Windows update KB3004394 issues

Hang loose guys .  Seeing If I can alert someone. In the meantime this is in the optional section of updates.

Root certs are supposed to be silent updates to Windows 7 and not even offered up via Windows update so unless something has changed they shouldn't even be in the WU detection in the first place.

Hi Susan,

Thanks for looking into this.  Re the problematic Win 7 64-bit SP1 Home Premium system, it did recently get cleared of adware infections but is now known to be clean.  Process of cleaning was thorough and painstaking, in fact.  There are no remnants left over.

Primary issue, from what I can see, is that Windows UAC sees all windows system files as unsigned.  Removal of KB3004394 reverts all system files to signed and issues are gone.

From what I understand, this update speeds up the certificate update program from once a week to less than 24 hours, is that correct?  So if Microsoft issues new certs they will be installed silently in less than a day?  Reason for this is enhanced protection?

Just so you know, this update appeared not in the optional section of WU, but in the main section.  It was not offered as an optional update as it normally would. 

If optional, I would've declined.

One troubleshooting step not taken would be to disable the Avast! firewall and leave the Windows firewall enabled and then try to install KB3004394.  Will report back as I've noted a system slowdown with Avast Internet Security installed; suspect avast is examining some windows system files when they are called and it seems to take some time to clear and proceed. 

Last month there was an issue with avast and a WU update and wonder if this is similar.  Will report back if any change is seen.

I also have seen this patch cause problems.  You can't run magnifier, nor on-screen keyboard on Windows 7 EEnterprise and Home after installing and restarting.

Got the same problem on two Win7 x64 machines. One client, one server. Defender refuses to start, removing KB3004394 fixed the issue.

Hang loose guys .  Seeing If I can alert someone. In the meantime this is in the optional section of updates.

Root certs are supposed to be silent updates to Windows 7 and not even offered up via Windows update so unless something has changed they shouldn't even be in the WU detection in the first place.

Yep that worked! Uninstalled the update, and now everything seems to be back to normal. Thanks.