Can´t update via windows update

[Mudrc]

Can´t update via windows update

It says the service for updating windows is not running, I checked it and it is running, I restarted the computer twice, still not working. Automatic updates wont work too, it seems. Any help ?

 

[brianzion]

hi there
have a read of this link (the quote is a extract from it) >>> Windows Update errors – A troubleshooting guide - 4sysops

Download the Windows Update Agent (WUA)

As a Windows component, the Windows Update Agent (WUA) is also updated through Windows Update. But if Windows Update errors occur, you should check if you really have the latest version. You can determine the WUA version by checking the properties of wuaueng.dll in %SystemRoot%\system32\. As of this writing, the current file version is 7.5.7601.17514 for Windows 7 and 7.4.7600.226 for Windows Vista and Windows XP. If you don’t have the latest WUA version, you can download the Windows Update Agent here and then install it manually. Even if your Windows Update Agent is up to date, you could check out whether reinstalling WUA solves your problem.

 

[Carolyn]

Several of the rogue programs out there will disable Windows Updates. Was your computer recently infected?

Give this a try:

Go to Start, Run and type or Copy/Paste the following line:

 %SYSTEMROOT%\SYSTEM32\REGSVR32.EXE   %SYSTEMROOT%\SYSTEM32\WUAUENG.DLL

Hit Enter

 

[Mudrc]

Carolyn : tried it it says it was done without problems
brianzion : I tried to manually install x86 wua.exe but in the middle of installation it said : program stopped running, need to be closed (dunno how is that exactly in english - but you got the point)

 

[Carolyn]

I think you should scan your computer for malware.

Please download Malwarebytes' Anti-Malware and save to your desktop.

• Right-click mbam-setup.exe And select " Run as administrator " then follow the prompts to install the program.
• At the end, be sure a checkmark is placed next to:
  Update Malwarebytes' Anti-Malware
  Launch Malwarebytes' Anti-Malware
• Then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select Perform Full Scan, then click Scan.
• When the scan is complete, click OK, then Show Results to view the results.
• Check all items except items in the C:\System Volume Information folder... and click Remove Selected.
  Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.
• When completed, a log will open in Notepad. Please copy and paste the log back into your next reply
• The log can also be found here:
  C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt

 

[Mudrc]

Malwarebytes' Anti-Malware 1.50.1.1100
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Database version: 6442

Windows 6.1.7600
Internet Explorer 9.0.8112.16421

25.4.2011 19:54:18
mbam-log-2011-04-25 (19-54-18).txt

Scan type: Full scan (C:\|)
Objects scanned: 593949
Time elapsed: 1 hour(s), 39 minute(s), 40 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 5

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\program files\JitBit\jitbit macro recorder\macrolauncher.exe (Backdoor.Agent.PS) -> Quarantined and deleted successfully.
c:\Users\Narco\documents\internet_download_manager_6-05\idm.6.xx.0.2-snd\SnDk&p.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
c:\Users\Narco\documents\downloads\just cause 2.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
c:\Users\Narco\documents\downloads\Programs\ventrilo-2.1.4.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\Windows\System32\secushr.dat (Malware.Trace) -> Quarantined and deleted successfully.


What now ?

 

[Mudrc]

I managed to install my Windows Update Agent, but still cant run windows update (I did fix it thing ) ... my wuaueng.dll is updated to the latest version it seems ...

 

[Jacee]

Because you were infected with this Bot ... Backdoor.Agent.PS
You need to change all of your passwords, using a 'known clean' computer. Don't use the one that was infected!
ThreatExpert Report: Trojan.PR.Agent.PS, Backdoor.Trojan, Trojan-Proxy.Win32.Agent.ex..


Also, Download the HostsXpert 4.3 - Hosts File Manager. This will restore MS's Hosts file.

• Unzip HostsXpert 4.3 - Hosts File Manager to a convenient folder such as C:\HostsXpert
• Click HostsXpert.exe to Run HostsXpert 4.3 - Hosts File Manager from its new home
• Click "Make Hosts Writable?" in the upper right corner (If available).
• Click Restore Microsoft's Hosts file and then click OK.
• Click the X to exit the program.
• Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.

 

[Mudrc]

Already solved the update thing , but this is kinga serious, do you think it will cause damage? Got closed blizz several weeks ago, it said somebody was trying to hack in. But it showed up that this wasnt so hot, just changed pass and I was good to go ... anyway thx, changing all passwords would bedefinately right.

 

[Layback Bear]

To the OP. What you haven't solved is how did you get all this shhhhit. To make sure it's does not happen again. IMHO that might be the next thing to look at.