|
There are isolated problems with current patches, but they are well-known and documented on this site. |
If you waited until now to install this month’s patches, getting them should be easy. But if you jumped the gun and installed some or all of the Win7/
[See the full post at: MS-DEFCON 3: Apply April patches but if you have 64-bit Win7 or Server 2008 R2, read the fine print!]
Slowpoke47, 
Geo, 
AlphaCharlie, 
KarenS, 
Cascadian, 
CADesertRat, 
walker, 
Pepsiboy, 
abbodi86, 
SueW, 
ch100, 
HiFlyer, 
OldBiddy, 
geekdom, 
Elly I’m a Windows 7 Home x64 Group A person. Yesterday I installed KB4093118 after having previously installed Jan/Feb/Mar monthly security rollups and also KB4100480 and the revised KB4099950. I also installed the April Office 2010 security update. And the MSRT. The only thing I’ve noticed so far is that KB4093118 took forever to install, a good hour or so. But so far it looks like a successful install, except that my computer seems to run slower. Even updating Chrome took awhile. Haven’t tested Office yet.
Running Windows 7 x64, Group A member
I’m patched thru February, and installed KB4100480 and original KB4099950.
MY WU shows KB4093118 checked and MSRT KB890830 checked.
What do I do regarding the following forum discussed KB’s
New KB4099950 (do I uninstall old, download from catalog the New; or uninstall the old, and April update KB4093118 will take care of installing the New; or simply install KB4093118 over the existing Old KB4099950)?
KB4100480 – leave as is? Or uninstall and let KB4093118 reinstall?
KB4099467 – Still needed? Part of KB4093118? or Obtain from catalog?
And the install order of each KB with or without re-boot in between.
Thanks
OP here, answering my own questions after reading many others asking the same questions and filtering the answers provided:
KB4099950 – uninstalled, rebooted, no separate re-install.
KB4100480 – no action, left as is installed.
KB4099467 – had never installed, and did not install.
KB4093118 – installed, rebooted.
So far so good!
Win 7×64, home premium, AMD. No problem so far. I never down loaded any previews though.
Woody, have you considered holding back the announcement here of an article on Computerworld until you have posted it there? Announcing incoming articles leads to people asking questions about what they should do when the only reply one can sensibly give is to wait and read the article!
Alas, it’s a chicken and egg situation.
I need to post a blog entry here in order to get a link to the blog entry.
Then I use the link in the last line of the Computerworld post.
Normally things happen pretty quickly, and nobody’s left in the lurch. This time, though, I was called away immediately after turning in the Computerworld article for edit, but before I had a Computerworld article address, for insertion back here on the blog.
Sorry about that!
Windows 7 Home Premium SP1 64 bit Group A (Intel Ivy Bridge 3rd generation)
Had rolled back my computer to December 2017 a couple weeks ago.
Only had Feb. and Jan. rollups to uninstall, never did anything with March updates.
On April 25, I installed KB4099950 msu file (downloaded from MS catalog)
rebooted my computer.
Then Installed KB4093118 (new revision date 4/23) through my WU.
Rebooted my computer.
All has been running just fine since. (touches wood)
Maybe a little slower.
Hard to tell because I have DSL.
I’m retired. I’m not in a hurry anymore.
Best practice. Other people who are still not convinced of the best approach after too many pages of discussion on the subject related to KB4099950 should use this post as model for the update sequence. There are other good ways, but this is ideal.
Complex question.
Best solution I could come up with is what’s in the Computerworld article.
windows 7 64 bit group b, do i have to install any patches prior to april updates?
on susan’s advice i did rollback to december, uninstalled three windows updates:
kb4074587 (february), kb4073578 (january), kb4056897 (january)
remaining installed windows updates from this year (2018) are:
kb4056568, kb4054998 (january) and kb4074736, kb4088835 (february), some of them ie, i assume;
office 2010 updates from january and february, 2018-01 security-/quality rollup for .net (january only),
and of course msrt from january and february have been installed so far.
there are NO march updates installed at all, even no updates for office 2010 or msrt.
Uninstall KB4099950
Uninstall KB4088878
Reboot
Install KB4099950 (download both files, double click on the .msu, it will install the script in the .exe)
Reboot
Install Mar & Apr SO (in that order) and Apr IE11 Cumulative Update (no need to reboot between these three)
Reboot
Install whatever else you want from Windows Update.
You only need to install the most current IE 11 update. They are cumulative, and April’s includes fixes to bugs that the other months’ updating may have introduced.
Non-techy Win 10 Pro and Linux Mint experimenter
My answer, there, only referred to IE 11 updates.
I did a topic on Group B updating at Recovering From 2018 Updating for Win 7 Group B just to review what I understand and tried regarding updating through April. I’m not an expert, but did a lot of review of posts and Microsoft support pages… and managed to update with no issues. Maybe it will help some people, or they can report their different method, and results, without getting confused with Group A.
Non-techy Win 10 Pro and Linux Mint experimenter
Here’s Woody’s article: Computerworld woody on Windows. Many thanks!
Group A, Windows 7 Home Premium SP1 64-bit (Intel Ivy Bridge)
I didn’t roll back to December but instead installed KB4100480.
I skipped the March roll-up but did install the March Office updates.
On April 18 I installed the latest version of KB4099950 from the Catalog.
Today I installed the April roll-up KB4093118 and it all seemed to go well. It took a little longer to download since it had both the March and April updates, but nothing extraordinary.
The pci.sys file version shown in C:\Windows\System32\drivers is 6.1.7601.24056 and I haven’t had any network problems.
I’ve rebooted a couple of times and so far at least I haven’t encountered any problems or system slowness. Keeping my fingers crossed that things stay stable!
Linux Mint Cinnamon 21.1
Group A:
Win 10 Pro x64 v22H2 Ivy Bridge, dual boot with Linux
Win l0 Pro x64 v22H2 Haswell, dual boot with Linux
Win7 Pro x64 SP1 Haswell, 0patch Pro, dual boot with Linux,offline
Win7 Home Premium x64 SP1 Ivy Bridge, 0patch Pro,offline
My notes show 40999467 is included in 4093118. However, to be on the safe side, you can download it and install it manually (if it allows) immediately after installing the Rollup BEFORE rebooting.
Bless you for the speedy response. That is what I’ll do. I’m terrified of the BSOD even though it corrects itself. All the best to everyone here who is so generous and helpful. Here goes (holding her nose!) 
I installed both KB4100480 and KB4093118 on my two Windows 7 x64 desktops, one on 23rd April and the other on 24th April. Both were offered as important and checked.
The updates installed ok on both machines which are running normally, if anything a little quicker although I’m not clear on that – but they’re certainly not running slower. I hadn’t previously installed the March monthly update, and hadn’t installed KB4099950 which was originally offered in March as unchecked and optional, although it was offered in April as checked and optional but subsequently withdrawn.
As things stand, I will take some convincing that I need to uninstall the April updates and start over, especially given that both machines are running well with the updates offered by Microsoft satisfactorily installed. However, I shall continue to watch this space…
Same for me, I installed 4100480 and 4093118 through WU on the 23rd of April, after Woody’s article on the same day concerning Meltdown. I had understood that this version of 4093118 was Ok. Must I uninstall it ?
You got the latest version of KB 4093118 – which is precisely the version you DO want.
I tried to figure out a way to explain to Muggles about how to jump through that additional hoop, and decided it wasn’t worth it.
You’re fine just how you are.
Thanks for the clarification. I too installed KB 4093118 when you suggested. Things are working and there are no nagging messages asking me to install stuff in WU for a change. Life is grand…until next patch day.
-firemind
Security-only patches are NOT cumulative. Any you do not install are fixes that you do not get. The patches contain other fixes beside those for Meltdown/Specter . SO you will be vulnerable for anything contained in the updates you do not install.
In other words, you need all the patches as well as the IE11 Cumulative Update.
Beside the security fixes, check the Security Update Guide link for vulnerabilities. Consider most of the known issues have been fixed through April.
Jan SO KB 4056897
Feb SO KB 4074587
Mar SO KB 4088878
I’ll installl the updates tomorrow night before bed or next week sometime. Maybe a Sunday or so. Maybe Sunday Night is good.
Too many sleepless nights fretting over failed updates and/or broken systems have taught me the hard way that “before bed” is not the best time to install updates!
Win7 Pro x64, Group B.
Did read your article. Pistols at dawn?
Bottom line, followed the MS instructions on kb4099950, never removed the March SO patch, kb4088878. Do have the latest pci.sys file version. Assume I’m good to go for the April updates?
On the one hand you suggest that Group B is becoming untenable while on the other you are guessing that MS data collection on Win7 might nearly rival Win10 data collection if using rollups. Nothing that tricky about group B from this chair and I’m just borderline literate. If you asked me to run scripts, THEN I’d bail! 
I had a similat experience. The Rollups are cumulative, and, they supersede some old patches as well. You uninstalled April’s and you hadn’t installed March’s. But when you uninstall a cumulative update, you install A BUNCH of stuff. So some of the old superseded updates showed back up. You will find that those are all old.
Look at the list of installed updates. You may be missing stuff back to Sept 2017 (I was). So, just go ahead and install everything that is CHECKED (except 2095664 telemetry) and Windows update will sort it all out.
The links to patches in AKB2000003 are direct download links from the MS Update Catalog. So whatever is current in the Catalog is what you get.
jelson, you don’t need item #6 KB4100480, since it was superceded by item #7 KB4093108.
https://support.microsoft.com/en-us/help/4100480/windows-kernel-update-for-cve-2018-1038
W7x64 Home GrpB
Thanks to those who have patiently answered the same questions over and over again.
The fine print is indeed finer than a frog’s hair.
Grp. A.. W7 Pro sp1 x64, I had Jan/Feb rollups installed did not uninstall.
4/2/18 installed KB 4100480 from WU
4/10/18, installed March IE 11 cum sec updt KB 4096040 ( from MS catalogue )
4/23/18 installed KB 4099950 did not uninstall ( from MS catalogue )
( Today ) 4/27/18 KB 4093118 & MSRT from WU
So far all is well and I haven’t noticed any slowdown.
Don't take yourself so seriously, no one else does
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).
Sounds like you’re set!
“How I learned to stop worrying and love the LOUNGE”!
@Peacelady
I love your quote!! May I add “Nothing difficult was ever easy”! From everything I have read and followed, I ‘think’ you will be just fine. (But don’t hold me to that, I only know what I know!)
A ship in harbor is safe, but that is not what ships are built for. --John Augustus Shedd
@Individualist
Ditto for your quote. This has been an ordeal for all of us. Looking forward to deleting all of my copious KB# notes for April and starting hopefully fresh in May. I’ve enjoyed “meeting you” and all the other loungers. It’s been a day and a half and I’m signing off — Night Night To All! ?
?
Oops! No rest for the weary. Spoke too soon. This time got the Stop Error OxAB the very first time I logged off. I’m at a total loss as it appears no one else has this problem. Should I once again uninstall the April Rollup? Should I get my local computer company to take a look? 
Dear Peacelady,
I’ve been following your adventures in trying to fix this issue. Being the non-techy I am, I’ve had my own unexplainable oopsies, and it sends shivers down my spine to think of going through such a thing. I hesitate to make things worse for you, or send you down another dead end…
However, in researching my own Group B updating I found that there continues to be a bug identified by Microsoft, described as:
“A stop error occurs on computers that don’t support Streaming Single Instructions Multiple Data (SIMD) Extensions 2 (SSE2)”
I did some further research about what that could possibly mean…
Per Wikipedia:
“SSE2 (Streaming SIMD Extensions 2) is one of the Intel SIMD (Single Instruction, Multiple Data) processor supplementary instruction sets first introduced by Intel with the initial version of the Pentium 4 in 2001.”
So processors prior to Pentium 4 would not support SSE2. Also, according to Wikipedia:
“The following IA-32 CPUs were released after SSE2 was developed, but did not implement it” (and are affected):
“AMD CPUs prior to Athlon 64, such as Athlon XP
VIA C3
Transmeta Crusoe
Intel Quark”
KB4099467 fixes “A Stop error occurs if this update is applied to a 32-Bit (x86) machine with the Physical Address Extension (PAE) mode disabled”, but not the SSE2 issue.
Is it possible that you have one of those relatively rare processors that can’t support SSE2?
If so, Microsoft says, “Microsoft is working on a resolution and will provide an update in an upcoming release.”
The problem with SSE2 was introduced in the March updates, but continues to be unresolved in the April updates. It exists in both the Monthly Rollup, and the Security Only updates. This would be a reason to temporarily pause updating at the Feburary patches, and wait for Microsoft to fix it… It only took three months to fix the Total Meltdown issue that affected everyone patching Windows 7 in 2018… there are many fewer people with this particular problem. It is a good example of why updates should be offered separately from the rollups, so that people in these situations could apply other security fixes while awaiting resolution for this particular issue.
None of this may apply… just noted the curious similarities… and passing on the info.
Your patience is commendable, and I hope the problem is resolved soon, whatever the cause.
Non-techy Win 10 Pro and Linux Mint experimenter
Perhaps this post by MrBrian will help. I found it to be extremely useful as a discussion of all the issues with the March Rollup/SO patches.
https://www.askwoody.com/forums/topic/patch-lady-new-update-for-windows-7-kb-4100480/#post-179854
Hi Dr.Bonzo — So Sorry — the anonymous post is from me Peacelady — forgot to log in.
Dear Elly,
I cannot thank you enough for your herculean efforts to help me! When I read your posts I’m struck by how knowledgeable you are — I have so much to learn here.
When I first was getting the BSOD I Googled how to tell what the particular BSOD is if the page is gone before you can read it. It was: SESSION_HAS_VALID_POOL_ON_EXIT 0x000000ab Session unload occurred while a session driver still held memory caused by nfoskrnl.exe.
Now under all of my notes, surprisingly I had written: Support SSE2? So you may be on to something! Can you tell me how and where to find out if I have the offending processor?
Although, KB4099467 does seem to be alleviating the BSOD problem – however, I have a 64bit computer, not a 32-bit so this is perplexing….
One more thought: The first time I installed the KB4099467 fix I was unable to do it properly — first the April Rollup – no reboot – then KB40999467 and reboot. But last night I got so disgusted with myself that I vowed to get it right — with a lot of coaching and hand-holding from PKCano (thank you!!!!) I won’t be completely sure that I’m completely out of the woods until a few more days go by as this has been an intermittent occurrence.
Sorry for the long and winding post. I only hope that in time I will learn enough to be able to help others as all of you have done. It is so comforting to come to this place to get answers.
Blessings to you Elly.
Now under all of my notes, surprisingly I had written: Support SSE2? So you may be on to something! Can you tell me how and where to find out if I have the offending processor?
@Peacelady, try downloading and installing Speccy. It’s a little utility (free) that will tell you all sorts of things about your computer. https://www.ccleaner.com/speccy
Once installed, run it; you’ll first see a “Summary” of your computer. If you then click on “CPU” (in the left margin), you’ll see much information. Look for “Instructions” in the left column, and you’ll see if ‘SSE2’ is included in the list.
Hi SueW,
Thanks so much for your suggestion of using Speccy. I’m sure that it would do the trick. I used ccleaner in the past and loved it but deleted it after the mess up they had with security. I’m probably overly “security conscious” — truth be told, I prefer the filing cabinet with a hard copy of anything important rather than having it on my computer. (All my friends and family laughed at me when I would not join Facebook — I just felt intuitively that it was not safe.) But enough about me — thanks very much for trying to help me – you are very kind and I wish I had the courage to take advantage of it
Try this for the basic info: Right click on Computer in the Start menu. Click properties. Under System it should identify your processor.
Non-techy Win 10 Pro and Linux Mint experimenter
Hi Elly
Intel (R) Core (TM) i5 – 4670 CPU @3.40 GHz 3.40GHz
Win 7 Profesional Svc Pack1 64bit
Hope this helps. Thanks so very much for your help.
(((Hugs)))
You have a fourth generation Intel (R) Core (TM) processor that is in the family of processors known as Haswell processors.
Good news: Your processor supports SSE2
Bad news: That means the problem I talked about isn’t your problem.
Will keep my eyes and ears open for anything else that might relate.
(((Hugs)))
Non-techy Win 10 Pro and Linux Mint experimenter
I have a question about Woody’s article and the steps to determine what Win7 Group A should do before installing the April Monthly Rollup, KB4093118.
The link in Woody’s article to abbodi86’s response to Question 1 says, “Yes, current revised WU KB4093118 (or running directly from MSU file) eliminate the need for KB4099950, with one condition: March Rollups or first release of WU KB4093118 must not installed before”.
In the next paragraph of Woody’s article, Step 1 says to “Check your update history to see if you have already installed this month’s Win7/Server 2008 R2 Monthly Rollup, KB 4093118. If you haven’t installed KB 4093118, you’re fine; proceed with the next section to install the April Monthly Rollup, KB 4093118”. Does this mean steps 2, 2a, 2b, and 3 only apply to those who DID install the April Monthly Rollup, KB4093118?
What about the other half of abbodi86’s condition with regards to “March Rollups”? For those that DID NOT install the April Monthly Rollup, KB 4093118, but you DID install the March Monthly Rollup, KB 4088875, are there any special steps (like 2a or 2b) that need to be taken before installing the April Monthly Rollup, KB 4093118?
PKCano:
Are we sure that is what Woody is saying in his ComputerWorld article?
In Step 1. under the section entitled “The ongoing Win7/Server 2008 R2 nightmare” Woody writes, “If you haven’t installed KB 4093118, you’re fine; proceed with the next section to install the April Monthly Rollup, KB 4093118.” Focusing on the word “section”, I interpreted this sentence to mean we should go to the next section of the article, not the immediately following Step 2. The next section is entitled “Windows 10” followed by a section entitled “Office” followed by “Windows 7/Server 2008 R2.”
I am not at all certain that my interpretation is correct, but if it is then if KB 4093118 was never isntalled presumabley Steps 2, 2a, and 2b are not necessary.
Woody gave step by step instructions in his Computer World Article Time to install the April Windows and Office patches, but he did address a lot of different issues and OS there.
Let me give you his exact quote:
“Step 1. Check your update history to see if you have already installed this month’s Win7/Server 2008 R2 Monthly Rollup, KB 4093118. If you haven’t installed KB 4093118, you’re fine; proceed with the next section to install the April Monthly Rollup, KB 4093118.”
Those that had installed KB 4093118 were directed to uninstall, but the part about proceeding to install the April Monthly Rollup, KB 4093118 applies to your situation.
Non-techy Win 10 Pro and Linux Mint experimenter
OK, here I go into into some unfortunately necessary redundancy — for which I apologize profusely:
First of all, I am Group B, Windows 7 SP1, x64, Intel I-7.
Second, I have installed everything through March, including the old version of kb4099950.
Third, concerning what to do, because I have installed old kb4099950, there are three possible plans of action that have been proposed by different people of weighty opinion and good character in Woody’s:
Plan A:
Uninstall old kb4099950, then install new Kb4099950. Finish it by installing the April Security Only.
Plan B:
Uninstall old kb4099950; uninstall March Security Only; install back, in this order, kb4099950; Security Only (with some reboots). Finish it by installing April Security Only.
Plan C: Forget about uninstalling anything. Just install April Security Only: Don’ worry, be happy!
So: which one would you recommend: A, B or C?
(Brief answers, please.)
Thanks.
NOTE: As far as I could see when I read it, there is nothing in Woddy’s “Computerworld” that explains this.
Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).
MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV
Plan B
Uninstall old kb4099950; uninstall March Security Only
Reboot
Reinstall latest kb4099950
Install whatever Security-only updates you are missing and the latest IE11 CU (no need to reboot between)
Reboot
Edit per @abbodi86 below
SueW,
This is what I understand Abbody86 to be saying in that entry you’ve pointed me to:
That it all depends on whether one updated the “bad” earlier version of kb4099950 directly from the Catalogue, or got it from Windows Update.
I got it from the Catalogue, which would mean: “forget about uninstalling anything and go ahead, plonk in the security only for April and be done.”
In other words, as you said: Plan C.
Do you read it also this way?
Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).
MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV
I also agree with SueW. I’m in exactly the same situation. On the 8 April 2018, I installed the first release of KB4099950 (downloaded from the Catalog) before installing KB4088878, the March security only update. By all appearances, everything has worked as it should.
PCIClearStaleCache.txt tells me that the PCI SlotPersistentInfo registry keys have been deleted. And KB4088878 left pci.sys at the 6.1.7601.24056 level. So I am planning to leave everything as it is before installing the April updates.
Yes 4093118 includes 4099950 – if you did the uninstall and then installed the latest Apr Rollup you are good
Does KB4100480 (Total Meltdown patch) count as one of the March updates we need to uninstall before installing April roll-up KB4093118?
My employer pushed out KB4093118 yesterday after pushing out no March updates whatsoever. So I’m thinking maybe I should uninstall everything I installed in March before moving on to April.
Does KB4100480 (Total Meltdown patch) count as one of the March updates we need to uninstall before installing April roll-up KB4093118?
No, leave 4100480 installed.
So I’m thinking maybe I should uninstall everything I installed in March before moving on to April.
To quote Woody:
Step 2a. If you have the March Monthly Rollup, KB 4088875, uninstall it.
Step 2b. If you have the Carnak patch, KB 4099950, uninstall it.
Reboot.
Install the Apr Rollup.
OK. Thanks. I’ll leave 4100480 installed.
KB4100480 is superseded by the latest (Apr) Rollup and SO.
KB4100480 is superceded by KB4093118
https://support.microsoft.com/en-us/help/4100480/windows-kernel-update-for-cve-2018-1038
I want to thank Woody for that fantastic Computerworld article explaining how to apply the April patches. I have Windows 7 64-bit Lenova desktop computer (Service 1). I followed his instructions to the “T”. I have been sitting on the April updates waiting for the MS-Defcon # to change.
I uninstalled KB4099950 (because I originally installed it on 4/7/18), and KB4088875 (because you have to install KB4099950 before installing KB4088875). Got a little nervous because it took my computer around 50 minutes to configure Windows after uninstalling. Then I installed the MS Office Updates – KB4011717, KB4018355, KB4018353, and KB4018354. Good so far. I finally installed KB890830, KB4093118, and KB2952664 successfully, and I am happy to say that my computer seems just fine!
Again, thank you Woody! I appear to be set until May Updates. Ugh!
Update: I discovered after installing the updates that I couldn’t access my Yahoo mail and AOL mail accounts. Said the site wasn’t certified. I think it had something to do with KB890830 Malicious Software Removal Tool. So I uninstalled this update and then hid it. Everything is fine now. So if you have any doubt about whether you will use this, just hide it, don’t install it.
I uninstalled KB4099950 (because I originally installed it on 4/7/18), and KB4088875 (because you have to install KB4099950 before installing KB4088875). Got a little nervous because it took my computer around 50 minutes to configure Windows after uninstalling.
Thank you for posting this observation. I followed Woody’s instructions and likewise uninstalled the March Monthly Rollup KB 4088875 and KB 4099950. I was glad to know your experience going in, because “Configuring Updates” did take about 55 minutes for me.
You’re fine.
As long as you have the latest 4093118, you’re good.
What I did is posted here. Fewer reboots, fewer extra KB’s, and no problems.
Non-techy Win 10 Pro and Linux Mint experimenter
I recommend not rebooting in between installing these updates, so that “bad” files that have been replaced by fixed files in later updates do not ever become active.
Consider in step 1 replacing KB 4056897 with KB 4073578.
@ozbadcat: Thanks for the reminder. I’m afraid I have to check my CPUs, since KB4093108 can BSOD Win 7 if there is no support for SSE2.
@Elly: Really great post. About the reboots, I “like” to do them to pinpoint which upgrade messes things up.
@MrBrian: Thank you for your advice. I always thought not rebooting could be more problematic or as I said to @Elly more difficult to know which upgrade was the culprit if anything goes wrong. Regarding KB4073578, I don’t have AMD CPUs, so I don’t know if it is better to do that.
OK but it may be important to skip the reboot after step 3.
An answer to memory link found in post #188186 https://www.askwoody.com/forums/topic/recovering-from-2018-updating-for-win-7-group-b/#post-188186
Hello Ozbadcat, Your order looks good but you need to get April’s 4093108.
As I understand it, with all the talk here on differing forums, MrBrian,PKCano, and CH100 the 4099467 and 4100480 are not needed because 4093108 covers it.
I installed in this order. This has worked for me for years with IE being first and MSRT being last. All patches are from the Microsoft Catalog and downloaded the day of the install
(which should be today for you).
I was patched up to February 2018.
4092946 IE 11
reboot
4099950 Network – new 17th msu
4088878 March Don’t reboot yet, close it.
4093108 April
reboot
wait 3 to 4 minutes
reboot (I always reboot one extra time.)
I also tell people to let the computer sit unused for an hour so the Process Idle Tasks can run. This in itself has helped eliminate the odd sluggishness after an update.
This worked for me. I hope it works for you and others.
Windows 7 64 Group B
Thank you so much! You finally answered the question I had about whether KB4099467 was being included in the Group B Security Only Update KB 4093108. I only had two questions and that was the second one. Now I should be good to go. Whew!
(Windows 7 Pro, 64 – Group A) I have been a faithful follower of the DEFCON system for over a year, and have learned much from Woody and his team. The last Security Monthly Quality Rollup I installed was KB4074598 on 3/5/18. That was followed by Security Update KB4100480 on 4/9/18. KB4093118 does not show up on WU important or optional. Did I miss something?
Edited for HTML. Please use text tab for copy/paste.
I had problems with the March Monthly Rollup not appearing, related to KB4099950… and you said you haven’t installed it… are no Monthly Rollups showing up after Windows Update is run?
It isn’t hidden? Or listed under installed updates? (I always double check myself… but I have senior moments regularly).
What is your status regarding KB4099950?
Non-techy Win 10 Pro and Linux Mint experimenter
Sure enough, KB4093118 was hidden, (I don’t remember doing so!) Regarding KB 4099950, it does not show up at all. What do I do now?
Thanks!
Will do!
Greatly appreciate the expert assistance you, Elly, and the rest of the AskWoody team provides! Look forward to your continued guidance.
Thank you.
4093118 supersedes/replaces/contains 4100480 so you will not need to install it separately.
Alas, it’s a chicken and egg situation. I need to post a blog entry here in order to get a link to the blog entry. Then I use the link in the last line of the Computerworld post. Normally things happen pretty quickly, and nobody’s left in the lurch. This time, though, I was called away immediately after turning in the Computerworld article for edit, but before I had a Computerworld article address, for insertion back here on the blog. Sorry about that!
If it’s just a matter of cross-linking, then why don’t you just block comments here until you’ve edited your originl post to include the missing link? Just saying…
César
Win7, 64-bit, Group B.
I’m one of the Group B folks who chose to install KB 4100480 in late March, rather than roll back to December. (But I didn’t install the March Win7 or IE updates, nor did I install KB 4099950.)
Elly, on the other hand, is a knowledgeable Group B-er who chose to roll back to December, and she’s just posted a Lounge thread (previously linked in this thread) where she describes the steps she took to update herself (through April), Group B style.
I’ve just followed what I took to be the right steps for the March updates for a Group B-er in my position, and I figured Elly’s thread was as good a place as any to file my report, and here’s the link:
https://www.askwoody.com/forums/topic/recovering-from-2018-updating-for-win-7-group-b/#post-188376
Two questions, though: 1. Why does Microsoft keep pushing KB2952664 at us?
2952664 contains the primary telemetry machinery for Win7: the DiagTrack service. They periodically update it — we get an updated version of it.
Hello Willygirl, You did not mention what Group you are in A or B. Since you are at December if Group B, install the Security Only updates for Jan, Feb with a reboot in between, then then see #188364 above and you should be fine. The IE11 updates are cumulative so only the last one is needed and that is April kb4092946.
If you are Group A, then see Woody’s article for maximum advice.
But it looks like the April rollup update has what is needed. The kb4099950 is per MrBrian and SusanB already in the April rollup.
So basically install the April kb4093118 rollup (a fresh copy if you previously downloaded one).
The monthly rollup has the IE updates but remember – You DO need to update IE even if you don’t use it because it is integrated into the OS and those patches still protect your computer.
Microsoft is not including microcode in Windows Update.
Total Meltdown mitigation is included in the April Rollup and Security-only patches. KB4093118/Kb4093108 replace KB4100480 according to the MS pages.
Total Meltdown is not a part of the Meltdown vulnerability. Total Meltdown was created by MS in the Jan-Feb patches.
I am Win 7 x 64 Group A – İntel – laptop and as per your advice,installed KB4093118 April Roll-up yesterday -April 28 -.The download and installation went smoothly and have NOT registered any marked slowdowns or any other unpleasantries on the system.Your advice as always most valuable.Thank you.
I’m Group A (Windows 7 pro SP1 x64) and this is my story.
I decided to get rid of everything I have installed after December 31st, 2017.
Therefore I have uninstalled all Windows OS and IE patches (I did not touch any other patch) that I had installed since January 1st 2018, in order to bring my PC back to December 2017 rollup.
To do so, I uninstalled April monthly rollup, and the system automatically installed the March rollup; then I uninstalled March and the system automatically installed February rollup; so I uninstalled February rollup and that of January was automatically installed by the system; finally I got rid of January rollup and the system came back to the December 2017 monthly rollup patch condition, the one released on December 12, 2017.
I uninstalled ALL other Windows OS patches that have been installed since New Year’s Eve. I also uninstalled KB4100480, very critical patch but included within the latest April rollup.
Then I uninstalled IE patches (KB4089187; KB4096040).
I want to make it clear that I did not touch any patch other than those regarding the OS and IE (like patches regarding Office, .NET, SQL, and so on).
After that, with my PC back to December 31st condition, I started the Windows Update client, which came out with ONE single update at the end of the process: KB4093118, which I have succesfully installed.
Now my machine runs faster and very smoothly. That’s been my experience.
Frangar non flectar
Pensioner Lady here
Lenovo Intel(R) Pentium CPU j2900 64bit Windows 7 Pro
Installed January and February updates at Defcon3. Ignored March updates because of all the problems but did install KB4100480 plus the Malicious Software Tool.
Have just installed KBs 4093118, 4033342 and 890830 which were all checked.
KB 2952664 was also checked but have decided to hide it?? I know it includes some new features but Im not intending to migrate to Windows 10 at any time soon so am hoping Ive done the right thing.
All installed quite quickly and no problems as of yet (fingers,toes and everything crossed)
Thanks to all who contribute for continuing invaluable advice.
Group B updater here, who uninstalled Security Only updates from Jan. to March, as per Susan’s advice. I have two machines, both Macs running Windows 7 via Bootcamp, one 64 bit, the other 32 bit.
With all the discussion about Group B updating this month, I found myself wishing for clear, concise recipe for performing the (re-)install. Here’s mine:
1. Download all the Security updates for Jan. to April 2018 from https://www.askwoody.com/forums/topic/2000003-ongoing-list-of-group-b-monthly-updates-for-win7-and-8-1/. Get KB4092946 for IE11 from here as well.
For KB4099950, go to https://www.catalog.update.microsoft.com/Search.aspx?q=KB4088878
For KB4099467, go to https://www.catalog.update.microsoft.com/Search.aspx?q=KB4099467
2. Install KB4076897 (Jan. Sec. Only)
3. Install KB4074587 (Feb. Sec. Only)
4. Install KB4099950 (post-April 17 version of the NIC bug fixer)
5. Install KB4088878 (Mar. Sec. Only)
6. Install KB4099467 (BSOD fix)
7. Reboot the machine
8. Install KB4093108 (Apr. Sec. Only)
9. Install KB4092946 (Apr. Cumulative IE11 Security Update)
10. Reboot the machine
11. Run Windows Update – Hid this month’s Security and Quality Roll-up and KB2952664 from the “Important” list, leaving only KB890830 (Apr. MSRT). I also hid all that was offered as “Optional”. I then ran the MSRT update/test. When finished, it showed that there were no updates available for my machine.
Ta dah! All told, updating each machine took about 30 minutes, mostly because of the re-booting. The actual update installations went by quickly.
Mac Mini v. 6.2 (2012) with Win10 Pro 64 bit v. 1809
MacBook Pro v. 3.1 (2007) with Win7 32 bit - Group B Updater
MS is forcing updates again! My PC is always set for a metered connection. When I turn on my PC [Win 10 Home x64], I immediately update Windows Defender, then run wushowhide to block everything MS is shoving out. On the second run of wushowhide, I only release selected KB’s; this time 4093110, 4093137, 890830 and 4093120. Then I ran Windows Update. Windows Update had to run overnight to complete and in the morning, 4093110, 4093137 and 890830 had successfully installed but 4093120 had failed. I also noted that blocked KB’s 4049411 & 4033631 were installed! and looking back to 4/23, found that 4023057 had been installed even though it had also been blocked previously. And this version of 4023057 can’t be uninstalled. After several attempts, I was able to successfully uninstall 4049411 & 4033631. Then I went thru the process of removing all the UpgradeAssistant, rempl, usoclient junk and all the associated tasks. The worst part of this whole thing is MS keeps pushing out their upgrades on a PC where Win 10 is not supported by the manufacturer beyond 1607. Why? I can honestly say, after many years in IT, that Windows 10 has been the worst user experience Microsoft has ever created from the Win 7/8 forced upgrade thru today. Going to clear this machine out [it came with Win10] and install Win 7. At least I can control my own destiny there.
As one who did not roll back to December 2017, here is how I proceeded to update:
Having already installed January and February 2018 Updates, I had installed KB4100480 on April 6 to fix the Total Meltdown vulnerability.
With MS-DEFCON 3 for March, I first installed KB4099950 (which I had downloaded directly from the Catalog on April 8) and then installed KB4088878 (March SO), KB4099467 (for precautionary BSOD measures), and KB4096040 (IE). After rebooting, I checked “Windows Update” and proceeded as usual.
After keeping up with (and sometimes adding my $.02 to) the discussion on KB4099950 protocol, once MS-DEFCON 3 for April was posted, I updated my system this afternoon as follows:
1 – imaged my disk with Macrium Reflect
2 – downloaded KB4093108 (April SO) & KB4092946 (IE11) Updates
3 – installed each Update and then rebooted
4 – checked “Windows Update”
5 – hid “Important” and checked KB4093118 (Rollup), KB2952664 (again!), and “Optional” and unchecked KB4093113 (Preview)
6 – checked for updates again
7 – unhid any hidden updates to install today (none)
8 – installed the 5 Office 2010 updates along with KB890830 (MSRT) originally found after #4 above
9 – rebooted
Once again, “Thank You!” to Woody and the usual suspects who continue to contribute to AskWoody!
Thank you @SueW for your well elucidated description – well thought out and helpful! My system is exactly as yours (Win 7 SP1 Home Premium 64-bit; Office 2010) except I’m a Group A person since December. My problem is that I didn’t roll back anything after installing Jan/Feb/Mar rollups, except for KB4099950 – I uninstalled the pre-April 17 version and installed the new one. I had already installed KB4100480 after installing the March rollup. And then a few days ago I installed KB4093118 along with other April office updates. At this point is it bad that I never uninstalled the March rollup before installing April?
At this point is it bad that I never uninstalled the March rollup before installing April?
@OldBiddy, you are lucky Monthly Rollups are cumulative, so April’s includes March’s. Also, KB4093118 now includes KB4099950, so you should be all set.
@Nibbled To Death By Ducks:
no microcode updates are available from MSFT for other versions of Windows unless you are running any version of Windows 10 (except the 1511 release) AND the Intel CPU is at least a Broadwell or Haswell CPU or later.
also no new intel microcode updates for sandy bridge & ivy bridge CPUs have been added yet by MS until later this year.
you must wait for these new microcode updates to be available (either as a new BIOS/firmware update from the PC/OEM manufacturer or a new MS update, which you will have to search on the MS Update Catalog site for it); these take time to make
I have sticky notes all over the place. My plan, and thanks “anonymous” for your quick reply on a method to this madness. I am a Win7, Home user Spk1, 64bit, Intel, Group B, never went beyond Dec 2017 with updates. Had WU set to notify me when updates were available but not to download or install, let me choose.
The plan – I’ve provided a screenshot with this post to show anyone interested in how my WU list looks as of today April 29. I will hide only the two Win7 64bit updates noted below
1 – Hide 2018-01, Security and Quality Rollup 4055532, and also hide the snoop 2952664. Bypass anything to do with March from the catalogue are my thoughts.
2 – Go to MS Catalogue and download/install Jan 2018 Security Only (4056897) REBOOT
3 – Go to MS Catalogue and download/install Feb 2018 Security Only (4074587) REBOOT
3 – Install April Security and Quality Rollup (4093118)
4 – Install MSRT (890830)
Done? Hope so. Before I step into this it’s much appreciated if someone could give me their opinion of the updates and sequence listed above. Thanks.
MacOS iPadOS and sometimes SOS
You made a later post that indicates that you may have done what you’ve described in this one, so sorry if this reply is too late for some purposes.
You say you’re Group B, but if you’ve just installed 4093118 (April Security and Quality Rollup), you’ve moved yourself to Group A (and let Microsoft install all the snooping stuff that Group B-ers hope to avoid).
If that’s what you’ve done, it may be that you can move back to Group B by uninstalling 4093118 and then following the Group-B-appropriate steps for March and April, but I don’t know that there aren’t some complications with trying to move back to Group B after you’ve let Microsoft install a Group A update. So I’d say don’t try to do that (assuming you want to) until you’ve asked for more advice on that subject and heard back from one or more Loungers with more expertise than I can offer you in that department.
Hello Willygirl, It looks like Byteme’s comments are right. You went from Group B to A by installing the 4093118. If that is what you wanted to do then OK. But if you wanted to stay in Group B, you should uninstall the 4093118 and look in your history of installed updates and see if any unwanted ones (per PKcano and Woody’s people) are there and uninstall them too.
Once done reboot and go get new downloads of March and Aprils security only updates and the April cumulative update for IE11. I did not see any clear cut answers if 4099950 was in the 4093108 SO updates, so I did it.
Again review #188364
I’ll just leave everything as is, the PC and lap are both running good after downloading/installing according to my plan as posted. Must have been confused about the Group A/B thing, sorry. So I should have installed the Security Only update for April instead of the whole kit and kaboodle? I avoided March altogether. If I crash and burn there’s always Mac. Thank you so much for the advice, I’ll hang on by a wing and a prayer. I’ll be back for next month’s Lounge posts. Typewriters for journalists like myself and messaging via paper airplanes never had these issues, haha. Y’all are great thanks again.
MacOS iPadOS and sometimes SOS
I’m a stubborn Group B-er, but I have a friend who I guide through the Group B process each month, and I told her I wasn’t of a mind to discourage her from switching to Group A if she was so inclined. Being in Group A puts you in very good company, including the vast majority of both Win7 and Win10 users (as far as the snooping is concerned).
If you’re looking for ways to stay Group A but cut down on the snooping, you might want to give this Lounge thread a look:
https://www.askwoody.com/forums/topic/2000007-turning-off-the-worst-windows-7-and-8-1-snooping/
Your latest post is consistent with what I thought you’d done.
And again, just in case you’re at all unclear about the consequences, installing 4093118 has moved you to Group A, by which I mean that 4093118 wasn’t a “security only” (or April only) update, but instead was a massive (219 MB) cumulative update that installed everything that’s been in all the monthly Windows default “Security Monthly Quality Rollups” for the past many months — including most (or maybe more like all) of the telemetry/snooping and other stuff that the Group B-ers have been avoiding by skipping those updates and installing the “security only” updates instead. In other words, because 4093118 is *cumulative*, your Win7 is now in the same state that it would be if you’d been Group A all along, and consistently installing the rollups from Windows Update.
If that bothers you, and you want to go back to being Group B, that may be possible (I don’t know for sure), but it would involve (at a minimum) uninstalling 4093118 and then doing the Group B installs for March and April. But as I noted before, there may be reasons that reverting from Group A to Group B is more complicated than that (or not really possible) for some reason, so I’d ask for further guidance from somebody who knows more than I do before you try.
[ADDED: In particular, I suspect (not positive) that uninstalling just 4093118 won’t uninstall all the pre-April updates that were also just installed on your PC because 4093118 is cumulative.]
As a final note, if you end up *not* undoing what you’ve just done (with 4093118), I suspect it may not make much sense for you to go to the trouble of installing the “security only” msu’s for May and future months (in place of the cumulative “Security Monthly Quality Rollups” that show up in Windows Update). Instead, just follow Woody’s Group A instructions from here on out (when he gives the all-clear each month).
Well I’m feeling pretty much in a “duh” state of mind right now, laughing at myself at the same time. Thank you “byteme”. I’ll be in Group A and follow Woody’s advice on a monthly now. Not going to even try to turn back. My brother’s been doing auto updates on his Win7 all along and has never had a problem, but I didn’t want to take chances since back in December, hahaha, guess I messed up. Thanks for taking the time to explain all this. I’ll be back for the May “Group A” Woody guidance. It shouldn’t be this crazy, but … the whole world’s gone mad. Take care, you’re the best
MacOS iPadOS and sometimes SOS
Correction to my earlier post #188599: KB4023057 can be uninstalled from the Program & Features list…not the Installed Updates list [even though it shows up there].
Beware that when you uninstall one version of the “remediation program” with KB4023057, Programs & Features will show it a second time, after a reboot, under a different name. You’ll have to remove the second version also to get rid of it [hopefully] completely.
Will continue checking, especially over the next few days with 1803 due for release.
It shouldn’t be this difficult!
Ok. It’s all up to snuff. No issues with either device on the plan I used initially under #188642 above, suspected it might be a Norton thing. The AV detected a problem with my sharing network when trying to download the first update so I shut everything down except the PC and it downloaded/installed perfectly. That’s just a guess and maybe ridiculous but the good part is I’m up and running and feeling secure regardless of what popped in to stir up the pot. Thank you to everyone who posted with possible solutions covering all the different scenarios, it’s a relief to be back in the saddle with updates again.
MacOS iPadOS and sometimes SOS
This is what I did, and it is still working fine:
Recovering from 2018 Updating for Win 7 Group B.
Some other Group B folks posted what they did in the replies, and their results.
Happy Patching!
Non-techy Win 10 Pro and Linux Mint experimenter
If that .exe file was in the same folder as the 4099950 msu (e.g., if both files were on your Desktop) at the time you ran the msu, then the msu ran the .exe file. And I think it’s unlikely that the fact that you ran the .exe file a second time later is going to have caused any problem.
I don’t know the answer to that question. I’m guessing you’re probably OK as is, but hopefully somebody who knows for sure will reply.
PS: After I installed my other WU, KB3177467 showed up as a checked important update. Do I need this? (I don’t ever plan on W10).
KB3177467 is the servicing stack for Win7. You do need to install it.
Servicing stacks are stand-alone updates. They need to be installed by themselves. They won’t show up in Windows Update until there are no other pending updates.. That’s why it showed up for you now.
Hi Elly et.al.
I came upon a Microsoft article that shows I’m not crazy — many others get the Stop Error OxAB intermittendly. For your reading pleasure I have the link below plus a possible explanation that I am including in case someone understands it better than I do! If you have the patience to read through all the comments, I think they are saying that the April Rollup does not have the fix? I’ll leave this to greater minds than mine.
Check your version of Win32k.sys. Make sure it is less than or equal to 6.1.7601.24023 (Win 2008 R2 SP1, x64). That seems to be the latest known stable version.
Thursday, April 19, 2018 3:56 PM
Edit to remove HTML. Please use the “Text” tab in the entry box when you copy/paste.
Never thought you were crazy!
From comments on the link you provided:
“All of the files in KB4099467 are replaced with newer versions in the April 2018 rollup. I’ve tried every possible configuration of April roll up on/off, March roll up on/off, KB4099467 on/off, etc. and the only stable configuration is March, April and KB4099467 patches off.”(bolding mine).
Which matches your experience completely, right?
“Microsoft actually released a patch which causes the exact issue it was intended to correct.”
Seemed to summarize what was going on… although this was reporting on servers only, it may well apply to other versions. Can’t say for sure, but it seems logical. The personal computing bunch don’t have the same access for having problems addressed, the standard answer being to install W10 rather than fix Windows 7.
People were encouraged to run various logs and upload them so Microsoft could problem solve, but so far they haven’t posted what the specific bug might be, other than relating it to the more recent versions of Win32k.sys. They, too, were looking at possible antivirus conflict, but that seemed to be ruled out by the variety of antivirus being used on affected machines. Also there isn’t a fix, other than not installing the offending patches.
Good for you for finding others in a similar situation… there is strength in numbers…
I’m hoping they find the bug and fix it, and you will be able to get back to patching.
Smart sleuthing…
Non-techy Win 10 Pro and Linux Mint experimenter
However, I’m thinking that rather than using “log off” I will use “switch user” or “sleep” — do you think that by not completely logging off this would solve the problem? Hubby uses the computer so we have to switch between us.
@Peacelady, that is the problem with being non-techy. I remember this having been discussed elsewhere regarding the best general way to handle, and can’t remember what to do. I tend to log off only when I have to reboot for updates, or there is a local power failure… and I don’t share with anyone, so no experience with ‘switch user’ either.
Maybe someone else has an answer to this?
(((Hugs back)))
Non-techy Win 10 Pro and Linux Mint experimenter
Yes- I have pain, tremor, and mobility issues, and so nap more than sleep, and use the computer to distract from discomfort, and enjoy a larger life. It is more convenient to turn off the internet and keep my other programs running and open, and have them ready to reach for, than have to log on/off. It is one of the concessions I make for myself because of the disability and inconvenience. Just logging into this site requires multiple tries for me to get it right… and there are times I’ve had to have my daughter do it for me. She doesn’t need to be called to help me log into my own computer at 4 AM! I’m not recommending it to others, but has worked for me for a year or so. I set it so it doesn’t do anything for 6 hours, just in case… and I’m almost always using it before then. I would love to have a separate laptop for off-line, to know I’m really secure with my data, but with all that’s going on, it is financially out of the question, and I can no longer tolerate sitting at my desktop, which was my always off-line work system. So… not for a tech reason, but for dealing with my realities.
And just so you know… I’m not pitiful. I had/have a full and fulfilling life. But it is why a non-techy like me would become so obsessed with computing this late in life, why I have time to research and answer questions, and why I defend my beloved laptop so passionately! I think it is important to talk about these things as well as the technical aspects of computing, because disabled people (me specifically) can see a huge improvement in their quality of life by utilizing technology. Just as sharing the best way to achieve patching helps computer users in general, the disabled need to share what works so they can access more of the world and enrich their lives. And we shouldn’t be forced to share data in order to use voice features… technology hardware and software capabilities have advanced so it can be locally and privately available (one of my pet peeves). One of the best things about being on this site is I don’t see or experience my disabilities affecting others’ reactions to me- so keep it that way, okay? (Although I don’t mind answering questions, better you know what is real… Think about how to address the person in a disabled body, next time you have the opportunity. Too many people just get embarassed and ignore that there is a real, live, feeling person in the room. Start by making eye contact, smiling, and saying ‘hi’? and go from there).
(((More Hugs)))
Non-techy Win 10 Pro and Linux Mint experimenter
Elly – You are a beautiful person inside and out. We all have some abilities and disabilities and what is so exceptional about everyone here is the kindness and expertise shared so freely. Your caring and understanding came through in your replies to me — and I think that is why I intuitively always signed off with (((hugs))) — and always will!
Big (((hugs)))
Hi Elly, Thanks for sharing and giving of yourself to us all. I myself have a neuromuscular disorder, which includes pain, weakness and visual issues; and I live alone. I’d be most interested in how you deal with sitting at the computer for long periods… I find it so difficult. Even just reading the info here (especially of late!), my body wears out. I find computers very interesting, but am light years behind everyone else. I’m so thankful for you and everyone else that helps here. If you ever do a forum with computer tips for disabled persons, I’d be interested. Computers and tech do open up the world, and are so much easier to use than phones and tablets… at least for me.
Hi, Lori
I’m past being able to sit at a computer, and spend most of my time reclining in bed, with my feet up.
Sorry for the delay in responding. I think you have a great idea. Will check into it.
Non-techy Win 10 Pro and Linux Mint experimenter
@Elly: You do a fantastic job with all of the information you provide to all of us, who appreciate it very, very much! Just wanted to provide you with a “personal” thank you. I know that everyone is grateful for all of the information you share with the rest of us!
GeoffB, sorry to hear this. I’m down to about one last direct idea. Check your installed updates for KB4093113, a preview. If its installed, then uninstall it and uninstall KB4093118. Restart and reinstall the KB4093118 msu. Restart and see if the service connect error persists. If the preview isn’t installed and if you can stand the annoyance for a few days, wait for the May rollup, due next Tuesday. Otherwise, uninstall KB4093118.
It would be good if you checked your system files. Two tools, I prefer, can be found at MajorGeeks.
SFC Utility, run with admin privelege, will run sfc /scannow and produce a copy the CBSlog as a txt file on your desktop. http://www.majorgeeks.com/files/details/sfc_utility.html
SFCFix scans the CBSlog for just the errors. It produces a txt file in the directory, you ran it from, so desktop is best. http://www.majorgeeks.com/files/details/sfcfix.html
First, some information.
The Rollup patches are composed of three parts non-security updates, security updates, and IE11 Cumulative updates. By following Group B (installing security-only and IE11 cumulative) you are installing 2/3 of the Rollup. If you install the Rollup, there is no need to install the security-only and IE11 patches.
Also, the Rollups are CUMULATIVE, which means they contain all the previous Rollups.
Group B KB4074587 – Feb 2018 – security only update KB4056897 – Jan 2018 – security only update KB4073578 – Jan 2018 – AMD security only update KB4099950 – NIC fix – download both files but only run .msu KB4088878 – Mar 2018 – security only update KB4099467 – fix for stop error 0xAB error message when logging off KB4093108 – Apr 2018 – security only update – REBOOT KB4092946 – Apr 2018 – IE cumulative update
If you follow Group B
+ KB4073578 replaces KB4056897 – you do not need both.
+ You do not need to reboot before KB4092946 – Apr 2018 – IE cumulative update
Group A (all from catalogue) KB4099950 – NIC fix – download both files but only run .msu KB4093118 – Apr 2018 – monthly rollup KB4099467 – fix for stop error 0xAB error message when logging off – REBOOT KB4092946 – Apr 2018 – IE cumulative update
If you follow Group A
+ KB4099950 – NIC fix is bundled with KB4093118 – Apr 2018 – monthly rollup
+ Since the IE11 CU is contained in the Rollup, you do not need to install it a second time.
+ If you use Group A, it is better to install through Windows Update b/c the patches bundled with the Rollup are installed in the proper order.
+ If you feel you need KB4099467 – fix for stop error you can manually install it before the reboot.
There is absolutely no need to do both Group B AND Group A patches. Group A patches contain the Group B patches.
@PKCano: Thank you for that very brief, and to the point, instruction panel you just posted! Outstanding work, as always!!
You should go ahead and install whatever .NET Rollups are checked in Windows Update. If you didn’t need both, then both would not be checked.
Yes, hold off on the .NET 4.7.1 until the dust settles. You don’t need a new of .NET at this point.
You don’s say which version of Windows you have. I am assuming Win7. If it is Win8.1, substitute the Security Only (SO) patches for the correct version.
If you are trying to install Jan and Feb security-only patches, you may need the ALLOW Regkey set. They have since discontinued it, but it won’t hurt to have it there anyway. Here are the instructions for setting the key in the Registry.
Look in your installed updates list. If you installed KB 4099950 before April 17, you need to uninstall it. Then download the latest version from the Catalog. There will be two files, (an .msu and a .exe). Put them in the same location on the PC.
Download the Jan – MAY Security Only Updates and the MAY IE11 Cumulative Update. You can get the direct download links in AKB2000003 on this site. You do not have to reboot after the installations except where indicated.
Set Windows Update to “Never check for updates”
Open Services and stop the Windows Update service.
Install:
KB 4073578 Jan SO
KB 4074587 Feb SO
KB 4099950 (double click the .msu, the .exe will execute automatically)
KB 4088878 Mar SO
reboot, wait 10 min after login.
Open Services and stop the Windows Update service.
Install:
KB 4093108 Apr SO
KB 4103712 May SO
KB 4103768 May IE11 Cumulative
Reboot
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Notifications
