Bork Tuesday, Any Problems Yet?

This is what MSRT covers ...

https://blogs.technet.microsoft.com/mmpc/category/product-announcements/msrt/


In 2015, they introduced some ransomware tidbits for the first time ...

https://blogs.technet.microsoft.com/mmpc/2015/10/12/msrt-october-2015-tescrypt/

My understanding is that MSRT runs an automatic scan when you update it every month. It detects infections, it does not prevent them.

 

Correct, of course.
But I think that was not what Dragon1952 meant when he said MSRT does more things than looking for malware.
I think it was meant that MSRT has also some other function, apart from malware scanning and removal.

 

That is what i remember woody saying. He said the same thing about installing IE11 instead of staying with ie9 or ie10. That if you install ie11 you also get other benefits other than just a better browser. If you ask the questions on his new forum, then woody or someone else might remember what he said.

 

OK, I reread the post from @Dragon1952 who believes that Woody Leonhard may have stated that MSRT does more than looking for malware. I checked out Leonhard's website/forum (it is a jumbled mess) and did a search on MSRT and there were 34 instances. None of his posts suggest that he said it does more. This is a quote, which is pretty much his position on MSRT ...

 

New update options for Windows 10, version 1703
https://blogs.technet.microsoft.com/windowsitpro/2017/04/24/new-update-options-for-windows-10-1703/

--------------------------------------------------
Microsoft to offer more updates for Windows 10
https://www.ghacks.net/2017/04/25/microsoft-to-offer-more-updates-for-windows-10/

 

On one of my Windows 7 SP1 x64 systems, which is patched up-to-date, including the April 11 2017 Rollup, now KB3008923, "MS14-080: Cumulative security update for Internet Explorer: December 9, 2014" is being offered through Windows Update, even though the KB3008923 knowledge base article states "The update that this article describes has been replaced by a newer update."
Anonymous reported the same at AskWoody.
Let's see if this is corrected before or with May 9 Patch Tuesday.

 

I have that 8923 patch also, after just doing a manual check for updates.

 

Now also mentioned by Woody Leonhard: "December 2014 IE patch KB 3008923 is back".
And not only KB3008923.
Another AskWoody poster reported not one but three out of date IE patches being offered through Windows Update, and even some more erroneous updates.
It's a mess, but I think it's too early to tell what is going on.
Best wait for a couple of days, and see if Windows Update is corrected before or with May 9 Patch Tuesday.

 

Hi Stupendous Man,

I just checked my Win7 Pro 64-bit. I don't get any weird IE updates offered; actually no IE updates at all at the moment. I'll wait what will happen on coming Patch Tuesday. If there will be an appropriate IE update, I will install it at some moment using links posted by Mister X.
PS-1: I have not yet read the article from Woody nor posts there about it.

PS-2: Several days ago I got the Office updates offered (and I installed them) that were mentioned by anon in reply # 2 in this thread, for Office 2010.
I didn't get the .NET Framework updates (mentioned in reply # 1 there) offered and didn't install them.

 

I got it today too when I restored my Win 7 image and it checked for updates. For now, I'm just ignoring it....

 

At AskWoody, abbodi86 and ch100 posted some interesting insights regarding KB3008923 being offered.
The cause of KB3008923 (and other old superseded updates) being offered, may probably be that Microsoft retired a large number of old superseded updates, consequently breaking the supersedence chain, with the result that previously superseded updates like KB3008923 are now offered as current.
For more details, read abbodi86's and ch100's posts.
As soon as Microsoft offers new successive updates, that supersede the old ones, the current situation of old updates being offered will be corrected. For instance, a new Cumulative security update for Internet Explorer will replace the currently offered old KB3008923.
Let's see what May 9 Patch Tuesday brings.

 

I checked again. I do NOT get "weird" IE update(s) offered on my win7 Pro 64-bit (Dutch).

 

Nor do I get KB3008923 offered on my Windows 7 Home Premium x64 system that was installed November 24, 2014.
But I do get KB3008923 offered on my Windows 7 Professional x64 system that was installed March 29, 2016.

I guess the system installation date, and thus the updates that were installed, has something to do with getting KB3008923 offered or not.

On my Windows 7 Home Premium x64 system that was installed November 24, 2014, KB3008923 was installed December 25, 2014. (That system was offline on Patch Tuesday December 9, 2014, till December 25, 2014, when KB3008923 and other December 9 updates were installed.)

On my Windows 7 Professional x64 system that was installed March 29, 2016, KB3008923 was never installed, as it was already superseded by a more recent Cumulative security update for Internet Explorer, the March 8, 2016 update KB3139929.
And with recently Microsoft retiring old superseded updates, consequently breaking the supersedence chain, Windows Update no longer recognizes the current Cumulative security update for Internet Explorer on that system.

I think that difference, mainly the system installation date, and thus the updates that were installed, is what determines whether or not KB3008923 is being offered.


Also posted at AskWoody Forums.

Edit 1:
At AskWoody Forums, Seff replied, mentioning he/she installed KB3008923 on two Windows 7 machines in December 2014, and it is being offered again now.

Edit 2:
I think I found the reason that Seff at AskWoody Forums gets KB3008923 offered for the machines on which KB3008923 was installed in December 2014, while I do not get KB3008923 offered for the machine on which KB3008923 was installed in December 2014.
On Seff's machines was the KB3008923 update for IE9 in 2014, while I had the KB3008923 update for IE11 in 2014.
According to the Microsoft Update Catalog for KB3008923, the versions for IE9 and IE11 are not the same. (Also if you download the two versions, you see they're not the same.)
As I said, I think that is the reason that Seff gets KB3008923 offered for the machines on which KB3008923 was installed in December 2014, while I do not get KB3008923 offered for the machine on which KB3008923 was installed in December 2014.

 

I have had multiple updates of KB3150513 on Win 10 1607 since the April cumulative update; dates of 4/22, 5/2, and 5/4. Supposedly, this is an update of Win Update. Don't believe Microsoft knowns what the hell it's doing anymore.

 

One of the MVPs on ASK Woody says you should install everything that MS sends. He recommends (or insists) that MS recommendations are for everyone except sysadmins. If you do not, it will break windows update. He mocks and abuses users on that site. He goes onto to say that if you hide updates you deserve to get burned. Other MVPs on this site steer clear of this and say that it is OK to ignore an update you do not want. Woody Leonhard says that he can see no reason to install updates you do not want (e.g. GWX or telemtry on W7/ or if the update is troublesome. He makes it clear that you should not accept the default auto update setting. Leonhard has introduced Group A (install rollups but hide what you do not want) and Group B (security-only updates) and Group W (turn off WU completely).

I have no issue with hiding certain updates. I hid all the telemetry KBs and the GWX KB on the W7 systems that I look after - it has not broken WU. I also have came across a KB that causes BSODs on one of my W7 systems (I do not now why) so I can not install it.

If MS is going through the process of retiring updates that are no longer needed, great. It will reduce the scan time and make WU more efficient. We need that. The MVP on ASK Woody who raised this has offered no evidence that this is what is actually happening. It appears to be his opinion. There is no link to an MS official announcement or blog and he says he has no access to anyone at MS .

 

To me, it means nothing if someone is "MVP".
I've seen MVPs be as wrong (or unpleasant) as anyone else (or worse). Not only on AskWoody Forums, but anywhere.
What you mentioned, emmjay, is one example.
However, this doesn't mean such MVP can't be right on other aspects.

True. That is why I mentioned it as "some interesting insights". I cannot yet say if those insights are correct or not.

 

Yep, thanks for those insights... I am waiting to see what happens next patch Tuesday. For the record, I am on Win 7 Home Premium x64 and it IS happening here... I did a clean install back in September 2016 with the big convenience rollup and the July 2016 update rollup, and then let WU do the rest after that, no optional or recommended, just critical/important updates only. Everything has been fine up until this anomaly recently...

 

KB3008923 is also mentioned in this InfoWorld article by Woody Leonhard, now:
Get ready for Patch Tuesday: Block Windows Update and ignore KB 3008923
"A long-obsolete Dec. 2014-era IE update is getting re-offered in an apparent breakdown of the supersedence chain"

 

On Windows 7 I installed Cumulative updates, Office 2010 updates, IE Cumulative Update and .NET update with no noticeable problem.

 

https://www.ghacks.net/2017/05/09/microsoft-security-updates-may-2017-release/

 

MS did not remove 8923 today for me but gave me the may mthly rollup and .net patch patches. Should i install the 8923 patch now or hold off on installing it for a while.

 

http://www.infoworld.com/article/31...ock-windows-update-and-ignore-kb-3008923.html

 

Strange ........ No security updates for Win 10 1607?

 

https://www.wilderssecurity.com/thr...tifications-for-may-2017.393725/#post-2673700
------------------------------
Windows 10 Version 1607 and Windows Server 2016
KB4019472 (OS Build 14393.1198 )
https://support.microsoft.com/en-us/help/4019472