Bypass Windows 7 Extended Security Updates Eligibility

Discussion in 'Windows 7' started by abbodi1406, Nov 17, 2019.

  1. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream
    Staff Member

    Dec 21, 2012
    7,408
    9,124
    240
    You should enable the .NET 4.8 bypass only when actually installing the .NET update and disable it again after the reboot. It is known to have certain side-effects on other MSI packages.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. RegTheEvil

    RegTheEvil MDL Novice

    Mar 2, 2025
    3
    4
    0
    Thanks for the tip! I definitely didn't know that.
     
  3. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream
    Staff Member

    Dec 21, 2012
    7,408
    9,124
    240
    Means you had or still have IIS enabled.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. ryegrass

    ryegrass MDL Junior Member

    Oct 9, 2019
    92
    127
    0
    Interesting, it's never been on my machine, and according to the article it hasn't been on a number of other user's computers either.

    inetpub s.jpg
     
  5. ryegrass

    ryegrass MDL Junior Member

    Oct 9, 2019
    92
    127
    0
    Thanks, I should have googled it first, but I'm one of those people who thinks anything Microsoft does anymore has some nefarious purpose.
     
  6. kkhww

    kkhww MDL Member

    Mar 15, 2021
    183
    206
    10
    It's added by this .manifest file.
    Snipaste_2025-04-11_13-04-34.png
     
  7. Tony Popovic

    Tony Popovic MDL Novice

    Jan 14, 2020
    19
    30
    0
    The folder should not be deleted. (So it can, but should not). Microsoft itself describes it like this: “An authenticated attacker who successfully exploits this vulnerability gains the ability to execute and/or manipulate file management operations on the victim machine in the context of the NT account AUTHORITY\SYSTEM. After installing the updates listed in the overview of security updates for your operating system, a new folder %systemdrive%\inetpub will be created on your device. This folder should not be deleted, regardless of whether Internet Information Services (IIS) is active on the target device. This behavior is part of the changes that increase protection and does not require any action from IT administrators and end users." So, if the folder is there, just leave it there.
     
  8. Kirklang

    Kirklang MDL Novice

    Dec 9, 2019
    29
    18
    0
    #8692 Kirklang, Apr 11, 2025
    Last edited: Apr 11, 2025
    Hi, I removed .NET 4 ESU Bypass and from BypassESU-v13f's LiveOS-Setup.cmd settings and, then, rebooted and then re-enabled .NET 4 ESU Bypass from settings again and then rebooted again. For 3-4 times. I was not able to install KB5055171 because, very simply, .NET 4 ESU Bypass doesn't work on my 3 Windows 7 Pro.
    I had to install KB5055171 manually as it has always been happening for several months with the .NET 4 updates.
    At the contrary, no problem with KB5055561 and KB5056456.
    I don't understand...
     
  9. CaptainSpeleo

    CaptainSpeleo MDL Addicted

    May 24, 2020
    992
    706
    30
    Capture.JPG

    Kirklang:
    You need to place the new NET Framework 4.8 update inside the same folder as the dotNetFx4_ESU_Installer_v4 tool, then run its command(.cmd) script as Administrator.
    After the 2 - 3 minute install process is over, press any key to exit the tool.
     
  10. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    17,810
    94,912
    340
    Installed KB5055171 manually using dotNetFx4_ESU_Installer or without it?

    both .NET 4 ESU Bypass dotNetFx4_ESU_Installer use the same DLL hook file
    maybe your AV removes the DLL or registry key after a while, so the bypass fails
    whereas dotNetFx4_ESU_Installer uses the file/registry on-fly during installation
     
  11. Kirklang

    Kirklang MDL Novice

    Dec 9, 2019
    29
    18
    0
    #8695 Kirklang, Apr 14, 2025
    Last edited: Apr 14, 2025
    Thanks a lot for your answer.
    In the previous months, I used dotNetFx4_ESU_Installer, but I did a test and I realized that I could install KB5055171 as a matter of fact without dotNetFx4_ESU_Installer, too.
    But always and only manually, because BypassESU-v13f can't "see" the .Net update via Windows Update.
     
  12. Kirklang

    Kirklang MDL Novice

    Dec 9, 2019
    29
    18
    0
    Thank you, but I already know that.
    I can install NET Framework 4.8 update (only manually...) with dotNetFx4_ESU_Installer_v4 tool and also without that, indifferently...
     
  13. enesalpa

    enesalpa MDL Member

    Feb 5, 2010
    101
    27
    10
    Hello. Just a reminder, until when updates for Windows Server 2008 R2 will be released and when all other options for using Windows 7 will be gone. Thanks.
     
  14. pm67310

    pm67310 MDL Guru

    Sep 6, 2011
    3,681
    2,934
    120
    For windows 7 patch as server 2008 r2 to have update up to 2026

    For 64 bits only


    For 32bits patch as posready to have update up to october 2024
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  15. John_3_16

    John_3_16 MDL Member

    Feb 8, 2020
    188
    253
    10
    Nothing is everything & there are very few absolutes. None with this Win7 update process. WU still alerts me to the monthly security rollouts, the .NET framework monthlies when available & that another SSU is available. Just this last month as a matter of fact. I like to download & do the installs myself but I do use WU as an alarm clock. A process with years of success & no need to change this late in the game. ;>))
     
  16. Seven4ever

    Seven4ever MDL Member

    May 16, 2023
    124
    51
    10
    Ony if processor is SSE2 compatible, and if not it's march 2018.