MSBA is a good choice, but I have had problems with it reporting a patch that was already loaded. I would do a clean load, then run the machine through WindowsUpdate. If you install WMP and DX9 via svcpack.inf, then updates will be available for those. If you install WMP and DX through any other means, then, at least for DX9, you have to reboot, then load the update.