Automatic Update service is being killed!

Hi,

I am trying to solve a problem with windows updates on a friends PC.
When I try to run windows update I am seeing error: 80070424, which is
due to the automatic update service not running. I found some
information on google groups to get this service up and running as
follows:

Command prompt:

"net.exe stop wuauserv" (w/o quotes)
Press Ok

Repeat the same for the following commands:

regsvr32.exe wuapi.dll
regsvr32.exe wups.dll
regsvr32.exe wuaueng.dll
regsvr32.exe wucltui.dll
regsvr32.exe MSXML3.dll
regsvr32.exe qmgr.dll
regsvr32.exe qmgrprxy.dll
net.exe start wuauserv

I found that my qmgr.dll appeared to be corrupt, so I copied one across
from another PC and the whole process worked and the automatic update
service appeared and started. However, several seconds later the
service was stopped and then disappeared from the list of services. The
qmgr.dll was also corrupted again. I'm guessing there is some kind of
nasty worm/virus doing this, but after running several different tools
I have had no success.

Has anyone seen this before? Any ideas on how to resolve it?

Cheers,

Jamie

Hi Jamie,

Try following the steps in this article:

You cannot turn on the Automatic Updates feature on a Windows XP Service
Pack 2-based computer

http://support.microsoft.com/kb/916261

Regards,

Anton Pegan

"Jamie" <> wrote in message
news: ps.com...
> Hi,
>
> I am trying to solve a problem with windows updates on a friends PC.
> When I try to run windows update I am seeing error: 80070424, which is
> due to the automatic update service not running. I found some
> information on google groups to get this service up and running as
> follows:
>
> Command prompt:
>
> "net.exe stop wuauserv" (w/o quotes)
> Press Ok
>
> Repeat the same for the following commands:
>
> regsvr32.exe wuapi.dll
> regsvr32.exe wups.dll
> regsvr32.exe wuaueng.dll
> regsvr32.exe wucltui.dll
> regsvr32.exe MSXML3.dll
> regsvr32.exe qmgr.dll
> regsvr32.exe qmgrprxy.dll
> net.exe start wuauserv
>
> I found that my qmgr.dll appeared to be corrupt, so I copied one across
> from another PC and the whole process worked and the automatic update
> service appeared and started. However, several seconds later the
> service was stopped and then disappeared from the list of services. The
> qmgr.dll was also corrupted again. I'm guessing there is some kind of
> nasty worm/virus doing this, but after running several different tools
> I have had no success.
>
> Has anyone seen this before? Any ideas on how to resolve it?
>
> Cheers,
>
> Jamie
>

Hi,

Thanks for the help. I should have mentioned that this PC does not have
SP2 installed, it only has SP1 installed.

Regards,

Jamie

Anton Pegan wrote:
> Hi Jamie,
>
> Try following the steps in this article:
>
> You cannot turn on the Automatic Updates feature on a Windows XP Service
> Pack 2-based computer
>
> http://support.microsoft.com/kb/916261
>
> Regards,
>
> Anton Pegan
>
> "Jamie" <> wrote in message
> news: ps.com...
> > Hi,
> >
> > I am trying to solve a problem with windows updates on a friends PC.
> > When I try to run windows update I am seeing error: 80070424, which is
> > due to the automatic update service not running. I found some
> > information on google groups to get this service up and running as
> > follows:
> >
> > Command prompt:
> >
> > "net.exe stop wuauserv" (w/o quotes)
> > Press Ok
> >
> > Repeat the same for the following commands:
> >
> > regsvr32.exe wuapi.dll
> > regsvr32.exe wups.dll
> > regsvr32.exe wuaueng.dll
> > regsvr32.exe wucltui.dll
> > regsvr32.exe MSXML3.dll
> > regsvr32.exe qmgr.dll
> > regsvr32.exe qmgrprxy.dll
> > net.exe start wuauserv
> >
> > I found that my qmgr.dll appeared to be corrupt, so I copied one across
> > from another PC and the whole process worked and the automatic update
> > service appeared and started. However, several seconds later the
> > service was stopped and then disappeared from the list of services. The
> > qmgr.dll was also corrupted again. I'm guessing there is some kind of
> > nasty worm/virus doing this, but after running several different tools
> > I have had no success.
> >
> > Has anyone seen this before? Any ideas on how to resolve it?
> >
> > Cheers,
> >
> > Jamie
> >

Hi Jamie,

Windows XP SP1 is not supported any more from Microsoft, so I suggest you
download and install it on your computer. Here is the link:

Windows XP Service Pack 2 Network Installation Package for IT Professionals
and Developers

http://www.microsoft.com/downloads/d...displaylang=en

If this does not help, follow the steps in the article I provided in the
previous post.

Regards,

Anton Pegan

"Jamie" <> wrote in message
news: oups.com...
> Hi,
>
> Thanks for the help. I should have mentioned that this PC does not have
> SP2 installed, it only has SP1 installed.
>
> Regards,
>
> Jamie
>
> Anton Pegan wrote:
>> Hi Jamie,
>>
>> Try following the steps in this article:
>>
>> You cannot turn on the Automatic Updates feature on a Windows XP Service
>> Pack 2-based computer
>>
>> http://support.microsoft.com/kb/916261
>>
>> Regards,
>>
>> Anton Pegan
>>
>> "Jamie" <> wrote in message
>> news: ps.com...
>> > Hi,
>> >
>> > I am trying to solve a problem with windows updates on a friends PC.
>> > When I try to run windows update I am seeing error: 80070424, which is
>> > due to the automatic update service not running. I found some
>> > information on google groups to get this service up and running as
>> > follows:
>> >
>> > Command prompt:
>> >
>> > "net.exe stop wuauserv" (w/o quotes)
>> > Press Ok
>> >
>> > Repeat the same for the following commands:
>> >
>> > regsvr32.exe wuapi.dll
>> > regsvr32.exe wups.dll
>> > regsvr32.exe wuaueng.dll
>> > regsvr32.exe wucltui.dll
>> > regsvr32.exe MSXML3.dll
>> > regsvr32.exe qmgr.dll
>> > regsvr32.exe qmgrprxy.dll
>> > net.exe start wuauserv
>> >
>> > I found that my qmgr.dll appeared to be corrupt, so I copied one across
>> > from another PC and the whole process worked and the automatic update
>> > service appeared and started. However, several seconds later the
>> > service was stopped and then disappeared from the list of services. The
>> > qmgr.dll was also corrupted again. I'm guessing there is some kind of
>> > nasty worm/virus doing this, but after running several different tools
>> > I have had no success.
>> >
>> > Has anyone seen this before? Any ideas on how to resolve it?
>> >
>> > Cheers,
>> >
>> > Jamie
>> >
>

See these archived threads from this newsgroup:

http://groups.google.com/group/micro...coring=d&hl=en

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)


Jamie wrote:
> Hi,
>
> I am trying to solve a problem with windows updates on a friends PC.
> When I try to run windows update I am seeing error: 80070424, which is
> due to the automatic update service not running. I found some
> information on google groups to get this service up and running as
> follows:
>
> Command prompt:
>
> "net.exe stop wuauserv" (w/o quotes)
> Press Ok
>
> Repeat the same for the following commands:
>
> regsvr32.exe wuapi.dll
> regsvr32.exe wups.dll
> regsvr32.exe wuaueng.dll
> regsvr32.exe wucltui.dll
> regsvr32.exe MSXML3.dll
> regsvr32.exe qmgr.dll
> regsvr32.exe qmgrprxy.dll
> net.exe start wuauserv
>
> I found that my qmgr.dll appeared to be corrupt, so I copied one across
> from another PC and the whole process worked and the automatic update
> service appeared and started. However, several seconds later the
> service was stopped and then disappeared from the list of services. The
> qmgr.dll was also corrupted again. I'm guessing there is some kind of
> nasty worm/virus doing this, but after running several different tools
> I have had no success.
>
> Has anyone seen this before? Any ideas on how to resolve it?
>
> Cheers,
>
> Jamie