"install important updates" at Windows XP SP3 shutdown - huh?

I have XP SP3.

When I went to shut my computer down tonight, instead of the normal
standby, turn off, restart popup, I had that, but there was a Windows
security shield superimposed on the turn off icon, and a message at
the bottom of the popup saying "Click Turn Off to install important
updates and turn off your computer. Click here to turn off without
installing updates."

This scares and weirds me out.

I have Windows set up to download updates automatically, but only
install after I review/approve the updates. But the little yellow
Updates shield isn't showing in my system tray area.

I went to Windows update and the last activity was September 9, when
these updates were installed:

* Windows Malicious Software Removal Tool - September 2008 (KB890830)
* Windows XP Security Update for Windows XP (KB938464)
* Windows XP Security Update for Windows XP (KB954154)

There was no notation for anything being pushed to my computer since.

So what's being pushed to my machine and is this normal? My daily AVG
scan detected no viruses today. I opted to shut my computer down
without installing the unspecified updates, but upon restarting, I'm
still getting that alert when I try to shut down.

My questions:

1. What's Windows asking me to install?

2. Why am I only being told that it wants to install something,
without it telling me specifically what?

3. How do I review the proffered software and either approve it for
installation or permanently reject it?

4. Anything else I should be aware of or looking for here?

wrote:

> When I went to shut my computer down tonight, instead of the normal
> standby, turn off, restart popup, I had that, but there was a Windows
> security shield superimposed on the turn off icon, and a message at
> the bottom of the popup saying "Click Turn Off to install important
> updates and turn off your computer. Click here to turn off without
> installing updates."

Start by looking in WindowsUpdate.log (usually found in c:\windows). If you
have trouble interpreting it, post the last hundred lines or so here.

Harry.

> This scares and weirds me out.
>
> I have Windows set up to download updates automatically, but only
> install after I review/approve the updates. But the little yellow
> Updates shield isn't showing in my system tray area.
>
> I went to Windows update and the last activity was September 9, when
> these updates were installed:
>
> * Windows Malicious Software Removal Tool - September 2008 (KB890830)
> * Windows XP Security Update for Windows XP (KB938464)
> * Windows XP Security Update for Windows XP (KB954154)
>
> There was no notation for anything being pushed to my computer since.
>
> So what's being pushed to my machine and is this normal? My daily AVG
> scan detected no viruses today. I opted to shut my computer down
> without installing the unspecified updates, but upon restarting, I'm
> still getting that alert when I try to shut down.
>
> My questions:
>
> 1. What's Windows asking me to install?
>
> 2. Why am I only being told that it wants to install something,
> without it telling me specifically what?
>
> 3. How do I review the proffered software and either approve it for
> installation or permanently reject it?
>
> 4. Anything else I should be aware of or looking for here?
>

I am having the same issue. I know that the update trying to install is the
..NET SP1 update, which had been installed months ago, but had been subverted
by an installation of another application using it's own version of this same
program. The application in question for me was the Comrade IM used in
GameSpy Arcade. I don't know how to get around it either.
--
If U always do what you always did...
you'll always get what you always got!


"" wrote:

> I have XP SP3.
>
> When I went to shut my computer down tonight, instead of the normal
> standby, turn off, restart popup, I had that, but there was a Windows
> security shield superimposed on the turn off icon, and a message at
> the bottom of the popup saying "Click Turn Off to install important
> updates and turn off your computer. Click here to turn off without
> installing updates."
>
> This scares and weirds me out.
>
> I have Windows set up to download updates automatically, but only
> install after I review/approve the updates. But the little yellow
> Updates shield isn't showing in my system tray area.
>
> I went to Windows update and the last activity was September 9, when
> these updates were installed:
>
> * Windows Malicious Software Removal Tool - September 2008 (KB890830)
> * Windows XP Security Update for Windows XP (KB938464)
> * Windows XP Security Update for Windows XP (KB954154)
>
> There was no notation for anything being pushed to my computer since.
>
> So what's being pushed to my machine and is this normal? My daily AVG
> scan detected no viruses today. I opted to shut my computer down
> without installing the unspecified updates, but upon restarting, I'm
> still getting that alert when I try to shut down.
>
> My questions:
>
> 1. What's Windows asking me to install?
>
> 2. Why am I only being told that it wants to install something,
> without it telling me specifically what?
>
> 3. How do I review the proffered software and either approve it for
> installation or permanently reject it?
>
> 4. Anything else I should be aware of or looking for here?
>
>

The log on Windows Update is showing the "installed" updates(or attempts) & not the
ones waiting to be installed.
Today is what's known as *Patch Tuesday* which is always on the 2nd Tuesday of the
month,so the updates at shutdown,are legit. Apparently they've already been
downloaded & are waiting to be installed,on your machine.
If you're not seeing the update shield in the system tray,you can go to the Windows
Update site & get them that way.

~Gary


<> wrote in message
news:...
>I have XP SP3.
>
> When I went to shut my computer down tonight, instead of the normal
> standby, turn off, restart popup, I had that, but there was a Windows
> security shield superimposed on the turn off icon, and a message at
> the bottom of the popup saying "Click Turn Off to install important
> updates and turn off your computer. Click here to turn off without
> installing updates."
>
> This scares and weirds me out.
>
> I have Windows set up to download updates automatically, but only
> install after I review/approve the updates. But the little yellow
> Updates shield isn't showing in my system tray area.
>
> I went to Windows update and the last activity was September 9, when
> these updates were installed:
>
> * Windows Malicious Software Removal Tool - September 2008 (KB890830)
> * Windows XP Security Update for Windows XP (KB938464)
> * Windows XP Security Update for Windows XP (KB954154)
>
> There was no notation for anything being pushed to my computer since.
>
> So what's being pushed to my machine and is this normal? My daily AVG
> scan detected no viruses today. I opted to shut my computer down
> without installing the unspecified updates, but upon restarting, I'm
> still getting that alert when I try to shut down.
>
> My questions:
>
> 1. What's Windows asking me to install?
>
> 2. Why am I only being told that it wants to install something,
> without it telling me specifically what?
>
> 3. How do I review the proffered software and either approve it for
> installation or permanently reject it?
>
> 4. Anything else I should be aware of or looking for here?
>

On Wed, 15 Oct 2008 16:31:57 +1300, "Harry Johnston [MVP]"
<> wrote:

> wrote:
>
>> When I went to shut my computer down tonight, instead of the normal
>> standby, turn off, restart popup, I had that, but there was a Windows
>> security shield superimposed on the turn off icon, and a message at
>> the bottom of the popup saying "Click Turn Off to install important
>> updates and turn off your computer. Click here to turn off without
>> installing updates."
>
>Start by looking in WindowsUpdate.log (usually found in c:\windows). If you
>have trouble interpreting it, post the last hundred lines or so here.
>
> Harry.
>

There are around 1300 pieces of activity in my
c:\windows\windowsupdate.log for 2008-10-14. There are already 51
activities for 2008-10-15 and the day is young!

http://www.megaupload.com/?d=1ME2YPEQ has the file as it currently
exists.

FWIW, my c:\windows directory has 16 files from 2008-09-09 (September
patch Tuesday), one from 2008-09-23, and the following from
2008-10-14:

* KB956390-IE7.log
* setupapi.log
* SchedLgU.Txt
* bootstat.dat
* wiaservc.log
* wiadebug.log
* 0.log (NOTE: zero-length file)

And there's the WindowsUpldate.log, which was time stamped 04:51 this
morning, from when I got on. As I said, 51 entries in it.

A cursory scan of the logs shows nothing too weird. I'm guessing that
KB956390 related to IE7 is the only thing it's trying to install.

Still feel funny about how Windows is just pushing an update or
updates on me without telling me what they are.

On Wed, 15 Oct 2008 01:11:39 -0400, "Gary Brandenburg"
<> wrote:

>The log on Windows Update is showing the "installed" updates(or attempts) & not the
>ones waiting to be installed.
>Today is what's known as *Patch Tuesday* which is always on the 2nd Tuesday of the
>month,so the updates at shutdown,are legit. Apparently they've already been
>downloaded & are waiting to be installed,on your machine.
>If you're not seeing the update shield in the system tray,you can go to the Windows
>Update site & get them that way.
>
>~Gary

I have a longer response upthread, with a link to
http://www.megaupload.com/?d=1ME2YPEQ (my WindowsUpdate log, for
anyone wishing to peruse it), plus a listing of the content of my
c:\Windows folder dated 10-14, the date in question.

When I try to retrieve Windows updates from Windows Update, I get the
Software Upgrade for Some Windows Components Required screen. This
smacks of ignorance and superstition and worse, but years ago,
installing one of the components on my computer caused some
significant problems. Probably a onetime fluke, but I've been a "if
it ain't broke, don't fix it" guy ever since.

Windows update also tells me, correctly, that "Your computer is set to
receive notifications when new updates are available. " and then I
pick which updates to install and when. I can't remember the last
time I declined an update, but I like having that smidge of control.

I'm mostly looking for other people who've gotten this situation I
described in my original post (people who got it on 10-14-2008), and
what their experiences have been. Not to mention why Windows is
trying to sneak an update by me (apparently).

On Wed, 15 Oct 2008 05:20:42 -0400, wrote:

>On Wed, 15 Oct 2008 16:31:57 +1300, "Harry Johnston [MVP]"
><> wrote:
>
>> wrote:
>>
>>> When I went to shut my computer down tonight, instead of the normal
>>> standby, turn off, restart popup, I had that, but there was a Windows
>>> security shield superimposed on the turn off icon, and a message at
>>> the bottom of the popup saying "Click Turn Off to install important
>>> updates and turn off your computer. Click here to turn off without
>>> installing updates."
>>
>>Start by looking in WindowsUpdate.log (usually found in c:\windows). If you
>>have trouble interpreting it, post the last hundred lines or so here.
>>
>> Harry.
>>
>
>There are around 1300 pieces of activity in my
>c:\windows\windowsupdate.log for 2008-10-14. There are already 51
>activities for 2008-10-15 and the day is young!
>
>http://www.megaupload.com/?d=1ME2YPEQ has the file as it currently
>exists.
>
>FWIW, my c:\windows directory has 16 files from 2008-09-09 (September
>patch Tuesday), one from 2008-09-23, and the following from
>2008-10-14:
>
>* KB956390-IE7.log
>* setupapi.log
>* SchedLgU.Txt
>* bootstat.dat
>* wiaservc.log
>* wiadebug.log
>* 0.log (NOTE: zero-length file)
>
>And there's the WindowsUpldate.log, which was time stamped 04:51 this
>morning, from when I got on. As I said, 51 entries in it.
>
>A cursory scan of the logs shows nothing too weird. I'm guessing that
>KB956390 related to IE7 is the only thing it's trying to install.
>
>Still feel funny about how Windows is just pushing an update or
>updates on me without telling me what they are.

Okay, more weirdness.

I downloaded IE7-WindowsXP-KB956390-x86-ENU.exe directly from MS.
Installed that and restarted computer and no problems.

BUT... it doesn't show up in my update history when I run Windows
Update, and I'm still getting the "Click Turn Off to install important
updates and turn off your computer. Click here to turn off without
installing updates." message when I try to shut down or restart.

Perhaps these lines from my WindowsUpdate.log might be of interest:

2008-10-15 06:00:17:359 988 be4 Agent * Added
update {3DE030BB-2666-44F6-9B15-E02FE518833F}.100 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Added
update {424B1C8F-742A-4614-8012-1BB25B527706}.100 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Added
update {650F9FB5-032E-41BB-B31B-4210AC074F8B}.102 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Added
update {25EE37D4-1EB2-4546-843F-AD0AC80BC14E}.104 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Added
update {33A7EDF1-2350-4102-8082-9540EFF65704}.102 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Added
update {8FD536A6-5577-432D-8031-3369530913DC}.102 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Added
update {336530D3-9AE4-42DF-9606-4FB35D46CEFC}.102 to search result
2008-10-15 06:00:17:359 988 be4 Agent * Found 7
updates and 42 categories in search; evaluated appl. rules of 278 out
of 661 deployed entities

Still not seeing yellow Windows Update shield in my system tray.

Since 09 Sept-08, have you (a) installed Windows Live OneCare or (b) changed
your default update source from Windows Update to Microsoft Update?

Related:

1.
http://blogs.technet.com/mu/archive/...c-reboots.aspx

2. http://blogs.technet.com/mu/archive/...-search-4.aspx

Free unlimited installation and compatibility support is available for
Windows XP, but only for Service Pack 3 (SP3), until 14 Apr-09. Chat and
e-mail support is available only in the United States and Canada. Go to
http://support.microsoft.com/oas/def...spx?gprid=1173 | select "Windows
XP" then select "Windows XP Service Pack 3"
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

wrote:
> I have XP SP3.
>
> When I went to shut my computer down tonight, instead of the normal
> standby, turn off, restart popup, I had that, but there was a Windows
> security shield superimposed on the turn off icon, and a message at
> the bottom of the popup saying "Click Turn Off to install important
> updates and turn off your computer. Click here to turn off without
> installing updates."
>
> This scares and weirds me out.
>
> I have Windows set up to download updates automatically, but only
> install after I review/approve the updates. But the little yellow
> Updates shield isn't showing in my system tray area.
>
> I went to Windows update and the last activity was September 9, when
> these updates were installed:
>
> * Windows Malicious Software Removal Tool - September 2008 (KB890830)
> * Windows XP Security Update for Windows XP (KB938464)
> * Windows XP Security Update for Windows XP (KB954154)
>
> There was no notation for anything being pushed to my computer since.
>
> So what's being pushed to my machine and is this normal? My daily AVG
> scan detected no viruses today. I opted to shut my computer down
> without installing the unspecified updates, but upon restarting, I'm
> still getting that alert when I try to shut down.
>
> My questions:
>
> 1. What's Windows asking me to install?
>
> 2. Why am I only being told that it wants to install something,
> without it telling me specifically what?
>
> 3. How do I review the proffered software and either approve it for
> installation or permanently reject it?
>
> 4. Anything else I should be aware of or looking for here?

>> I downloaded IE7-WindowsXP-KB956390-x86-ENU.exe directly from MS.
>> Installed that and restarted computer and no problems.
>>
>> BUT... it doesn't show up in my update history when I run Windows
>> Update,

Updates installed *manually* will only show in the System Event log and
be listed in ARP. [Add/Remove Programs]

I can't access the log you posted at megaupload.com.
Windows Update needs to update the Windows Update Agent from time to
time. Perhaps that's what's occurring:
http://blogs.technet.com/mu/archive/...ws-update.aspx

The WU.log shows which V. of the Windows Update Agent that is installed:

2008-10-15 11:50:22:834 3712 a5c Misc =========== Logging initialized
(build: 7.2.6001.784, tz: -0700) ===========

If the build: is a lower Version than what is required, it *should*
attempt to update it. This updating can fail if security software does
not allow it. Perhaps it's attempting to install on Shutdown as said sec
software is inhibiting it's installation whilst it's still running ?


2008-10-14 11:52:22:794 3116 c24 Setup *********** Setup: Checking
whether self-update is required ***********
2008-10-14 11:52:22:794 3116 c24 Setup * Inf file:
D:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setu p.inf
2008-10-14 11:52:22:884 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\cdm.dll: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:884 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuapi.dll: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:894 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuapi.dll.mui: target version = 7.2.6001.784,
required version = 7.2.6001.784
2008-10-14 11:52:22:904 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuauclt.exe: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:904 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuaucpl.cpl: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:914 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.2.6001.784,
required version = 7.2.6001.784
2008-10-14 11:52:22:914 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuaueng.dll: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:924 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.2.6001.784,
required version = 7.2.6001.784
2008-10-14 11:52:22:924 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wucltui.dll: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:934 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wucltui.dll.mui: target version = 7.2.6001.784,
required version = 7.2.6001.784
2008-10-14 11:52:22:944 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wups.dll: target version = 7.2.6001.784, required
version = 7.2.6001.784
2008-10-14 11:52:22:954 3116 c24 Setup Update NOT required for
D:\WINDOWS\system32\wups2.dll: target version = 7.2.6001.784, required
version = 7.2.6001.784

If you check Automatic Updates in the Control Panel, you'll see this:

(Turning on Automatic Updates may automatically update Windows Update
software first, before any other updates.)

If you don't Trust Windows Update to update the WUA, the only recourse
you have is to turn off Automatic Updates.


MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============



wrote:

> On Wed, 15 Oct 2008 05:20:42 -0400, wrote:
>
>
>>On Wed, 15 Oct 2008 16:31:57 +1300, "Harry Johnston [MVP]"
>><> wrote:
>>
>>
>>> wrote:
>>>
>>>
>>>>When I went to shut my computer down tonight, instead of the normal
>>>>standby, turn off, restart popup, I had that, but there was a Windows
>>>>security shield superimposed on the turn off icon, and a message at
>>>>the bottom of the popup saying "Click Turn Off to install important
>>>>updates and turn off your computer. Click here to turn off without
>>>>installing updates."
>>>
>>>Start by looking in WindowsUpdate.log (usually found in c:\windows). If you
>>>have trouble interpreting it, post the last hundred lines or so here.
>>>
>>> Harry.
>>>
>>
>>There are around 1300 pieces of activity in my
>>c:\windows\windowsupdate.log for 2008-10-14. There are already 51
>>activities for 2008-10-15 and the day is young!
>>
>>http://www.megaupload.com/?d=1ME2YPEQ has the file as it currently
>>exists.
>>
>>FWIW, my c:\windows directory has 16 files from 2008-09-09 (September
>>patch Tuesday), one from 2008-09-23, and the following from
>>2008-10-14:
>>
>>* KB956390-IE7.log
>>* setupapi.log
>>* SchedLgU.Txt
>>* bootstat.dat
>>* wiaservc.log
>>* wiadebug.log
>>* 0.log (NOTE: zero-length file)
>>
>>And there's the WindowsUpldate.log, which was time stamped 04:51 this
>>morning, from when I got on. As I said, 51 entries in it.
>>
>>A cursory scan of the logs shows nothing too weird. I'm guessing that
>>KB956390 related to IE7 is the only thing it's trying to install.
>>
>>Still feel funny about how Windows is just pushing an update or
>>updates on me without telling me what they are.
>
>
> Okay, more weirdness.
>
> I downloaded IE7-WindowsXP-KB956390-x86-ENU.exe directly from MS.
> Installed that and restarted computer and no problems.
>
> BUT... it doesn't show up in my update history when I run Windows
> Update, and I'm still getting the "Click Turn Off to install important
> updates and turn off your computer. Click here to turn off without
> installing updates." message when I try to shut down or restart.
>
> Perhaps these lines from my WindowsUpdate.log might be of interest:
>
> 2008-10-15 06:00:17:359 988 be4 Agent * Added
> update {3DE030BB-2666-44F6-9B15-E02FE518833F}.100 to search result
> 2008-10-15 06:00:17:359 988 be4 Agent * Added
> update {424B1C8F-742A-4614-8012-1BB25B527706}.100 to search result
> 2008-10-15 06:00:17:359 988 be4 Agent * Added
> update {650F9FB5-032E-41BB-B31B-4210AC074F8B}.102 to search result
> 2008-10-15 06:00:17:359 988 be4 Agent * Added
> update {25EE37D4-1EB2-4546-843F-AD0AC80BC14E}.104 to search result
> 2008-10-15 06:00:17:359 988 be4 Agent * Added
> update {33A7EDF1-2350-4102-8082-9540EFF65704}.102 to search result
> 2008-10-15 06:00:17:359 988 be4 Agent * Added
> update {8FD536A6-5577-432D-8031-3369530913DC}.102 to search result
> 2008-10-15 06:00:17:359 988 be4 Agent * Added
> update {336530D3-9AE4-42DF-9606-4FB35D46CEFC}.102 to search result
> 2008-10-15 06:00:17:359 988 be4 Agent * Found 7
> updates and 42 categories in search; evaluated appl. rules of 278 out
> of 661 deployed entities
>
> Still not seeing yellow Windows Update shield in my system tray.

On Wed, 15 Oct 2008 12:31:53 -0700, "MowGreen [MVP]"
<> wrote:

>>> I downloaded IE7-WindowsXP-KB956390-x86-ENU.exe directly from MS.
>>> Installed that and restarted computer and no problems.
>>>
>>> BUT... it doesn't show up in my update history when I run Windows
>>> Update,
>
>Updates installed *manually* will only show in the System Event log and
>be listed in ARP. [Add/Remove Programs]
>
>I can't access the log you posted at megaupload.com.
>Windows Update needs to update the Windows Update Agent from time to
>time. Perhaps that's what's occurring:
>http://blogs.technet.com/mu/archive/...ws-update.aspx
>
>The WU.log shows which V. of the Windows Update Agent that is installed:
>
>2008-10-15 11:50:22:834 3712 a5c Misc =========== Logging initialized
>(build: 7.2.6001.784, tz: -0700) ===========
>

(sorry, snipped quite a bit from your post)

An edited version of my Windows Update log (activity in the past
several days) can be limited downloaded (10 downloads, expiration on
10/18) from
http://www.filemail.com/dl.aspx[ZZZZZZZZZZZZZZZZZ]?id=MKKLBFYRMCANPEI
(cut the brackets and the z's to make the URL work).

My WUA build is the same as yours, 7.2.6001.784, according to my log.

How do I find out what updates Windows is trying to install? Since
they're evidently on my computer somewhere, where can I find them?