I've just come out of a grim period due to blasted KB3022345 - per my other threads. A few days ago I posted a warning I'd seen that Microsoft could be hiding yet another revision (5th or 6th?) of it under KB3068708. Floplot suggested not installing KB3068708, waiting a few days and then check here for any bad news (sound advice, especially if you've been nobbled by KB3022345).
One of the regulars here advised many moon ago not to permit updates to be automatically installed so I changed my settings - well I thought that I had. But I hadn't - I should have chosen "check for updates but let me choose whether to download and install them".
I'd selected "download updates but let me choose whether to install them" and the result when I shut down last night was the message " downloading1 of 9 updates - do not switch off". I'm horrified that the option I'd chosen gave me no choice at all - there was no shield icon "updates are available" - they just installed presumably as part of the powering down process.
So if you want to stop automatic updates being installed select "check for updates but let me choose whether to download and install them".
I'm sure I'm right but let's wait and see if any of the knowledgeable guys/gals here can confirm or not.
PS I did sfc /scannow and the CBS log is again a huge one, 248 MB so I'm now off to Bleeping Computer again (thanks floplot) to get it checked.