Windows XP Automatic Updates 'Disabled'- every time after reboot!!

[Can't_Stand_Hackers]

Hello! My computer got some malware recently, I ran my anti-virus software,
got id of i (took several times to make sure the system was clean), however
the problem persist. It's as if the virus has gone but left destruction
behind. My Automatic Updates is turned off ever time I switch on the
computer, even though reregistering it through Start--> Run helped first
time. I looked at other threads, went to download this AU Reset tool from
http://www.codeplex.com/aureset/Release/ProjectReleases.aspx?ReleaseId=13656

How long does take to download??Because my installation got to 'Installing
KB842773 for Windows XP AKA BITS 2.0....' and it's not progressing anywhere
for a while now...Shoud Icancel and start again?

[Can''t_Stand_Hackers]

Sorry, my keyboard wasn't working properly, some letters simply refused to be
typed. I meant to say 'I got rid of it (the virus)' and some other typos were
accidental because of my keyboard, sorry! I also wanted to add that I am
having problems loading most websites, on top of my Automatic Updates being
turned off.
If the virus is not there anymore, why do these problems persist? Thanks!!

[Engel]

The only way to clean a compromised system is to flatten and rebuild. That’s
right. If you have a system that has been completely compromised, the only
thing you can do is to flatten the system (reformat the system disk) and
rebuild it from scratch (reinstall Windows and your applications).
Source:
<http://www.microsoft.com/technet/community/columns/secmgmt/sm0504.mspx>

Interesting and appropriate article

Good luck
-=-

[PA Bear [MS MVP]]

Judging from similar posts here in the past month or so, the behavior may be
due to a Vundo-ZLOB-SDBot infection, all of which is protected by a rootkit.

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a thorough check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://aumha.net/viewforum.php?f=30,
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

==========================================

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/default.aspx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

[Can''t_Stand_Hackers]

Thanks for your reply! What's the difference between the programsyou
suggested and Spybot? Because I downloaded it, it got rid of everything just
fine. Only, as I wrote in my other post 'What IS this site?', some websites
still appear and the updates are still disabled. How can that be if the
malware has been destroyed?

[PA Bear [MS MVP]]

Spybot is only one of many anti-spyware utilities used to detect & remove
issues (and provide real-time protection, depending on your settings).

HijackThis is not one of these utilities. Logs from this application and
others (e.g., Deckard's System Scanner) are used by experts in such matters
to diagnose problems.

I can assure you that if you have a Vundo-ZLOB-SDBot infection, all
protected by a rootkit, no one application or combination of applications
will do the job: You will need expert assistance to get the machine cleaned
up.

[Can''t_Stand_Hackers]

Thank you, I followed yur advice and posted a HIijackThis log in one of the
forums. Is there any way to prevent such horrible system invasions? I mean, I
am always so careful, delete suspicious attachments, don't open dodgy
websites....It's taking two days and an enormous amount of patience and
effort to clean up my computer, would ove to know if there's a setting or
some way to protect against future attacks..I have avast anti-virus updated,
and the firewal working...now got spybot too...

[PA Bear [MS MVP]]

I'm sure the expert who handles your forum thread will be able to suggest
ways to avoid such issues in the future.

That being said, no applications or utilities will be able to protect you
from yourself. Be exceedingly cautious when clicking on any links, anywhere
(including emails and chat), and when participating in P2P file sharing.

Protect Your PC!
http://www.microsoft.com/athome/security/computer/default.mspx

Security FAQ & Checklist
http://www.dslreports.com/faq/8463

P2P file sharing: Anticipate the risks before you download your first file:
http://www.microsoft.com/protect/yourself/downloads/filesharing.mspx