How Do I Block 2018-01 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4056892)?

Use is certainly important. And had AMD bothered to patch their processors the way Intel and ARM both did you would not have had this issue to begin with,

If you want to express your anger express it at the Advanced Micro Devices website and join the AMD Community:

https://community.amd.com/

Microsoft has made my new laptop,useless with update 1709.  They need to fix it or replace it. The riches man in the world needs to do something .

On this system, DISM stopped the looping.  Note the odd times in the 'results' from my previous post.  Even though MS had stopped the update, it was still Staged and on the system.... After KB4056892 was removed with DISM, & it is not being pushed by MS, on this AMD X2 L310 processored device;  Windows Update is running normally, after multiple checks and reboots..  

"Security Patches you see in Windows Update usually apply to other programs" -> probably could not be much more secure, then when the device is stuck at the black screen with the Windows Logo..... But 'IMHO';  use is more important than this update on some devices.... & I hope AMD and MS are really working on the situation.

Small correction: Windows Update will download Windows Defender Updates when it isn't doing anything else but the Security Patches you see in Windows Update usually apply to other programs. Edge, Office,  and the Advanced Security Features of your Firewall...things like that and are not part of what Windows Defender itself is actually scanning when it scans.

Windows Defender Security System is a lot of different processes and protections under one name.

The main thing you can take away from this is that you CAN download definitions for Windows Defender Antivirus Scan just from here: 

But this page downloads those PLUS all other updates/upgrades:

>Now the question is: Is it safe to go back in the water and unpause Windows Update?

No.

I unpaused updates and did some other stuff.  Then I came back to the machine and rebooted to install some other software.  Got the big Windows blue logo and hung.  Rebooted and triggered a repair which said it was backing out an update that didn't completely install.  Finally, got the login screen.  Logged in as an administrator and paused Windows Updates.

Will let the pause expire in 35 days before trying again.

Please see:

https://answers.microsoft.com/en-us/windows/forum/windows_10-update/after-installation-of-kb4056892-boot-failure-after/6c015632-2a45-4725-a882-f231f8c88f36?auth=1

On an Auto restoring AMD X2 L310 processored device:

Even though KB4056892 is showing hidden by the Hide/Show troubleshooter ... I went ahead & used DISM to remove the Staged Package from this 1709 x64 system.

from an elevated command prompt ran:

dism /get-packages /Online

pertinent results at the end:

Package Identity : Package_for_RollupFix~31bf3856ad364e35~amd64~~16299.125.1.6

State : Installed

Release Type : Security Update

Install Time : 1/12/2018 12:01 PM 

Package Identity : Package_for_RollupFix~31bf3856ad364e35~amd64~~16299.192.1.9

State : Staged

Release Type : Security Update

Install Time : 1/12/2018 3:12 AM

16299.192.1.9 I am afraid of so I removed it.

back in the elevated command prompt i ran (copy all the bolded text as one line, command may be wrapped when displayed on MC;  if your results from the previous DISM command are the same):

dism /Online /remove-package /packagename:Package_for_RollupFix~31bf3856ad364e35~amd64~~16299.192.1.9

pertinent results at the end:

Processing 1 of 1 - Removing package Package_for_RollupFix~31bf3856ad364e35~amd64~~16299.192.1.9

[==========================100.0%==========================]

The operation completed successfully.

Windows Update Completed successfully, it downloaded some Defender updates, and left no pending updates.  Even after rebooting device multiple times over many hours.