Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Windows Update error code 80244019

363 views
Skip to first unread message

murlon123

unread,
Oct 23, 2008, 6:48:01 AM10/23/08
to
Hi,
I am using windows vista 32bit home premium SP1 and whenever i try to update
windows i am getting the error code 80244019

If i try to update my windows defender i am getting the error code 0x80244019

How can i repair this error...Pl help me out

Thanks

Muru

mur...@hotmail.com

Engel

unread,
Oct 23, 2008, 10:45:01 AM10/23/08
to
Hello Muro,

Windows Defender

Are you getting the regular monthly sets of security updates, including the
Malicious Software Removal Tool, for example?

Go ahead and download\update from here

<http://www.microsoft.com/security/portal>

Go to the Microsoft address specified, and in the right column, download the
32-bit definitions.

Yours is the second query in recent days with this same version number--so I
think there may have been a problem.

Putting in the definitions from the security portal should fix this.


Let us know what hªppens.


Ǝиçεl
-=-

murlon123

unread,
Oct 24, 2008, 5:27:02 AM10/24/08
to
The cause of error 80244019 was a Trojan Virus!!

It was stopping me to go to microsoft sites and i was not able to download
anything from microsoft...

I went to "Local Area Connection" and opened the properties, then the
properties of the item "Internet Protocol Version 4 (TCP/IPv4)", and noticed
that instead of having selected "Obtain DNS server address automatically", it
was using:

Preferred DNS server: 85.255.113.122
Alternate DNS server: 85.255.112.83

I removed the 2 DNS addresses and changed the option back to "Obtain DNS
server address automatically" but it wouldn't keep it. I did this several
times without luck.

If you Google the first address "85.255.113.122" you'll find some articles
describing how to get rid of malicious software from your computer and a
Trojan virus called DNSchanger that installs some files
(c:\resycled\boot.com; c:\windows\system32\kdtjz.exe) and modifies your
registry to redirect to these addresses:

HKEY_LOCALMACHINE\SYSTEM\CurrentControlSet\Service
s\...\Parameters\Tcpip\NameServer = 85.255.113.122,85.255.112.83

See this link:
PC Pitstop Forums > dnschanger found, microsoft money box keeps appearing

I'm using Norton Anti Virus and it didn't detect the Trojan virus, so I
downloaded HijackThis and "Spybot - Search & Destroy", which are for free. I
also got a copy of "PC Tools Spyware Doctor".

I removed all cookies and temporary internet files from Internet Explorer
and Firefox. Then I rebooted my computer in safe mode and run all the
anti-virus and anti-spyware I had downloded, and followed their instructions.

After removing the Trojan virus, I reset my DNS address and flushed it.
You'll probably need "elevated" permissions...to do this you need to right
click the "cmd.exe" file to "Run as Administrator" and then type:

>ipconfig /flushdns

I also upgraded IE to version 8-beta. Then finally was able to update
windows with no errors !!!

Hope this helps, I spent a lot of time trying to fix this one,

Yesterday microsoft announced the security update for almost all the OS ...I
have installed that too and now i am able to update windows vista and windows
defender

These days we can't rely on any software or OS

Murlon123

Engel

unread,
Oct 25, 2008, 8:16:00 PM10/25/08
to
Hi Murlon123,

Glad to hear you got it.

Thank you for the feedback,

-=-

AjTanas

unread,
Oct 27, 2008, 5:34:02 PM10/27/08
to

AjTanas

unread,
Oct 27, 2008, 5:39:02 PM10/27/08
to

Hey Murlon,

It would be nice of you to tell us which Trojan you detected, so others can
find it more easily.
Your post doesn't state which program worked, and what you removed...
I would very much like to know that, as I appear to have the same problem
you had.

Many thanks in advance!

murlon123

unread,
Nov 11, 2008, 12:48:00 AM11/11/08
to
Hi,
Sorry for the delay in my reply...If u see some fishy DNS entries in your
network settings , then its a problem...Better you restore your windows
through a good restore point or scan with microsoft defender

I am not sure which trojan caused this problem...Let me know if u need
anymore help

lsm35

unread,
Nov 11, 2008, 8:21:01 AM11/11/08
to
AJTanas,

I sympathize, because I've been troubleshooting this problem for days. I
first noticed something was fishy when my Windows Defender refused to update,
and then every time I tried to update using the Microsoft website, it said
the downloads I needed didn't exist. The problem is almost certainly what
murlon has already referenced, a DNSChanger trojan virus. I found this
website (http://www.net-security.org/article.php?id=1150) on the virus very
useful for understanding what was going on.

Murlon's explanations aren't very clear, but that's because there doesn't
seem to be a straight-forward answer. I essentially did the same thing. I
downloaded a bunch of anti-viral and anti-spyware software, including Spybot,
a-squared, Ad-Aware, and HijackThis (all free) and ran all of them, on top of
my usual McAfee. It wasn't until I had done all this and this flushed my DNS
using the cmd.exe command prompt "flushDNS" that somehow the problem went
away and Windows Defender was able to update. It's a little hard to be more
specific because there was no point during this process where I got a
notification from one of these programs saying "Suchandsuch has detected
DNSChanger.gen" or anything like that. I assume it's because the virus was
hiding out on my computer under some other name. In any case, this method
seems to work for whatever reason.

Hope that helps!

murlon123

unread,
Nov 11, 2008, 9:57:01 AM11/11/08
to
Ya its coz of the DNSChanger trojan virus...
Sometimes we cant really rely on the anti-spyware software, including Spybot,
a-squared, Ad-Aware, and HijackThis ...They may mislead us...

The best thing we can do is Windows restore through a good restore point....

godsangel2006

unread,
Nov 12, 2008, 1:38:40 PM11/12/08
to

Hey guys!
Please, help me out! I've got the same problem with error code
80244019!

I followed all the steps which Murlon suggested, but unfortunately my
Windows defender still doesn't work. I've tried to restore my system,
but still no success.

I can't download anything from Microsoft web-page..

Can anyone explain step by step what I should do to fix this problem?
Would be really grateful for it!

Nataliia


--
godsangel2006
Posted via http://www.vistaheads.com

murlon123

unread,
Nov 12, 2008, 3:45:01 PM11/12/08
to
Hi,

I suggest you to scan your PC with Anti virus and Anti spyware
programs...Find out if there is any suspicious program is running in ur PC

go to network and sharing center

manage network connections
right click on the connection you use

right click properties

select tcp/ipv4

properties

advanced

DNS TAB

can u see any weired DNS entries???

If so

FLUsH THE DNS

go to command prompt and type ipconfig/flushdns

check out

http://www.pctools.com/mrc/infections/id/Trojan.DNS%2BChanger/

godsangel2006

unread,
Nov 12, 2008, 5:41:50 PM11/12/08
to

Hey!

I already did that with AVG7.5 Antivirus. The results showed that there
are no suspicious files or programs. But my Spybot shows the following
after the scan:

(SBI $041D1396) TCP/IP Settings #1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer=208.67.220.220,208.67.222.222
(is not)

(SBI $041D1396) TCP/IP Settings #2
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{BF2812A7-6DEE-4F7E-BE83-F606973576E7}\DhcpNameServer=208.67.220.220,208.67.222.222

When I'm deleting them they appear again during the next scan...I have
no idea how to delete it.

In my DNS there were no entries. Settings are as they used to be.

What else I can do?

murlon123;1071058 Wrote:
> Hi,
>
> I suggest you to scan your PC with Anti virus and Anti spyware
> programs...Find out if there is any suspicious program is running in ur
> PC
>
> go to network and sharing center
>
> manage network connections
> right click on the connection you use
>
> right click properties
>
> select tcp/ipv4
>
> properties
>
> advanced
>
> DNS TAB
>
> can u see any weired DNS entries???
>
> If so
>
> FLUsH THE DNS
>
> go to command prompt and type ipconfig/flushdns
>
> check out
>

> 'Trojan.DNS Changer - Threat Details'
> (http://www.pctools.com/mrc/infections/id/Trojan.DNS%2BChanger/)

kako

unread,
Nov 23, 2008, 6:03:06 AM11/23/08
to
wow wow wow
this really helped me i cant belive
the anti spy wares dint pick this up
wow great post it really helped me out thanks ..

murlon123

unread,
Nov 23, 2008, 6:21:02 AM11/23/08
to
Hi,

Try http://www.exterminate-it.com/download

let me know

Thanks

jessie

unread,
Dec 15, 2008, 8:01:01 AM12/15/08
to

"murlon123" wrote:

> Hi,
> I am using windows vista 32bit home premium SP1 and whenever i try to update
> windows i am getting the error code 80244019
>
> If i try to update my windows defender i am getting the error code 0x80244019

>hi murlo i have the same eroer code but i have windwos vista home premium with sp1 is dat da same tell me e mail me at jessi...@hotmail.com

strifezero...malaysia-=)

unread,
Dec 24, 2008, 8:21:00 PM12/24/08
to
hey!
lots of talks here!
im having the same problem here..
ive tried the DNS way but i cant manage to find anything in there.
th etable was just empty.
last time im having this problems ive reformat my pc and install the windows
again..
ummm.
im using vista 32 bit too!
so anyone whose seriously genius out there!!
please help me!!
i dont wanna end up reformat my pc again...
please...or soon i end up crying here...

lori

unread,
Jan 1, 2009, 8:00:04 PM1/1/09
to

lori

unread,
Jan 1, 2009, 8:02:16 PM1/1/09
to
Hello,
I tried the hijack this, but didn't know what to do with the information in
the results: Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:49:34 PM, on 1/1/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Program Files
(x86)\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Users\lori administrator\AppData\Roaming\Smilebox\SmileboxTray.exe
C:\Program Files (x86)\Picasa2\PicasaMediaDetector.exe
C:\Program Files (x86)\Quicken Medical Expense Manager\MemDesktopToolApp.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files (x86)\WinZip\WZQKPICK.EXE
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe
C:\Users\lori administrator\AppData\Local\Google\Update\GoogleUpdate.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AIM Toolbar Search Class -
{03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files (x86)\AIM
Toolbar\aimtb.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} -
c:\program files (x86)\google\googletoolbar1.dll
O2 - BHO: AIM Toolbar Loader - {b0cda128-b425-4eef-a174-61a11ac5dbf8} -
C:\Program Files (x86)\AIM Toolbar\aimtb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program
files (x86)\google\googletoolbar1.dll
O3 - Toolbar: AIM Toolbar - {61539ecd-cc67-4437-a03c-9aaccbd14326} -
C:\Program Files (x86)\AIM Toolbar\aimtb.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files
(x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files
(x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software
Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files
(x86)\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common
Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files
(x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files
(x86)\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SmileboxTray] "C:\Users\lori
administrator\AppData\Roaming\Smilebox\SmileboxTray.exe"
O4 - HKCU\..\Run: [RegistryCleanerProMFCT] C:\Program Files
(x86)\RegistryCleanerPro\RegistryCleanerPro.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files
(x86)\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [MemDesktopToolApp] "C:\Program Files (x86)\Quicken
Medical Expense Manager\MemDesktopToolApp.exe" -winstartup
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files (x86)\AIM6\aim6.exe" /d
locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [Google Update] "C:\Users\lori
administrator\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\RunOnce: [] C:\Program Files (x86)\Internet
Explorer\iexplore.exe
http://www.symantec.com/techsupp/servlet/ProductMessages?module=2009&error=0&language=en&product=SymNRT&version=2009.0.0.41&build=Symantec&a=00000082.00000049.000000b9&b=00000082.00000096.000001da&c=00000082.000000e6.0000026f
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows
Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe
oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows
Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files
(x86)\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft
Office\Office10\OSA.EXE
O4 - Global Startup: PictureMover.lnk = C:\Program Files
(x86)\PictureMover\Bin\PictureMover.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files
(x86)\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &AIM Toolbar Search - C:\ProgramData\AIM
Toolbar\ieToolbar\resources\en-US\local\search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files (x86)\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files
(x86)\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: AIM Toolbar - {0b83c99c-1efa-4259-858f-bcb33e007a5b} -
C:\Program Files (x86)\AIM Toolbar\aimtb.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49}
- C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote -
{2670000A-7350-4f3c-8081-5663EE0C6C49} -
C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} -
https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class)
- http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) -
https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
https://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
O17 -
HKLM\System\CCS\Services\Tcpip\..\{830039DA-D75C-4EAB-88F9-E4B23695FDE3}:
NameServer = 85.255.112.120
O17 -
HKLM\System\CCS\Services\Tcpip\..\{A7D482F6-7B9D-4D05-B4DC-840974668957}:
NameServer = 4.2.2.1,4.2.2.2
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.114.78
85.255.112.120
O17 -
HKLM\System\CS1\Services\Tcpip\..\{830039DA-D75C-4EAB-88F9-E4B23695FDE3}:
NameServer = 85.255.114.78,85.255.112.120
O17 -
HKLM\System\CS2\Services\Tcpip\..\{830039DA-D75C-4EAB-88F9-E4B23695FDE3}:
NameServer = 85.255.112.120
O17 -
HKLM\System\CS3\Services\Tcpip\..\{830039DA-D75C-4EAB-88F9-E4B23695FDE3}:
NameServer = 85.255.112.120
O20 - AppInit_DLLs: C:\PROGRA~2\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner -
C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files
(x86)\Common Files\Apple\Mobile Device
Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files
(x86)\Bonjour\mDNSResponder.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner -
C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner
- C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GoogleDesktopManager - Google - C:\Program Files
(x86)\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files
(x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:\Program Files (x86)\Common
Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Intuit Update Service (IntuitUpdateService) - Intuit Inc. -
C:\Program Files (x86)\Common Files\Intuit\Update
Service\IntuitUpdateService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files
(x86)\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner -
C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner -
C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown
owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) -
Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ProtexisLicensing - Unknown owner -
C:\Windows\SysWOW64\PSIService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown
owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner
- C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner
- C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown
owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown
owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1
(TuneUp.Defrag) - Unknown owner - C:\Windows\System32\TuneUpDefragService.exe
(file missing)
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1
(TuneUp.ProgramStatisticsSvc) - Unknown owner -
C:\Windows\System32\TUProgSt.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) -
Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner -
C:\Windows\System32\vds.exe (file missing)
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation -
C:\Program Files (x86)\Viewpoint\Common\ViewpointService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner -
C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown
owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) -
Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101
(WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media
Player\wmpnetwk.exe (file missing)
O23 - Service: XAudioService - Unknown owner -
C:\Windows\system32\DRIVERS\xaudio64.exe (file missing)

--
End of file - 11501 bytes
Lori

sty

unread,
Jan 6, 2009, 9:02:00 AM1/6/09
to
Realy does work ppl nice going murlon123

stephbr212

unread,
Jan 8, 2009, 4:10:26 AM1/8/09
to

Hi, I've have the same error with update and defender. Ran a deep scan
with Kaspersky and didn't come up with anything. There's nothing wrong
with the DNS settings its all on automatic. Has anyone got any other
solutions other than a virus?


--
stephbr212
------------------------------------------------------------------------
stephbr212's Profile: http://forums.techarena.in/members/stephbr212.htm
View this thread: http://forums.techarena.in/windows-update/1059930.htm

http://forums.techarena.in

ZicoVulo

unread,
Jan 8, 2009, 10:19:00 PM1/8/09
to
I have the same problem too (I am user of WinVista SP1) since a month that i
couldn't upgrade windows defender and windows itself by windows update, by
now I still having the same problem, I did everything that is posted here,
and no solution, the only thing that i didn´t is to treat with the
"c:\resycler" virus (I see that this is the DNS changer unforunately now :-()
with a proper method (anti virus software), the only thing that i did were
deleting manually the folder and the file inside (boot.com) in all the
drivers that I have, Then trying to fix out this problem then i ran the
Malwarebytes scanned system and founded and eliminated such viruses like
"Malware.Trace", "Trojan.Agent" and the "Trojan.Vundo", after removing these
threats I rebooted and scanned again, I found only the "Trojan.Vundo",
removed it and rebooted again, scanned again and found nothing, I started
wupdate again and nothing.... the AV software didnt found anything about the
DNS changer nor Windows Defender couldn´t found that threat but it looks that
is still working in my computer even I manually removed the "resycler" folder
of all my hard drives, please someone help me, Thanks.


ZicoVulo

unread,
Jan 8, 2009, 10:26:01 PM1/8/09
to

One thing that I forgot to mention is that I try toi enter manually with
Internet Explorer to the Windows Update web site (from address, from google,
from microsoft itself) and only I get the same 404 error in the web page, and
then i tried to go in to the http://www.microsoft.com/security/portal/,
clicked in the 32bit (my system is 32 bit) windows defender definitions, and
I found with the same problem, what can I do or how can I fix that?

splexin

unread,
Jan 15, 2009, 1:18:22 PM1/15/09
to
BRAVO!!!

I had the exact same problem with that blasted DNS address. Fortunately, I
had removed the Trojan beforehand, and I did not have to go to all the
trouble that you did. Thanks a lot for figuring out that the DNS address was
preventing access to the update server.

Skieb

unread,
Jun 12, 2009, 2:39:44 PM6/12/09
to

hello,

dont know if anyone is still having this trouble but i just got it
about 4 days ago and it seems to be a updated version i think.

i was able to manually update defender buy using my laptop to get the
update then copy it to the desktop. after defender was updated it found
a trojan called renois.io or something like that (dont know if its
related) but after doing the dnsflush i am now able to get defender
updates and i was able to download spybot s&d again...but i still have
the same trouble i had to begin with on that front

spybot always worked on my computer but up when i tried to open it
after i feared i had a virus it wont open and when i try to run it as an
admin the app crashes, i also tried to get hijak this and the blue
screen of death appered,

as far as i know i have some sort of trojan in check with windows
defender it has deleted it several times and the dns flush worked and
the dns has not changed back im able to get defender and windows updates
but the other troubles presist, on a side note my computer hasnt been
on the internet in months so i dont think it is from something prior
seeing as this is my fully initernet surfing cumputer (typing this on
the laptop) the desktop is for games but i do like it for school work so
i got a wireless card about a month ago

thanks in advance for any help


--
Skieb
------------------------------------------------------------------------
Skieb's Profile: http://forums.techarena.in/members/105356.htm

0 new messages