Solved Windows Turned Auto Update Back On?

[stevieray]

I usually leave my PC on overnight (well, really 24/7... I only turn it off as part of a reboot).

This morning, I awoke to find it on its log in screen. I know I left it running last night... it was processing some video in Handbrake. Wondered what happened, until I saw the "windows installed some updates..." bubble down on the task bar.

Windows had somehow changed it own update status from "check with me" to "auto"! Has anybody seen this behavior before? I don't like this at all. :shock:

 

[JMH]

stevieray

* Just to be sure - I suggest you download Malwarebytes or SuperAntiSpyware.
Update immediately & run a Full Scan.

Malwarebytes : Download free malware, virus and spyware tools to get your computer back in shape!

SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

* Also run a Full AV scan.

* After the unplanned updates what was listed in
{a} Update History?
{b} Event Viewer?

* Please list the Security Software you are currently using.

 

[stevieray]

That's a good idea. I didn't think to run a scan... I just assumed that MS somehow turned the auto update feature on.

Eighteen updates were installed; 14 for the office suite and 4 for the OS. They all look to be legitimate, but I will list them all if you think it's necessary.

My security software is pretty basic: MSE, the built-in firewall (with Win 7 Firewall controller from Sphinx), Malwarebytes and Superantispyware (run from time to time).

As for the Event Viewer, well I'm saddened to say that I don't know what to look for in there. A few years ago, when Windows 7 was new and I had a few BSODs I tried to learn a bit about it, but then the BSODs stopped and I forgot the little I knew about it. To this day it remains a dark and mysterious land, full of strange customs and indecipherable languages. I swear I hear ominous, distant native drums whenever I open it.

EDIT: Ran SAS and Malwarebytes. Only found the usual tracking cookies.

 

[DustSailor]

I myself have experienced this before, but only after a clean reinstall of windows. I would guess it to be window's fault completely, so just switch to whatever setting you had it on before and most likely it will stay like that (so perhaps it switches on its own once). If it switches again, let us know (you don't have anyone else logging on your computer playing with settings do you?)

 

[NoelDP]

I have vague memories of it being explained as happening when the user either installs MSE, or switches to Microsoft Updates from Windows Updates - but I have no idea how true it is, or where I heard it.

 

[fseal]

There are some cases where this happens. Yes, possibly installing MSE (or some other AV software), also possibly installing SP1...

 

[JMH]

As for the Event Viewer, well I'm saddened to say that I don't know what to look for in there. A few years ago, when Windows 7 was new and I had a few BSODs I tried to learn a bit about it, but then the BSODs stopped and I forgot the little I knew about it. To this day it remains a dark and mysterious land, full of strange customs and indecipherable languages. I swear I hear ominous, distant native drums whenever I open it.

stevieray.

FYI

IMHO This is a very handy tool in troubleshooting Windows { & other} related problems.

Re Event Viewer > Event Logs.

Event logs are special files that record significant events on your computer, such as when a user logs on to the computer or when a program encounters an error.
Whenever these types of events occur, Windows records the event in an event log that you can read by using Event Viewer.

Advanced users might find the details in event logs helpful when troubleshooting problems with Windows and other programs.

What information appears in event logs (Event Viewer)?

 

[stevieray]

Thanks for the info, guys. I guess something I installed over the past few weeks must've tripped update back to auto. None of the scans turned up anything more dangerous than log in/tracking cookies, and looking through the event logs I see only "audit success" on the security tab, "information" under the set up and system tabs, and only a few odd "warnings" (but mostly just "information") on the application tab. The warnings are mainly about expiring certificates, being unable to find Nero (I uninstalled it months ago.) and trying to rename one of my movie folders over and over again (huh...?).

I'm glad this wasn't MS reaching out and changing the update setting... that's what I thought it was at first. I'll just chalk this up as "one of those things". Thanks again!

 

[JMH]

Our pleasure indeed.