Hmmm, I'll do a complete update via Microsoft - usually, systems are upgraded from our WSUS server and it only contains those patches that have been approved by my security people.
If that works, then I'll start the unenviable task of figuring out which update(s) are necessary.