What's the difference/How can I tell between a bot operating and getting Microsoft updates via the supposedly secret backdoor download mechanism now being used? I often have my computer drives whirling around for no apparent reason accompanied by system slowdown and later I find evidence of some massive update that occurred during this time.

Any tips on how to tell if all the updates are real MS updates and/or not botnet activity?

Click to read the article this is in response to.