Auto update turned off, cannot update

Even with protective software I believe I picked up a trojan. Can not turn
on auto update and can not update online. Getting
c:\windows\system32\xiijgpq.dll not found an after following the manual turn
it on procedure andgot Error 1058 The service can not be started either
because the servic is disabled or because it has no enable devices associated
with it.

You are indeed seeing the effects of a hijackware infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/...moving_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup, http://aumha.net/viewforum.php?f=30
or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

=====================
Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002

lrngsys wrote:
> Even with protective software I believe I picked up a trojan. Can not
> turn
> on auto update and can not update online. Getting
> c:\windows\system32\xiijgpq.dll not found an after following the manual
> turn it on procedure andgot Error 1058 The service can not be started
> either
> because the servic is disabled or because it has no enable devices
> associated with it.

The symptoms you describe indicate that a malware known as
Vundo\Virtumonde is resident. Using Internet Explºrer, have the system
scanned here: <http://onecare.live.com/site/en-au/center/howsafe.htm>

Several posters in this newsgroup have reported that the malware was
successfully removed using the above scanner.



Others have used SUPERAntiSpyware and/or Malwarebytes Antimalware to remove
the malware

There is a free version (on demand scanning only)
<http://www.superantispyware.com/>

Also free, Malwarebytes Antimalware <http://www.malwarebytes.org/mbam.php>


Also I would suggest running a HijackThis to to ensure that Vundo did not
bring along any uninvited guests. (SDBot and ZLOB, all protected by a
rootkit.)

Please read this guide before actually doing the procedure

And it has all of the links for downloads you need.

Preparation Guide for use before posting a HijackThis Log
<http://www.bleepingcomputer.com/forums/topic34773.html>


If, the system is clean of malware, then read on:

"Could not start the Remote Procedure Call (RPC) Service. Error 1058"
error message when you manually start the Remote Procedure Call service
Source:
<http://support.microsoft.com/kb/838428>

You cannot manually start the Automatic Updates service and you receive
an "Error 1058" error message on a computer that is running Windows XP
or Windows XP Tablet PC Edition 2005
Source:
<http://support.microsoft.com/kb/896224>


This will give you a starting point for your troubleshooting anyway.

Please let us know if the problem remains

Ǝиçεl
:..:


"lrngsys" wrote:

> Even with protective software I believe I picked up a trojan. Can not turn
> on auto update and can not update online. Getting
> c:\windows\system32\xiijgpq.dll not found an after following the manual turn
> it on procedure andgot Error 1058 The service can not be started either
> because the servic is disabled or because it has no enable devices associated
> with it.