Robear, I do NOT depend on Secunia PSI for anything from Microsoft. I have
Automatic Updates on and configured to tell me when updates are
available--at which point I get them from the Microsoft Update website (so I
can observe the downloading and installation of the files, which seems to be
impossible through Automatic Updates).
The yellow shield appeared in my system tray yesterday on both computers,
and on both I was offered as a critical update the KB number you gave below
(976749). I am currently running IE7.
I was apparently wrong about this update being a Patch Tuesday update even
though it arrived on a Tuesday, and it was around a month after the last
one. I just checked the Microsoft Security Response Center website, and now
I see that this is an update for an issue reported by a "limited number of
customers," rather than a regular Patch Tuesday update.
As far as I can tell, I should not be required to install the update to the
Windows Update Agent, since it has already been installed. In fact, from
what I read at the site you indicated, it was an "invisible update"--that
is, I did nothing to install it. I haven't yet installed the ActiveX Control
but will shortly.
I still say that it's odd that the Microsoft Update site gave me the option
to install the IE7 update UNTIL I installed a Java update. At that point,
the Microsoft Update site apparently wanted me to update either MU or the
ActiveX Control (it warned me about installing MU until I clicked the X to
close that box, and then it told me how to update the ActiveX Control).
Jo-Anne
"PA Bear [MS MVP]" <> wrote in message
news:...
> What "November 3" updates? Are you referring to
> http://support.microsoft.com/kb/976749 (which I'm not sure you want or
> need to install)?
>
> Is Automatic Updates enabled? [yes/no]
>
> ...or are you still depending on Secunia to tell you what updates you
> need? [yes/no]
>
> Are you currently running IE6, IE7, or IE8?
>
>> Re Wuauclt.exe, the version is indeed 7.4.7600.226 (on both of my WinXP
>> computers), last modified in August. Is that the "recently released"
>> updated
>> version of Windows Update Agent?
>
> Yes, and that (and a related ActiveX Control) could have been what you
> were prompted to install the other day. See
> http://blogs.technet.com/mu/archive/...ws-update.aspx.
>
> While the MSRT has, in fact, been updated since 13 October, it will only
> be offered via WU/MU/AU once-a-month.
>
>
> Jo-Anne wrote:
>> Um...Robear...what I was trying to install were the November 3 updates. I
>> had installed the October updates when they became available. In fact,
>> the
>> only critical update I was offered yesterday--before I updated Java--was
>> to
>> Internet Explorer 7, which I thought was odd, since not even the
>> Malicious
>> Software Removal Tool appeared. When I looked at the noncritical updates,
>> there were a bunch, including root certificates.
>>
>> Re Wuauclt.exe, the version is indeed 7.4.7600.226 (on both of my WinXP
>> computers), last modified in August. Is that the "recently released"
>> updated
>> version of Windows Update Agent?
>>
>> This is the first time I've tried to use Microsoft Update since last
>> month's
>> Patch Tuesday. If all is OK, I'll go ahead with what is asked. But I
>> still
>> don't understand why when I looked at Microsoft Update a few minutes
>> before,
>> the current update(s) appeared just fine--and after I installed the
>> updated
>> Java, I was supposed to re-install Microsoft Update itself.
>>
>> "PA Bear [MS MVP]" wrote:
>>> When was the last time you visited Microsoft Update?
>>>
>>> Is C:\Windows\System32\Wuauclt.exe <=this file now v7.4.7600.226?
>>>
>>> Sounds normal to me: Either you needed to install an updated version of
>>> the
>>> ActiveX Control to use Microsoft Update website and/or you installed the
>>> recently released, updated version of Windows Update Agent.
>>>
>>> Dare we ask why you've waited 3 weeks before installing the Oct-09
>>> critical security updates?
>>>
>>>
>>> Jo-Anne wrote:
>>>> Addendum: I clicked the X to get rid of the Security Warning box, and
>>>> what
>>>> happened next was that I got the following message at the Microsoft
>>>> Update
>>>> site: "Install the ActiveX control required to view the website. The
>>>> website
>>>> will not display correctly on your computer without this
>>>> control"--followed
>>>> by instructions on how to install the ActiveX control.
>>>>
>>>>> Tonight I went to the Microsoft Update site to install the Patch
>>>>> Tuesday
>>>>> updates on my notebook computer running WinXP SP3. I saw the updates;
>>>>> but
>>>>> before I installed them, I got a notification from Sun that a Java
>>>>> update
>>>>> was available. I decided to install that update first. The
>>>>> installation
>>>>> seemed to be fine. I then went back to Microsoft Update to install the
>>>>> Patch Tuesday updates. However, this time I got the following message:
>>>>> Internet Explorer Security Warning: Do you want to install this
>>>>> software?
>>>>> Name: Microsoft Update. Publisher: Microsoft Corporation.
>>>>>
>>>>> What happened? Did installing the Java update somehow "uninstall"
>>>>> Microsoft Update? Should I go ahead and click on Install for Microsoft
>>>>> Update?
>