KB4023057 does the following:
- it changes settings of intentionally blocked services (trustedinstaller, wuauserv and many more) so they can run again; see contents of the file progfiles\rempl\servicestackhardening.inf
- winupdate then immediately installs KB4023814 which forces upgrade to newer version, see contents of the folder windows\updateassistant.
Pure winupdate malware.
ServiceStackHardening.Inf.txt
For conversation sake and a caveat to the odd KB's not working correctly and having to 'hide' some as they come in.
I found out why some Updates where and some weren't installing correctly.
MS was giving me updates for builds that I didn't have as yet.
So....I manually found the UD's on their site and put them in order THEN the updates that I had to hide, that were putting the computer in a continuous loop of installing/uninstalling, finally got straightened out and installed properly.
I have to agree with muchomurka about M$ forceably installing things to make sure they keep the upper hand, seems to be the wave of the future of W10. They're slowly IMO finding that users are finding ways to toggle things off so they are figuring out ways to work around it.
Yes, but what's strange is that they also provide the WUShowHide tool, which supposedly allows you to hide updates for as long as you want.
Here is something REALLY odd:
Yesterday, on my Win 10 HOME laptop, which was on Winver 1803 (OS Build 17134.407) the following scenario:
MANUAL check for updates - CU KB4471324 and routine updates offered - downloaded and installed - restart requested
Restarted - now Winver 1803 (OS Build 17134.471)
KB4023057, which was previously installed as a program has gone but now appears under Quality Updates!
MANUAL check for updates CU KB4023057 (AGAIN) offered - downloaded and installed - restart requested
Restarted - still on Winver 1803 (OS Build 17134.471) MANUAL check for updates, results in "You're up to date"
I'm (once again) baffled
Quote