It’s time to get the July patches rolled into your Windows and Office systems, in spite of a handful of niggling bugs. Details coming soon in Computer
[See the full post at: MS-DEFCON 3: Some lingering problems, but it’s time to get Windows and Office patched]
|
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it. |
-
MS-DEFCON 3: Some lingering problems, but it’s time to get Windows and Office patched
- This topic has 153 replies, 39 voices, and was last updated 7 years, 5 months ago by
.
AuthorViewing 50 reply threadsAuthor-
It is probably best to wait a week or so.
Fortran, C++, R, Python, Java, Matlab, HTML, CSS, etc.... coding is fun!
A weatherman that can code1 user thanked author for this post.
-
Check this out:
https://www.tenforums.com/windows-updates-activation/89349-kb4023057.html
This update replace KB4022868 and I don’t have it installed. weird…1 user thanked author for this post.
-
-
Thanks Marty and abbodi86, KB2956078 just showed up today on my computer. That’s the one I’ll get.
Being 20 something in the 70's was so much better than being 70 something in the insane 20's1 user thanked author for this post.
-
There are three topics on this subject – “July 2017 patches are rolling out” and the two specifically about the Win7 July patches. There was no conclusive cause pinpointed and the number of BSODs didn’t seem to be an overwhelming problem.
There is some advice I can give you.
First, read through the three topics and see if any of the affected computers match what you have. That will give you some idea.
Second, BACKUP, BACKUP, BACKUP. Make a backup of your data and an image of your PC.
Third, Be sure your drivers are up-to-date, especially graphics and chipset.
Fourth, turn off programs running in the background before you install, especially virus/malware/firewall/exploit-prevention software. -
Here’s another link I just found
Scroll down past the first MS reply and you’ll see some discussion of Win7 users who have had the BSOD problem. It seems that some folks with BSOD have drivers that are up to date and others don’t.
Regarding drivers, some people say to update them others say that if it aint broke don’t fix, in other words don’t update.
I personally find this all pretty confusing as it seems the BSOD is essentially a random occurrence. I’ve got two Dell computers running Win7 Pro x64 and I’m at a loss as to what to do. I could be lucky and have success installing the updates, or unlucky and need to uninstall the updates – uninstalling seems to be the most consistent “solution” to BSOD – but then I’m left with computers that have security holes because they aren’t patched.
I’m pretty tempted to wait another week or two, but I’d welcome any advice, feedback or comments from the experts out there.
4 users thanked author for this post.
-
There are three topics here with info on BSODs on Win7 caused by KB4025341 or KB4026337. There didn’t seem to be a common thread as far as hardware was concerned – a bunch of different specs. No definitive solution other than uninstalling the updates. The only thing common was the hardware was older, not the latest.
-
The only possible link I came across was Avast being installed on several machines that all had the BSOD after updating. Disabling or removing and then reinstalling Avast seemed to fix things. Someone linked to a Reddit thread where this was stated in one of Woody’s previous blog posts and, IIRC, at least one person in the comments for that post mentioned that their PC that had a BSOD after updating also had Avast. I’d provide links if I weren’t currently posting this from my PS4 😛
-
-
Well I need a bit of help please- have just installed the July Security update on my Win7 machine and on reboot I got BSOD several times. I have tried to uninstall on Safemode with Command Prompt as wusa/uninstall/kb:4025337 and nothing seems to happen except for a window coming up with details of the various commands. I have also tried to open with best configuration with no luck – got BSOD. I don’t have Avast. Am writing this from my iPhone. Did the security update on Win8 so far so good! I do have images but would really like to uninstall this update if I can. LT
Update: Happy to say that by following a link I have been able to rollback that ‘pesky’ update.
And All IS WELL……. I have got my trusty Win7 Machine smiling at me!!! But of course I need to find out what is doing this on my machine. As I said I do not have AVAST – but do have Norton Security…….. maybe I need to disable it before I try to reinstall. I really don’t want to put myself through all that again……… so any ideas would be gratefully accepted. This is the very first time that I’ve run into trouble updating………… and before everything worked v. smoothly and satisfactorily…. I am now going to see if I can find any pointers on line! LTPeople say nothing is impossible………. but I do that all the time: Winnie the Poo.
1 user thanked author for this post.
-
-
-
There were no recent .NET updates except for .NET 4.7.
When the .NET patches show up as CHECKED updates in the “important updates” list, you should install them. If they are UNCHECKED, whether in the optional or important list, you should ignore them.
You should not install the ones from the catalog – they are hotfixes and will be rolled into the next month’s updates delivered through Windows Update – so you will get them then (if there are any released). -
-
-
Check for updates.
Under the “important updates” list DO NOT check anything that is unchecked.
Click on “install updates” and install everything that is already checked.
Do it now.You should be good till next next time the DEFCON number is 3 or above.
1 user thanked author for this post.
-
-
I saw an admonition about “non-professionals” not using the catalog in that manner. Just want to be sure I’m not missing something important. Should I not concern myself with these particular missing updates if they are not showing up in the updater?
The Catalog has tens of thousands or maybe hundreds of thousands of entries. There is no index or any way to identify what you need in the Catalog without an external reference.
As such, the Catalog is only for searching and for downloading updates which you already know, not for identifying unknown updates.
Your only reference should be Windows Update.-
-
I understand that we use IE directly or indirectly. I guess my point is we have a choice between (i) updating to fix July’s vulnerabilities and reopen June’s, or (ii) not updating which protects you from June’s vulnerabilities but not July’s.
I think I’m leaning towards leaving well alone and staying protected against June’s vulnerabilities, because those vulnerabilities have presumably been known about longer and therefore ne’er-do-wells have had longer to craft malicious code for them.
Windows 10 Home 22H2, Acer Aspire TC-1660 desktop + LibreOffice, non-techie
-
That’s my take, as well. June’s patch was to fix a security issue. July’s patch was to fix an esoteric printing issue. Why would you negate a security patch if you have no intention of ever printing documents with iFrames from IE? I see July’s IE patch as a sop to corporate users, with Microsoft’s assumption being that corporations have other methods that their IT professionals can employ to guard against elevated privilege incursions.
1 user thanked author for this post.
-
If you apply the July update, just one vulnerability (CVE-2017-8529, which is not classified as a Critical severity vulnerability by Microsoft) is not fixed. If you don’t apply the July update, multiple vulnerabilities – including some which are rated Critical severity by Microsoft – are not fixed.
-
-
-
Third, Be sure your drivers are up-to-date, especially graphics and chipset.
I must most humbly disagree. 🙂
IME, the latest NVIDIA graphics driver is usually best avoided as it is almost always buggy.
My way of determining the latest safe driver to install, is to read the NVIDIA forum thread for the latest driver and note the version(s) posters are rolling back to after finding bugs. The one most mentioned as being rolled back to is the safest one to update to.
Hanlon's Razor: Never attribute to malice that which can be adequately explained by stupidity.
-
The best driver (whether graphics, chipset, or other such as audio) is the one that is working 100% effectively with your programs, applications, and games etc.. If you have any sort of problem with a driver then it is worth trying an update, if not then it is best to leave well alone. Windows Security Updates (once approved by a site such as this one) are the sole exception to the First Rule of Computers – If it ain’t broke, don’t fix it!
Graphics drivers are always potentially problematic and not just from the point of view of graphical defects such as tearing or framerates, but also from the point of view of temperature and blue-screening. Never install a new graphics driver without reading the appropriate forum e.g. Nvidia for potential problems. Avoid all beta drivers and only consider the certified ones.
As for chipset drivers, most users will never need to install updates and in my opinion none should do so unless there is a specific problem identified by the manufacturer which the update is designed to resolve (including specific security issues although I suspect that if you practice “safe surfing and emailing” and run anti-virus and malware programs with daily updates along with some form of backup you’re likely to be pretty much ok without the need to panic about security vulnerabilities in hardware drivers). How many computer users even know the url for their chipset manufacturer’s website let alone visit it? How many could even tell you who their chipset manufacturer is :)?
Which leads us to the Second Rule of Computers – Never install driver updates from Microsoft through Windows Updates, always do so from the manufacturer’s website and in the case of chipsets especially on their recommendation only.
I am posting this from Safe Mode on my windows 7 Home computer. This afternoon I downloaded & installed both KB patches, KB 4025337 & KB 4025252. When I rebooted, I got a BSOD and have continued to experience it numerous times today. I tried system restore twice, with 2 previous restore points, but it’s not working. I have done this update through advise from your site many months previously, & have had no problems. I think that the restore points didn’t work because, despite loosing information, the new KB files are still there. I can’t get into windows update to delete them, so I’m rather up the creek without a paddle right now.
-
Actually, I was able to get info via the internet because of being in safe mode with networking. I’ve occasionally worked with the command prompt so it would have been possible via the command(Run as Administrator), ‘wusa /uninstall /kb:4025252 /quiet’, to remove the KB files, but I found a way of getting into windows updates by typing ‘removal of programs’ in the ‘Search” box, which brought me to Windows Updates. I removed both of the offensive KB files and, voila, no more BSOD and my migraine is gone!! Needless to say, thank you for answering my prayers, and forgive me for being such a computer dummy.
1 user thanked author for this post.
-
Oh, bless you! For fear of this happening to me I shall wait a little longer before installing KB 4025337. Both my P.C.s (laptop & desktop) are loved and cherished museum pieces, and fit well in the somewhat dated repository that is my home.
-
-
-
Be sure to read Woody’s article on ComputerWorld before you start. The link is on the main blog page. It will explain about the issues with the Office Outlook patches and the IE11 cumulative patch.
1 user thanked author for this post.
Regarding the BSOD causing bug in the July Rollup, do you all think it is perhaps advisable to wait for August patches instead of taking chances right now?
2 users thanked author for this post.
-
-
-
-
-
-
-
-
I suspect it may be tucked behind their paywall here…
-
-
-
-
Just follow the instructions in AKB 2000003
1 user thanked author for this post.
-
Following instructions I hope I understood, I installed June updates and also for ie11.
I have 10 laptops and computers on the go in Group B so I’m being extra careful.
No BSOD on any over yesterday and so far today.
I will install July after the storm is over and nobody (LOL) is having problems.
Someone mentioned awhile back how hard it is to follow Group B, it’s a waiting and reading game. Sit back, keep cool and don’t be in a hurry to install anything until the Defcon is raised to 3. Been working for me since last Oct.
To try to make things clear about the IE11 patch
June IE11 patch = CVE17-8529 + (other June security fixes) + print bug
If you install the June patch only you get CVE17-8529, other June security fixes and the print bug but no July security fixesJuly IE11 patch = (other June security fixes) + (other July security fixes) + no CVE17-8529 + no print bug
If you install the July patch you get all the security fixes for June and July except CVE17-8529 and the print bug is fixedWindows 10 version 1511 end of service for CB and CBB
Windows 10 version 1511 will no longer receive security updates
October 10, 2017
1 user thanked author for this post.
I just received an email from Microsoft concerning Outlook The patches to correct the botched ones from June are now available. It supposed to fix issues 1 to 5 and 8, but 6 and 7 are still being investigated by them.
Issue #1: Error when opening an attachment in an email, contact, or task formatted as Rich Text
Issue #2: Opening Mail Attachment warning when opening an attachment that includes consecutive periods (…) or exclamation point (!)
Issue #3: Error when setting ShowLevel1Attach to allow Outlook to display Level 1 attachments
Issue #4: VBScript does not run or you receive malicious code warning when using a custom form for Outlook
Issue #5: “Something went wrong…” or “Search results may be incomplete” error when searching in Outlook [FIXED]
Issue #6: iCloud fails to load properly in Outlook
Issue #7: When printing a specific iframe or frame in a web page, the print output may be blank, or text is printed with a 404 Issue #8: Some Web-based Outlook add-ins don’t work when using on premise Microsoft Exchange 2013https://portal.msrc.microsoft.com/fr-fr/security-guidance/advisory/CVE-2017-8571
https://portal.msrc.microsoft.com/fr-fr/security-guidance/advisory/CVE-2017-8572
https://portal.msrc.microsoft.com/fr-fr/security-guidance/advisory/CVE-2017-86631 user thanked author for this post.
-
The link is on the main blog page – click on the “Home” button at the top of this page.
1 user thanked author for this post.
-
1 user thanked author for this post.
-
Very pleased to see that you use WUMT 🙂
It may be a case of the grace period for the delay being expired which has no relation to Microsoft declaring 1703 as CBB, which is purely a marketing non-technical decision.
By the way, why do you use the dubious Defer Feature Updates setting if you have the perfect updater in WUMT?1 user thanked author for this post.
-
-
I thought I shouldn’t even be offered the Upgrade with Defer Feature Updates checked until it was declared CBB
I think the Defer Feature Updates is strictly time restricted and has no relation to the Microsoft’s other activity. This is what I tried to explain in the other post.
WUMT picks up drivers which are considered “optional” by WU if you have the newer and acceptable drivers installed. The optional drivers would be installed only:
– If there would be no other driver installed
– If you do a scan from Device Manager and ask for upgraded drivers
– via WUMT which does not make a distinction between Optional and other updates, as this is rather artificial classification for Windows Update use, but has no technical relevance, they are all updates. The Preview Updates are somehow different though among those optional and normally should be avoided, but this does not apply to Windows 10.The only other situation when drivers are pushed automatically is if some drivers are considered important for functionality or security. There are more and more attacks on hardware via drivers and this is why sometimes drivers get pushed as important.
-
See my reply below.
1 user thanked author for this post.
-
Thanks again, ch100. It looks, though, like everything is working as it’s supposed to … MS announced today that WIN 10 1703 is now suitable for “broad deployment by businesses” and is being pushed to all Windows 10 computers whom MS declares can run it as of today. The article referenced by PKCano below explains it all. Huh, no more CB or CBB? Really MS? These guys just keep getting harder and harder to live with. I’ve never seen a company so anxious to put the screws to it’s customers … Blahhhh! Thank goodness for WUMT, is all I can say. It’s made my like a whole lot easier, although I still maintain that WaaS has made it no fun using anything Windows anymore. Enjoy it while you can, MS, cause stuff like this is going to come back to bite you in the butt!
1 user thanked author for this post.
-
-
-
Here’s the answer
Windows 10 Creators Update now available to all, November Update end-of-life’d
Arstechnica1 user thanked author for this post.
Installed kb4025337 and it went smoothly.
Created a restore point and crossed fingers….
Installed kb4025252 no issues.Was going to go to Group A but chickened out.
Maybe August……….Windows 7 Home Premium SP1 64 bit Server 2008 R2
Dell Inspiron i3 3240 Ivy Bridge
Intel-
I recommend installing the July 2017 Microsoft updates, including the July 2017 Internet Explorer update, even though doing so leaves one vulnerable to CVE-2017-8529.
Some info about CVE-2017-8529:
“An information disclosure vulnerability exists when affected Microsoft scripting engines do not properly handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user’s computer. In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability.
In addition, compromised websites and websites that accept or host user-generated content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker’s site.
An attacker who successfully exploited the vulnerability could potentially read data that was not intended to be disclosed. Note that the vulnerability would not allow an attacker to either execute code or to elevate a user’s rights directly, but the vulnerability could be used to obtain information in an attempt to further compromise the affected system.
[…]
Exploitation Less Likely”
There appears to be no publicly available exploit for CVE-2017-8529, according to http://www.securityfocus.com/bid/98953/exploit and https://vuldb.com/?id.102453.
I can report that the Security Only patch KB4025337 did fix my Outlook 2010 search errors. There are no more notices in the log files of “Search cannot complete the indexing of your Outlook data. Indexing cannot continue for C:\Users\xxxxx\Documents\Outlook Files\xxxxxx@xxx.xxx.pst (error=0x81404005). If this error continues, contact Microsoft Support.”
This notice was only in the log files. I did not see any degradation of Outlook 2010 search in real life.
1 user thanked author for this post.
-
There was a Blog post on .NET 4.7 on June 14th
1 user thanked author for this post.
-
Back up your data first. Turn off your virus/malware/anti-exploit programs. Install the updates.
If you encounter a Blue Screen, it will most likely occur during the install or in the process of rebooting. It is reversible by uninstalling the Rollup. -
-
-
-
-
My Processor is an INTEL (R) Core (TM) i5-2430M Cpu @ 2.40ghz. and I believe it’s code name is SandyBridge. And I can state that my system had a BSOD when I installed KB4025337……… as I reported earlier (above) Since then I’ve been looking for reasons for this.
Some say its the chipset. Some the antivirus. I have downloaded NirSoft’s Blue Screen View and found references to antivirus/malware. So I disabled ALL my security programmes and went off line…. disconnecting my wifi…. Then installed 4025337 again. Unfortunately I had the same result – BSOD. So back the same route – SafeMode/unistall/reboot/ which seemed to take forever……. even went downstairs and made a coffee and sandwich and it was still booting up. I say this in case there are some who perhaps think something’s wrong…………. but let it go through it’s paces….. and let it finish in it’s own time!
Even tried to update the chipset ‘driver’ through Device Manager but was told I had the best. (or words to that effect) So there we are………… something is wrong in the state of Denmark….. but what ?? It’s not a very comforting thought is it. Where are all the words of wisdom that MS sprouted when releasing WinX……… about security, about keeping everyone safe from harm. Seems that the harm is being administered by them……… or that’s what you begin to wonder.
People have said perhaps the August update may include a fix for this………. I won’t hold my breath considering there seem to be only a few that this has affected……… but who knows maybe it could be so. In the meantime I think I will leave this well alone……… but of course will keep an eye and ear open for any possibilities and thoughts on the subject. LT
“I hate those earnest TV Documentaries that are the world according to people in glasses who think they know better than you” Billy Connolly
1 user thanked author for this post.
-
Well………. duh! I did it this time……….. I forgot to sign in before I posted and couldn’t understand why I couldn’t see my post………… AND then the penny dropped!!!!
And thanks for fixing it for me! LTNever look down on anybody unless you’re helping him up.
– Jesse Jackson
-
-
-
-
Good Afternoon,
Thank you for the most helpful info for staying in Group B. The link to PKCano’s link to the KB list is great.
I’m doing my updating and am seeing under “important” a KB that I want to run by you before I install it. Following is a copy/paste I did that will fill you in:
System Update Readiness Tool for Windows 7 for x64-based Systems (KB947821) [October 2014]
Download size: 264.8 MB
You may need to restart your computer for this update to take effect.
Update type: Important
This tool is being offered because an inconsistency was found in the Windows servicing store which may prevent the successful installation of future updates, service packs, and software. This tool checks your computer for such inconsistencies and tries to resolve issues if found.
More information:
http://support.microsoft.com/kb/947821
Help and Support:
What do you think? Does this look ok?
Thanks again,
Chip
1 user thanked author for this post.
-
If this is a CHECKED update in the “important updates” list, install it along with the other patches you install. It’s an old patch which may or may not install. If is UNCHECKED, ignore it.
1 user thanked author for this post.
-
KB947821 being offered is a sign that you broke your Windows Update somehow and needs major repairs.
It is not common and I personally have never encountered this situation, although I probably tested Windows Update on thousands of Windows 7 machines, installed in various configurations.1 user thanked author for this post.
Just installed the updates here (July’s rollup and MSRT)… So far, so good, install went quick and smooth, perhaps even quicker than other months…
After the reboot I ran some games for a couple minutes to see if everything is ok regarding the graphic drivers and had to do some chores, so I left the notebook on for some hours to see if it is running stable, and apparently everything seems normal.
I did not install, once again, our dear friend KB2952664, and hid it as I did with the other dozens of previous releases of this snooping fellow… Is it ok to leave it hidden?
1 user thanked author for this post.
-
Sigh of relief!! 🙂
I did not install, once again, our dear friend KB2952664, and hid it as I did with the other dozens of previous releases of this snooping fellow… Is it ok to leave it hidden?
Wise choice!
-
Firstly @lightbulb, Welcome 🙂
I’ve installed the July security updates
Secondly, did you install the security-only update (Group-B style) KB4025337? or did you install the Security Monthly Quality Rollup (Group-A style)?
BACKUP, BACKUP, BACKUP. Make a backup of your data and an image of your PC. Third, Be sure your drivers are up-to-date, especially graphics and chipset. Fourth, turn off programs running in the background before you install, especially virus/malware/firewall/exploit-prevention software.
I did a full backup before updating. I didn’t see the warning about drivers. I’m not even sure how to check the drivers.
This is also the first time I saw the advice to shut off security software before updating. Is that a general rule, or only if someone had a BSOD?
Five updates were available. Only these got installed:
2017-07 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4025341)
Update for Windows 7 for x64-based Systems (KB2952664)These were unchecked and didn’t get installed:
Microsoft .NET Framework 4.6.1 for Windows 7 for x64 (KB3102433)
Microsoft .NET Framework 4.7 for Windows 7 and Windows Server 2008 R2 for x64 (KB3186497)
Update for Windows 7 for x64-based Systems (KB3021917)Thanks again!
Morty1 user thanked author for this post.
WELCOME TO MS PREDATOR!
Killing Win7 with BSOD.
Starting with the the old, the young and the weak.“The BSOD appears to be associated with older hardware, albeit in an unpredictable way.
I would back up, back up, back up, then apply the rollup.”
Captain WoodySo if BSOD then…
Safe Mode Recovery with Uninstall or System Restore?
Re-installing a system image or Win7 itself?
Even if these work you still have to sacrifice “security updates” with “hardware issues” to stay alive.
Leaving Win7 fatally wounded.
Thank you MS!
Survival of the Fittest As A Service.The MS Solution?
Get the best new computer with the latest software.
Absolutely!
Ship-shaping two Macs as we speak.
Chromebooks already sailing smoothly.Will still maintain my beloved Win7 “Toshy”.
Ready for action for as long as possible.
So still on-screen with you, the crew and especially PK “Vul” Cano!
Well at least until 2020.So Round Perdition’s Flame with Captain Cook on the The Apple…
Oh No!
The MS Office(r) on the mac bridge is going rogue one!
Please keep the transporter ready guys and gals – I’ve a feeling I’ll be back.Live Long & Karma!
sainty ??⛵️??1 user thanked author for this post.
-
Bought my first Mac in 2012. I’m running Win XP/7/8.1/10(1607)?Insiders in Parallels VMs. I am so glad I don’t have to fight MS anymore – crash a Win machine, copy the VM back from the last backup.
I have Office for Mac 2011 but I use the 2010 version on the VM for every day stuff. Even run propriety software with all sorts of strange connections (USB to RS232 for example) from Win8.1 VM on a laptop without problems.
Cheers! If you have questions…ask. -
Very tempting I might say………. with plenty of questions coming to mind!!!
Perhaps we should start a new topic on this…. LT“It is seldom at the frontier that discoveries are made but more often in the dustbin.” Alan Bennett
-
There is already the space for it in the Lounge. MacOS for Windows wonks
1 user thanked author for this post.
-
I’ve just left a post at : https://www.askwoody.com/forums/topic/and-so-it-goes/#post-127397
Do hope ‘someone’ will add their experiences on MAC OS’s. LTYour time is the greatest gift you can give to someone. — unknown
-
-
-
-
PK You’re A Star!
Promoted to Captain of “The MacWindows-Wise”.
(“Wise” so much more appropriate than “Wonks”!).I will be following your posts on “MacOS for Windows wonks” avidly.
As I’m sure many more will do as they are forced to abandon “The MS Titanic Hubris” for The Apple, Android or Linux fleets of the future.Admiral Woody (yes, I’ve promoted him too) will battle on with You and the Super-Crew for sure.
The Microborg will fall from The Cloud in a malware meltdown of their own devising.
President Leonhart (promoted again!) will lead The Federation…Whatever!
Macs Away!
Three Cheers – Hip Hip Hooray..!Live Long & Karma
sainty??⛵️??1 user thanked author for this post.
-
A Mac does give you the ability to run, well, everything – I’ll give it that.
But the devil is in the details. My difficulty has been that it’s not possible to get as powerful hardware from Apple as you can in a high end PC workstation. There’s a new Mac Pro in the works, I hear, but it’s not dual CPU…
-Noel
1 user thanked author for this post.
-
-
It doesn’t look like they have released an update for Adobe Reader XI.
https://helpx.adobe.com/acrobat/release-note/release-notes-acrobat-reader.html
Anyway, I thought you could just open Reader and choose Help > Check for Updates and it would tell you if you had the latest version or not.
Windows 10 Home 22H2, Acer Aspire TC-1660 desktop + LibreOffice, non-techie
1 user thanked author for this post.
-
I’m not sure that Reader XI will be getting further quarterly updates, after they started upgrading to Reader 2017 (see this recent post and blogpost discussion).
-
-
-
Hello Woody, Kirsty and others. FYI. Just installed the .21 update for Adobe Reader XI. Please note, I checked for updates in AR. It found the update. When it was finished downloading my User Access Control (UAC) popped up asking permission to install a Adobe Program. Having NOT clicked “install” yet on the update I was suspicious. With people saying they were ‘tricked” into moving to Adobe DC, I clicked No or denied it running. After the UAC disappeared, I then clicked the “install” button for the update. The UAC appeared and since it was 1 second after clicking install (of the update) I clicked yes or allowed it to run. The Adobe Reader was updated from 11.0.20 to 11.0 21. Using Ccleaner to examine the “windows startup list” and “scheduled tasks” I did see a new task for Adobe to check for updates (which I previously had removed). I deleted this task since I do ALL of my updates manually (in the B group). All appears well. Remember EOL for Adobe XI is Oct 15th so there may not be another quarterly update. We will have to see.
1 user thanked author for this post.
-
-
In addition to the other resources mentioned above, also take a look at this article by Woody from 2017.01.13: http://www.infoworld.com/article/3157420/microsoft-windows/adobe-acrobat-reader-dc-security-update-installs-chrome-spyware.html .
Recently, I experienced what you did in attempting to update Adobe Reader 11 for client, finally replacing it with AR DC Classic Track 2015, found at: https://www.adobe.com/devnet-docs/acrobatetk/tools/ReleaseNotes/DC/dcclassic15.006.html (146 MB), for which this update was released on 2017.04.11, found at: https://www.adobe.com/devnet-docs/acrobatetk/tools/ReleaseNotes/DC/dcclassic15.006april2017.html (35.9 MB), updating it to the current version of 15.006.30306.
Hope this is useful.
Cheers,
AJN1 user thanked author for this post.
-
Hello AJN, see above report to Kirsty on the new quarterly update .21 of August for Adobe Reader XI and possibly how to avoid getting moved to DC.
1 user thanked author for this post.
-
Hello Craig,
Sumatra is an excellent application. If you have Adobe Reader installed because of certain features or compatibility issues (such as my client has), then yes — uninstall version 11 and perform the two installations in the order discussed above.
If, on the other hand, you do not use AR, but simply have it as a legacy installation courtesy of the computer’s OEM, then just uninstall it and be done with it (which is what I have done on my own machines; personally, I use Tracker Software Product’s PDF-XChange Editor — but, again, Sumatra is an excellent alternative to AR).
Hope this answers your questions; good luck.
Cheers,
A.J.
1 user thanked author for this post.
Given what I’m reading, I guess I’ll delay installing for a while, in the hope that the July group B patches get a bump.
I decided to install July’s updates today since tomorrow is already “Update Tuesday” for August! Following Woody’s instructions for Group B, I’ve included details/comments:
Step B2: Get the Security-only patches and the Cumulative Update for IE11. <= and installed each
– 2017-07 Security Only Quality Update for Windows 7 for x64-based Systems (KB4025337)
– Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based Systems (KB4025252)Step B3: Check for updates.
MS Updates: Important – 5 checked: 3 Office 2010 and 2 Windows 7
Optional – 1 unchecked: 1 Windows 7Important:
– Security Update for Microsoft Excel 2010 (KB3191907) 32-Bit Edition
– Security Update for Microsoft Office 2010 (KB3213624) 32-Bit Edition
– Security Update for Microsoft Outlook 2010 (KB2956078) 32-Bit Edition– 2017-07 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4025341) <= I unchecked this; not installed
– Windows Malicious Software Removal Tool x64 – July 2017 (KB890830)Optional:
– July, 2017 Preview of Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 on Windows 7 <= was unchecked; not installedSo far, so good! Thank you — once again — to Woody, PKCano, and others for staying on top of everything and for helping us avoid, or minimize, any issues!
Notes: I get any ‘Recommended’ updates along with ‘Optional‘ updates. My processor is a Haswell Intel Core i3-4130 3.4 GHz Dual Core.
Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'2 users thanked author for this post.
Firstly @lightbulb, Welcome 🙂
I’ve installed the July security updates
Secondly, did you install the security-only update (Group-B style) KB4025337? or did you install the Security Monthly Quality Rollup (Group-A style)?
I installed the security-only update (Group-B style) KB4025337, as well as the IE update for July (Group-B style). When Woody gives the green light to install the August Group B-style updates, I suspect I’m going to be unable to do so…_
1 user thanked author for this post.
Viewing 50 reply threads - This topic has 153 replies, 39 voices, and was last updated 7 years, 5 months ago by
Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Recent Topics
-
Blocking Search (on task bar) from going to web
by 8 minutes ago
-
Windows 10: Microsoft 365 Apps will be supported up to Oct. 10 2028
by 5 hours, 15 minutes ago
-
Add or Remove “Ask Copilot” Context Menu in Windows 11 and 10
by 5 hours, 22 minutes ago
-
regarding april update and may update
by 6 hours, 51 minutes ago
-
MS Passkey
by 2 hours, 55 minutes ago
-
Can’t make Opera my default browser
by 14 hours, 31 minutes ago
-
*Some settings are managed by your organization
by 1 hour, 14 minutes ago
-
Formatting of “Forward”ed e-mails
by 13 hours, 26 minutes ago
-
SmartSwitch PC Updates will only be supported through the MS Store Going Forward
by 1 day, 9 hours ago
-
CISA warns of hackers targeting critical oil infrastructure
by 1 day, 18 hours ago
-
AI slop
by 8 hours, 13 minutes ago
-
Chrome : Using AI with Enhanced Protection mode
by 1 day, 19 hours ago
-
Two blank icons
by 7 hours, 8 minutes ago
-
Documents, Pictures, Desktop on OneDrive in Windows 11
by 2 days, 4 hours ago
-
End of 10
by 2 days, 6 hours ago
-
Single account cannot access printer’s automatic duplex functionality
by 1 day, 4 hours ago
-
test post
by 2 days, 13 hours ago
-
Privacy and the Real ID
by 2 days, 3 hours ago
-
MS-DEFCON 2: Deferring that upgrade
by 5 hours, 28 minutes ago
-
Cant log on to oldergeeks.Com
by 2 days, 17 hours ago
-
Upgrading from Win 10
by 1 day, 5 hours ago
-
USB webcam / microphone missing after KB5050009 update
by 1 day, 8 hours ago
-
TeleMessage, a modified Signal clone used by US government has been hacked
by 3 days, 9 hours ago
-
The story of Windows Longhorn
by 2 days, 20 hours ago
-
Red x next to folder on OneDrive iPadOS
by 3 days, 10 hours ago
-
Are manuals extinct?
by 11 hours, 20 minutes ago
-
Canonical ditching Sudo for Rust Sudo -rs starting with Ubuntu
by 3 days, 20 hours ago
-
Network Issue
by 3 days, 7 hours ago
-
Fedora Linux is now an official WSL distro
by 4 days, 8 hours ago
-
May 2025 Office non-Security updates
by 4 days, 8 hours ago
Remembering Woody
