Automatic Updates

Hello Folks.

I am running XP Home and for some reason automatic updates has turned
its-self off.

I have attempted to turn it on again following the various prompts but alas,
so far, no joy.

A little help would be greatly appreciated!

Kind regards......Sychman.

Sychman wrote:

> Hello Folks.
>
> I am running XP Home and for some reason automatic updates has turned
> its-self off.
>
> I have attempted to turn it on again following the various prompts but
> alas, so far, no joy.
>
> A little help would be greatly appreciated!

Not enough information to get focused help. See the "How to Post" links
below. In the meantime:

The First Question Of Troubleshooting: what changed between the time things
worked and the time they didn't?

The Second Question of Windows Troubleshooting: what is the malware/virus
status of the machine? If you think it is clean, what programs (and
versions) did you use to determine this?

Be sure the computer is clean:
http://www.elephantboycomputers.com/...moving_Malware

How to Post:
http://www.elephantboycomputers.com/page2.html#Usenet
http://support.microsoft.com/default.aspx/kb/555375 - How to Ask a Question

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

Common one appears to be the Vundo infection.

Considerations -

System may be infected with malware "Vundo"
http://www.microsoft.com/security/po...=Win32%2fVundo

Service does not start and displays "Error 1058"
http://support.microsoft.com/kb/241584

You cannot manually start the Automatic Updates service and you receive an
"Error 1058" error message on a computer that is running Windows XP or
Windows XP Tablet PC Edition 2005
http://support.microsoft.com/kb/896224

"Could not start the Remote Procedure Call (RPC) Service. Error 1058" error
message when you manually start the Remote Procedure Call service
http://support.microsoft.com/kb/838428


--
--------------------------------
TaurArian [MVP] 2005-2009
Update Services
http://taurarian.mvps.org


"Sychman" wrote:

> Hello Folks.
>
> I am running XP Home and for some reason automatic updates has turned
> its-self off.
>
> I have attempted to turn it on again following the various prompts but alas,
> so far, no joy.
>
> A little help would be greatly appreciated!
>
> Kind regards......Sychman.
>
>
>

Hi Malke, most common cause is Vundo and Zlob infections. A lot of it going
around on the WU NG.

K
--
--------------------------------
TaurArian [MVP] 2005-2009
Update Services
http://taurarian.mvps.org


"Malke" wrote:

> Sychman wrote:
>
> > Hello Folks.
> >
> > I am running XP Home and for some reason automatic updates has turned
> > its-self off.
> >
> > I have attempted to turn it on again following the various prompts but
> > alas, so far, no joy.
> >
> > A little help would be greatly appreciated!
>
> Not enough information to get focused help. See the "How to Post" links
> below. In the meantime:
>
> The First Question Of Troubleshooting: what changed between the time things
> worked and the time they didn't?
>
> The Second Question of Windows Troubleshooting: what is the malware/virus
> status of the machine? If you think it is clean, what programs (and
> versions) did you use to determine this?
>
> Be sure the computer is clean:
> http://www.elephantboycomputers.com/...moving_Malware
>
> How to Post:
> http://www.elephantboycomputers.com/page2.html#Usenet
> http://support.microsoft.com/default.aspx/kb/555375 - How to Ask a Question
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers - Don't Panic!
> FAQ - http://www.elephantboycomputers.com/#FAQ
>
>

TaurArian wrote:

> Hi Malke, most common cause is Vundo and Zlob infections. A lot of it
> going around on the WU NG.
>
> K

I don't doubt that but I'm not going to guess, which is why I asked for more
information. Perhaps I should have suggested that the OP answer the Second
Question first! ;-)

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

Hello again.



Regarding my previous cry for help.



I am running XP home with SP2. I was also running AVG 8, Spybot and Ad-Aware
as security.

My problem probably comes from surfing via IE7. I think that someone has
attempted to view movie clips from a website which asked for an activeX
control (or whatever) to be downloaded.

Following this, strange web pages have started to appear during surfing.
Other things have also started to go "pear shaped". I have been unable to
successfully update AVG8 and subsequently unable to successfully use it.
Ad-Aware also did not seem to function correctly although this may be
because Spybot does not like it. Spybot was still running but I could not
open it. Not forgetting of course that Windows Automatic Updates have been
disabled. I have been to Services.msc as directed by Windows Update Help and
followed the instructions 1-5. I am then greeted with the following message;
"Could not start the Automatic Updates Service on local computer. Error
1058. The service could not be started either because it is disabled or
because it has now driver associated with it."

I have now installed Windows Live OneCare which as part of the installation
process insists that AVG and Ad-Aware are uninstalled. Initially Live
OneCare had the system status as good after finding and fixing many
problems. However since I have re-opened IE7 rogue website still appear and
the system status is "At Risk". Live OneCare is now asking me to turn on
Automatic Updates and guess what? Error 1058!

Since Live OneCare has been running I can now open Spybot, it has been
updated and I have run it. It has found the following problems:

AdRevolver, Adviva, Burstmedia, Clickbank, DirectTrack, DoubleClick,
FastClick, MediaPlex, Virtumond, VistaAntivirus2008, Zedo,
Zlob.Downloader.bs and Zlob.Downloader.rid. A grand total of 23 problems.

After "fixing selected problems" I am left with Vista Anti Virus fixed then
(Not Responding).

I have since run Spybot twice and on each occasion the system crashed while
Spybot was attempting to fix problems.

I have run Spybot in safe mode and it appears to have removed many of the
problems listed above. When I ran Spybot again in normal mode Virtumode (2)
was still present but was then removed.

Live OneCare has completed a "Tune up" and has backed up to CDs.

Throughout all of this Live OneCare is constantly asking me to turn on
Automatic Updates. I have attempted this via the Live One Care management
page but Automatic Updates seem to be quickly disabled again for some
reason. When these updates are switched On the system status is Good when
they are Off/Disabled the system status is At Risk.

When IE7 is open I am still confronted with rogue web pages. I therefore
think that it is reasonable to assume that the problem is still present
(whatever it may be).



Kind regards in hope and anticipation of a little help. Sychman.

"Malke" <malke@invalid.invalid> wrote in message
news:OvAvI9C4IHA.4488@TK2MSFTNGP03.phx.gbl...
> TaurArian wrote:
>
>> Hi Malke, most common cause is Vundo and Zlob infections. A lot of it
>> going around on the WU NG.
>>
>> K
>
> I don't doubt that but I'm not going to guess, which is why I asked for
> more
> information. Perhaps I should have suggested that the OP answer the Second
> Question first! ;-)
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers - Don't Panic!
> FAQ - http://www.elephantboycomputers.com/#FAQ
>

Sychman wrote:

(much snippage)

> I am running XP home with SP2. I was also running AVG 8, Spybot and
> Ad-Aware as security.
>
> My problem probably comes from surfing via IE7. I think that someone has
> attempted to view movie clips from a website which asked for an activeX
> control (or whatever) to be downloaded.

> I have now installed Windows Live OneCare which as part of the
> installation process insists that AVG and Ad-Aware are uninstalled.
> Initially Live OneCare had the system status as good after finding and
> fixing many problems. However since I have re-opened IE7 rogue website
> still appear and the system status is "At Risk". Live OneCare is now
> asking me to turn on Automatic Updates and guess what? Error 1058!
>
> Since Live OneCare has been running I can now open Spybot, it has been
> updated and I have run it. It has found the following problems:
>
> AdRevolver, Adviva, Burstmedia, Clickbank, DirectTrack, DoubleClick,
> FastClick, MediaPlex, Virtumond, VistaAntivirus2008, Zedo,
> Zlob.Downloader.bs and Zlob.Downloader.rid. A grand total of 23 problems.

(more snippage)

Your computer is definitely severely infected and it is nowhere near being
clean. It was a mistake to install an antivirus (and Live OneCare isn't a
very good one anyway) onto an infected machine but oh well. At this point
you should either get guided help from one of the specialty forums listed
below OR back up your data and do a clean install of Windows. The choice is
yours, of course. Here is a list of forums where you can get the guided
help. PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://gladiator-antivirus.com/forum...?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

Okay Received and understood.
I have posted in the forum in the first link and will see where that takes
me.

Thanks so far. Regards Sychman.

"Malke" <malke@invalid.invalid> wrote in message
news:ujatAcf5IHA.4344@TK2MSFTNGP03.phx.gbl...
> Sychman wrote:
>
> (much snippage)
>
>> I am running XP home with SP2. I was also running AVG 8, Spybot and
>> Ad-Aware as security.
>>
>> My problem probably comes from surfing via IE7. I think that someone has
>> attempted to view movie clips from a website which asked for an activeX
>> control (or whatever) to be downloaded.
>
>> I have now installed Windows Live OneCare which as part of the
>> installation process insists that AVG and Ad-Aware are uninstalled.
>> Initially Live OneCare had the system status as good after finding and
>> fixing many problems. However since I have re-opened IE7 rogue website
>> still appear and the system status is "At Risk". Live OneCare is now
>> asking me to turn on Automatic Updates and guess what? Error 1058!
>>
>> Since Live OneCare has been running I can now open Spybot, it has been
>> updated and I have run it. It has found the following problems:
>>
>> AdRevolver, Adviva, Burstmedia, Clickbank, DirectTrack, DoubleClick,
>> FastClick, MediaPlex, Virtumond, VistaAntivirus2008, Zedo,
>> Zlob.Downloader.bs and Zlob.Downloader.rid. A grand total of 23 problems.
>
> (more snippage)
>
> Your computer is definitely severely infected and it is nowhere near being
> clean. It was a mistake to install an antivirus (and Live OneCare isn't a
> very good one anyway) onto an infected machine but oh well. At this point
> you should either get guided help from one of the specialty forums listed
> below OR back up your data and do a clean install of Windows. The choice
> is
> yours, of course. Here is a list of forums where you can get the guided
> help. PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.
>
> http://aumha.net/ - Click on the HijackThis forum. Read the announcement
> and
> the stickies *first*.
> http://www.atribune.org/forums/index.php?showforum=9
> http://aumha.net/viewforum.php?f=30
> http://www.bleepingcomputer.com/forums/forum22.html
> http://www.dslreports.com/forum/cleanup
> http://www.cybertechhelp.com/forums/...splay.php?f=25
> http://www.geekstogo.com/forum/Malwa..._Here-f37.html
> http://gladiator-antivirus.com/forum...?showforum=170
> http://spywarewarrior.com/viewforum.php?f=5
> http://forums.techguy.org/54-security/
> http://forums.tomcoyote.org/
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers - Don't Panic!
> FAQ - http://www.elephantboycomputers.com/#FAQ
>