So, if one just doesn’t install kb3068708, that should take care of it, correct?
That’s what it appears to be.
I still get occasional ‘critical updates’ even though I have autoupdate turned off.
Some of them cause me to have to resort to the System Restore to get the computer to run.