SharePoint Updates accidentally added to SP servers, then rolled back, but still seeing 'out of sync' errors

Last Tuesday we had a problem with a WFE that was outside of an WSUS Group Policy, and downloaded updates directly from MS. What was supposed to be just OS updates included SharePoint updates as well.  We didn't want to install (run Config Wizard) as we were concerned that the updates hadn't been tested in DEV and STAGE already, and were well vetted.

We rolled back to a snapshot from before the download, but we are getting Monitoring errors that an upgrade is necessary.

Any recommendations. I'm hard set against running the config wizard as I don't know how they will affect the Production srever (even though they seeed somewhat harmless.)

THanks,

Scott