What exactly does KB2952664 do?

Have they ever removed the annoyware/adware from the IE security update?  We can no longer trust even their security updates, and I don't know what we do if they keep screwing with security updates.

I FINALLY got GWX Control Panel, have it set to run periodically.

I'm so proud.  I passed.  NO exceptions noted, I have so far avoided all their garbage.

Barry,

Thanks for the update.

Those of us who do not want Windows 10 have to be constantly on the look-out ... because it appears that Microsoft will use any means possible to sneak Windows 10 onto our computers.

I recommend that those who do not want Windows 10 do the following ...

1. Keep your Windows Update setting for Important Updates set to "Never check for updates" (you can manually check for updates whenever you are ready ... see #4 below).
2. Keep your Windows Update setting for Recommend Updates set to "Give me recommended updates the same way I receive important updates".
3. Use the free GWX Control Panel app to insure that Microsoft does not slip a Windows 10 installation past you (either run it in monitor mode, or manually run the app right after you install KB updates from Microsoft ... see #10 below).
4. Manually check for updates when you are ready. Microsoft releases their monthly updates on the second Tuesday of each month ("Patch Tuesday") .... I usually wait three weeks after that before checking for updates (to let the bugs get fixed and the updates Microsoft releases to coerce Windows 10 installation to be identified).
5. Review Woody Leonard's site to see if there are known KB updates (from the previous "Patch Tuesday") that are causing problems, attempting to install Windows 10, etc.
6. After you have checked for updates, review the list .... HIDE any updates that were previously hidden but brought back by Microsoft (such as KB2952664, KB3035583, etc, etc). HIDE any new updates that are known to be causing problems (see #5 above). Consider either hiding all non-Security updates (i.e., KB updates that do not have the word "Security" in its description) or (at least) doing thorough research to determine if you need any of the non-security update and that they (non-Security updates) do not cause any problems.
7. Look through the "Important" tab (in Windows Update) and the "Optional" tab. Make sure that only those updates you want to install are checked ... and those you do not want to install are not checked.
8. Install the updates that you want (I usually do them in small batches: Office updates, .NET updates, Windows Security updates, IE cumulative update, malicious software removal tool, etc).
9. NOTE: if you have Windows Update set to "Never check for updates", and you close/exit the Windows Update window for any reason (such as to reboot after an update), and you go back to Windows Update (to install more updates), then you will have to "Check for Updates" again in order to see the list of updates eligible to be downloaded and installed.
10. When all updates that you want have been installed, run GWX Control Panel to make sure Microsoft has not slipped anything past you.

NOTE regarding IE 11. In most cases, versions of IE below 11 are no longer supported. I never use IE11 for browsing. However, Windows itself does use some of IE11's functions. So, it is important to keep IE11 up to date ... but I recommend using some other browser besides IE for surfing.

Hope this helps.

KB3035583 (nagware) just appeared in my Win 7 Windows Update.  Seventh time it appeared.

BDSolomon,

The free app called GWX Control Panel will make the registry settings you mentioned, and it will also make other settings to prevent Windows 10 from being installed.

For more information about GWX Control Panel, see this site ...

http://blog.ultimateoutsider.com/2015/08/using-gwx-stopper-to-permanently-remove.html?m=1

I just found something!

How to manage Windows 10 notification and upgrade options

https://support.microsoft.com/en-us/kb/3080351

It talked about how to modify it by computer configuration -- I had no idea what that was, but google told me it was gpedit (from RUN).

The path they gave was Computer Configuration/Policies/Administrative Templates and further... I found it but without the "Policies" entry.

Further down it said how to disable it via the registry.  I went there and it was already disabled.  Not sure if I had done it earlier, or if the group policy ended up setting it, but who cares, it's done.

They also had a registry key to disable the notification icon, but I don't know if you're s'posed to add a whole folder and a variable in it, so I skipped that.