Re: Signature updates?

RB wrote:
>>>>> A week ago I got the windows update for signature something
>>>>> and now every day I'm getting this Signature Update msg box
>>>>> asking me to OK another signature update download.
>>>>> What is all of this and is it important ?
>>>>
>>>> "PA Bear [MS MVP]" wrote:
>>>> Did you install MS Security Essentials beta or Windows Defender
>>>> and is Automatic Updates configured to the Notify Only setting?
>>>
>>> I do have my Auto Update configured to Notify Only and as far as what
>>> has updated here is a list of my last 2 weeks update history.
>>> Windows XP Microsoft - Other hardware - HID Non-User Data Filter (KB
>>> 911895)
>>> Windows XP Microsoft - Other hardware - HID Non-User Data Filter (KB
>>> 911895)
>>> Windows XP Update to .NET Fk 3.5 SP1 for .NET Fk Assist 1.0x86
>>> (KB963707)
>>> Windows XP Cumulative Security Update for IExplorer 7 Win XP (KB969897)
>>> Windows XP Security Update for Windows XP (KB961501)
>>> Windows XP Update Rollup for ActiveX Killbits for Windows XP (KB969898)
>>> Windows XP Windows Malicious Software Removal Tool June 2009 (KB890830)
>>> Windows XP Security Update for Windows XP (KB970238)
>>> Windows XP Security Update for Windows XP (KB968537)
>>
> "PA Bear [MS MVP]" wrote in message
>> 1a. Is MS Security Essentials beta installed? [Yes/No]
>
> Well I don't think so I cannot find it in programs etc.
>
>> 1b. Is OneCare installed [Yes/No]
>
> I don't think so I cannot find it either
>
>> 2a. Does http://windowsupdate.microsoft.com take you to a Windows Update
>> webpage or a Microsoft Update webpage?
>>
>> 2b. If you go to that page, select CUSTOM and scan, what (if any)
>> updates are offered?
>
> No it says everything is up to date, which is not surprising since I
> always check download when prompted to update.
>
>> The very bottom/end of your WindowsUpdate.log would probably tell you
>> more
>> about these "Signature Updates"
>
> here is a paste of the bottom of my log file, but not sure if this is
> telling me much.
> 2009-05-18 20:49:28:984 1792 e48 Misc Validating signature for
> C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\wuredir.cab:
> 2009-07-07 19:38:32:757 3204 160 Misc = Process: C:\Program
> Files\Internet Explorer\IEXPLORE.EXE 2009-07-07 19:38:32:757 3204 160 Misc
> = Module: C:\WINDOWS\system32\wuweb.dll 2009-07-07 19:38:32:757 3204 160
> Misc Validating signature for
> C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
> 2009-07-07 19:38:32:944 3204 160 Misc Microsoft signed: Yes 2009-07-07
> 19:38:33:085 3204 160 Misc Validating signature for
> C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
> 2009-07-07 19:38:33:100 3204 160 Misc Microsoft signed: Yes 2009-07-07
> 19:38:33:163 3204 160 Misc Validating signature for
> C:\WINDOWS\SoftwareDistribution\WebSetup\wuident.c ab: 2009-07-07
> 19:38:33:194 3204 160 Misc Microsoft signed: Yes 2009-07-07 19:38:33:272
> 3204 160 Misc Validating signature for
> C:\WINDOWS\SoftwareDistribution\WebSetup\wuident.c ab: 2009-07-07
> 19:38:33:288 3204 160 Misc Microsoft signed: Yes 2009-07-07 19:38:34:288
> 3204 160 Misc Validating signature for
> C:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setu p.cab: 2009-07-07
> 19:38:34:304 3204 160 Misc Microsoft signed: Yes 2009-07-07 19:38:34:319
> 3204 160 Setup *********** Setup: Checking whether self-update is
> required
> *********** 2009-07-07 19:38:34:335 3204 160 Setup * Inf file:
> C:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setu p.inf 2009-07-07
> 19:38:34:397 3204 1

[To keep track of things, it helps immensely if you quote all of the
previous message(s) in your replies to the newsgroup, and do NOT post your
answers inline. Thank you.]

You did not answer #2a.

The section of the WindowsUpdate.log you posted made no reference to a
"Signature Update."

Are you certain that the "signature update download" prompt is coming from
Automatic Updates?

What anti-virus application or security suite is installed and is your
subscription current? What anti-spyware applications (other than Defender)?
What third-party firewall (if any)?

Has a Norton or McAfee application ever been installed on this machine
(e.g., a free-trial version that came preinstalled when you bought it)?
--
~PA Bear

> o keep track of things, it helps immensely if you quote all of the
> previous message(s) in your replies to the newsgroup, and do NOT
>post your answers inline. Thank you.

Sorry, I've included the entire message thread below. I do not know what
exactly you mean "answers inline" ? I use MS Outlook Express so it
shows all of the thread etc for each post and reply.

>You did not answer #2a.

Sorry, I did answer 2b which would have been impossible to do if
I had done what 2a referred to ?

> Are you certain that the "signature update download" prompt is coming from
> Automatic Updates?

Well, I'm starting to wonder now.

> What anti-virus application or security suite is installed and is your
> subscription current? What anti-spyware applications (other than Defender)?
> What third-party firewall (if any)?

I run Security Shield Suite 2009 (which uses Bit Defender's engine) It has firewall,
antivirus, antispan and anti spyware.

> Has a Norton or McAfee application ever been installed on this machine
> (e.g., a free-trial version that came preinstalled when you bought it)?
> --

McAfee has but I uninstalled it using McAfee's uninstaller remover prior to
installing Security Shield. But I have had Security Shield for quite some time
before I started getting these recent messages. I'm not sure if I can attach GIF
files on this group but if I could send you a screen capture of the message box
maybe you could identiy it ?

----------previous threads---------
"PA Bear [MS MVP]" <> wrote in message news:OllN%23e5$...
>
> RB wrote:
>>>>>> A week ago I got the windows update for signature something
>>>>>> and now every day I'm getting this Signature Update msg box
>>>>>> asking me to OK another signature update download.
>>>>>> What is all of this and is it important ?
>>>>>
>>>>> "PA Bear [MS MVP]" wrote:
>>>>> Did you install MS Security Essentials beta or Windows Defender
>>>>> and is Automatic Updates configured to the Notify Only setting?
>>>>
>>>> I do have my Auto Update configured to Notify Only and as far as what
>>>> has updated here is a list of my last 2 weeks update history.
>>>> Windows XP Microsoft - Other hardware - HID Non-User Data Filter (KB
>>>> 911895)
>>>> Windows XP Microsoft - Other hardware - HID Non-User Data Filter (KB
>>>> 911895)
>>>> Windows XP Update to .NET Fk 3.5 SP1 for .NET Fk Assist 1.0x86
>>>> (KB963707)
>>>> Windows XP Cumulative Security Update for IExplorer 7 Win XP (KB969897)
>>>> Windows XP Security Update for Windows XP (KB961501)
>>>> Windows XP Update Rollup for ActiveX Killbits for Windows XP (KB969898)
>>>> Windows XP Windows Malicious Software Removal Tool June 2009 (KB890830)
>>>> Windows XP Security Update for Windows XP (KB970238)
>>>> Windows XP Security Update for Windows XP (KB968537)
>>>
>> "PA Bear [MS MVP]" wrote in message
>>> 1a. Is MS Security Essentials beta installed? [Yes/No]
>>
>> Well I don't think so I cannot find it in programs etc.
>>
>>> 1b. Is OneCare installed [Yes/No]
>>
>> I don't think so I cannot find it either
>>
>>> 2a. Does http://windowsupdate.microsoft.com take you to a Windows Update
>>> webpage or a Microsoft Update webpage?
>>>
>>> 2b. If you go to that page, select CUSTOM and scan, what (if any)
>>> updates are offered?
>>
>> No it says everything is up to date, which is not surprising since I
>> always check download when prompted to update.
>>
>>> The very bottom/end of your WindowsUpdate.log would probably tell you
>>> more
>>> about these "Signature Updates"
>>
>> here is a paste of the bottom of my log file, but not sure if this is
>> telling me much.
>> 2009-05-18 20:49:28:984 1792 e48 Misc Validating signature for
>> C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\wuredir.cab:
>> 2009-07-07 19:38:32:757 3204 160 Misc = Process: C:\Program
>> Files\Internet Explorer\IEXPLORE.EXE 2009-07-07 19:38:32:757 3204 160 Misc
>> = Module: C:\WINDOWS\system32\wuweb.dll 2009-07-07 19:38:32:757 3204 160
>> Misc Validating signature for
>> C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
>> 2009-07-07 19:38:32:944 3204 160 Misc Microsoft signed: Yes 2009-07-07
>> 19:38:33:085 3204 160 Misc Validating signature for
>> C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
>> 2009-07-07 19:38:33:100 3204 160 Misc Microsoft signed: Yes 2009-07-07
>> 19:38:33:163 3204 160 Misc Validating signature for
>> C:\WINDOWS\SoftwareDistribution\WebSetup\wuident.c ab: 2009-07-07
>> 19:38:33:194 3204 160 Misc Microsoft signed: Yes 2009-07-07 19:38:33:272
>> 3204 160 Misc Validating signature for
>> C:\WINDOWS\SoftwareDistribution\WebSetup\wuident.c ab: 2009-07-07
>> 19:38:33:288 3204 160 Misc Microsoft signed: Yes 2009-07-07 19:38:34:288
>> 3204 160 Misc Validating signature for
>> C:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setu p.cab: 2009-07-07
>> 19:38:34:304 3204 160 Misc Microsoft signed: Yes 2009-07-07 19:38:34:319
>> 3204 160 Setup *********** Setup: Checking whether self-update is
>> required
>> *********** 2009-07-07 19:38:34:335 3204 160 Setup * Inf file:
>> C:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setu p.inf 2009-07-07
>> 19:38:34:397 3204 1
>
> [To keep track of things, it helps immensely if you quote all of the
> previous message(s) in your replies to the newsgroup, and do NOT post your
> answers inline. Thank you.]
>
> You did not answer #2a.
>
> The section of the WindowsUpdate.log you posted made no reference to a
> "Signature Update."
>
> Are you certain that the "signature update download" prompt is coming from
> Automatic Updates?
>
> What anti-virus application or security suite is installed and is your
> subscription current? What anti-spyware applications (other than Defender)?
> What third-party firewall (if any)?
>
> Has a Norton or McAfee application ever been installed on this machine
> (e.g., a free-trial version that came preinstalled when you bought it)?
> --
> ~PA Bear
>

RB wrote:
>> o keep track of things, it helps immensely if you quote all of the
>> previous message(s) in your replies to the newsgroup, and do NOT post
>> your answers inline. Thank you.
>
> Sorry, I've included the entire message thread below. I do not know what
> exactly you mean "answers inline" ? I use MS Outlook Express so it
> shows all of the thread etc for each post and reply.


This is what's considered "answers inline". Instead of having all of
the quoted text as a single block, you break it into smaller sections
and add your text between the sections. There really is nothing wrong
with doing it this way, it just a matter of personal preference. So if
you prefer to quote in this manner, go right ahead and don't let others
discourage you from doing it this way.

Though there is one piece of advice about quoting. It's best to try to
trim down any unnecessary text, but you want to retain enough quoted
text to retain the flow of the message thread. (Hope that wasn't too
confusing...)


>> You did not answer #2a.
>
> Sorry, I did answer 2b which would have been impossible to do if
> I had done what 2a referred to ?
>
>> Are you certain that the "signature update download" prompt is coming
>> from Automatic Updates?
>
> Well, I'm starting to wonder now.
>
>> What anti-virus application or security suite is installed and is your
>> subscription current? What anti-spyware applications (other than
>> Defender)? What third-party firewall (if any)?
>
> I run Security Shield Suite 2009 (which uses Bit Defender's engine) It
> has firewall,
> antivirus, antispan and anti spyware.
>> Has a Norton or McAfee application ever been installed on this machine
>> (e.g., a free-trial version that came preinstalled when you bought it)?
>> --
>
> McAfee has but I uninstalled it using McAfee's uninstaller remover prior to
> installing Security Shield. But I have had Security Shield for quite
> some time
> before I started getting these recent messages. I'm not sure if I can
> attach GIF
> files on this group but if I could send you a screen capture of the
> message box maybe you could identiy it ?
>
> ----------previous threads---------
> "PA Bear [MS MVP]" <> wrote in message
> news:OllN%23e5$...
>>
>> RB wrote:
>>>>>>> A week ago I got the windows update for signature something
>>>>>>> and now every day I'm getting this Signature Update msg box
>>>>>>> asking me to OK another signature update download.
>>>>>>> What is all of this and is it important ?
>>>>>>
>>>>>> "PA Bear [MS MVP]" wrote:
>>>>>> Did you install MS Security Essentials beta or Windows Defender
>>>>>> and is Automatic Updates configured to the Notify Only setting?
>>>>>
>>>>> I do have my Auto Update configured to Notify Only and as far as what
>>>>> has updated here is a list of my last 2 weeks update history.
>>>>> Windows XP Microsoft - Other hardware - HID Non-User Data Filter (KB
>>>>> 911895)
>>>>> Windows XP Microsoft - Other hardware - HID Non-User Data Filter (KB
>>>>> 911895)
>>>>> Windows XP Update to .NET Fk 3.5 SP1 for .NET Fk Assist 1.0x86
>>>>> (KB963707)
>>>>> Windows XP Cumulative Security Update for IExplorer 7 Win XP
>>>>> (KB969897)
>>>>> Windows XP Security Update for Windows XP (KB961501)
>>>>> Windows XP Update Rollup for ActiveX Killbits for Windows XP
>>>>> (KB969898)
>>>>> Windows XP Windows Malicious Software Removal Tool June 2009
>>>>> (KB890830)
>>>>> Windows XP Security Update for Windows XP (KB970238)
>>>>> Windows XP Security Update for Windows XP (KB968537)
>>>>
>>> "PA Bear [MS MVP]" wrote in message
>>>> 1a. Is MS Security Essentials beta installed? [Yes/No]
>>>
>>> Well I don't think so I cannot find it in programs etc.
>>>
>>>> 1b. Is OneCare installed [Yes/No]
>>>
>>> I don't think so I cannot find it either
>>>
>>>> 2a. Does http://windowsupdate.microsoft.com take you to a Windows
>>>> Update
>>>> webpage or a Microsoft Update webpage?
>>>>
>>>> 2b. If you go to that page, select CUSTOM and scan, what (if any)
>>>> updates are offered?
>>>
>>> No it says everything is up to date, which is not surprising since I
>>> always check download when prompted to update.
>>>
>>>> The very bottom/end of your WindowsUpdate.log would probably tell
>>>> you more
>>>> about these "Signature Updates"
>>>
>>> here is a paste of the bottom of my log file, but not sure if this is
>>> telling me much.
>>> 2009-05-18 20:49:28:984 1792 e48 Misc Validating signature for
>>> C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\wuredir.cab:
>>>
>>> 2009-07-07 19:38:32:757 3204 160 Misc = Process: C:\Program
>>> Files\Internet Explorer\IEXPLORE.EXE 2009-07-07 19:38:32:757 3204 160
>>> Misc = Module: C:\WINDOWS\system32\wuweb.dll 2009-07-07 19:38:32:757
>>> 3204 160
>>> Misc Validating signature for
>>> C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
>>>
>>> 2009-07-07 19:38:32:944 3204 160 Misc Microsoft signed: Yes 2009-07-07
>>> 19:38:33:085 3204 160 Misc Validating signature for
>>> C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv3wuredir.cab:
>>>
>>> 2009-07-07 19:38:33:100 3204 160 Misc Microsoft signed: Yes 2009-07-07
>>> 19:38:33:163 3204 160 Misc Validating signature for
>>> C:\WINDOWS\SoftwareDistribution\WebSetup\wuident.c ab: 2009-07-07
>>> 19:38:33:194 3204 160 Misc Microsoft signed: Yes 2009-07-07
>>> 19:38:33:272
>>> 3204 160 Misc Validating signature for
>>> C:\WINDOWS\SoftwareDistribution\WebSetup\wuident.c ab: 2009-07-07
>>> 19:38:33:288 3204 160 Misc Microsoft signed: Yes 2009-07-07
>>> 19:38:34:288
>>> 3204 160 Misc Validating signature for
>>> C:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setu p.cab: 2009-07-07
>>> 19:38:34:304 3204 160 Misc Microsoft signed: Yes 2009-07-07
>>> 19:38:34:319
>>> 3204 160 Setup *********** Setup: Checking whether self-update is
>>> required
>>> *********** 2009-07-07 19:38:34:335 3204 160 Setup * Inf file:
>>> C:\WINDOWS\SoftwareDistribution\WebSetup\wsus3setu p.inf 2009-07-07
>>> 19:38:34:397 3204 1
>>
>> [To keep track of things, it helps immensely if you quote all of the
>> previous message(s) in your replies to the newsgroup, and do NOT post
>> your answers inline. Thank you.]
>>
>> You did not answer #2a.
>>
>> The section of the WindowsUpdate.log you posted made no reference to a
>> "Signature Update."
>>
>> Are you certain that the "signature update download" prompt is coming
>> from Automatic Updates?
>>
>> What anti-virus application or security suite is installed and is your
>> subscription current? What anti-spyware applications (other than
>> Defender)? What third-party firewall (if any)?
>>
>> Has a Norton or McAfee application ever been installed on this machine
>> (e.g., a free-trial version that came preinstalled when you bought it)?
>> --
>> ~PA Bear
>>


--

Roy Smith
Windows XP Pro