Aoutmatic Update off

I am running Win XP Pro with SP2. Suddenly I started to get warnings that my
Uutomatic Update is off and I can not check for updates from Windows Update.
When I look in Services the Automatic Update does not even show in the list.
How can I get it back?

/Nisse CC

Nisse CC wrote:

> I am running Win XP Pro with SP2. Suddenly I started to get warnings that my
> Uutomatic Update is off and I can not check for updates from Windows Update.
> When I look in Services the Automatic Update does not even show in the list.
> How can I get it back?
Hi

Run this command line (from a command prompt of from Start/Run, it
installs the AutoUpdate service (line will wrap in the newsreader!):

%SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall
132 %SystemRoot%\inf\au.inf

(it must be a space between DefaultInstall and 132)

If it asks for your OS CD-ROM to get some files, just point it to the
folder %windir%\System32 (%windir% is typically C:\Windows).

Then run the following commands:

regsvr32.exe wuaueng.dll
regsvr32.exe wuapi.dll
regsvr32.exe wups.dll
regsvr32.exe wucltui.dll


Then start regedit.exe and locate the key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\wuauserv

If you find a DeleteFlag value there, delete the DeleteFlag value.

Do a reboot.

After the reboot, check if you can start and stop the Automatic
Updates service successfully from services.msc


The missing Automatic Updates service might be the work of a worm or
something similar (it could be from some spyware or parasite as well).

To try to find what has caused this:

Run a cleanup tool, e.g. Stinger.exe from McAfee, it removes 30+
virus/worms in one sweep.

McAfee AVERT Stinger
http://vil.nai.com/vil/stinger/


and this one:

On Line Virus Scan
http://housecall.trendmicro.com


For the Spyware and Parasites part, you will need to run other tools:

Dealing with Unwanted Spyware and Parasites
http://www.mvps.org/winhelp2002/unwanted.htm

The Parasite Fight Quick Fix Protocol
http://aumha.org/a/quickfix.htm


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx

I have tried your suggestions and I get Auotomatic Updates back into the
Services list but as Disabled and flagged for deletion. Have used Stinger but
nothing detected.

Nisse CC

"Torgeir Bakken (MVP)" wrote:

> Nisse CC wrote:
>
> > I am running Win XP Pro with SP2. Suddenly I started to get warnings that my
> > Uutomatic Update is off and I can not check for updates from Windows Update.
> > When I look in Services the Automatic Update does not even show in the list.
> > How can I get it back?
> Hi
>
> Run this command line (from a command prompt of from Start/Run, it
> installs the AutoUpdate service (line will wrap in the newsreader!):
>
> %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall
> 132 %SystemRoot%\inf\au.inf
>
> (it must be a space between DefaultInstall and 132)
>
> If it asks for your OS CD-ROM to get some files, just point it to the
> folder %windir%\System32 (%windir% is typically C:\Windows).
>
> Then run the following commands:
>
> regsvr32.exe wuaueng.dll
> regsvr32.exe wuapi.dll
> regsvr32.exe wups.dll
> regsvr32.exe wucltui.dll
>
>
> Then start regedit.exe and locate the key
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\wuauserv
>
> If you find a DeleteFlag value there, delete the DeleteFlag value.
>
> Do a reboot.
>
> After the reboot, check if you can start and stop the Automatic
> Updates service successfully from services.msc
>
>
> The missing Automatic Updates service might be the work of a worm or
> something similar (it could be from some spyware or parasite as well).
>
> To try to find what has caused this:
>
> Run a cleanup tool, e.g. Stinger.exe from McAfee, it removes 30+
> virus/worms in one sweep.
>
> McAfee AVERT Stinger
> http://vil.nai.com/vil/stinger/
>
>
> and this one:
>
> On Line Virus Scan
> http://housecall.trendmicro.com
>
>
> For the Spyware and Parasites part, you will need to run other tools:
>
> Dealing with Unwanted Spyware and Parasites
> http://www.mvps.org/winhelp2002/unwanted.htm
>
> The Parasite Fight Quick Fix Protocol
> http://aumha.org/a/quickfix.htm
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scr...r/default.mspx
>

Looks like you have Trojan.Boxed.C
Go here and read about it and get the fix..
http://securityresponse.symantec.com...n.boxed.c.html

CG


"Nisse CC" wrote:

> I have tried your suggestions and I get Auotomatic Updates back into the
> Services list but as Disabled and flagged for deletion. Have used Stinger but
> nothing detected.
>
> Nisse CC
>
> "Torgeir Bakken (MVP)" wrote:
>
> > Nisse CC wrote:
> >
> > > I am running Win XP Pro with SP2. Suddenly I started to get warnings that my
> > > Uutomatic Update is off and I can not check for updates from Windows Update.
> > > When I look in Services the Automatic Update does not even show in the list.
> > > How can I get it back?
> > Hi
> >
> > Run this command line (from a command prompt of from Start/Run, it
> > installs the AutoUpdate service (line will wrap in the newsreader!):
> >
> > %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall
> > 132 %SystemRoot%\inf\au.inf
> >
> > (it must be a space between DefaultInstall and 132)
> >
> > If it asks for your OS CD-ROM to get some files, just point it to the
> > folder %windir%\System32 (%windir% is typically C:\Windows).
> >
> > Then run the following commands:
> >
> > regsvr32.exe wuaueng.dll
> > regsvr32.exe wuapi.dll
> > regsvr32.exe wups.dll
> > regsvr32.exe wucltui.dll
> >
> >
> > Then start regedit.exe and locate the key
> > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\wuauserv
> >
> > If you find a DeleteFlag value there, delete the DeleteFlag value.
> >
> > Do a reboot.
> >
> > After the reboot, check if you can start and stop the Automatic
> > Updates service successfully from services.msc
> >
> >
> > The missing Automatic Updates service might be the work of a worm or
> > something similar (it could be from some spyware or parasite as well).
> >
> > To try to find what has caused this:
> >
> > Run a cleanup tool, e.g. Stinger.exe from McAfee, it removes 30+
> > virus/worms in one sweep.
> >
> > McAfee AVERT Stinger
> > http://vil.nai.com/vil/stinger/
> >
> >
> > and this one:
> >
> > On Line Virus Scan
> > http://housecall.trendmicro.com
> >
> >
> > For the Spyware and Parasites part, you will need to run other tools:
> >
> > Dealing with Unwanted Spyware and Parasites
> > http://www.mvps.org/winhelp2002/unwanted.htm
> >
> > The Parasite Fight Quick Fix Protocol
> > http://aumha.org/a/quickfix.htm
> >
> >
> > --
> > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> > Administration scripting examples and an ONLINE version of
> > the 1328 page Scripting Guide:
> > http://www.microsoft.com/technet/scr...r/default.mspx
> >