Odd thing though, I have an old Windows XP machine I am rebuilding and it had no updates required at all.
On XP I had 2 or 3 plus the malicious software tool. (???)
I got curious so fwiw they were:
KB890830 Win Malicious Software Removal Tool
KB2809289 Cumulative Security Update for IE8
KB2807986 Security Update for Windows XP