of these?

And none of these will install the new, KL-blocked windows update client, right?

Reply | Quote

Some of the security-only updates do contain the Windows Update client.

Also see: Installing Win updates on Win 7 or 8.1 computers with Kaby Lake or Ryzen CPUs.

1 user thanked author for this post.

woody

Reply | Quote

The Security-only patches are not cumulative, you have to install each one separately. They don’t have to be in order, but it is better if you do. The bad news is that they contain the block.
There is a lot of information on the site about in the March – May 2016 time frame, if you use the search function.
Here is some information you should read first:

https://www.askwoody.com/forums/topic/a-crisis-looms-for-win7-and-8-1-customers-with-recently-built-computers/

https://www.askwoody.com/forums/topic/2000006-see-if-microsoft-is-blocking-windows-update-on-your-new-computer/

https://www.askwoody.com/forums/topic/installing-win-updates-on-win-7-or-8-1-computers-with-kaby-lake-or-ryzen-cpus/

 

 

1 user thanked author for this post.

woody

Reply | Quote

I have been unable to install this update. My AV has updated the registry. The tech support I use said MS needs to update this….it is getting to the end of  Feb, so Mar updates will soon be out. Does anyone have recent news regarding this problem?

Reply | Quote

We do not recommend installing the Jan security only patch KB 4056897. Instead we recommend installing KB4073578

It can be downloaded from AKB2000003 on this site.

1 user thanked author for this post.

woody

Reply | Quote

I initially tried installing both patches and they both failed. I have an INTEL processor, so that is why I tried only KB4056897. Should I still try KB 4073578?

Reply | Quote

If your ate doing Group B – ONLY KB4073578 – not KB4056897
If you are dong Group A – Use KB4057400 (the 2018-01 Preview – not KB4056894

1 user thanked author for this post.

woody

Reply | Quote

Yes, I am in Group B. I just tried KB4073578 from the file I downloaded when given the “all clear” to install Jan updates. It failed. I deleted that file and went directly to the MS Update Catalog and downloaded it again – just in case it had been updated. It failed also. I have KB4056568 IE11 for Jan successfully installed. Would the order of installation for Jan updates make a difference? If not, I am at a loss.

Thx.

Reply | Quote

Try this:

In the search box type “cmd.exe” (without the quotes)
Right click on it and choose “Run as Administrato”
At the prompt type:
dism /image:c:\ /cleanup-image /revertpendingactions
When it finishes, tyoe “exit (no quotes) and reboot.
Wait five minutes arter login and see it you can install KB4073578

Reply | Quote

I tried but got Error: 1639

The command-line is missing a required servicing command.  I went ahead and typed exit, but I’m not sure this accomplished what you expected. I have not tried to reinstall update.

Reply | Quote

Just for grins, I tried the update – it failed. And, to verify your instructions, this is what I entered at the prompt:

dism/image:c:\/cleanup-image/revertpendingactions

Reply | Quote

There should be a space between “image” and “/revert…

Actually:
dism (space) /image:c:\ (space) /cleanup-image (space) /revertpendingactions

It has to be exact.

1 user thanked author for this post.

Elly

Reply | Quote

Tried again. This time, I got Error: 87  The /Image option that is specified points to a running Windows installation. To service the running operating system, use the /Online option. Then it refers me to the help by running DISM.exe /Online /?  for more information.  I am not that tech savy.

Reply | Quote

OK try this:

dism (space) /online (space) /image:c:\ (space) /cleanup-image (space) /revertpendingactions

Reply | Quote

New Error:87   Do not use the /Image or /WinDir option when using the /Online option to specify a running operating system.

Reply | Quote

Then let’s leave them out. Try this

dism (space) /online (space) /cleanup-image (space) /revertpendingactions

 

Reply | Quote

Error:50  This operation is only supported against an offline image.

Reply | Quote

OK, then what you are going to have to do is
Either boot from a Rescue disk/USB
or
access the Recovery environment ussing one of the F-keys (depends on the make of your PC)

Choose the command prompt

Repeat the original command – you may have to use d: or another drive letter beside c: (it has to point to the drive letter that your Windows is on)
dism (space) /image:c:\ (space) /cleanup-image (space) /revertpendingactions

Reply | Quote

I so appreciate the time you have taken with this.  I have to do a bit of reading to get an understanding of your instructions – this set is not obvious to me.  If this is more than I want to undertake, will showing your command to someone more knowledgeable than myself be enough for them to understand what you are attempting to help me with?

Thanks so very much!

Reply | Quote

Yes.
Bootable media can be made on any computer of the same version and same bitedness as yours.
The Recovery environment  is accessed by continually hitting one of the F-keys when your computer first boots. Sometimes F8, or F2, maybe ESC – depends on your make of PC.

Reply | Quote

Okay,  F8 rings a bell from previous tech sessions for other problems. I also found info on creating a Rescue Disk. I am more than cautious about attempting the unknown (for me) concerning changes made with command prompts – I suppose anything I would mess up badly is correctable as long as I have a Rescue Disk, right? 

I will take your “Yes” response to my previous post to mean showing the command prompt you gave me to someone more knowledgeable will let them know what you are attempting to correct.

Again, many thanks!

Reply | Quote

2000009: Getting out of a no-boot situation after installing Windows updates

Reply | Quote

Thanks MrBrian. My computer restarts – it’s just that the update fails. I get Failure configuring Windows Updates Reverting changes during the restart.

Reply | Quote

You are trying to do an offline revert for a non-bootable system, on a bootable system from within the working OS.

You only need a offline(i.e. not booted into windows) revert if you CANNOT boot. If you can boot and need to remove an update just uninstall it (you don’t have that problem either).

You just can’t get the update to install, maybe wait for the all clear on next months updates and see if you still have problems then? (don’t install any updates until then)

1 user thanked author for this post.

MrBrian

Reply | Quote

Thanks Anonymous. That’s the plan.

Reply | Quote

In response to MrBrian and Anonymous #170038,

It’s been another month since my last post. I’ve had tech support check out my computer. They tried running WU Fix It – said it did run, but it did not fix the problem. I did show them your post MrBrian, and they thought it might cause problems with the OS. In all my reading on Woody’s site, I recalled someone suggesting you install Feb KB4074587 first and then Jan KB4073578 – and then reboot. I tried this and  Feb installed but Jan still failed. I’ve left my updates installed this way figuring some updates are better than none. April is fast approaching and I don’t want to be 4 months without any updates. Still hoping someone has found a solution for this problem. Many thanks for everyone’s ideas so far.

Reply | Quote

“Still hoping someone has found a solution for this problem.”

You may want to post at https://www.sysnative.com/forums/windows-update/.

Reply | Quote

Update regarding Reply #169542

I still cannot get KB 4073578 to install. After twice advising me to wait until MS fixed this update, my tech service finally recommended I call MS directly – which I did. Both a MS tech and a MS supervisor stated that the update wasn’t necessary for my computer and I could not (in their exact words) “force it” to install.  They also suggested that my 3rd party AV had perhaps updated in a way that corrected the issue unbeknownst to MS. Per my AV (Kaspersky), only the registry key was updated to allow the update to install.

To anyone:    Does this sound like a valid reason for not being able to install this update? Should I just skip this one?     Thanks.

Reply | Quote

Update 4073578 appears to be for AMD processors only. If you have an Intel chip you don’t need it.

cheers, Paul

1 user thanked author for this post.

OscarCP

Reply | Quote

Thanks, Paul T. I do have an Intel chip. I also tried the other Jan 2018 update KB 4056897 – that failed as well. Those who maintain the Group B list of updates suggested the AMD update instead.

Reply | Quote

I would not be installing 4056897 as the MS page effectively says it adds a vulnerability, which you must then patch.
https://support.microsoft.com/en-gb/help/4056897/windows-7-update-kb4056897

cheers, Paul

Reply | Quote

anonymous wrote:

@pkcano: These security-only updates, such as KB4056897, are not rollups, or are they? They don’t contain all previous sec updates, right? I’m on Win7 and Kaby Lake, so I stopped installing the monthly rollups after March, to prevent the KL-update-blocking by MS, but I want the security updates. Just installed this one, but I guess it’s not enough, right? Do I have to download each monthly sec-only update released after march and install them one by one? Or is there a rollup of these? And none of these will install the new, KL-blocked windows update client, right?

The security only updates do not contain all previous security only updates. Each security only update is a stand-alone update.

Reply | Quote