My windows xp autoupdate is not working

[phoman1126]

I've just been hit my Virus remover 2008, but i download spy hunter to get rid of it. and it wont let my windows automaticly update, because i think i deleted the infected file. i get errors like 1058. please someone help a friend out.

Hello phoman1126,

See if the solution in this thread helps.

<http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?&lang=en&cr=US&guid=&sloc=en-us&dg=microsoft.public.windowsupdate&p=1&tid=032c2160-e9f9-449f-9c57-84240626a6a3&mid=032c2160-e9f9-449f-9c57-84240626a6a3>

I hope this post is helpful.

Let us know how it works ºut.

Good luck
-=-

"phoman1126" wrote:

>
> I've just been hit my Virus remover 2008, but i download spy hunter to
> get rid of it. and it wont let my windows automaticly update, because i
> think i deleted the infected file. i get errors like 1058. please
> someone help a friend out.
>
>
> --
> phoman1126
> ------------------------------------------------------------------------
> phoman1126's Profile: http://forums.techarena.in/members/phoman1126.htm
> View this thread: My windows xp autoupdate is not working
>
> http://forums.techarena.in
>
>

On Tue, 6 Jan 2009 15:32:10 +0530, phoman1126 wrote:

> I've just been hit my Virus remover 2008, but i download spy hunter to
> get rid of it. and it wont let my windows automaticly update, because i
> think i deleted the infected file. i get errors like 1058. please
> someone help a friend out.

1.Clear the (IE) temporary Internet files and the history cache.
Click 'Start' and then click 'Run'... then type (or copy/paste)
"inetcpl.cpl" (w/out quotation marks) into the box, then click the 'OK'
button.
In Internet Properties panel 'General' tab, under 'Browsing history', click
'Delete...'button, in 'Delete Browsing History' panel, click the 'Delete
all...' button then place a checkmark into the box beside 'Also delete
files and settings stored by add-ons', Click 'Yes' and exit the Internet
Properties panel by clicking the 'OK' button.

2.Clean HDD
Click 'Start' and then click 'Run...' then type (or copy/paste) "cleanmgr"
(w/out quotation marks into the box, then click the 'OK' button. Select
your drive (presumably WinXP (C:) and click OK.

3.Download/execute:
Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
--and--
SuperAntispyware - Free
http://www.superantispyware.com/down...NTISPYWAREFREE

4. Click 'Start' then click 'Run...' then type (or copy/paste)
"services.msc" (w/out quotation marks) into the box, then click the 'OK'
button.

Ensure that 'Automatic Updates' Status is shown as 'Started' and the
'Startup Type' is set to 'Automatic'.
And the 'Startup Type' of 'Background Intelligent Transfer Service' is set
to 'Manual'.

5.Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en...ols/hijackthis

Please, do not post HJT logs to this newsgroup.
Fora where you can get expert advice for HiJack This! (HJT) logs.

http://www.thespykiller.co.uk/index.php?board=3.0
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.tomcoyote.org/index.php?showforum=27
http://www.bleepingcomputer.com/forums/forum22.html
http://www.malwarebytes.org/forums/i...hp?showforum=7
http://www.5starsupport.com/ipboard/...p?showforum=18
http://www.theeldergeek.com/forum/in...6&showforum=29

NOTE:
Registration is required in any of the above mentioned fora before posting
a HJT log and read the 'stickies' (instructions/guidelines) for the
respective HJT forum.

6.Routinely practice Safe-Hex.
http://www.claymania.com/safe-hex.html

Good luck :)

[phoman1126]

Sorry Engel when i attempt to go onto that website you copied for me, it says the thread is unavailabile.

[phoman1126]

When i tried kaymons. technique. i could'nt set automatic update to automatic. it would default back to none. and error 1058 would occur. please help me out

On Wed, 7 Jan 2009 03:38:44 +0530, phoman1126 wrote:

> When i tried kaymons. technique.

This was #4.

> i could'nt set automatic update to automatic. it would default back to
> none. and error 1058 would occur. please help me out

What were the AV/A-S scan results showing and to which forum did you send
the HJT log for expert examination?

[phoman1126]

this is my log from
Hihack please help me out. am not the best at computers.

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\David\Desktop\David\naruto\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://start.shaw.ca/start/enca/addons/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://start.shaw.ca/start/enca/addons/search/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://start.shaw.ca/start/enca/addons/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.shaw.ca/start/enca/addons/search/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - {4FDDEB42-B849-4CBB-88D2-6D365CB942AC} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SpyHunter Security Suite] C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe
O4 - HKLM\..\Run: [Ekurosobu] rundll32.exe "C:\WINDOWS\uhivomas.dll",e
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [f830a33e] rundll32.exe "C:\WINDOWS\system32\lklctlme.dll",b
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by120fd.bay120.hotmail.msn.co...s/MsnPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary...n.cab56986.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/...toUploader.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1214899831890
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/micr...?1195289965140
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary...o.cab56649.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary...t.cab57213.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O20 - AppInit_DLLs: jqceqj.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

[phoman1126]

hey Engel i took your advice and it worked. but now it seems that i cant install service pack 3. do you no why.

thanks for helping me but i got more problems

On Wed, 7 Jan 2009 04:47:00 +0530, phoman1126 wrote:

> this is my log from
> Hihack please help me out.

<snip>

You should adhere to the advisory as posted in #5, nobody will examine your
HJT log in this newsgroup.

> am not the best at computers.

You don't have to, just follow the suggestions and read carefully.

Hi phoman1126,

Hmm that link is working.

Any way

Because you had one piece of malware, the chances are also high that you had
others. It would be a good idea to scan. I recommend downloading and
installing MalwareBytes' Antimalware (MBAM) and SUPERAntiSpywa�e (SAS).

Do a full scan with Malwa�eBytes and SUPERAntiSpywa�e.


<http://www.superantispyware.com/>

-=-

<http://www.malwarebytes.org/mbam.php>

-=-

The programs are free. (There is a paid version but you don't need to buy it
to remove malware.)
-=-

Good luck
-=-


"phoman1126" wrote:

>
> Sorry Engel when i attempt to go onto that website you copied for me, it
> says the thread is unavailabile.
>
>
> --
> phoman1126
> ------------------------------------------------------------------------
> phoman1126's Profile: http://forums.techarena.in/members/phoman1126.htm
> View this thread: My windows xp autoupdate is not working
>
> http://forums.techarena.in
>
>

[phoman1126]

Welll i tried out that malware. but now i cant open up windows firewall. and everytime i click on msn. a pop up of "installing windows" pops up. whats with that? i dont on what to do except reboot. but that is my last resort. please help me out Engel.

Hi phoman1126,


A place to get FREE support for SP3 installation issues *from Microsoft*..
<http://support.microsoft.com/oas/default.aspx?ln=en-us&prid=11273&gprid=522131>

WinXP SP3 - Read all prerequisites for a successful installatio
<http://msmvps.com/blogs/harrywaldron/archive/2008/05/08/windows-xp-sp3-read-all-prerequisites-for-a-successful-installation.aspx>

Steps to take before you install Windows XP Service Pack 3
<http://support.microsoft.com/kb/950717>
-=-

Good luck
-=-




"phoman1126" wrote:

>
> hey Engel i took your advice and it worked. but now it seems that i cant
> install service pack 3. do you no why.
>
> thanks for helping me but i got more problems
>
>
> --
> phoman1126
> ------------------------------------------------------------------------
> phoman1126's Profile: http://forums.techarena.in/members/phoman1126.htm
> View this thread: My windows xp autoupdate is not working
>
> http://forums.techarena.in
>
>

I'd recommend resubmitting your post here:

Start a help ticket.

Help and Support

http://support.microsoft.com/common/...h=1&gprid=9860


OR


I'd recommend calling 1-866-pcsafety if you are in the U.S. or Canada.

Elsewhere, call your local Microsoft subsidiary, or the number for paid
support in your locale--and ask for the free help with virus or
security-patch related issues. This help extends to spyware removal as well.


Other than that, I'm about out of ideas, so good luck with it.


Let us know maybe someone else can conjure up something else to try.
-=-


"phoman1126" wrote:

>
> Welll i tried out that malware. but now i cant open up windows firewall.
> and everytime i click on msn. a pop up of "installing windows" pops up.
> whats with that? i dont on what to do except reboot. but that is my last
> resort. please help me out Engel.
>
>
> --
> phoman1126
> ------------------------------------------------------------------------
> phoman1126's Profile: http://forums.techarena.in/members/phoman1126.htm
> View this thread: My windows xp autoupdate is not working
>
> http://forums.techarena.in
>
>