IE 8 - Manage Addons - Does not have WuWeb Active X control listed

MrSoftware

unread,

Apr 1, 2010, 10:38:01 AM4/1/10

to

Does anyone know how to (1) download and (2) reinstall the WuWeb active X
control?

My IE 8 - Version 8.0.6001.18702 - Build 86001

Thanks ahead of time :-)

//-------------------------------

Just FYI and background info is below.

I opened an MS support case (SRX1057345742) on a Windows Update problem
(XP SP3 - March 2010 all updates except one).

There was an update (Rights Management Services Client : KB979099) that
would NOT install (all other MS updates installed fine).

Of the many 'fixes' we tried none worked. Eventually Windows Update started
to 'break down'. I'm just trying to bring back the Windows update page.

Currently, when I try IE 8 - Windows Update - I just get a blank page on;

http://windowsupdate.microsoft.com

C:\WINDOWS\Downloaded Program Files

Discovered files A9Helper.A9
HidInputMonitorX Control
WuWebControl Class

PA Bear [MS MVP]

unread,

Apr 1, 2010, 1:25:15 PM4/1/10

to

So you stated your full Windows version in this post, I see.

What anti-virus application or security suite is installed and is your
subscription current? What anti-spyware applications (other than Defender)?
What third-party firewall (if any)?

Has a(another) Norton or McAfee application ever been installed on the
computer (e.g., a free-trial version that came preinstalled when you bought
it)?

Ǝиçεl

unread,

Apr 1, 2010, 1:45:02 PM4/1/10

to

Test this WGA diagnose test, connection to MS, that scripts working.
<http://www.microsoft.com/genuine/diag/>

Ǝиçεl
◕‿◕
-=-

MrSoftware

unread,

Apr 1, 2010, 3:37:01 PM4/1/10

to

[1] I'm using (a) 'MS Windows Security Essentials' (MS-WSE) and (b) MS
Windows Firewall.

I normally run ZoneAlarm (firewall) and AVG (Virus checker) but uninstalled
them for the above MS solutions inorder to fix some problems with MS
(MicroSoft) WU (Windows Update).

The whole system was scanned (via MS-WSE) just before I started to get some
problems with MS WU.

> .
>

MrSoftware

unread,

Apr 1, 2010, 3:42:01 PM4/1/10

to

Well, I did some checking on this.

[1] To get the 'new' wuweb.dll I downloaded and installed the latest version
of WUA (Windows Update Agent) from the following url.

WSUS is currently distributing version WUA 7.4.7600.226

x86:
http://download.windowsupdate.com/windowsupdate/redist/standalone/7.4.7600.26/windowsupdateagent30-x86.exe

x64:
http://download.windowsupdate.com/windowsupdate/redist/standalone/7.4.7600.226/windowsupdateagent30-x64.exe

Itanium:
http://download.windowsupdate.com/windowsupdate/redist/standalone/7.4.7600.26/windowsupdateagent30-ia64.exe

I installed x86 and verified it.

So I now have the latest version of wuweb.dll (as far as I know).

MrSoftware

unread,

Apr 1, 2010, 4:08:01 PM4/1/10

to

[1] Tested system via 'Microsoft Genuine Advantage – Diagnostic Site'
(MGA-DS) at url;

http://www.microsoft.com/genuine/diag/

(a) And it installed the 'Validation Self-help ActiveX loaded'
(b) All the tests from the MGA-DS ran and passed except for...
(c) The 'Windows validation ActiveX loaded' test never completed (over 14
minuets and still no complete)
(d) I shutdown the machine, rebooted, and re-ran the test.
(e) The 'Windows validation ActiveX loaded' test never completed (over 14
minuets and still no complete)

The XP OS is 'genuine' and has gone through other 'genuine' tests before -
no problem.

MrSoftware

unread,

Apr 1, 2010, 4:13:34 PM4/1/10

to

Note : I still do not seem to have the WuWeb ActiveX control coming up in the
IE 8 'Manage Addons' list.

I hope I am understanding the 'Manage Addons' list correctly.
I see the newly installed 'SelfHelpControl.DLL' (MS Genuine Advantage SS
tool).

But I do not see the 'WuWeb' ActiveX control.

PA Bear [MS MVP]

unread,

Apr 1, 2010, 9:31:12 PM4/1/10

to

Repost: Has a Norton or McAfee application ever been installed on the

computer (e.g., a free-trial version that came preinstalled when you bought
it)?

So the Windows Update problem started when you had AVG installed: What
exactly was the problem (e.g., 0x8DDD0004 or other errors) and did you ever
get it resolved?

Are you having any other problems (e.g., search redirects; "Page cannot be
displayed" errors; cannot open Task Manager, Regedit, or Internet Options)?

Is Automatic Updates enabled? If not, can you enable it, reboot, and then
find it's still enabled?

Is *Microsoft* Security Essentials automatically updating itself at least
one every 24 hours?

Can you access & update manually via http://windowsupdate.microsoft.com (not
any other link)? [I know you may have answered this in another thread but
I'd like you to answer it in this thread, too.]

Have you tried doing a Reset yet? => http://support.microsoft.com/kb/971058
[Tip: Run the Fix It in Default and Aggressive modes, if necessary.]
--
~PA Bear

williamtell

unread,

Apr 1, 2010, 11:47:17 PM4/1/10

to

Try this:
Click tools>internet options>general tab/settings>yiew objects
Do you see/ WUWebControlClass?

>WT<

"MrSoftware" <MrSof...@discussions.microsoft.com> wrote in message
news:7598EB9D-2EFA-484C...@microsoft.com...

williamtell

unread,

Apr 2, 2010, 12:33:15 AM4/2/10

to

BTW,

Windows Update is no more, Microsoft Update is the site now. The add on is
MUWebControlClass, when at Manage Add-ons, click the dropdown>click all
add-ons,
Do you see the MU control?

"williamtell" <w...@nospam.invalid> wrote in message
news:erZ$7ch0KH...@TK2MSFTNGP04.phx.gbl...

PA Bear [MS MVP]

unread,

Apr 2, 2010, 2:13:27 AM4/2/10

to

williamtell wrote:
> BTW, Windows Update is no more, Microsoft Update is the site now.

Sorry, Tell, but your arrow missed the apple this time...

<QP>
What are the differences between Windows Updates, Automatic Updates, and
Microsoft Updates?

While Windows Update provides you with updates specifically for Windows,
Microsoft Update expands the service to download and install updates for
other Microsoft software, such as Microsoft Office and Windows Live.
Automatic updating is a feature that allows you to set your PC to
automatically download and install updates using either service, making it
easy and convenient for you to keep your Windows PC current.
</QP>
Source: http://www.microsoft.com/windows/downloads/windowsupdate/FAQ.mspx

MrSoftware

unread,

Apr 2, 2010, 2:22:01 AM4/2/10

to

[1] Niether Norton or McAffee was ever on this computer.

[2] Had no problems with AVG. WU problems started with just the MS security
products (a) MS Windows Security Essentials and (b) MS firewall.

[3] The problems depends on the MS WU site accessed. I get (a) a blank MS WU
page or (b) error code 0x8DDD0004.

[4] No other problems other than MS WU.

[5] MS WUAU (..Automatic Updates) is enabled.

[6] MS Security Essentials seems to update itself OK.

[7] MS Wu site http://windowsupdate.microsoft.com is a blank page.

[8] Have not tried the Fixit you mentioned. Will try and post after this.

> .
>

MrSoftware

unread,

Apr 2, 2010, 3:02:01 AM4/2/10

to

[1] I tried MS Fixit 50202 - Reset WU components - in both (a) default (b)
agressive mode.

Neither mode worked to fix the problem.

I go to the primary MS WU site (www.windowsupdate.microsoft.com) and come up
with a blank page.

> .
>

MrSoftware

unread,

Apr 2, 2010, 3:18:01 AM4/2/10

to

[1] Yes.

(a) I did as you instruct and the WuWebControlClass comes up fine.

(b) Previously I checked the directory;

C:\WINDOWS\Downloaded Program Files

and the MUWebControClass was always there.
ID is {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}.
Version is 7.4.7600.226

[2] The muweb.dll is in directory C:\Windows

[3] The wuweb.dll is in directories (a) C:\Windows\system32 and (b)
C:\Windows\system32\dllcache

The DLL versions are correct (7.4.7600.226) but that is meaning less since
MS has no 'component verifier' to scan a software device (multiple *.exe and
*.dll) files with multiple hash codes (including partial file section scans).

"williamtell" wrote:

> .
>

MrSoftware

unread,

Apr 2, 2010, 3:23:01 AM4/2/10

to

[1] I will try the manual fixes mentioned in KB 971058 tomorrow afternoon
(USA CST) and post the results.

Note the manual fixes are only recommended after the 'agressive' mode of
FixIt 50202 fails (which happened to me).

MrSoftware

unread,

Apr 2, 2010, 3:31:02 AM4/2/10

to

[1] Thank you for the clarification of 'Windows update' (WU) vs 'Microsoft
Update' (MU).

[2] When I first looked into this I tried every 'Manage Addons' drop down
possible.
The 'all addons' does not list the MUWeb control.

[3] I do get one 'update' kind of ActiveX control listed in 'all addons'
which is;

Update Class - Microsoft Windows XP Publisher - 5.4.3790.14 - Active X Control

Its (a) dated 8/23/2003 and (b) I have no idea what this ActiveX is (part of
WU/MU??).

"williamtell" wrote:

> .
>

MrSoftware

unread,

Apr 2, 2010, 3:33:01 AM4/2/10

to

[1] Then WU (Windows Update) and MU (Microsoft Update) currently coexist?

"PA Bear [MS MVP]" wrote:

> .
>

williamtell

unread,

Apr 2, 2010, 10:11:34 AM4/2/10

to

Oh well, had an itch!

"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message
news:%23kDPXwi...@TK2MSFTNGP02.phx.gbl...

MrSoftware

unread,

Apr 2, 2010, 10:55:02 AM4/2/10

to

I was able to try the fix below a little earlier than expected.

Note below - I call 1.a and 1.b 'lobotomies' for the sake of brevity herein.

[1] MS KB 971058 has 4 'fixes' as follows.

(a) FixIt 50202 - Mode default
(b) FixIt 50202 - Mode agressive
(c) WU minor lobotomy - Without 'step 4'
(d) WU major lobotomy - With 'step 4' (reset BITS and WUAU security
descriptors)

[2] I tryed 1.a and 1.b previously - both failed.

[3] I tryed 1.c and that failed with some anomalies as follows.

mshtml.dll Missing entry point - not registered
wucltux.dll Not found - Verified as not in my XP system
wuwebv.dll Not found - Verified as not in my XP system

The identity verification info for mshtml.dll (that is on my system is)

MD5 = 7054f6adc9b670887659f1561603b0d0
Sha1 = 2a2ecfb4f15e6f9f0a743726c08bc158833634da
Sha512 =
0250c4efa46796e94d0b8bc6b7ad24d4a08b9a08a7f316c3977e76476bc6774d69d18e6cbfceb6d7ade048be6fa5e59954e053e366c2fdd70262d4ab879d430b

Size = 5,806 KB
Date = 2/25/1010 - 1:24 am
Version = 8.0.6001.18904

I used Nirsoft's dll tool - DLL Export Viewer and verified the DLL is
missing an entry point for registration.

[4] I'll post the DLL export list after this post.

[5] I'll try the 'WU major lobotomy' after I do [4] above.

MrSoftware

unread,

Apr 2, 2010, 10:58:01 AM4/2/10

to

The exported function list for mshmtl.dll (that could not be registered as
per KB 971058) is below.

==================================================
Function Name : ClearPhishingFilterData
Address : 0x3dd2d368
Relative Address : 0x0030d368
Ordinal : 105 (0x69)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : ConvertAndEscapePostData
Address : 0x3dd99162
Relative Address : 0x00379162
Ordinal : 106 (0x6a)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : CreateHTMLPropertyPage
Address : 0x3dd2d67a
Relative Address : 0x0030d67a
Ordinal : 107 (0x6b)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : DllCanUnloadNow
Address : 0x3db89521
Relative Address : 0x00169521
Ordinal : 108 (0x6c)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : DllEnumClassObjects
Address : 0x3dd27fb5
Relative Address : 0x00307fb5
Ordinal : 109 (0x6d)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : DllGetClassObject
Address : 0x3da3d415
Relative Address : 0x0001d415
Ordinal : 110 (0x6e)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : IEIsXMLNSRegistered
Address : 0x3dda2df8
Relative Address : 0x00382df8
Ordinal : 111 (0x6f)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : IERegisterXMLNS
Address : 0x3dda2e62
Relative Address : 0x00382e62
Ordinal : 112 (0x70)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : MatchExactGetIDsOfNames
Address : 0x3db483c9
Relative Address : 0x001283c9
Ordinal : 113 (0x71)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : PrintHTML
Address : 0x3dd2b007
Relative Address : 0x0030b007
Ordinal : 114 (0x72)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : RunHTMLApplication
Address : 0x3dd8e5bc
Relative Address : 0x0036e5bc
Ordinal : 115 (0x73)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : ShowHTMLDialog
Address : 0x3dd88e7f
Relative Address : 0x00368e7f
Ordinal : 116 (0x74)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : ShowHTMLDialogEx
Address : 0x3dd88e8f
Relative Address : 0x00368e8f
Ordinal : 117 (0x75)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : ShowModalDialog
Address : 0x3dd88de9
Relative Address : 0x00368de9
Ordinal : 118 (0x76)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : ShowModelessHTMLDialog
Address : 0x3dd88f92
Relative Address : 0x00368f92
Ordinal : 119 (0x77)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

MrSoftware

unread,

Apr 2, 2010, 11:00:01 AM4/2/10

to

Knowledge is bliss :-)

"williamtell" wrote:

> .
>

MrSoftware

unread,

Apr 2, 2010, 11:13:02 AM4/2/10

to

Note the difference below in exported 'registration' points.

Those in MUWEB.DLL below.

==================================================
Function Name : DllRegisterServer
Address : 0x50d0f178
Relative Address : 0x0000f178
Ordinal : 4 (0x4)
Filename : muweb.dll
Full Path : C:\WINDOWS\system32\muweb.dll
Type : Exported Function
==================================================

==================================================
Function Name : DllUnregisterServer
Address : 0x50d0f18a
Relative Address : 0x0000f18a
Ordinal : 5 (0x5)
Filename : muweb.dll
Full Path : C:\WINDOWS\system32\muweb.dll
Type : Exported Function
==================================================

No such 'points' in mshtml.dll.
The only registration 'points' in it are;

==================================================
Function Name : IEIsXMLNSRegistered
Address : 0x3dda2df8
Relative Address : 0x00382df8
Ordinal : 111 (0x6f)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

==================================================
Function Name : IERegisterXMLNS
Address : 0x3dda2e62
Relative Address : 0x00382e62
Ordinal : 112 (0x70)
Filename : mshtml.dll
Full Path : C:\WINDOWS\system32\mshtml.dll
Type : Exported Function
==================================================

Evidentally the MSHTML.DLL module is registered only via IE (Internet
Explorer).

PA Bear [MS MVP]

unread,

Apr 2, 2010, 12:14:20 PM4/2/10

to

[I have read all of your replies, as of this post.]

When you say running the Fix It in, e.g., Aggressive mode "fails," do you
mean the Fix It won't run/you cannot run it or the Fix It doesn't correct
the problem?

All of this "smells" like the effects of a hijackware infection, one that
happened when you were running AVG. If such is the case, there's a very
good chance that MSE did not install properly and is not working properly
(despite what you may be seeing).

1. Are any of the following found in Add/Remove Programs?

KB980182
KB977165
KB972270
KB978207
KB976325
KB974455

2. What is the result of running the Fix It on this page? =>
http://support.microsoft.com/kb/980966/

PA Bear [MS MVP]

unread,

Apr 2, 2010, 12:05:22 PM4/2/10

to

Yes.

In WinXP: If Windows Update is your default update source,
http://windowsupdate.microsoft.com will redirect to
http://update.microsoft.com/windowsupdate; If Microsoft Update is your
default update source, http://windowsupdate.microsoft.com will redirect to
http://update.microsoft.com/microsoftupdate

MrSoftware

unread,

Apr 2, 2010, 12:28:02 PM4/2/10

to

Well, I finally tried the 'major labotomy' fix of MS article 971058 : Step 4.

MS WU is still not working.

There were enough errors in the article 971058 that I'm going to open a new
topic to address what I believe are errors in the 'fix process'.

Thank you so much for your time PA Bear :-)

Hopefully some material in this topic will be useful to others.

> .
>

MrSoftware

unread,

Apr 2, 2010, 2:47:01 PM4/2/10

to

Thanks tons for this info :-)

I record all of it in my permanent notes on MS AU, MU, WU.

> .
>

MrSoftware

unread,

Apr 2, 2010, 3:09:01 PM4/2/10

to

[1] The Fixit 50202 : Aggressive mode ran but did not fix the problem.

[2] I checked your KB list (your item 1) and did not find any in my
'installed' list.

[3] I ran the your fixit suggestion (your item 2) and it said my system was
compatible.

> .
>

PA Bear [MS MVP]

unread,

Apr 2, 2010, 3:15:05 PM4/2/10

to

> [2] I checked your KB list (your item 1) and did not find any in my
> 'installed' list.

See...

Help: I Got Hacked. Now What Do I Do?
http://technet.microsoft.com/en-us/library/cc700813.aspx

Back-up any personal data (none of which should be considered 100%
trustworthy at this point) then format the HDD & do a clean install of
Windows. Please note that a Repair Install (AKA in-place upgrade) will NOT
fix this!

HOW TO do a clean install of WinXP: See
http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1 in
http://support.microsoft.com/kb/978307

After the clean install, you'll have the equivalent of a "new computer" so
take care of everything on the following page before otherwise connecting
the machine to the internet or a local network (i.e., other computers) and
before using a flash drive or SDCard that isn't brand-new or hasn't been
freshly formatted:

4 steps to help protect your new computer before you go online
http://www.microsoft.com/security/pypc.aspx

Other helpful references include:

HOW TO get a computer running WinXP Gold (no Service Packs) fully patched
(after a clean install)
http://groups.google.com/group/microsoft.public.windowsupdate/msg/3f5afa8ed33e121c

HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a
clean install)
http://groups.google.com/group/microsoft.public.windowsxp.general/msg/a066ae41add7dd2b

Tip: After getting the computer fully-patched, download/install KB971029
manually: http://support.microsoft.com/kb/971029

NB: Any Norton or McAfee free-trial that came preinstalled on the computer
when you bought it will be reinstalled (but invalid) when Windows is
reinstalled. You MUST uninstall the free-trial and download/run the
appropriate removal tool before installing any updates, Windows Service
Packs or IE upgrades and before installing your new anti-virus application
(which will require WinXP SP3 to be installed).

Norton Removal Tool
ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe

McAfee Consumer Products Removal Tool
http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe

Also see:

Risks & Benefits of P2P file sharing
http://www.microsoft.com/protect/data/downloadfileshare/filesharing.aspx
http://blogs.technet.com/mmpc/archive/2008/10/06/the-cost-of-free-software.aspx

Steps To Help Prevent Spyware
http://www.microsoft.com/security/spyware/prevent.aspx

Steps to Help Prevent Computer Worms
http://www.microsoft.com/security/worms/prevent.aspx

Avoid Rogue Security Software!
http://www.microsoft.com/security/antivirus/rogue.aspx

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

MrSoftware

unread,

Apr 2, 2010, 3:42:06 PM4/2/10

to

[1] I have downloaded all the security updates in your list (your item 1).

[2] Should I install KB980182 to take care of my problem with MS WU?

[3] What is the best way to verify I do not have KB980182 installed (good
tool).

Note that KB980182 is the most recent 'Cumulative update) for IE (03/30/2010)

[4] Do the three XP updates (KB972270, KB977165, KB980182) need to be
installed?

Finally I wonder why some of these updates were NOT installed on my system
(if indeed they are not there - I may be doing something wrong with install
verification).

According to MS WU (last time it ran find - about a week ago) my system only
had one minor update to install.

> .
>

PA Bear [MS MVP]

unread,

Apr 2, 2010, 8:00:35 PM4/2/10

to

I have nothing further to add or recommend here. The fact that none of
those updates had been installed was more than enough to warrant formatting
the HDD & doing a clean install of Windows IMHO.