Cannot access Windows Update

This is like really weird...
First noticed that my Live Search was messed up - first page is essentially
spam. Then noticed that Defender would not update. Then realized that I
cannot even get to the Windows Update website. For example, if I go to:
http://update.microsoft.com/, or http://windowsupdate.microsoft.com/, I just
go to msn.com. Even clicking on the Windows Update under Programs, I just go
to msn.com.
Can't update if can't go to update site.!!!!!
Sispect some sort of screwy spyware or something but can find nothing on the
subject. Yes, have rebooted, cleared cache, etc to no avail.

Anyonre have any idea??

Thanx

The symptoms you describe indicate that a malware known as
Vundo\Virtumonde is resident. Using Internet Explorer, have the system
scanned here: <http://onecare.live.com/site/en-au/center/howsafe.htm>

Several posters in this newsgroup have reported that the malware was
successfully removed using the above scanner.

You can use Google to find it if the OneCare scan doesn't remove it.

Others have used Superantispyware and/or Malwarebytes Antimalware to remove
the malware.

There is a free version (on demand scanning only), the paid for version
includes active monitoring, similar to Windows defender:
<http://www.superantispyware.com/>
The trial version of SUPERAntiSpyware Pro (SAS):
<http://www.su

Also free, Malwarebytes Antimalware <http://www.malwarebytes.org/mbam.php>

I'm having this problem too, and i still can't figure out how to fix it. Can
somebody tell me the location of the malicious file so i may manually scan
that file?

Whatever you think you replied to - you left out any obvious reference to
it.

How about you just post about your problem - start up a conversation of your
own - and be sure to include some details.

Since this my first time using your forums, i have tried to figure out how to
post a new topic, only to end in failure. What i was referring to was the
possible virus infection that will not let me update windows xp sp3 at all.
And Windows Defender will not update at all, and keep getting this error code
from windows defender:
Error Found: Code 0x80244019
And because of this possible infection, my pc keeps blue screening with
errors like:
IRQ_NOT_LESS_THEN_OR_EQUAL, or
BAD_SYSTEM_CONFIG_INFO. Please help me find a solution to this problem.

so you are infected with a virus? Spyware/Adware? Malware of some kind?

You need to clean that up - that's for sure. Problem is - without a
specific 'infection' name - best one could do for you is a shotgun approach.

So... Here we go....

Download, install, run, update and perform a full scan (separately) with the
following two applications (freeware versions are the ones to use for this):

SuperAntiSpyware
http://www.superantispyware.com/

MalwareBytes
http://www.malwarebytes.com/

After performing a full scan with one and then the other and removing
whatever they both find completely, you may uninstall these products,
if you wish.

Reboot.

Start button --> RUN and type in:
%SystemRoot%\system32\net stop wuauserv
--> Click OK.

Start button --> RUN and type in:
%SystemRoot%\system32\regsvr32 %SystemRoot%\system32\wups2.dll
--> Click OK.

Start button --> RUN and type in:
%SystemRoot%\system32\net start wuauserv
--> Click OK.

Download the latest version of the Windows Update agent from here (x86):
http://go.microsoft.com/fwlink/?LinkID=91237
.... and save it to the root of your C:\ drive. After saving it to the root
of the C:\ drive, do the following:

Close all Internet Explorer windows and other applications.

Start button --> RUN and type in:
%SystemDrive%\windowsupdateagent30-x86.exe /WUFORCE
--> Click OK.

(If asked, select "Run.) --> Click on NEXT --> Select "I agree" and click on
NEXT --> When it finishes installing, click on "Finish"...

Reboot.

Download/Install the latest Windows Installer (for your OS):
( Windows XP 32-bit : WindowsXP-KB942288-v3-x86.exe )
http://www.microsoft.com/downloadS/d...displaylang=en

Reboot.

Log on as an user with administrative rights and open Internet Explorer and
visit http://windowsupdate.microsoft.com/ and select to do a CUSTOM scan...
(Every time you are about to click on something while at these web pages -
first press and hold down the CTRL key while you click on it. You can
release the CTRL key after clicking each time.)

Once the scan is done, select just _ONE_ of the high priority updates
(deselect any others) and install it.

Reboot again.

If it did work - try the web page again - selecting no more than 3-5 at a
time.

The Optional Software updates are generally safe - although I recommend
against the "Windows Search" one and any of the "Office Live" ones for
now. I would completely avoid the Optional Hardware updates. Also - I do
not see any urgent need to install Internet Explorer 8 at this time.

Come back - let us know if that worked.
.... Really - come back and let everyone know if that worked.


** If it seemed to have failed, do this: **

Check the status of these two services:
- Automatic Updates
- Background Intelligent Transfer Service

Click Start, click Run, type services.msc, and then click OK. In the list of
services, find those two, right click on them one at a time and choose
properties. In the Startup type list, what is each of them set to?

Report that here.

Then:

Click Start, and then click Run.
In the Open box, type: %windir%\windowsupdate.log
and then click OK.

Scroll down towards the bottom for the latest entries to locate any error
code(s) or explanation as to why the page cannot be displayed.

You can copy/paste the last 50 or so lines here...

How to read the Windowsupdate.log file:
http://support.microsoft.com/kb/902093

Come back, reply to this conversation, let everyone know how it turns out
(whether or not you need more help...)

UPDATE: As of now, im running a scan with Avast! antivirus, and will probably
bluescreen before the scan is done. But i have recently discovered a new
problem thats behind the DRIVER_IRQL_NOT_LESS_OR_EQUAL bluescreen error
message. It appears that the program Vuse, will somehow cause my computer to
crash and somethims when its not even running (when i get the bad system
config errors). More info here

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware

**Seek expert assistance in

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

Shenan,

I came across your post 2 years after you posted it and it was exactly what I needed. I had two machines come in with broken Windows Updates. Windows Security Center told me it was off. However, when I looked it up manually it said it was on. However, when I went to update.microsoft.com the page would error out. I cleaned off all viruses and then followed your instructions and now update indicates and responds perfectly. Thank you!