Would appreciate any usefull comment.
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx
2. Run this online scan (in safe mode w/networking, if need be):
http://onecare.live.com/site/en-us/center/howsafe.htm
3. Run additional checks for hijackware, including posting your hijackthis
log to an appropriate forum.
Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware
When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**
If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
=====================
Start a free Windows Update support incident request:
https://support.microsoft.com/oas/default.aspx?gprid=6527
Support for Windows Update:
http://support.microsoft.com/gp/wusupport
For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/
Denise wrote:
> http://support.microsoft.com/kb/943144
--
TaurArian [MVP] 2005-2009 - Update Services
http://taurarian.mvps.org
======================================
How to ask a question: http://support.microsoft.com/kb/555375
Disclaimer: The information has been posted "as is" with no warranties or
guarantees and doesn't give any rights.
Computer Maintenance: Acronis / Diskeeper / Paragon / Raxco
"Denise" <Den...@discussions.microsoft.com> wrote in message
news:1127229C-A25D-477F...@microsoft.com...
I've been emailing with an MS tech about this same problem and she's given
me several procedures to follow but they haven't resolved the problem. It
seems that the wups file does cause this problem but it's not the only
culprit or I'd be getting automatic updates.
These are some of the links that I was given:
Windows Update Troubleshooter
http://v4.windowsupdate.microsoft.com/troubleshoot/
You cannot install some updates or programs
http://support.microsoft.com/default.aspx?scid=kb;en-us;822798
How to troubleshoot problems connecting to Windows Update or to Microsoft
Update
http://support.microsoft.com/kb/818018/
Updating your Microsoft software
http://www.microsoft.com/nz/athome/security/update/msupdates.mspx
I was also given these instructions:
Step 1: Install Automatic Updates service
=========================
Click Start / Run then type the following command then click OK. You may
simply copy and paste this command into the command line.
%SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection
DefaultInstall 132 %SystemRoot%\inf\au.inf
Step 2: Please register all the components related to Automatic Updates
========
Click Start, click Run, type the following command and click OK after each
roll. You are expected to receive a successful confirmation after running
each command:
REGSVR32 WUAPI.DLL
REGSVR32 WUAUENG.DLL
REGSVR32 WUAUENG1.DLL
REGSVR32 WUCLTUI.DLL
REGSVR32 WUPS.DLL
================================
And I was given these instructions:
Click Start, Run, type: notepad C:\AU.reg and press Enter. Choose Yes
when you are prompted.
2. Copy the following text and then paste them into the opened Notepad window:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv]
"Description"="Enables the download and installation of Windows updates. If
this service is disabled, this computer will not be able to use the Automatic
Updates feature or the Windows Update Web site."
"DisplayName"="Automatic Updates"
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,00,
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,
00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,
6b,00,20,00,77,00,75,00,67,00,72,00,6f,00,75,00,70,00,00,00
"ObjectName"="LocalSystem"
"Start"=dword:00000002
"Type"=dword:00000020
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters]
"ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,4e,00,54,00,5c,00,73,
00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,75,00,61,00,75,00,
73,00,65,00,72,00,76,00,2e,00,64,00,6c,00,6c,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security]
"Security"=hex:01,00,14,80,a0,00,00,00,ac,00,00,00,14,00,00,00,30,00,00,00,02,
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,
00,00,02,00,70,00,04,00,00,00,00,00,18,00,fd,01,02,00,01,01,00,00,00,00,00,
05,12,00,00,00,00,00,00,00,00,00,1c,00,ff,01,0f,00,01,02,00,00,00,00,00,05,
20,00,00,00,20,02,00,00,00,00,34,00,00,00,18,00,8d,01,02,00,01,01,00,00,00,
00,00,05,0b,00,00,00,20,02,00,00,00,00,1c,00,fd,01,02,00,01,02,00,00,00,00,
00,05,20,00,00,00,23,02,00,00,00,00,34,00,01,01,00,00,00,00,00,05,12,00,00,
00,01,01,00,00,00,00,00,05,12,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum]
"0"="Root\\LEGACY_WUAUSERV\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001
3. After we paste the above text, please close the Notepad window. Choose
Yes when you are prompted to save the file.
4. Click Start, click Run, type in REGEDIT and press Enter.
5. Locate the following key by clicking the PLUS(+) sign:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv
6. If this key exists, please right click it and select Delete.
7. Double click C:\AU.reg to import the registry key and select OK.
8. Restart your computer.
=====================================
There were other fixes that I received along the lines of the previous fix
but I still can't receive automatic updates.
--
Denise
Have you tried the steps in my first reply to this thread? =>
http://groups.google.com/group/microsoft.public.windowsupdate/msg/705f525e2ebedbf7
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/
Denise wrote:
> Yes, I saw that on the bottom of the page after I posted here.
>
> I've been emailing with an MS tech about this same problem and she's given
> me several procedures to follow but they haven't resolved the problem. It
> seems that the wups file does cause this problem but it's not the only
> culprit or I'd be getting automatic updates.
>
> These are some of the links that I was given:
<snip>
> There were other fixes that I received along the lines of the previous fix
> but I still can't receive automatic updates.
>
>> Re-read the article Denise, it also has links for direct download of the
>> WU
>> Agent.
>>
>> "Denise" wrote:
>>> I think that link will only work if he's able to get updates. It's an
>>> update
>>> and he can't get updates.
>>> --
I've run Microsoft Malicious Spyware Removal Tool and a number of other
sypware/trojan/virus/worm programs but they don't come up with anything but
cookies on occasion.
I'll back out here.
--
Denise