There is a free tool called WSUS Offline Update, which can download updates for all Windows platforms and create a ISO image file.
Just burn this image file to DVD and slip it into your PC and it will commence installing the updates.
After it finishes, check the iso sub folder to locate the ISO image file. You need to right click on it and select 'Burn disc image'.
We will harden the system to eliminate lots of attack surface and impede attackers.
After hardening, all control panel items are tested working, with the following exceptions: If your system has already been compromised, the best course of action is to re-install Windows.
Because there is no telling what backdoors and botnets clients have been installed on your system.
You best chance of survival is to re-install Windows and then hardening it to prevent further attacks from happening.
For details of the Automated Configuration files, see the Automated Configuration section near the bottom of this document.