Richard Urban said:
If you were totally up-to-date on your patches prior to this incident, it
wasn't Microsoft.
They have not issued any new patches since September 12. And, I have never
seen a Microsoft patch that has rebooted a computer automatically. That
would just be foolish.
It is possible the computer was not up to date as I only use it 3 or 4 times
a month, however I think you are wrong about the auto reboot unless I have
misunderstood something. See below which is copied from the file
"WindowsUpdate.log". As far as I can see this is Microsoft and the lines
that say "Forced Reboot" suggest to me that the reboot was done
automatically by code:
2006-09-25 15:38:35 1276 948 Misc =========== Logging initialized (build:
5.8.0.2469, tz: +0100) ===========
2006-09-25 15:38:35 1276 948 Misc = Process:
C:\WINDOWS\System32\svchost.exe
2006-09-25 15:38:35 1276 948 Misc = Module:
C:\WINDOWS\system32\wuaueng.dll
2006-09-25 15:38:35 1276 948 Service *************
2006-09-25 15:38:35 1276 948 Service ** START ** Service: Service startup
2006-09-25 15:38:35 1276 948 Service *********
2006-09-25 15:38:35 1276 948 Agent * WU client version 5.8.0.2469
2006-09-25 15:38:35 1276 948 Agent * SusClientId =
'5f0639b1-c4c8-4bf2-9f74-b8d1c9c731bd'
2006-09-25 15:38:35 1276 948 Agent * Base directory:
C:\WINDOWS\SoftwareDistribution
2006-09-25 15:38:35 1276 948 Agent * Access type: No proxy
2006-09-25 15:38:35 1276 948 Agent * Network state: Connected
2006-09-25 15:39:53 1276 948 Agent *********** Agent: Initializing Windows
Update Agent ***********
2006-09-25 15:39:53 1276 948 Agent *********** Agent: Initializing global
settings cache ***********
2006-09-25 15:39:53 1276 948 Agent * WSUS server: <NULL>
2006-09-25 15:39:53 1276 948 Agent * WSUS status server: <NULL>
2006-09-25 15:39:53 1276 948 Agent * Target group: (Unassigned Computers)
2006-09-25 15:39:53 1276 948 Agent * Windows Update access disabled: No
2006-09-25 15:39:53 1276 948 DnldMgr Download manager restoring 0 downloads
2006-09-25 15:39:53 1276 948 AU ########### AU: Initializing Automatic
Updates ###########
2006-09-25 15:39:53 1276 948 AU # Approval type: Scheduled (User
preference)
2006-09-25 15:39:53 1276 948 AU # Scheduled install day/time: Every day at
3:00
2006-09-25 15:39:53 1276 948 AU # Auto-install minor updates: Yes (User
preference)
2006-09-25 15:39:53 1276 948 AU AU setting pending client directive to
'Forced Reboot'
2006-09-25 15:39:53 1276 948 Report *********** Report: Initializing static
reporting data ***********
2006-09-25 15:39:53 1276 948 Report * OS Version = 5.1.2600.2.0.66304
2006-09-25 15:39:53 1276 948 Report * Computer Brand = TOSHIBA
2006-09-25 15:39:53 1276 948 Report * Computer Model = EQUIUM M50
2006-09-25 15:39:53 1276 948 Report * Bios Revision = V1.30
2006-09-25 15:39:53 1276 948 Report * Bios Name = Ver 1.00PARTTBL
2006-09-25 15:39:53 1276 948 Report * Bios Release Date =
2005-07-04T00:00:00
2006-09-25 15:39:53 1276 948 Report * Locale ID = 1033
2006-09-25 15:39:53 1276 948 AU #############
2006-09-25 15:39:53 1276 948 AU ## START ## AU: Search for updates
2006-09-25 15:39:53 1276 948 AU #########
2006-09-25 15:39:53 1276 948 AU <<## SUBMITTED ## AU: Search for updates
[CallId = {1D866C78-ACC9-46F1-9626-02D93A86026F}]
2006-09-25 15:39:53 1276 748 Agent *************
2006-09-25 15:39:53 1276 748 Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-09-25 15:39:53 1276 748 Agent *********
2006-09-25 15:40:07 1276 948 AU AU found 1 sessions to launch client into
2006-09-25 15:40:07 1276 948 AU Launched new AU client for directive 'Forced
Reboot', session id = 0x0
2006-09-25 15:40:08 3452 d78 Misc =========== Logging initialized (build:
5.8.0.2469, tz: +0100) ===========
2006-09-25 15:40:08 3452 d78 Misc = Process:
C:\WINDOWS\system32\wuauclt.exe
2006-09-25 15:40:08 3452 d78 AUClnt Launched Client UI process
2006-09-25 15:40:08 3452 d78 AUClnt AU client got new directive = 'Forced
Reboot', serviceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, return =
0x00000000
2006-09-25 15:40:08 1276 79c AU AU setting client response for sessionId 0x0
to 'Pending'
2006-09-25 15:40:12 1276 748 Agent * Found 0 updates and 12 categories in
search
2006-09-25 15:40:12 1276 748 Agent *********
2006-09-25 15:40:12 1276 748 Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2006-09-25 15:40:12 1276 748 Agent *************
2006-09-25 15:40:12 1276 748 Report REPORT EVENT:
{1E9256BB-E095-4A75-9FCC-2446CB33B402} 2006-09-25 15:39:53+0100 1 202 102
{00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content
Install Reboot completed.
2006-09-25 15:40:12 1276 748 AU >>## RESUMED ## AU: Search for updates
[CallId = {1D866C78-ACC9-46F1-9626-02D93A86026F}]
2006-09-25 15:40:12 1276 748 AU # 0 updates detected
2006-09-25 15:40:12 1276 748 AU #########
2006-09-25 15:40:12 1276 748 AU ## END ## AU: Search for updates [CallId
= {1D866C78-ACC9-46F1-9626-02D93A86026F}]
2006-09-25 15:40:12 1276 748 AU #############
2006-09-25 15:40:28 1276 f04 AU AU setting client response for sessionId 0x0
to 'Complete'
2006-09-25 15:40:28 3452 d78 AUClnt AU client got new directive =
'Shutdown', serviceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, return =
0x00000000
2006-09-25 16:27:17 1276 7c8 Report Uploading 6 events using cached cookie,
reporting URL =
http://stats.update.microsoft.com/ReportingWebService/ReportingWebService.asmx
2006-09-25 16:27:32 1276 7c8 Report Reporter successfully uploaded 6 events.
2006-09-25 16:57:49 1284 3e0 Misc =========== Logging initialized (build:
5.8.0.2469, tz: +0100) ===========
2006-09-25 16:57:49 1284 3e0 Misc = Process:
C:\WINDOWS\System32\svchost.exe
2006-09-25 16:57:49 1284 3e0 Misc = Module:
C:\WINDOWS\system32\wuaueng.dll
2006-09-25 16:57:49 1284 3e0 Service *************
2006-09-25 16:57:49 1284 3e0 Service ** START ** Service: Service startup
2006-09-25 16:57:49 1284 3e0 Service *********
2006-09-25 16:57:49 1284 3e0 Agent * WU client version 5.8.0.2469
2006-09-25 16:57:49 1284 3e0 Agent * SusClientId =
'5f0639b1-c4c8-4bf2-9f74-b8d1c9c731bd'
2006-09-25 16:57:49 1284 3e0 Agent * Base directory:
C:\WINDOWS\SoftwareDistribution
2006-09-25 16:57:49 1284 3e0 Agent * Access type: No proxy
2006-09-25 16:57:49 1284 3e0 Agent * Network state: Disconnected
2006-09-25 16:58:38 1284 3e0 Agent *********** Agent: Initializing Windows
Update Agent ***********
2006-09-25 16:58:38 1284 3e0 Agent *********** Agent: Initializing global
settings cache ***********
2006-09-25 16:58:38 1284 3e0 Agent * WSUS server: <NULL>
2006-09-25 16:58:38 1284 3e0 Agent * WSUS status server: <NULL>
2006-09-25 16:58:38 1284 3e0 Agent * Target group: (Unassigned Computers)
2006-09-25 16:58:38 1284 3e0 Agent * Windows Update access disabled: No
2006-09-25 16:59:13 1284 3e0 DnldMgr Download manager restoring 0 downloads
2006-09-25 16:59:13 1284 3e0 AU ########### AU: Initializing Automatic
Updates ###########
2006-09-25 16:59:13 1284 3e0 AU # Approval type: Scheduled (User
preference)
2006-09-25 16:59:13 1284 3e0 AU # Scheduled install day/time: Every day at
3:00
2006-09-25 16:59:13 1284 3e0 AU # Auto-install minor updates: Yes (User
preference)