Jump to content

SHA-2 Code Signing: How Safe to Install as Standalone?


Recommended Posts

Hello:

I'm running Windows 7 SP1 64bit.

I have not installed any Windows updates since 2016. I actually find my laptop more stable this way.

I do have Malwarebytes Premium installed: Version 4.3.0.98. I keep being prompted to install the new Malwarebytes version. But that I'd need a  missing Windows Update in order to install it.

I'm assuming this is the one I need for that:

https://support.microsoft.com/en-us/topic/sha-2-code-signing-support-update-for-windows-server-2008-r2-windows-7-and-windows-server-2008-september-23-2019-84a8aad5-d8d9-2d5c-6d78-34f9aa5f8339

 

Question:

How straightforward would it be to merely install this update as a standalone without going through that long list of 29 WU updates  to Win 7 which I've deliberately ignored. Windows Update seemed to be causing too much instability, so i disabled it years ago. I think for good reason...

So now my question is: Can I just install that SHA 2 Code signing update without prior installation of those other updates? How smooth a process is this likely to be?

What would be optimal way to do this without going through al those other ignored updates?

Thanks

Eliuri

Windows 7 SP1 64bit

Malwarebytes 4.3.0.98

 

Link to post
Share on other sites

1 hour ago, eliuri said:

So now my question is: Can I just install that SHA 2 Code signing update without prior installation of those other updates? How smooth a process is this likely to be?

If the stand alone works and you can then update Malwarebytes then great.

Please make sure you have the following update from Microsoft installed.

SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019

2019-09 Security Update for Windows 7 for x64-based Systems (KB4474419)
http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/09/windows6.1-kb4474419-v3-x64_b5614c6cea5cb4e198717789633dca16308ef79c.msu

If you already have it installed it will tell you and not run.

These are the 2 but they might not install without following the entire guide.

 

2019-03 Servicing Stack Update for Windows 7 for x86-based Systems (KB4490628)
http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/03/windows6.1-kb4490628-x86_3cdb3df55b9cd7ef7fcb24fc4e237ea287ad0992.msu

2019-03 Servicing Stack Update for Windows 7 for x64-based Systems (KB4490628)
http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/03/windows6.1-kb4490628-x64_d3de52d6987f7c8bdc2c015dca69eac96047c76e.msu

 

SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019

2019-09 Security Update for Windows 7 for x86-based Systems (KB4474419)
http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/09/windows6.1-kb4474419-v3-x86_0f687d50402790f340087c576886501b3223bec6.msu

2019-09 Security Update for Windows 7 for x64-based Systems (KB4474419)
http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/09/windows6.1-kb4474419-v3-x64_b5614c6cea5cb4e198717789633dca16308ef79c.msu

If that does not work here is the complete guide.

 

 

Edited by Porthos
Link to post
Share on other sites

Thank you both. I'm attaching the MBST zip file as requested above.

I should mention that in the course of running the FRST, I got notification that my C drive was corrupt and unreadable and should run cHKDSK which is something I had already known and CHKDSK didnt fully repair

2 hours ago, AdvancedSetup said:

You might be able to potentially only install that one update but I'd highly recommend you patch with all the available security updates

 

and

3 hours ago, Porthos said:

If the stand alone works and you can then update Malwarebytes then great.

Please make sure you have the following update from Microsoft installed.

My question is if attempting ot just install the standalone might somehow damage--an already damaged--laptop if the attempted install fails?

Somehow, I dont think my system could withstand a whole bunch of WUs, which is probably why I disabled WU years ago.

Thanks again

-eliuri

mbst-grab-results.zip

Link to post
Share on other sites

  • Root Admin

Please open an Elevated Admin command prompt and copy / paste the following into command window and press the Enter key. Then restart the computer and let the disk check run.

ECHO Y | CHKDSK C: /F 

Then find the Check Disk report and export it and post back the results please.

https://www.thewindowsclub.com/find-chkdsk-results-in-event-viewer-logs

Thank  you @eliuri

 

Link to post
Share on other sites

  • Root Admin

Dell Inspiron 1545
BIOS: Dell Inc. A14 12/07/2009
Motherboard: Dell Inc. 0G437N

If you have the money you could replace the hard drive with a much faster SSD hard drive.

Here is an example of a 500GB SSD drive from Crucial for $58.99
https://www.amazon.com/Crucial-MX500-500GB-NAND-Internal/dp/B0786QNS9B?psc=1

 

Replacing the drive is pretty easy too on that unit.

https://downloads.dell.com/manuals/all-products/esuprt_laptop/esuprt_inspiron_laptop/inspiron-1545_service manual_en-us.pdf

image.png

Here is an example of a 500GB SSD drive from Crucial for $58.99
https://www.amazon.com/Crucial-MX500-500GB-NAND-Internal/dp/B0786QNS9B?psc=1

You could use Macrium Reflect Free to save the current hard drive contents into an image file much like you use with Zip files onto an external USB drive.

Basically you'd buy a 2nd hard drive to use for data backups, etc. Use Macrium to create an image backup. The install the new SSD drive in the unit. Boot from a USB thumb drive and restore the image to the new SSD drive.

SanDisk 16GB Ultra Flair USB 3.0 Flash Drive
https://www.amazon.com/SanDisk-Ultra-Flair-Flash-Drive/dp/B015CH1GTO

If you already have an external USB drive and a USB flash drive you can format then all you'd need is the one SSD drive as the replacement drive.

 

 

Link to post
Share on other sites

I've run chkdsk many times..So i  know there r corrupted files..I've tried the repair .It ran for many hours, but it didnt fix it all..So i'm left with what i now have..But it's functional enough for my needs as they are now

I doubt i have the skills to replace the hard drive as suggested above...And I'm not even sure that would fix the WUs issues..those go back long time.

Would be nice to get that SH-2 update installed though. but I'm noticing in my update history that those KB's in the 3,000s all failed. It was about then (years ago) that I disabled Windows Updates entirely. I remember it was extremely frustrating to fix the WU. But was thinking maybe this SH-2 Code is just a one shot update. Seems maybe it just isn't?

Thanks for now...I'll read those instructions anyhow..

`Eliuri

Edited by eliuri
Link to post
Share on other sites

  • Root Admin

Well a corrupted data structure is going to cause problems. Without repairing it you won't be able to rely on the computer very well at all.

If a basic disk check is taking hours to run that would seem to indicate something really wrong with the hard drive.

Not much else we can do when you have a physical hardware issue that needs to get resolved or hard drive replaced.

Link to post
Share on other sites

Sorry. I didnt explain it well.  It was not the dskchk that ran "many hours"..It was the repair upon reboot...

I've had that disk issue for years,  as well as those missing WUs, yet the laptop does basically function well..

Thanks much for that sequence list for Windows Updates. In case I feel up to going through that ordeal sometime soon

As the moment, most things I need it to to on it are basically working well. Except for the newer version of Malwarebytes, which probably won't install. The old one--which is now installed- is still providing some protection as it's definitions are being updated.

In case I should need to uninstall--reinstall my current Malwarebytes, I recall there was some "pre-SHA-2 signing" version of the MB installation file posted somewhere on this forum about a year or so ago. Would you kindly let me know where that is, so I could save it , in case I should need it..

Meanwhile : I'm working on shifting to another device, which runs Windows 10. I already installed the new MB on that one..I doubt this  Dell Laptop could run Windows 10 successfully. And I'd need to purchase Windows 10 for this device anyhow..

I basically need for this Win 7 Dell laptop to continue limping on for another few months until that transition to that newer device is completed

So at this point, I'd like to save that "pre-SHA-2 Code Signing" MB installation file,  which  was  once referenced on this forum, just in case I should need to do a reinstall of Malwarebytes on this Dell lpatop

Thanks again for your input

-eliuri

Edited by eliuri
clarification
Link to post
Share on other sites

Thanks, Porthos:

I'm  assuming that will work as a Premium program once I install the License Key. Am I correct?

Incidentally I did try those two standalone Windows Updates you mentioned above. They will neither install nor even save from the MS website. Some notification about those being possibly corrupt files, and thus not safe. Odd..

Anyhow, thanks

`eliuri

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.