Window Update goes to Google search page

Hello,

whenever I try updating my Win XP pro via the Tools menu by clicking on
"Windows Update" it takes me to the Google search page.

Can somebody help pls

What happens when you click Start > All Programs > Windows Update?

You could be a victim of the dreaded DNSChanger Trojan.

The Trojan does not want you to go to the Windows Update page (and
probably other pages) because you might detect it and then delete it.

Download, install, update and do a full scan with these three free
malware detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
AVG (AVG): http://free.avg.com/

Even going to these pages may not work if the Trojan knows about them
too, but try it. Try all three if one does not do it.

If none of the three work, try booting in Safe Mode with Networking.

You must scan for malicious software.

If that fails, you have some other work to do here.

I had the same problem (on Win XP SP2 Build 5.1.2600) . Using the Windows
Update link from All Programs directed me to Google. Using the
installation-supplied Windows Update link directly from Internet Explorer
(Ver 7.0.5730.13) gave me a Microsoft search page (I don't know what you're
looking for).

I first found this problem when I tried to d/l the Win XP SP3 update. I
couldn't d/l anything else from the microsoft site either, not .NET 3.5 SP1,
not VSC++2005 or 2008, not the latest malware tool either.

Another problem I had was that chkdsk did not work... not at startup and not
explicitly (from the Tools tab after clicking Properties on the hard disks
from My Computer)

I tried to run the utilities suggested above...

MBAM... I don't have a credit card so I couldn't d/l this from the official
site
SuperAntiSpyware... this did find and remove a DNSRedirect trojan, but it
didn't fix the problem
AVG Free V8.5... found nothing, not impressed

My disappointment with the above may be that I could not update their virus
databases either. I think those IP addresses were hijacked too.

I also ran Spybot Search and Destroy (found nothing). I ran the latest
version of SDFIX which also found malware but did not fix the problem (see
below).

I finally found this

This recommended looking in the Hosts file (see one of the replies in the
link above), but mine was as default (just the 127.0.0.1 entry).

Another possibility is that your modem has been hijacked... resetting to
defaults and re-entering your ISP info may help (but only after you are sure
all malware has been removed... do below first).

I downloaded the TrojanRemover program V6.7.9... this did find and fix my
problem! I could not d/l this utility from their site:

http://www.simplysup.com/tremover/download.html

but any of the suggested download mirrors should work. I used the UK one.
Below are the pertinent parts from the TrojanRemover log:

Hidden Service Keyname: msqpdxserv.sys
Hidden Service: \systemroot\system32\drivers\msqpdxbayxdinl.sys
C:\WINDOWS\system32\drivers\msqpdxbayxdinl.sys
74240 bytes
Created: 7/01/2009 3:35 PM
Modified: 7/01/2009 3:35 PM
Company: [no info]
Entry has been scheduled for deletion when the PC is restarted
C:\WINDOWS\system32\drivers\msqpdxbayxdinl.sys - file backed up to
C:\WINDOWS\system32\drivers\msqpdxbayxdinl.sys.vir
C:\WINDOWS\system32\drivers\msqpdxbayxdinl.sys - file has been erased using
RAW erasure.

NB: SDFIX DID find this but apparently did not fix it it successfully.

So, try the Trojan Remover utility. It is free for the first 30 days of
usage. Worked for me :) Fixed both my Windows Update and chkdsk problems.

What?!

You must have been mistaken - a credit card is not needed to download,
utilize and remove malware using MBAM (MalwareBytes AntiMalware.)

[saideepakb]

i was having the same problem as Sumeet_Attri so i tried the trojan remover and it worked!
although it didnt show any specific trojans
just that my "'DNS settings have to be reset"
so i did it and re entered the preferred DNS server settings and completely erased the alternate DNS server(any problems there?)
one more thing i noticed after running the trojan remover apart from the downloads from microsoft website was that my download speeds in the internet explorer(8) have come on par with what the www.speedtest.net shows as my speed(in firefox)
before this it used to come 110 KBps but now its comin a good 210 KBps
but the firefox speeds have a constant 180- 205 KBps
any reasons for this(why the IE's d/l speed has increased)????