WSUS 10.9.2 vs WindowsPatchLoader_1_0_15 ... and ... getting ALL the patches

Hi.

I used WSUS 10.9.2 vs WindowsPatchLoader_1_0_15 on December 4, 2018, to download (as far as I know) all the patches for Windows Vista x64.

I did a comparison of the output from the two software packages and each downloads pretty much the same files but there are some differences.

For example, for one subset of files, each package downloaded a common set of 273 files but in that same common set of files:

• WPL also had 59 files that WSUS did not have and
• WSUS had 57 files that WPL did not have.

Here's what I'd like to do.

I would like to get

1. ALL the patches for Windows Vista x64 ...
2. from the very first patch through the very last patch
3. (preferably no aggregated patches or service packs)
   1. I really would like to get all the updates that are INSIDE a service pack so I can be very granular in which updates I install.
4. Then install a group of 100 or so patches and let that sit for a few days to check for adverse affects on my notebook
5. Image my computer and then
6. ... repeat bullets 4 and 5 above...
7. until one of the groups peggs the CPU at 100%
8. then roll back my computer and install smaller subsets of that ("problematic" "pegg my cpu at 100%") batch - until I find the one or more patches that peggs my CPU at 100% and just not install that/those patches
9. then continue with bullets 4 and 5 above.

I'd also like to document my progress as I install the patches so I can publish the order in which I proceeded so others can benefit from my analysis / work.

This desired course of action MIGHT not be possible but I feel as though I am closer now than I have ever been, having used WSUS and WPL and had them download the patches that they could retrieve.

With my notebook not being patched to the latest patches, there are software packages that will not install on my notebook and there are browsers that will not work or not work correctly.

Does anyone have any comments/suggestions regarding the above?

For those of you who are interested - WPL downloaded files with hash info attached to each.

I had to remove that hash info after each file name in order to use another software to compare the files downloaded.

I used:

ren windows6.0*-x64_*.cab windows6.0*-x64.cab

to remove the hash info so the files would compare better between the folders of the two software packages.

There were a few stragglers that needed to be done by hand.

Another interesting note in my quest to get the updates from "update 1" through the last update - the files that WSUS downloaded, put dates on the files that appear to possibly be the date the update came out, possibly.

There is a group of 325 files in the w60-x64\glb folder that has dates from 2007,2008,2009,2010 ... through ... 2018 so that might help.

WPL just has the date the patch was downloaded to the directory on disk.

Here's some more info regarding my original post:

I looked up on Google:


and it returned this batch of instructions:

1. Download the CAB Files x86 / X64 depending upon the OS architecture.
2. Rename file to KBnumber.сab (for example KB3176931.Cab)
3. Copy to folder C:\
4. Run command-prompt as admin (Right click on Windows icon and choose option). ...
5. Enter the command “DISM.exe /Online /Add-Package /PackagePath:c:\KBnumber.cab“

I might not need step 2 and maybe not even step 3 - it will take some experimenting.

I can use this to create a filenam.bat file and put the updates in the exact order I want them and I can run small sets of updates (steps 4 and 5 from the original post).

Hi H987:

If your CPU is getting stuck at 100% then you're likely affected by the problem discussed in the FAQ How to Fix Vista SP2 "Checking for Updates..." Hangs and Slow Windows Updates pinned at the top of this board. There are about a half-dozen specific "speed" up patches (i.e., the kernel mode device driver Win32K.sys, certain graphics components, IE9, Word 2007, etc.) that should fix your high CPU problem and allow Windows Update to patch your system to the end of extended support on 11-Apr-2017.

As noted in that FAQ, "When one of these "Checking for updates..." hangs occurs the Windows Update Agent (wuaueng.dll) v7.6.7600.256, running under the Windows Service Host Process svchost.exe, will saturate an entire CPU core (e.g., 100% CPU activity on a single core CPU, 50% CPU activity on a dual core CPU)..". See Dalai's explanation <here> why pre-installing these half-dozen or so "speed up" patches solves the high CPU problem. These updates have a long and complex supersedence chain that essentially causes your system to "freeze" while the Windows Update Agent is spending hours (or even days) sifting through the update catalog wsusscn2.cab, but you can circumvent the problem by pre-installing these "speed up" patches manually before running Windows Update.

I suggest you:

• Disable automatic Windows Updates [Windows Update | Change settings | Important updates | Never check for updates (not recommended)] and re-boot to terminate any Windows Update sessions currently running in the background. The re-boot is critical or the standalone .msu installers (i.e., "speed up" patches) recommended below will get stuck on "Checking for updates....".
• Install Service Pack 1 (SP1) if required - see <here> for download links.
• Install Service Pack 2 (SP2) if required - see <here> for download links.

Then go to VolumeZ's solution on page 1 of peggybeggs' thread why has vista stopped automatic updates? in the MS Answers forum and:

• Manually install Vista SP2 Win32K.sys and graphics component updates KB4019204, KB4012583, KB3205638, KB4015380 plus KB4018271 if Internet Explorer 9 is installed.
• Manually install any relevant MS Office 2010, MS Office 2007 and/or MS Office Compatibility Pack SP3 updates. Since you posted elsewhere that you have MS Office 2007 that would likely mean KB4018353 (Excel 2007), KB4018355 (Word2007) plus KB4018354 and KB4461518 (MS Office Compatibility Pack SP3).
• Run a manual Windows Update [Windows Update | Check for updates] to patch your system to 11-Apr-2017.

-----------
32-bit Vista Home Premium SP2 * Firefox ESR v52.9.0 * Norton Security Premium v22.15.1.8 * MS Office Professional 2003
HP Pavilion dv6835ca, Intel Core2Duo [email protected] GHz, 3 GB RAM, NVIDIA GeForce 8400M GS

H987 said:

...I used WSUS 10.9.2 vs WindowsPatchLoader_1_0_15 on December 4, 2018, to download (as far as I know) all the patches for Windows Vista x64.....

Click to expand...

Hi H987:

...and if you want to use Torsten Wittrock's WSUS Offline Update tool, you might want to post in the Download board <here> of their forum and ask which is the best version for 64-bit Vista with MS Office 2007. I haven't been keeping up on the latest news about this tool, but the last paragraph of Note 6 in the solution for m#l's thread Updates not working, it has been searching for updates for hours states:

"This tool can be used to download and install important security updates for Vista SP2 (see the Legacy tab of the interface) and other Microsoft products like MS Office. Be sure to download the special extended support release (ESR) v9.2.2 of this tool (released 03-Jul-2017) for older platforms like Win XP and Vista....this ESR version of WSUS Offline Update will install the new June 2017 updates listed the Microsoft Security Advisory 4025685: Guidance for older platforms: June 13, 2017 for protection against the NSA-leaked exploits EnglishmanDentist, EsteemAudit, and ExplodingCan."

Click to expand...

If you scroll down to the bottom of the main WSUS Offline Update download page it now recommends a slightly modified ESR v9.2.4 (released 23-Mar-2018) for Win XP and Vista. The v10.9.2 you're using is actually older and was released 19-Mar-2017 prior to the 11-Apr-2017 end of extended support for Vista SP2.
-----------
32-bit Vista Home Premium SP2 * Firefox ESR v52.9.0 * Norton Security Premium v22.15.1.8 * MS Office Professional 2003
HP Pavilion dv6835ca, Intel Core2Duo [email protected] GHz, 3 GB RAM, NVIDIA GeForce 8400M GS

H987 said:

until one of the groups peggs the CPU at 100%

then roll back my computer and install smaller subsets of that ("problematic" "pegg my cpu at 100%") batch - until I find the one or more patches that peggs my CPU at 100% and just not install that/those patches

Click to expand...

Not going to happen. Problematic singular updates pegging the CPU at 100% is specific to searching for updates, not to installing them.

Regards, VZ

Hi lmacri and Volume Z

lmacri - your posts:



Volume Z - regarding your post:

H

lmacri said:

...Then go to VolumeZ's solution on page 1 of peggybeggs' thread why has vista stopped automatic updates? in the MS Answers forum and:

• Manually install Vista SP2 Win32K.sys and graphics component updates KB4019204, KB4012583, KB3205638, KB4015380 plus KB4018271 if Internet Explorer 9 is installed.
• Manually install any relevant MS Office 2010, MS Office 2007 and/or MS Office Compatibility Pack SP3 updates. Since you posted elsewhere that you have MS Office 2007 that would likely mean KB4018353 (Excel 2007), KB4018355 (Word2007) plus KB4018354 and KB4461518 (MS Office Compatibility Pack SP3).
• Run a manual Windows Update [Windows Update | Check for updates] to patch your system to 11-Apr-2017.

Click to expand...

Hi H987:

Please note that today is the December 2018 Patch Tuesday and Microsoft has released a new update KB4461565 (xlconv2007-kb4461565-fullfile-x86-glb.exe) for the MS Office Compatibility Pack SP3 add-on. This KB4611565 now replaces the older KB4461518 (released 13-Nov-2018) in Volume Z's master list of Windows Update "speed up" patches on page 1 of peggybeggs' thread why has vista stopped automatic updates?.

I use the MS Office Compatibility Pack SP3 add-on with my old MS Office 2003 Professional suite and I had to install this newly released KB4461565 today to ensure my Windows Updates will not begin to hang on "Checking for updates..." again, even though my Vista SP2 OS was patched with all available security updates released via Windows Update before extended support ended on 11-Apr-2017.

I doubt we'll be seeing any further security updates released for Vista SP2 or MS Office 2007 going forward, but any Vista SP2 user who has MS Office 2010 or the MS Office Compatibility Pack SP3 installed on their computer should continue to check Volume Z's post on page 1 of peggybegg's thread why has vista stopped automatic updates? after each Patch Tuesday (the second Tuesday of the month) to see if any new Windows Update "speed up" patches have been released for these Office products. Volume Z will add the label "new" for any new "speed up" patches added to his revised master list.
-----------
32-bit Vista Home Premium SP2 * Firefox ESR v52.9.0 * Norton Security Premium v22.15.1.8 * MS Office 2003 Professional
HP Pavilion dv6835ca, Intel Core2Duo [email protected] GHz, 3 GB RAM, NVIDIA GeForce 8400M GS