Updating Windows 7 - Page 1
Forum section: electronics / general

author: steve30
author_rank: Frequent Contributor
timestamp: May 23, 2022, 08:45:10 pm
content: I did a fresh installation of Windows 7 SP1 on a Thinkpad T420 a while back. I would like to update it, but Windows Update returns an "Unknown Error" (see screenshot).Does anyone have any ideas? Despite Windows 7's age, I am actually quite new to it. Until recently, the newest version of Windows I had any decent experience with was XP.I did wonder if it may have something to do with SSL root certificates, as, out of the box, this Windows 7 system was unable to access quite a lot of HTTPS sites.Thankssteve30

author: madires
author_rank: Super Contributor
timestamp: May 23, 2022, 09:10:19 pm
content: MS changed windows update back then. When you install a fresh WIn7 SP1 you have to disable automatic updates, install some updates manually and enable automatic updates again. I'm not sure if this still works, but the updates required are KB3020369, KB3125574, KB3138612 and KB3153199 (install in this order).

author: andy3055
author_rank: Super Contributor
timestamp: May 23, 2022, 09:30:26 pm
content: If you have not already done, make sure that the clock has the correct time.

author: Fraser
author_rank: Super Contributor
timestamp: May 23, 2022, 09:52:21 pm
content: I experienced this issue myself after a fresh installation of Win 7. As has been stated, there are problems with SSL certificates and accessing the Update Server. I had to download a load of Microsoft updates using another PC then manually installed them on the newly built PC to correct the issue.Fraser

author: edpalmer42
author_rank: Super Contributor
timestamp: May 23, 2022, 10:07:57 pm
content: You might want to use a tool like WSUSOffline and make an ISO of all the Windows 7 updates. That way, you've got all the updates locally and don't have to worry about Microsoft messing around with or completely removing the updates.Note that the current version (12.0) of WSUSOffline has removed support for Windows 7 so you'll need to use V11.9.1.https://download.wsusoffline.net/

author: steve30
author_rank: Frequent Contributor
timestamp: June 08, 2022, 10:26:01 am
content: Thanks for the replies. I installed the updates madires suggested (downloaded from the MS Update Catalogue). Then I tried WSUSOffline and it downloaded most of the updates, but not all. However, after that, Windows Update itself worked and it was able to download and install every update it wanted, albeit with having to restart the machine and rerun Windows Update several times.I'm now trying WSUSOffline again to see if that will download everything so I can save them on a USB memory stick.

author: edpalmer42
author_rank: Super Contributor
timestamp: June 08, 2022, 04:21:56 pm
content: Tell WSUSOffline that you want to create an ISO. It creates one that includes the updates and the installer.It also has it's own blacklist of updates that it won't include for various reasons.

author: RaymondMack
author_rank: Regular Contributor
timestamp: June 11, 2022, 01:19:25 am
content: Try using abbodi1406's WHD-W7UI. You will need WHDownloader to download all the updates. Abbodi's script then integrates them into a new installation media (.iso image). I use the same tools for my Win8.1 machine since Microsoft makes updating anything older than Win10 almost impossible and it saves a massive amount of time and wasted bandwidth for repeatedly downloading updates after a fresh install.https://forums.mydigitallife.net/threads/abbodi1406s-batch-scripts-repo.74197/https://forums.mydigitallife.net/forums/whdownloader.56/There is also the Russian made SiMPLiX UpdatePack for Win7.https://blog.simplix.info/update7/(English translation)https://blog-simplix-info.translate.goog/update7/?_x_tr_sl=ru&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=scThe various projects over at My Digital Life Forums (and other sites) are a huge time saver if you have to update and maintain older systems.

author: coromonadalix
author_rank: Super Contributor
timestamp: June 12, 2022, 01:32:35 pm
content: Quote from: RaymondMack on June 11, 2022, 01:19:25 am+1And on some websites cough cough loll some people do them too .. (originals iso's with updated drivers) etc ...Yes the UpdatePack7R2 is well known and work great

author: Shock
author_rank: Super Contributor
timestamp: June 13, 2022, 05:31:58 am
content: Please be aware Windows 7 has every update you need and some you might choose not to install on the MS website. All downloadable as optional (offline) full installs.I suggest not using 3rd party websites, least you find you are now downloading their own "security" updates sometime in the future without your knowledge. The risk profile is like divorcing a cheating wife then dating a hooker.

author: steve30
author_rank: Frequent Contributor
timestamp: June 13, 2022, 05:06:09 pm
content: It sucks that Windows can be so difficult to update. Last year, I did a fresh install of MacOSX 10.4 Tiger onto my iMac G5, ran the updater, and it updated itself over the internet straight away with no problems.

author: gmb42
author_rank: Frequent Contributor
timestamp: June 14, 2022, 08:58:50 am
content: Quote from: steve30 on June 13, 2022, 05:06:09 pmIt sucks when using an unsupported and obsolete OS, tried that with macOS?

author: Mechatrommer
author_rank: Super Contributor
timestamp: June 14, 2022, 10:24:09 am
content: Quote from: steve30 on June 13, 2022, 05:06:09 pmmaybe because most people didnt pay $129.95 for a Win7 license.. iirc i only need KB3102810 to make updater works correctly on my Win7 SP1 install. the trick was, i copy pasted the error the Windows Updater returned in google and some site suggested the patch number (of course must be from M$ official website)

author: SiliconWizard
author_rank: Super Contributor
timestamp: June 14, 2022, 05:59:47 pm
content: Yes, never had any problem updating Win 7, I still use it. It has all the latest updates ever released, except the very last one which was marked optional: KB4539601 (2020-01-31, Preview of Monthly Rollup).Just because I never installed thepreviewsof monthly rollups and this last one never got past the "preview" stage. And I highly suspected this last one to contain stuff to add more telemetry and possibly annoy you to update to Win 10.But it still appears in Windows Update, and I'm pretty sure it's still going to install if I select it.

author: Shock
author_rank: Super Contributor
timestamp: June 14, 2022, 07:02:50 pm
content: Does anyone have a list and order of updates without the telemetry or nagging updates? Perhaps that would be a better approach. With telemetry it's something like Windows 7, SP1, Service Stack Update, Convenience Rollup.This link covers some of them, but not sure whats current.

author: mariush
author_rank: Super Contributor
timestamp: June 14, 2022, 07:40:01 pm
content: I wrote instructions for someone in the past on another forumfrom windows 7 home premium without service pack I bought retailQuoteGoogle for that KB number for each update to read the description and see if there are prerequisites I may have missed ...They were saying the 2020 rollup is the last, but they kept releasing some critical fixes and they still release security rollupsSeehttps://www.catalog.update.microsoft.com/Search.aspx?q=security%20monthly%20rollup%20for%20Windows%207and sort by last updated ... for example here's the June 2022 one, 380 MB of fixes and updates (they're cumulative, you don't need to download and install all the ones in between, the most recent has everything the previous updates had) :https://www.catalog.update.microsoft.com/ScopedViewInline.aspx?updateid=d4babf22-3c2c-4c63-87e5-ed21431895da

author: Shock
author_rank: Super Contributor
timestamp: June 14, 2022, 08:39:49 pm
content: Just to clarify this is with or without telemetry or any of the nag updates included?

author: mariush
author_rank: Super Contributor
timestamp: June 14, 2022, 09:05:39 pm
content: The quality monthly rollups should not include the nagware.Last time I reinstalled Windows 7 - around 1 year ago - I basically did what I wrote above and had no nags no issues. I upgraded to a Ryzen 5800x and went with Windows 10 - the serial from my Windows 7 worked and Windows 10 installed a Windows 10 Home Edition.Bought the Windows 7 from Amazon UK for around $70 back (in British pounds) then ... so I think I got my money's worth.Anyway, you can test by installing in Virtualbox everything and see what happens.btw .. i still have my copy of windows 7 home premium retail on google drive, if interested i can give you the link to download it (a bunch of 7zip password protected files, because google drive scans file names otherwise). The iso checksum is same as the public checksums if you care to check.

author: Shock
author_rank: Super Contributor
timestamp: June 14, 2022, 10:36:40 pm
content: I did similar a few years back, but it's been a while. I'll do a clean virtualized install and see what it asks for.Thanks for the offer am good though for media and licenses. I've never actually used an oem version of Windows, been fortunate over the years to be either gifted or buy full retail copies through work.

author: Mechatrommer
author_rank: Super Contributor
timestamp: June 14, 2022, 11:08:09 pm
content: Quote from: Shock on June 14, 2022, 08:39:49 pmyou can always google and find people (or some organization?) made a website with nice graphics about it...https://windowsreport.com/block-telemetry-windows-7/and you can also google on how to uninstall updates and read each of their description... if you can uninstall "windows genuine activation number authentication" service, guess how easy it is to remove telemetry services?

author: Microcheap
author_rank: Frequent Contributor
timestamp: June 14, 2022, 11:35:45 pm
content: Just had the same problem recently reinstalling Win7 in a VM. The solutions is simply update Windows Updatehttps://docs.microsoft.com/en-us/troubleshoot/windows-client/deployment/update-windows-update-agentAfter that, Windows will download and install all patches normally.

author: RaymondMack
author_rank: Regular Contributor
timestamp: June 17, 2022, 06:07:23 am
content: Quote from: Shock on June 13, 2022, 05:31:58 amThe MDL tools I suggested download updates directly from Microsoft's Update Catalog... Abbodi's script then integrates these *untouched* files into *your* installation media. I fail to see why this is like dating a hooker. Though I do generally agree with your sentiment: Do not, under any circumstances, use an image made by someone other than yourself. MDL actively prevents the sharing of image files for this very reason. Hence tools and scripts provided by members to do the heavy lifting and which can be scrutinized before being deployed.At the end of the day, why waste time and bandwidth updating fresh installs when there are legitimate and safe solutions for integrating updates? Win7 is an EOL OS. Unless there is some new and glaring vulnerability that MS feels the burning need to patch, there will not be any further updates from them. So it’s a one and done deal.

author: Shock
author_rank: Super Contributor
timestamp: June 17, 2022, 05:19:45 pm
content: I explained the risk clearly in my post. Obviously scripts need checking, downloading repacks or downloader replacements or any 3rd party executables is bad.

author: coromonadalix
author_rank: Super Contributor
timestamp: June 20, 2022, 05:21:48 pm
content: Never had any problems with reputable sources, done tons of slipstreamingused tools to download updates etc ... integration etc ...yes you have to do some homework before you do something ...

author: ESXi
author_rank: Regular Contributor
timestamp: June 26, 2022, 03:34:29 pm
content: All you should do without going through the update process to get it to work.New certISRG_Root_X1https://search.censys.io/certificates/96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6https://mega.nz/file/cUxBhT6a#jzRjAiL6e5Y4baCOl9sfTWSuEkcE3uKd5hGJjFMmUXkSHA-1cabd2a79a1076a31f21d253635cb039d4329a5e8VThttps://www.virustotal.com/gui/file/96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6/communityInstall (update ieframe.dll & other libs e.g IE11):Windows6.1-KB3004394-v2-x64.msuhttps://www.microsoft.com/en-us/download/details.aspx?id=45633Add by doing:Start > Run "rundll32.exe cryptui.dll,CryptUIStartCertMgr"Remove old certs in the tab "trusted root certification authorities" add the new one from above and that should be it.Neat to have things:(Disable Windows Error Recovery nonsense. Had multiple times it suddenly messed up sth trying to "repair" it when I had a few bad block(s), you can fix it yourself it won't break it for you automatically during boot because that just sucks big time)Code:@echo offbcdedit /set {default} bootstatuspolicy ignoreallfailurespauseFixes:Disable update to Windows 10 from Windows 7/8/8.1Code:; DisableOSUpgrade.regWindows Registry Editor Version 5.00[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]"DisableOSUpgrade"=dword:00000001[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Gwx]"DisableGwx"=dword:00000001https://github.com/aakkam22/windowsUpdateLoopFixWindows update glitch fixes:Code:Windows6.1-KB3020369-x64.msuWindows6.1-KB3102810-x64.msuWindows6.1-KB3135445-x64.msuWindows6.1-KB3138612-x64.msuRemove bloated updates:https://gist.github.com/xvitaly/eafa75ed2cb79b3bd4e9Disable UPnP media service and such, because, local exploits (test with msf framework)..Don't use RDP, and if at least install the security patches and use two factory auth. Maybe just better avoid this, and VNC is less secure (they don't encrypt the entire session) anyway so think about this. What you can do is tunnel through SSH and local port forward to get access to local services over secure connection or use a VPN in between them.Customized WIM images (unattended windows images):Can't find the right website anymore but it was sth like with DISM so you can make a updated image (WIM) aka slipstreaming after applying all the new changes. I used to do this it is somewhat more work but you can make a pendrive bootable ready to install without doing all the work over and over again.http://woshub.com/manually-install-cab-msu-updates-windows/https://download.wsusoffline.net/I want to add adisclaimer here, if you make your image test it completely in a virtual machine and on a physical test system debug it before you start installing it.Make sure your updates cab, msu files and such came from a trusted source and in the end promiscuous mode the OS image to make sure nothing bad crawled in the installation. Just because of possible 3rd party promiscuity tends and just security in general, you don't want to ship a old OS with built in virus (wet dream for hackers). Also I highly advise any users on old OS to use noscript and use a sandbox in the cloud such as Falcon or locally e.g is a free open solutionhttps://github.com/sandboxie-plus/Sandboxieor block 70% of the www with peerblock or hardware fw. Rule of thumb in general but just my two cents to add here.. Don't use IE11, it's full of ROP memory exploits. Use Mozilla or chromium engine they are better and still updated.Regarding win8.1 and higher. The telemetry is so terrible all the crap. I have tried to block updates on windows 10 and without hardware firewall it's really a endless war.

author: Shock
author_rank: Super Contributor
timestamp: June 26, 2022, 05:17:34 pm
content: Technically noone needs to use the MS Windows update service, Window 7 can be updated with offline MS updates. It also can install from USB media and supports slip streaming updates natively. I don't see the logic in installing updates and root certs from file sharing services or other 3rd parties.It's unclear what issues you are solving and why you needed to do any of the above or outsource your trust to 3rd parties when you grant a certain level of trust running the OS in the first place.Again I'll give the divorce the wife and date the hooker analogy, seems like a risky trade off.

author: ESXi
author_rank: Regular Contributor
timestamp: June 28, 2022, 01:07:04 pm
content: Quote from: Shock on June 26, 2022, 05:17:34 pmIt seems like you don't have the experience in this subject. Try updating an old image because you can no longer get any updated images from m$. Try it and see for yourself.That cert is safe, look at censys, I've also added cryptographic hash for verification. Why MS will not sign it anymore is because the OS is EOL. Maybe just mabe server 2008 kernel patches work on win7 and cert, idk have to extract the updates and look but 2008 is also EOL now and companies have migrated. I can ask my buddy he works at big telecom company he does migrations all day long.Regarding the updates. This is just so you don't have to risk and bootloop your OS while using the built-in updater that installs all the crap updates. What happens a lot in the older version while installing 400+ updates.Just a shortcut, and like againhttps://gitlab.com/wsusoffline/wsusofflinewhat risk, you can compile and look in the source code yourself also it works as follow, you fork all update packages from MS services and use a offline service to install them instead of using the automatic update service what somewhat sucks and messed stuff up, slipstreaming takes a lot of time (but you're right sure possible).. 3rd party crap that isn't open, should rather make a bell ring. I remember the old days of the outsource firm that worked in our company when we migrated from unix to win. They had a hard ball trying to do the same all according to the book slipstreaming the updates, testing, fixing bugs, disabling shit like badusb by disabling usb pens in policy. Even in terminal services, they defaces instances by rundll32 (this was a decade ago or longer by now).. So this is just my two cents, I've made too many WIM images. This worked for me the best. I am just sharing my knowledge if we talk about security just toss all your old crap in the bin right away because the USER is the fault, not the os, but if the os is wacked this is a problem in 3 2 1 right now... Unless you say I'll welcome all unwanted guys in my system. How hard is it? Not hard at all. Just play with msf framework.. So tinkering and modding stuff out and disabling service, isn't a bad thing if you know what you are doing and if you want to extend it's lifespan a bit beyond the support. It only makes the system safer, from a security perspective/pov. The golden rule, decrease the attack vector make it really small. Same on your unix boxes.Some fun facts to add here. I've worked on IPCS a lot (in food,car,medical industry,machine builders), and most customers relay on system stability a lot, they even deploy old OS as we speak because the fact is it's much more resilient and reliable. They indeed are completely offline or in a different vlan communicated by I/O cards or custom protocols.. Why is this? msvbvm60 is less buggy on old kernel and companies who can't afford to have big off time because of high customer demands. Just a few examples I can give. Like yeah why still use old crap, why not migrate 50k lines of code. Just replace all systems! Good luck with that, hah. Some customers are not happy to see Candy crush on their IPCS screen, random crashes, dead ssds, and no system dumps yeah Ikr there are industrial editions but guess what those licenses go for a pop. Also many companies with expensive ASIC capture cards or MLS they advised to use old OS, kinda funny but that's how it works testing the drivers and hardware reliability on modern version is expensive, and also often really buggy too because of different reasons. This is my experience, other may differ. "Opinions are like assholes, everybody's got one and everyone thinks everyone else's stinks.".

author: Mechatrommer
author_rank: Super Contributor
timestamp: June 28, 2022, 02:14:43 pm
content: Quote from: Shock on June 26, 2022, 05:17:34 pmits called Service Pack. M$ only came up with SP1 since like 10 years ago... do you mind sharing where is the official SP2 or SP3 up to today's update? if you are refering to this...https://answers.microsoft.com/en-us/windows/forum/all/how-to-obtain-and-install-windows-7-sp2/c2c7009f-3a10-4199-9c89-48e1e883051ewe still need to online update anyway up to today.

author: SiliconWizard
author_rank: Super Contributor
timestamp: June 28, 2022, 04:38:56 pm
content: The problem is indeed to get a full collection of updates. Sure the individual KB are available, but collecting them all would take a ridiculous amount of time.There's no officially curated bundle such as a Service Pack, as Mechatrommer said, for the latest state of Windows 7 when support ended, so including all the latest updates.There are some non-official bundles you can find here and there online, but I would definitely be very wary.

author: Shock
author_rank: Super Contributor
timestamp: June 29, 2022, 01:01:20 am
content: I'm not saying an open source downloader that pulls from MS is out of the question either. But having a full manual set off offline updates lets you include/leave out certain updates, then you can script install in batches or reroll a slipsteam later.I'm going to have a play soon and compile a list of updates and useful ancillary files. I already tried it a while ago and it was effortless. But want to exclude some of the garbage that comes in the rollup past sp1.

author: Muttley Snickers
author_rank: Unknown
timestamp: June 29, 2022, 01:38:15 am
content: Watching with interest.I've been using Windows 7 Ultimate for many years without any problems and have always vigorously disabled updates but this recently came back to bite me in regards to SSL errors and site certificates which I posted about in the supporters lounge.I download a collection of updates but none of them would install without Service Pack 1 being installed first which I don't have and cannot find. Another problem which has suddenly appeared is a "The version of Windows you are using is not legitimate, click here to resolve this problem" or words to that effect.This has never happened before and the message even appears when offline and when I view a random image with picture viewer or similar. This might be normal and a common occurrence to others but is new to me, I've resorted to using system restore to get rid of the message if and when it returns.

author: JDubU
author_rank: Frequent Contributor
timestamp: June 29, 2022, 02:06:14 am
content: Quote from: Muttley Snickers on June 29, 2022, 01:38:15 amWould this help?https://www.techpowerup.com/download/microsoft-windows-7-service-pack-1/

author: Muttley Snickers
author_rank: Unknown
timestamp: June 29, 2022, 02:20:51 am
content: Many thanks, I forgot to mention that I'm still running with 32 bit which is also available in the link you provided. I'm also still running MS Office 2003 and a stack of other software from genuine flea market resellers, none of that silly subscription rubbish.

author: Mechatrommer
author_rank: Super Contributor
timestamp: June 29, 2022, 05:21:23 am
content: you can still find several archive sites if you google "windows 7 ultimate service pack iso" (for ultimate version) 32/64bits. download it before its too late. one examplehttps://archive.org/details/en_windows_7_ultimate_with_sp1_x64_dvd_u_677332_202006(i dont check validity) coupled with Windows6.1-KB3102810 install it, connect internet and update everything. backup with a backup tool like aomei backupper free version or macrium reflect and you have a backup file acting as install file (your own service pack version) most up to date for restore later if your installation get corrupted. you can include your most favourite programs before making the backup.

author: Shock
author_rank: Super Contributor
timestamp: June 29, 2022, 06:04:39 am
content: Windows 7 SP1https://www.catalog.update.microsoft.com/Search.aspx?q=KB976932Again, all up MS updates can be downloaded from them directly.The original MS image that used to contain the KB976932 SP1 updates:7601.17514.101119-1850_Update_Sp_Wave1-GRMSP1.1_DVD.isoSHA1: F2ABA1102E18EAD08C78527AB422C09AB7D1F54C

author: Shock
author_rank: Super Contributor
timestamp: June 30, 2022, 01:45:09 am
content: Note this includes the telemetry, nag files etc.Had a play, you can archive all the updates from Windows update service and offline install again later with a fresh install by following something like this:Install Windows 7, then SP1, then Service Stack Update, then Convenience Rollup, then any newer updates.All the downloaded updates get cached to C:\Windows\SoftwareDistribution\Download\ into folders. So you take a copy and get the order they were downloaded by the date/time. Any .cab files can be installed with Pkgmgr otherwise .msu files can be extracted and then installed by Pkgmgr (native to Windows 7).So this entire process looks like it can scripted to just dump a copy of all your updates on a clean install and do silent installs with reboots in between if needed.The bit more time consuming part is correlating the list of updates included in the convenience rollup and excluding or uninstalling undesired updates. Then will need to check the slipstream process and make sure they can all be incorporated that way as well.

author: Fanap
author_rank: Newbie
timestamp: August 25, 2022, 10:56:56 am
content: Windows 7 had End of Life, meaning no more updates released, two years ago. Don’t confuse signature updates for Defender with actual Windows updates.