I just disabled Windows Update completely (by disabling the service) after 3 such incidents.

I'm aware it's a security risk, but I also keep nothing of value on that machine nowadays.