Guest foobar5@home.com Posted October 15, 2008 Posted October 15, 2008 I have XP SP3. When I went to shut my computer down tonight, instead of the normal standby, turn off, restart popup, I had that, but there was a Windows security shield superimposed on the turn off icon, and a message at the bottom of the popup saying "Click Turn Off to install important updates and turn off your computer. Click here to turn off without installing updates." This scares and weirds me out. I have Windows set up to download updates automatically, but only install after I review/approve the updates. But the little yellow Updates shield isn't showing in my system tray area. I went to Windows update and the last activity was September 9, when these updates were installed: * Windows Malicious Software Removal Tool - September 2008 (KB890830) * Windows XP Security Update for Windows XP (KB938464) * Windows XP Security Update for Windows XP (KB954154) There was no notation for anything being pushed to my computer since. So what's being pushed to my machine and is this normal? My daily AVG scan detected no viruses today. I opted to shut my computer down without installing the unspecified updates, but upon restarting, I'm still getting that alert when I try to shut down. My questions: 1. What's Windows asking me to install? 2. Why am I only being told that it wants to install something, without it telling me specifically what? 3. How do I review the proffered software and either approve it for installation or permanently reject it? 4. Anything else I should be aware of or looking for here?
Guest Harry Johnston [MVP] Posted October 15, 2008 Posted October 15, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? foobar5@home.com wrote: > When I went to shut my computer down tonight, instead of the normal > standby, turn off, restart popup, I had that, but there was a Windows > security shield superimposed on the turn off icon, and a message at > the bottom of the popup saying "Click Turn Off to install important > updates and turn off your computer. Click here to turn off without > installing updates." Start by looking in WindowsUpdate.log (usually found in c:\windows). If you have trouble interpreting it, post the last hundred lines or so here. Harry. > This scares and weirds me out. > > I have Windows set up to download updates automatically, but only > install after I review/approve the updates. But the little yellow > Updates shield isn't showing in my system tray area. > > I went to Windows update and the last activity was September 9, when > these updates were installed: > > * Windows Malicious Software Removal Tool - September 2008 (KB890830) > * Windows XP Security Update for Windows XP (KB938464) > * Windows XP Security Update for Windows XP (KB954154) > > There was no notation for anything being pushed to my computer since. > > So what's being pushed to my machine and is this normal? My daily AVG > scan detected no viruses today. I opted to shut my computer down > without installing the unspecified updates, but upon restarting, I'm > still getting that alert when I try to shut down. > > My questions: > > 1. What's Windows asking me to install? > > 2. Why am I only being told that it wants to install something, > without it telling me specifically what? > > 3. How do I review the proffered software and either approve it for > installation or permanently reject it? > > 4. Anything else I should be aware of or looking for here? >
Guest larry_lavaughn Posted October 15, 2008 Posted October 15, 2008 RE: "install important updates" at Windows XP SP3 shutdown - huh? I am having the same issue. I know that the update trying to install is the ..NET SP1 update, which had been installed months ago, but had been subverted by an installation of another application using it's own version of this same program. The application in question for me was the Comrade IM used in GameSpy Arcade. I don't know how to get around it either. -- If U always do what you always did... you'll always get what you always got! "foobar5@home.com" wrote: > I have XP SP3. > > When I went to shut my computer down tonight, instead of the normal > standby, turn off, restart popup, I had that, but there was a Windows > security shield superimposed on the turn off icon, and a message at > the bottom of the popup saying "Click Turn Off to install important > updates and turn off your computer. Click here to turn off without > installing updates." > > This scares and weirds me out. > > I have Windows set up to download updates automatically, but only > install after I review/approve the updates. But the little yellow > Updates shield isn't showing in my system tray area. > > I went to Windows update and the last activity was September 9, when > these updates were installed: > > * Windows Malicious Software Removal Tool - September 2008 (KB890830) > * Windows XP Security Update for Windows XP (KB938464) > * Windows XP Security Update for Windows XP (KB954154) > > There was no notation for anything being pushed to my computer since. > > So what's being pushed to my machine and is this normal? My daily AVG > scan detected no viruses today. I opted to shut my computer down > without installing the unspecified updates, but upon restarting, I'm > still getting that alert when I try to shut down. > > My questions: > > 1. What's Windows asking me to install? > > 2. Why am I only being told that it wants to install something, > without it telling me specifically what? > > 3. How do I review the proffered software and either approve it for > installation or permanently reject it? > > 4. Anything else I should be aware of or looking for here? > >
Guest Gary Brandenburg Posted October 15, 2008 Posted October 15, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? The log on Windows Update is showing the "installed" updates(or attempts) & not the ones waiting to be installed. Today is what's known as *Patch Tuesday* which is always on the 2nd Tuesday of the month,so the updates at shutdown,are legit. Apparently they've already been downloaded & are waiting to be installed,on your machine. If you're not seeing the update shield in the system tray,you can go to the Windows Update site & get them that way. ~Gary <foobar5@home.com> wrote in message news:u5laf4p2gaqoib5e3j571iknca588tmofn@4ax.com... >I have XP SP3. > > When I went to shut my computer down tonight, instead of the normal > standby, turn off, restart popup, I had that, but there was a Windows > security shield superimposed on the turn off icon, and a message at > the bottom of the popup saying "Click Turn Off to install important > updates and turn off your computer. Click here to turn off without > installing updates." > > This scares and weirds me out. > > I have Windows set up to download updates automatically, but only > install after I review/approve the updates. But the little yellow > Updates shield isn't showing in my system tray area. > > I went to Windows update and the last activity was September 9, when > these updates were installed: > > * Windows Malicious Software Removal Tool - September 2008 (KB890830) > * Windows XP Security Update for Windows XP (KB938464) > * Windows XP Security Update for Windows XP (KB954154) > > There was no notation for anything being pushed to my computer since. > > So what's being pushed to my machine and is this normal? My daily AVG > scan detected no viruses today. I opted to shut my computer down > without installing the unspecified updates, but upon restarting, I'm > still getting that alert when I try to shut down. > > My questions: > > 1. What's Windows asking me to install? > > 2. Why am I only being told that it wants to install something, > without it telling me specifically what? > > 3. How do I review the proffered software and either approve it for > installation or permanently reject it? > > 4. Anything else I should be aware of or looking for here? >
Guest foobar5@home.com Posted October 15, 2008 Posted October 15, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? On Wed, 15 Oct 2008 16:31:57 +1300, "Harry Johnston [MVP]" <harry@scms.waikato.ac.nz> wrote: >foobar5@home.com wrote: > >> When I went to shut my computer down tonight, instead of the normal >> standby, turn off, restart popup, I had that, but there was a Windows >> security shield superimposed on the turn off icon, and a message at >> the bottom of the popup saying "Click Turn Off to install important >> updates and turn off your computer. Click here to turn off without >> installing updates." > >Start by looking in WindowsUpdate.log (usually found in c:\windows). If you >have trouble interpreting it, post the last hundred lines or so here. > > Harry. > There are around 1300 pieces of activity in my c:\windows\windowsupdate.log for 2008-10-14. There are already 51 activities for 2008-10-15 and the day is young! http://www.megaupload.com/?d=1ME2YPEQ has the file as it currently exists. FWIW, my c:\windows directory has 16 files from 2008-09-09 (September patch Tuesday), one from 2008-09-23, and the following from 2008-10-14: * KB956390-IE7.log * setupapi.log * SchedLgU.Txt * bootstat.dat * wiaservc.log * wiadebug.log * 0.log (NOTE: zero-length file) And there's the WindowsUpldate.log, which was time stamped 04:51 this morning, from when I got on. As I said, 51 entries in it. A cursory scan of the logs shows nothing too weird. I'm guessing that KB956390 related to IE7 is the only thing it's trying to install. Still feel funny about how Windows is just pushing an update or updates on me without telling me what they are.
Guest foobar5@home.com Posted October 15, 2008 Posted October 15, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? On Wed, 15 Oct 2008 01:11:39 -0400, "Gary Brandenburg" <Gary@whatever.com> wrote: >The log on Windows Update is showing the "installed" updates(or attempts) & not the >ones waiting to be installed. >Today is what's known as *Patch Tuesday* which is always on the 2nd Tuesday of the >month,so the updates at shutdown,are legit. Apparently they've already been >downloaded & are waiting to be installed,on your machine. >If you're not seeing the update shield in the system tray,you can go to the Windows >Update site & get them that way. > >~Gary I have a longer response upthread, with a link to http://www.megaupload.com/?d=1ME2YPEQ (my WindowsUpdate log, for anyone wishing to peruse it), plus a listing of the content of my c:\Windows folder dated 10-14, the date in question. When I try to retrieve Windows updates from Windows Update, I get the Software Upgrade for Some Windows Components Required screen. This smacks of ignorance and superstition and worse, but years ago, installing one of the components on my computer caused some significant problems. Probably a onetime fluke, but I've been a "if it ain't broke, don't fix it" guy ever since. Windows update also tells me, correctly, that "Your computer is set to receive notifications when new updates are available. " and then I pick which updates to install and when. I can't remember the last time I declined an update, but I like having that smidge of control. I'm mostly looking for other people who've gotten this situation I described in my original post (people who got it on 10-14-2008), and what their experiences have been. Not to mention why Windows is trying to sneak an update by me (apparently).
Guest foobar5@home.com Posted October 15, 2008 Posted October 15, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? On Wed, 15 Oct 2008 05:20:42 -0400, foobar5@home.com wrote: >On Wed, 15 Oct 2008 16:31:57 +1300, "Harry Johnston [MVP]" ><harry@scms.waikato.ac.nz> wrote: > >>foobar5@home.com wrote: >> >>> When I went to shut my computer down tonight, instead of the normal >>> standby, turn off, restart popup, I had that, but there was a Windows >>> security shield superimposed on the turn off icon, and a message at >>> the bottom of the popup saying "Click Turn Off to install important >>> updates and turn off your computer. Click here to turn off without >>> installing updates." >> >>Start by looking in WindowsUpdate.log (usually found in c:\windows). If you >>have trouble interpreting it, post the last hundred lines or so here. >> >> Harry. >> > >There are around 1300 pieces of activity in my >c:\windows\windowsupdate.log for 2008-10-14. There are already 51 >activities for 2008-10-15 and the day is young! > >http://www.megaupload.com/?d=1ME2YPEQ has the file as it currently >exists. > >FWIW, my c:\windows directory has 16 files from 2008-09-09 (September >patch Tuesday), one from 2008-09-23, and the following from >2008-10-14: > >* KB956390-IE7.log >* setupapi.log >* SchedLgU.Txt >* bootstat.dat >* wiaservc.log >* wiadebug.log >* 0.log (NOTE: zero-length file) > >And there's the WindowsUpldate.log, which was time stamped 04:51 this >morning, from when I got on. As I said, 51 entries in it. > >A cursory scan of the logs shows nothing too weird. I'm guessing that >KB956390 related to IE7 is the only thing it's trying to install. > >Still feel funny about how Windows is just pushing an update or >updates on me without telling me what they are. Okay, more weirdness. I downloaded IE7-WindowsXP-KB956390-x86-ENU.exe directly from MS. Installed that and restarted computer and no problems. BUT... it doesn't show up in my update history when I run Windows Update, and I'm still getting the "Click Turn Off to install important updates and turn off your computer. Click here to turn off without installing updates." message when I try to shut down or restart. Perhaps these lines from my WindowsUpdate.log might be of interest: 2008-10-15 06:00:17:359 988 be4 Agent * Added update {3DE030BB-2666-44F6-9B15-E02FE518833F}.100 to search result 2008-10-15 06:00:17:359 988 be4 Agent * Added update {424B1C8F-742A-4614-8012-1BB25B527706}.100 to search result 2008-10-15 06:00:17:359 988 be4 Agent * Added update {650F9FB5-032E-41BB-B31B-4210AC074F8B}.102 to search result 2008-10-15 06:00:17:359 988 be4 Agent * Added update {25EE37D4-1EB2-4546-843F-AD0AC80BC14E}.104 to search result 2008-10-15 06:00:17:359 988 be4 Agent * Added update {33A7EDF1-2350-4102-8082-9540EFF65704}.102 to search result 2008-10-15 06:00:17:359 988 be4 Agent * Added update {8FD536A6-5577-432D-8031-3369530913DC}.102 to search result 2008-10-15 06:00:17:359 988 be4 Agent * Added update {336530D3-9AE4-42DF-9606-4FB35D46CEFC}.102 to search result 2008-10-15 06:00:17:359 988 be4 Agent * Found 7 updates and 42 categories in search; evaluated appl. rules of 278 out of 661 deployed entities Still not seeing yellow Windows Update shield in my system tray.
Guest PA Bear [MS MVP] Posted October 15, 2008 Posted October 15, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? Since 09 Sept-08, have you (a) installed Windows Live OneCare or (b) changed your default update source from Windows Update to Microsoft Update? Related: 1. http://blogs.technet.com/mu/archive/2008/10/02/windows-update-and-automatic-reboots.aspx 2. http://blogs.technet.com/mu/archive/2008/07/18/windows-search-4.aspx Free unlimited installation and compatibility support is available for Windows XP, but only for Service Pack 3 (SP3), until 14 Apr-09. Chat and e-mail support is available only in the United States and Canada. Go to http://support.microsoft.com/oas/default.aspx?gprid=1173 | select "Windows XP" then select "Windows XP Service Pack 3" -- ~Robear Dyer (PA Bear) MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002 AumHa VSOP & Admin http://aumha.net DTS-L http://dts-l.net/ foobar5@home.com wrote: > I have XP SP3. > > When I went to shut my computer down tonight, instead of the normal > standby, turn off, restart popup, I had that, but there was a Windows > security shield superimposed on the turn off icon, and a message at > the bottom of the popup saying "Click Turn Off to install important > updates and turn off your computer. Click here to turn off without > installing updates." > > This scares and weirds me out. > > I have Windows set up to download updates automatically, but only > install after I review/approve the updates. But the little yellow > Updates shield isn't showing in my system tray area. > > I went to Windows update and the last activity was September 9, when > these updates were installed: > > * Windows Malicious Software Removal Tool - September 2008 (KB890830) > * Windows XP Security Update for Windows XP (KB938464) > * Windows XP Security Update for Windows XP (KB954154) > > There was no notation for anything being pushed to my computer since. > > So what's being pushed to my machine and is this normal? My daily AVG > scan detected no viruses today. I opted to shut my computer down > without installing the unspecified updates, but upon restarting, I'm > still getting that alert when I try to shut down. > > My questions: > > 1. What's Windows asking me to install? > > 2. Why am I only being told that it wants to install something, > without it telling me specifically what? > > 3. How do I review the proffered software and either approve it for > installation or permanently reject it? > > 4. Anything else I should be aware of or looking for here?
Guest MowGreen [MVP] Posted October 15, 2008 Posted October 15, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? >> I downloaded IE7-WindowsXP-KB956390-x86-ENU.exe directly from MS. >> Installed that and restarted computer and no problems. >> >> BUT... it doesn't show up in my update history when I run Windows >> Update, Updates installed *manually* will only show in the System Event log and be listed in ARP. [Add/Remove Programs] I can't access the log you posted at megaupload.com. Windows Update needs to update the Windows Update Agent from time to time. Perhaps that's what's occurring: http://blogs.technet.com/mu/archive/2008/07/03/upcoming-update-to-windows-update.aspx The WU.log shows which V. of the Windows Update Agent that is installed: 2008-10-15 11:50:22:834 3712 a5c Misc =========== Logging initialized (build: 7.2.6001.784, tz: -0700) =========== If the build: is a lower Version than what is required, it *should* attempt to update it. This updating can fail if security software does not allow it. Perhaps it's attempting to install on Shutdown as said sec software is inhibiting it's installation whilst it's still running ? 2008-10-14 11:52:22:794 3116 c24 Setup *********** Setup: Checking whether self-update is required *********** 2008-10-14 11:52:22:794 3116 c24 Setup * Inf file: D:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setup.inf 2008-10-14 11:52:22:884 3116 c24 Setup Update NOT required for D:\WINDOWS\system32\cdm.dll: target version = 7.2.6001.784, required version = 7.2.6001.784 2008-10-14 11:52:22:884 3116 c24 Setup Update NOT required for D:\WINDOWS\system32\wuapi.dll: target version = 7.2.6001.784, required version = 7.2.6001.784 2008-10-14 11:52:22:894 3116 c24 Setup Update NOT required for D:\WINDOWS\system32\wuapi.dll.mui: target version = 7.2.6001.784, required version = 7.2.6001.784 2008-10-14 11:52:22:904 3116 c24 Setup Update NOT required for D:\WINDOWS\system32\wuauclt.exe: target version = 7.2.6001.784, required version = 7.2.6001.784 2008-10-14 11:52:22:904 3116 c24 Setup Update NOT required for D:\WINDOWS\system32\wuaucpl.cpl: target version = 7.2.6001.784, required version = 7.2.6001.784 2008-10-14 11:52:22:914 3116 c24 Setup Update NOT required for D:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.2.6001.784, required version = 7.2.6001.784 2008-10-14 11:52:22:914 3116 c24 Setup Update NOT required for D:\WINDOWS\system32\wuaueng.dll: target version = 7.2.6001.784, required version = 7.2.6001.784 2008-10-14 11:52:22:924 3116 c24 Setup Update NOT required for D:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.2.6001.784, required version = 7.2.6001.784 2008-10-14 11:52:22:924 3116 c24 Setup Update NOT required for D:\WINDOWS\system32\wucltui.dll: target version = 7.2.6001.784, required version = 7.2.6001.784 2008-10-14 11:52:22:934 3116 c24 Setup Update NOT required for D:\WINDOWS\system32\wucltui.dll.mui: target version = 7.2.6001.784, required version = 7.2.6001.784 2008-10-14 11:52:22:944 3116 c24 Setup Update NOT required for D:\WINDOWS\system32\wups.dll: target version = 7.2.6001.784, required version = 7.2.6001.784 2008-10-14 11:52:22:954 3116 c24 Setup Update NOT required for D:\WINDOWS\system32\wups2.dll: target version = 7.2.6001.784, required version = 7.2.6001.784 If you check Automatic Updates in the Control Panel, you'll see this: (Turning on Automatic Updates may automatically update Windows Update software first, before any other updates.) If you don't Trust Windows Update to update the WUA, the only recourse you have is to turn off Automatic Updates. MowGreen [MVP 2003-2009] =============== *-343-* FDNY Never Forgotten =============== foobar5@home.com wrote: > On Wed, 15 Oct 2008 05:20:42 -0400, foobar5@home.com wrote: > > >>On Wed, 15 Oct 2008 16:31:57 +1300, "Harry Johnston [MVP]" >><harry@scms.waikato.ac.nz> wrote: >> >> >>>foobar5@home.com wrote: >>> >>> >>>>When I went to shut my computer down tonight, instead of the normal >>>>standby, turn off, restart popup, I had that, but there was a Windows >>>>security shield superimposed on the turn off icon, and a message at >>>>the bottom of the popup saying "Click Turn Off to install important >>>>updates and turn off your computer. Click here to turn off without >>>>installing updates." >>> >>>Start by looking in WindowsUpdate.log (usually found in c:\windows). If you >>>have trouble interpreting it, post the last hundred lines or so here. >>> >>> Harry. >>> >> >>There are around 1300 pieces of activity in my >>c:\windows\windowsupdate.log for 2008-10-14. There are already 51 >>activities for 2008-10-15 and the day is young! >> >>http://www.megaupload.com/?d=1ME2YPEQ has the file as it currently >>exists. >> >>FWIW, my c:\windows directory has 16 files from 2008-09-09 (September >>patch Tuesday), one from 2008-09-23, and the following from >>2008-10-14: >> >>* KB956390-IE7.log >>* setupapi.log >>* SchedLgU.Txt >>* bootstat.dat >>* wiaservc.log >>* wiadebug.log >>* 0.log (NOTE: zero-length file) >> >>And there's the WindowsUpldate.log, which was time stamped 04:51 this >>morning, from when I got on. As I said, 51 entries in it. >> >>A cursory scan of the logs shows nothing too weird. I'm guessing that >>KB956390 related to IE7 is the only thing it's trying to install. >> >>Still feel funny about how Windows is just pushing an update or >>updates on me without telling me what they are. > > > Okay, more weirdness. > > I downloaded IE7-WindowsXP-KB956390-x86-ENU.exe directly from MS. > Installed that and restarted computer and no problems. > > BUT... it doesn't show up in my update history when I run Windows > Update, and I'm still getting the "Click Turn Off to install important > updates and turn off your computer. Click here to turn off without > installing updates." message when I try to shut down or restart. > > Perhaps these lines from my WindowsUpdate.log might be of interest: > > 2008-10-15 06:00:17:359 988 be4 Agent * Added > update {3DE030BB-2666-44F6-9B15-E02FE518833F}.100 to search result > 2008-10-15 06:00:17:359 988 be4 Agent * Added > update {424B1C8F-742A-4614-8012-1BB25B527706}.100 to search result > 2008-10-15 06:00:17:359 988 be4 Agent * Added > update {650F9FB5-032E-41BB-B31B-4210AC074F8B}.102 to search result > 2008-10-15 06:00:17:359 988 be4 Agent * Added > update {25EE37D4-1EB2-4546-843F-AD0AC80BC14E}.104 to search result > 2008-10-15 06:00:17:359 988 be4 Agent * Added > update {33A7EDF1-2350-4102-8082-9540EFF65704}.102 to search result > 2008-10-15 06:00:17:359 988 be4 Agent * Added > update {8FD536A6-5577-432D-8031-3369530913DC}.102 to search result > 2008-10-15 06:00:17:359 988 be4 Agent * Added > update {336530D3-9AE4-42DF-9606-4FB35D46CEFC}.102 to search result > 2008-10-15 06:00:17:359 988 be4 Agent * Found 7 > updates and 42 categories in search; evaluated appl. rules of 278 out > of 661 deployed entities > > Still not seeing yellow Windows Update shield in my system tray.
Guest foobar5@home.com Posted October 15, 2008 Posted October 15, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? On Wed, 15 Oct 2008 12:31:53 -0700, "MowGreen [MVP]" <mowgreen@nowandzen.com> wrote: >>> I downloaded IE7-WindowsXP-KB956390-x86-ENU.exe directly from MS. >>> Installed that and restarted computer and no problems. >>> >>> BUT... it doesn't show up in my update history when I run Windows >>> Update, > >Updates installed *manually* will only show in the System Event log and >be listed in ARP. [Add/Remove Programs] > >I can't access the log you posted at megaupload.com. >Windows Update needs to update the Windows Update Agent from time to >time. Perhaps that's what's occurring: >http://blogs.technet.com/mu/archive/2008/07/03/upcoming-update-to-windows-update.aspx > >The WU.log shows which V. of the Windows Update Agent that is installed: > >2008-10-15 11:50:22:834 3712 a5c Misc =========== Logging initialized >(build: 7.2.6001.784, tz: -0700) =========== > (sorry, snipped quite a bit from your post) An edited version of my Windows Update log (activity in the past several days) can be limited downloaded (10 downloads, expiration on 10/18) from http://www.filemail.com/dl.aspx[ZZZZZZZZZZZZZZZZZ]?id=MKKLBFYRMCANPEI (cut the brackets and the z's to make the URL work). My WUA build is the same as yours, 7.2.6001.784, according to my log. How do I find out what updates Windows is trying to install? Since they're evidently on my computer somewhere, where can I find them?
Guest foobar5@home.com Posted October 15, 2008 Posted October 15, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? On Wed, 15 Oct 2008 14:33:29 -0400, "PA Bear [MS MVP]" <PABearMVP@gmail.com> wrote: >Since 09 Sept-08, have you (a) installed Windows Live OneCare or (b) changed >your default update source from Windows Update to Microsoft Update? No and no.
Guest foobar5@home.com Posted October 15, 2008 Posted October 15, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? Okay, I have another XP SP3 computer in my house. This one has full automatic updates set up on it (Windows downloads and installs updates automatically, with no user intervention or vetting). I checked the Windows Update history on that computer, and seven updates were installed today; none of them worrisome - just really the usual security updates. So I manned up and authorized my computer to install the updates and shut down. It went through the normal Windows shutdown sequence, but then with the sky blue screen still there, I saw "Installing update 1 of 6, 2 of 6, etc." Then the computer shut down. I restarted and now the shutdown dialog doesn't have the nag to install updates. According to Windows Update, the following installed on my computer: * Windows XP Security Update for Windows XP (KB956803) * Windows XP Cumulative Security Update for ActiveX Killbits for for Windows XP (KB956391) * Windows XP Security Update for Windows XP (KB957095) * Windows XP Security Update for Windows XP (KB954211) * Windows XP Security Update for Windows XP (KB956841) * Windows XP Windows Malicious Software Removal Tool - October 2008 (KB890830) The only difference between these six and the seven on the other computer was KB956390, an IE7-related update that I'd manually installed 12 hours earlier. So I guess I'm good for four more weeks. But still, why did Windows all of a sudden shield me from normal details of these updates? As I've said, there was no yellow "updates are ready" shield in my notification area, and the nag on the shutdown dialog supplied no details of what it was trying to do. BTW MowGreen, even after these updates, my WUA build remains 7.2.6001.784 I'm going to try changing my Windows update setting (from "Download updates for me but let me choose when to install them" to "Notify me but don't automatically download or install them") and see if that gets Windows behaving as I'd like. But I'll probably have to wait four weeks to see.
Guest PA Bear [MS MVP] Posted October 15, 2008 Posted October 15, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? [Please stick to one (1) thread in one (1) newsgroup. Thanks.] foobar5@home.com wrote: > Okay, I have another XP SP3 computer in my house. This one has full > automatic updates set up on it (Windows downloads and installs updates > automatically, with no user intervention or vetting). > > I checked the Windows Update history on that computer, and seven > updates were installed today; none of them worrisome - just really the > usual security updates. > > So I manned up and authorized my computer to install the updates and > shut down. It went through the normal Windows shutdown sequence, but > then with the sky blue screen still there, I saw "Installing update 1 > of 6, 2 of 6, etc." Then the computer shut down. > > I restarted and now the shutdown dialog doesn't have the nag to > install updates. > > According to Windows Update, the following installed on my computer: > > * Windows XP Security Update for Windows XP (KB956803) > * Windows XP Cumulative Security Update for ActiveX Killbits for for > Windows XP (KB956391) > * Windows XP Security Update for Windows XP (KB957095) > * Windows XP Security Update for Windows XP (KB954211) > * Windows XP Security Update for Windows XP (KB956841) > * Windows XP Windows Malicious Software Removal Tool - October 2008 > (KB890830) > > The only difference between these six and the seven on the other > computer was KB956390, an IE7-related update that I'd manually > installed 12 hours earlier. > > So I guess I'm good for four more weeks. > > But still, why did Windows all of a sudden shield me from normal > details of these updates? As I've said, there was no yellow "updates > are ready" shield in my notification area, and the nag on the shutdown > dialog supplied no details of what it was trying to do. > > BTW MowGreen, even after these updates, my WUA build remains > 7.2.6001.784 > > I'm going to try changing my Windows update setting (from "Download > updates for me but let me choose when to install them" to "Notify me > but don't automatically download or install them") and see if that > gets Windows behaving as I'd like. But I'll probably have to wait > four weeks to see.
Guest Robert Aldwinckle Posted October 16, 2008 Posted October 16, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? <foobar5@home.com> wrote in message news:u5laf4p2gaqoib5e3j571iknca588tmofn@4ax.com... >I have XP SP3. > > When I went to shut my computer down tonight, instead of the normal > standby, turn off, restart popup, I had that, but there was a Windows > security shield superimposed on the turn off icon, and a message at > the bottom of the popup saying "Click Turn Off to install important > updates and turn off your computer. Click here to turn off without > installing updates." I wasn't aware that there may be a "click here to turn off without installing" option. Last time I saw this I could reboot using the Restart button and then achieve that effect by waiting for the boot prompt to show and then power down manually before the restart went any further... OIC. It's a link in the dialog, not another button. Thanks. Another potential option I think would be to stop the wuauserv service before shutting down. Perhaps that's what that link in the dialog now does? <eg> Yes! Stopping the wuauserv service prevents those additions to the Shutdown dialog. Thank you for making me find this! That also stopped the wuauclt.exe which was running. I wonder if restarting wuauserv again will restart that and make the tool reappear in the SysTray?... That might be the trick. It was there and then it disappeared. My Always Show is now marking: Downloading updates: 0% I don't think that is what it was showing when I marked it. Ok. So now I'll try turning off the Notification area customization and making my Taskbar not Auto-Hide and then restart wuauserv... Nope. This time wuauclt.exe came and went without even flashing in the Notification area. (Almost as if it knew I was ready to play whackamole with it. <eg>) One last try. wuauclt.exe has come and gone again. So, instead of restarting wuauserv this time I'll try Run... wuauclt.exe /detectnow Still ready to pounce on the Taskbar if the icon flashes again... ; ) No luck. Wish I knew what factor(s) made it flash that first time I restarted wuauserv. I suppose I could also try restarting explorer.exe, perhaps even seeing if Run As... Administrator is available... ; } No change with a new explorer. Thwarted by Security/Obscurity to make it Run As... Administrator. > > This scares and weirds me out. Have fun with it. It's all a game... ; ) > > I have Windows set up to download updates automatically, but only > install after I review/approve the updates. But the little yellow > Updates shield isn't showing in my system tray area. > > I went to Windows update and the last activity was September 9, when > these updates were installed: > > * Windows Malicious Software Removal Tool - September 2008 (KB890830) > * Windows XP Security Update for Windows XP (KB938464) > * Windows XP Security Update for Windows XP (KB954154) > > There was no notation for anything being pushed to my computer since. A better thing to look at is the ReportingEvents.log (in %windir%\SoftwareDistribution) > > So what's being pushed to my machine and is this normal? Normal? Apparently. > My daily AVG > scan detected no viruses today. I opted to shut my computer down > without installing the unspecified updates, but upon restarting, I'm > still getting that alert when I try to shut down. > > My questions: > > 1. What's Windows asking me to install? All the things it has completely downloaded that you haven't specifically blocked from being installed. So, since you haven't had an AU icon to use, that probably means everything it has completely downloaded. <eg> > > 2. Why am I only being told that it wants to install something, > without it telling me specifically what? Look in ReportingEvents.log. Alternatively, it appears you could find the same information using the Event Viewer. E.g. open the System log and filter on Source: Windows Update Agent. > > 3. How do I review the proffered software and either approve it for > installation or permanently reject it? You have to get the AU icon back and doubleclick it. Otherwise you have to use the WU or MU web site's Custom button. > > 4. Anything else I should be aware of or looking for here? Try using bitsadmin (in a cmd window) to see if a download has been suspended. http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windowsupdate&mid=b13ce428-ab52-4110-9f31-76c093f918a4&sloc=en-us (Alt-7 search for bitsadmin suspend ) However, I suspect that another reason for the tool missing from the "notification area" is that some of the messages about updates which haven't yet been installed are including text like this: <extract> Description: Installation Ready: The following updates are downloaded and ready for installation. To install the updates, an administrator should log on to this computer and Windows will prompt with further instructions: </extract> One thing that I try to do, not always successfully, is make sure that the AU icon is marked Always Show. However, that is really just to make it more usable whenever it is there to use. Having now seen that there is an option in the shut down dialog to avoid all installs I suspect that what we are seeing was designed, with the removal of the icon from the SysTray deliberate. HTH Robert Aldwinckle ---
Guest MowGreen [MVP] Posted October 16, 2008 Posted October 16, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? All successful updates done via Automatic Updates are recorded in the ReportingEvents.log located in WINDOWS\SoftwareDistribution Updates to Root Certificates are done via AU if you chosen that option in Control Panel > Add/Remove Programs > Add/Remove Windows Components > See if Update Root Certificates is checked. If it is, entries for Root Cert updates show in the Application Event log, the Source being crypt32. IF the WUA was updated, then the WU.log shows that. Since I do that manually, can't say if it will show in the System Event log, but if it does, the Source would be WindowsUpdateAgent. MowGreen [MVP 2003-2009] =============== *-343-* FDNY Never Forgotten =============== foobar5@home.com wrote: > On Wed, 15 Oct 2008 12:31:53 -0700, "MowGreen [MVP]" > <mowgreen@nowandzen.com> wrote: > > >>>>I downloaded IE7-WindowsXP-KB956390-x86-ENU.exe directly from MS. >>>>Installed that and restarted computer and no problems. >>>> >>>>BUT... it doesn't show up in my update history when I run Windows >>>>Update, >> >>Updates installed *manually* will only show in the System Event log and >>be listed in ARP. [Add/Remove Programs] >> >>I can't access the log you posted at megaupload.com. >>Windows Update needs to update the Windows Update Agent from time to >>time. Perhaps that's what's occurring: >>http://blogs.technet.com/mu/archive/2008/07/03/upcoming-update-to-windows-update.aspx >> >>The WU.log shows which V. of the Windows Update Agent that is installed: >> >>2008-10-15 11:50:22:834 3712 a5c Misc =========== Logging initialized >>(build: 7.2.6001.784, tz: -0700) =========== >> > > > (sorry, snipped quite a bit from your post) > > An edited version of my Windows Update log (activity in the past > several days) can be limited downloaded (10 downloads, expiration on > 10/18) from > http://www.filemail.com/dl.aspx[ZZZZZZZZZZZZZZZZZ]?id=MKKLBFYRMCANPEI > (cut the brackets and the z's to make the URL work). > > My WUA build is the same as yours, 7.2.6001.784, according to my log. > > How do I find out what updates Windows is trying to install? Since > they're evidently on my computer somewhere, where can I find them? > >
Guest nospam1@nospam.xxy Posted October 17, 2008 Posted October 17, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? On Thu, 16 Oct 2008 15:00:13 -0700, "MowGreen [MVP]" <mowgreen@nowandzen.com> wrote: >All successful updates done via Automatic Updates are recorded in the >ReportingEvents.log located in >WINDOWS\SoftwareDistribution > >Updates to Root Certificates are done via AU if you chosen that option >in Control Panel > Add/Remove Programs > Add/Remove Windows Components > >See if Update Root Certificates is checked. If it is, entries for Root >Cert updates show in the Application Event log, the Source being >crypt32. > >IF the WUA was updated, then the WU.log shows that. Since I do that >manually, can't say if it will show in the System Event log, but if it >does, the Source would be WindowsUpdateAgent. > >MowGreen [MVP 2003-2009] >=============== > *-343-* FDNY >Never Forgotten >=============== I'm not sure what the above means (my bad, my dumb), sorry. Let me ask you - where would I find the updates that have been downloaded to my computer? Not just the location, but the names of the updates (KBxxxxx for example, or SP3)?
Guest MowGreen [MVP] Posted October 17, 2008 Posted October 17, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? All updates that are downloaded via Automatic Updates appear in the WindowsUpdate.log, located in the WINDOWS directory. The most recent entries are at the bottom of the log. How to read the Windowsupdate.log file http://support.microsoft.com/kb/902093 From my previous post below, what don't you understand ? I'd be happy to explain whatever it is that puzzles you. MowGreen [MVP 2003-2009] =============== *-343-* FDNY Never Forgotten =============== nospam1@nospam.xxy wrote: > On Thu, 16 Oct 2008 15:00:13 -0700, "MowGreen [MVP]" > <mowgreen@nowandzen.com> wrote: > > >>All successful updates done via Automatic Updates are recorded in the >>ReportingEvents.log located in >>WINDOWS\SoftwareDistribution >> >>Updates to Root Certificates are done via AU if you chosen that option >>in Control Panel > Add/Remove Programs > Add/Remove Windows Components > >>See if Update Root Certificates is checked. If it is, entries for Root >>Cert updates show in the Application Event log, the Source being >>crypt32. >> >>IF the WUA was updated, then the WU.log shows that. Since I do that >>manually, can't say if it will show in the System Event log, but if it >>does, the Source would be WindowsUpdateAgent. >> >>MowGreen [MVP 2003-2009] >>=============== >> *-343-* FDNY >>Never Forgotten >>=============== > > > I'm not sure what the above means (my bad, my dumb), sorry. > > Let me ask you - where would I find the updates that have been > downloaded to my computer? Not just the location, but the names of > the updates (KBxxxxx for example, or SP3)?
Guest nospam1@nospam.xxy Posted October 17, 2008 Posted October 17, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? On Fri, 17 Oct 2008 11:31:41 -0700, "MowGreen [MVP]" <mowgreen@nowandzen.com> wrote: >All updates that are downloaded via Automatic Updates appear in the >WindowsUpdate.log, located in the WINDOWS directory. The most recent >entries are at the bottom of the log. > >How to read the Windowsupdate.log file >http://support.microsoft.com/kb/902093 > > From my previous post below, what don't you understand ? >I'd be happy to explain whatever it is that puzzles you. > >MowGreen [MVP 2003-2009] >=============== > *-343-* FDNY >Never Forgotten >=============== What I'm stuck on from your earlier post was stuff like "Updates to Root Certificates" - Not sure what a RC is or what the purpose of one is. What I'm curious about now (I plead guilty to making my questions slightly moving targets): - When updates are downloaded to my computer, where are they kept as they wait install? - Once I see these updates, how do I look at the file/folder names and research what they are? I assume they're not named with a KB name or something user-friendly. - If I'm not getting the yellow shield that normally gives me control over which updates to install and when, how can I delete the updates I don't want, without hosing the computer? - I had one update once that would go through the motions of installing, but it repeatedly failed. How can I tell Windows to download a brand new copy of this update, and log it through the Windows Update history in IE? Does http://blogs.techrepublic.com.com/window-on-windows/?p=779 seem useful in terms of my regaining control over my Windows updates? Again, I had it configured to notify me of updates and let me pick which to install, but Windows this month shielded me from seeing what it was trying to do. I followed the steps in that link, but I assume I'll have to wait until November 11 to see if they work.
Guest nospam1@nospam.xxy Posted October 18, 2008 Posted October 18, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? On Fri, 17 Oct 2008 18:13:30 -0400, nospam1@nospam.xxy wrote: >Does http://blogs.techrepublic.com.com/window-on-windows/?p=779 seem >useful in terms of my regaining control over my Windows updates? >Again, I had it configured to notify me of updates and let me pick >which to install, but Windows this month shielded me from seeing what >it was trying to do. I followed the steps in that link, but I assume >I'll have to wait until November 11 to see if they work. I'm not sure what did it, but this morning (10/18), I had the yellow shield back - such a welcome sight! - and Windows was prompting me to download updates for the .net framework (which I never use) and a WGA tool (which has wreaked havoc at times before). So I declined them, asked to not be reminded again about those updates, and the shield went away. So maybe http://blogs.techrepublic.com.com/window-on-windows/?p=779 did the trick.
Guest MowGreen [MVP] Posted October 18, 2008 Posted October 18, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? http://support.microsoft.com/kb/931125 > The table that is included in this article lists the third-party commercial certification authorities > (CAs) that are trusted by Microsoft. As a Windows user, you can use the listed CAs for secure > e-commerce. > CAs validate the identity and entitlement of an applicant. In this process, the applicant is issued a > digital certificate. You can use digital certificates to prove the identity of a remote person or a > remote resource. Root Certs are used in the updating process to validate that the updates are indeed, from Microsoft. The updates are signed digitally with a Root Cert. > Adding additional root certificates to your computer enables you to use Extended Validation (EV) > certificates in Internet Explorer 7, a greater range of security enhanced Web browsing, encrypted > e-mail, and security enhanced code delivery Answers to the other questions inline: nospam1@nospam.xxy wrote: > On Fri, 17 Oct 2008 11:31:41 -0700, "MowGreen [MVP]" > <mowgreen@nowandzen.com> wrote: > > >>All updates that are downloaded via Automatic Updates appear in the >>WindowsUpdate.log, located in the WINDOWS directory. The most recent >>entries are at the bottom of the log. >> >>How to read the Windowsupdate.log file >>http://support.microsoft.com/kb/902093 >> >>From my previous post below, what don't you understand ? >>I'd be happy to explain whatever it is that puzzles you. >> >>MowGreen [MVP 2003-2009] >>=============== >> *-343-* FDNY >>Never Forgotten >>=============== > > > What I'm stuck on from your earlier post was stuff like "Updates to > Root Certificates" - Not sure what a RC is or what the purpose of one > is. > > What I'm curious about now (I plead guilty to making my questions > slightly moving targets): > > - When updates are downloaded to my computer, where are they kept as > they wait install? WINDOWS\SoftwareDistribution\Download > - Once I see these updates, how do I look at the file/folder names and > research what they are? I assume they're not named with a KB name or > something user-friendly. The subfolders in Download are randomly named. You can open them to see what the KBxxxxxx.cat is to determine the KB of the update. If you've set Automatic Updates to " Notify me but don't ... " or, " Download updates for me but ... ", when the yellow shield appears in the Notification Area you can click on it and then see the KB number of which updates are being offered. There is also a link to the KB article available. > - If I'm not getting the yellow shield that normally gives me control > over which updates to install and when, how can I delete the updates I > don't want, without hosing the computer? Answered already in your follow up post. http://blogs.techrepublic.com.com/window-on-windows/?p=779 > - I had one update once that would go through the motions of > installing, but it repeatedly failed. How can I tell Windows to > download a brand new copy of this update, and log it through the > Windows Update history in IE? Stop the associcated Services, as shown in the URL above. > Does http://blogs.techrepublic.com.com/window-on-windows/?p=779 seem > useful in terms of my regaining control over my Windows updates? > Again, I had it configured to notify me of updates and let me pick > which to install, but Windows this month shielded me from seeing what > it was trying to do. I followed the steps in that link, but I assume > I'll have to wait until November 11 to see if they work. I repeat, all Automatic Updating is shown in the WU.log, even the updating of the software components that are required to update the system.. There is no need to rename/delete the entire Software Distribution folder to remove unwanted updates. They are located in the Download folder. MowGreen [MVP 2003-2009] =============== *-343-* FDNY Never Forgotten ===============
Guest nospam1@nospam.xxy Posted October 19, 2008 Posted October 19, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? On Sat, 18 Oct 2008 10:23:53 -0700, "MowGreen [MVP]" <mowgreen@nowandzen.com> wrote: >> Does http://blogs.techrepublic.com.com/window-on-windows/?p=779 seem >> useful in terms of my regaining control over my Windows updates? >> Again, I had it configured to notify me of updates and let me pick >> which to install, but Windows this month shielded me from seeing what >> it was trying to do. I followed the steps in that link, but I assume >> I'll have to wait until November 11 to see if they work. > >I repeat, all Automatic Updating is shown in the WU.log, even the >updating of the software components that are required to update the system.. >There is no need to rename/delete the entire Software Distribution >folder to remove unwanted updates. They are located in the Download folder. Okay, this question is embarrassingly 101, but I did follow the instructions in the techrepublic blog linked to above (basically, after stopping three associated services, renaming the Software Distribution folders in \windows and in \windows\system32, and renaming the \windows\system32\catroot2 folder, then restarting the services). And now when I try to review my update history via Windows Update in IE, this message appears: "You have not yet installed updates from this website or by turning on automatic updating on your computer. To select and install updates now, go to our Home page. " Is that because WU update history sees nothing yet in the newly-created Software Distribution and/or catroot2 folders? I assume that once I start installing updates, they'll show up, but instead of having a history going back to the beginning of my XP installation, I'll have a history going back to the renaming of the folders. Correct?
Guest PA Bear [MS MVP] Posted October 19, 2008 Posted October 19, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? > And now when I try to review my update history via Windows Update in > IE, this message appears: "You have not yet installed updates from > this website or by turning on automatic updating on your computer. To > select and install updates now, go to our Home page. " WYSIWYG: Renaming (or deleting) the Software Distribution folder will have that effect. nospam1@nospam.xxy wrote: > On Sat, 18 Oct 2008 10:23:53 -0700, "MowGreen [MVP]" > <mowgreen@nowandzen.com> wrote: > >>> Does http://blogs.techrepublic.com.com/window-on-windows/?p=779 seem >>> useful in terms of my regaining control over my Windows updates? >>> Again, I had it configured to notify me of updates and let me pick >>> which to install, but Windows this month shielded me from seeing what >>> it was trying to do. I followed the steps in that link, but I assume >>> I'll have to wait until November 11 to see if they work. >> >> I repeat, all Automatic Updating is shown in the WU.log, even the >> updating of the software components that are required to update the >> system.. There is no need to rename/delete the entire Software >> Distribution >> folder to remove unwanted updates. They are located in the Download >> folder. > > Okay, this question is embarrassingly 101, but I did follow the > instructions in the techrepublic blog linked to above (basically, > after stopping three associated services, renaming the Software > Distribution folders in \windows and in \windows\system32, and > renaming the \windows\system32\catroot2 folder, then restarting the > services). > > And now when I try to review my update history via Windows Update in > IE, this message appears: "You have not yet installed updates from > this website or by turning on automatic updating on your computer. To > select and install updates now, go to our Home page. " > > Is that because WU update history sees nothing yet in the > newly-created Software Distribution and/or catroot2 folders? > > I assume that once I start installing updates, they'll show up, but > instead of having a history going back to the beginning of my XP > installation, I'll have a history going back to the renaming of the > folders. Correct?
Guest MowGreen [MVP] Posted October 20, 2008 Posted October 20, 2008 Re: "install important updates" at Windows XP SP3 shutdown - huh? IF you just renamed SoftwareDistribution, then you can preserve the DataStore.edb file located in the renamed folder. That's what contains the updating history shown on the MS update sites. It's in SoftwareDistribution\DataStore. However, if updating issues were caused by it, then those issues will reappear if you import DataStore.edb to the newly created SoftwareDistribution folder hierarchy. Isssues with DataStore.edb are caused by antivirus software scanning it while it's " locked ": Virus scanning recommendations for computers that are running Windows Server 2003, Windows 2000, or Windows XP http://support.microsoft.com/kb/822158 MowGreen [MVP 2003-2009] =============== *-343-* FDNY Never Forgotten =============== nospam1@nospam.xxy wrote: > On Sat, 18 Oct 2008 10:23:53 -0700, "MowGreen [MVP]" > <mowgreen@nowandzen.com> wrote: > > >>>Does http://blogs.techrepublic.com.com/window-on-windows/?p=779 seem >>>useful in terms of my regaining control over my Windows updates? >>>Again, I had it configured to notify me of updates and let me pick >>>which to install, but Windows this month shielded me from seeing what >>>it was trying to do. I followed the steps in that link, but I assume >>>I'll have to wait until November 11 to see if they work. >> >>I repeat, all Automatic Updating is shown in the WU.log, even the >>updating of the software components that are required to update the system.. >>There is no need to rename/delete the entire Software Distribution >>folder to remove unwanted updates. They are located in the Download folder. > > > Okay, this question is embarrassingly 101, but I did follow the > instructions in the techrepublic blog linked to above (basically, > after stopping three associated services, renaming the Software > Distribution folders in \windows and in \windows\system32, and > renaming the \windows\system32\catroot2 folder, then restarting the > services). > > And now when I try to review my update history via Windows Update in > IE, this message appears: "You have not yet installed updates from > this website or by turning on automatic updating on your computer. To > select and install updates now, go to our Home page. " > > Is that because WU update history sees nothing yet in the > newly-created Software Distribution and/or catroot2 folders? > > I assume that once I start installing updates, they'll show up, but > instead of having a history going back to the beginning of my XP > installation, I'll have a history going back to the renaming of the > folders. Correct?
Recommended Posts