I have exactly this problem. Although I was able to install KB4490628 manually from the file.
KB4474419 seems indispensable...if by August anyone running Win7 SP1 x64 (or x32 but I wonder why anybody would have that by now).
I also have a dual boot with LinuxMint 18.3, unfortunately, even if I have 3 internal drives, the 2 others are for data only, Mint is installed on the first partition of the drive with win7, which means that win7 is on the third partition of the drive, so changing boot drive order is not an option, even if Linux would be on another drive. I remember when I had win7 on the first partition of another drive and try to force a clean boot by changing order of boot for the drives, I'd get what someone here also said, can't find BOOTMGR on a black and white screen and that was it. I don't think I can mess around with boot tools when Win7 sits on sdc2 (third partition) of a drive.
Does anyone think installing the 3 updates on march 13th while behind a socks5 proxy would be the cause of the problem? I've never ever seen the "Failed to configure Windows Update" greeting screen when it gets up to 97%...sometimes less, then goes to reverting changes, reboots again, a little more of configuration for 2 minutes then I can log-on, and I'm always behind that socks5 proxy, used as a system proxy in the Internet Options>Connections tab, created by running kITTy (a superior open source PuTTy) to the ssh shell I use for work. It never caused an issue before, but I've seen some people talk about proxies in this excellent thread (there was NOTHING on 4 search engines last week after KB4474419 refused to install, nobody was reporting the issue except me on another popular windows help forum. I'm glad others are suffering the same problem, only because I'm not having some freakish problem nobody else has. Same error number in the Events Viewer, but as we all know that error number means nothing, microsoft has never explained it, like a dozen other error codes.
I've tried rebooting with nothing USB but keyboard and usb pin for my wireless mouse, nope, that's the first option in the "Failure to configure Windows Update" thread one can find easily made by MS. I've done everything except maybe disconnecting the ethernet cable and see what happens, if it's a proxy issue.
This is quite frustrating, thankfully there's no new mandatory updates right now, I wonder what will happen when one shows up and I uncheck KB4474419...unless I can get it to work using some of the suggestions shown here, this should be a simple update, adding SHA-2 should not mess around with boot sectors/linux (grub)...I've had this win7 install since 2 years 1/2 and never had an issue installing updates, and I do it all myself, I'm the "unsecure" guy who tells win update to check for updates and to let me download and install them...I might be close to disabling it entirely and downloading the update files manually once I get past this one...something's gotta give, this is not like we were novice users here, I think.