Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Update > Automatic Updates disabled by virus

Reply
Thread Tools Display Modes

Automatic Updates disabled by virus

 
 
Samael
Guest
Posts: n/a

 
      12-28-2008
OS: Microsoft Windows XP / Home Edition / Version 2002 / Service Pack 3
PC: Dell brand XPS 410


VirusRemover2008 (or something which came packaged with or containing) has
disabled Automatic Updates and all attempts to reenable it from Windows
Security Center, System Properties (which displays Automatic Updates as
enabled), and Services (services.msc) fail due to the virus automatically
switching Automatic Updates off again (in the case of Services, even before
the configuration tab is closed). The virus also changes Internet Explorer's
security settings to accept all cookies and prevents security from being
enabled again in the same manner.

My question is whether there is a way to manually access updates for
Windows. My hope is that either my virus detection software will advance
enough to detect this type of virus and fix the damage, or a Windows update
will help block the exploit the virus is using to forcibly change these
configurations. While Automatic Updates is disabled, however, the
conventional update methods don't work, hence my problem.

(If there is a log file or some sort of data archive which would tell me
where the instructions are coming to change these security settings,
theoretically I could figure out how to disable them manually as well, but
I'm pretty inept with computers, so I'm hoping AVG or Windows Update will
provide an easier answer.)
 
Reply With Quote
 
 
 
 
Kayman
Guest
Posts: n/a

 
      12-28-2008
On Sun, 28 Dec 2008 14:36:01 -0800, Samael wrote:

> OS: Microsoft Windows XP / Home Edition / Version 2002 / Service Pack 3
> PC: Dell brand XPS 410
>
>
> VirusRemover2008 (or something which came packaged with or containing) has
> disabled Automatic Updates and all attempts to reenable it from Windows
> Security Center, System Properties (which displays Automatic Updates as
> enabled), and Services (services.msc) fail due to the virus automatically
> switching Automatic Updates off again (in the case of Services, even before
> the configuration tab is closed). The virus also changes Internet Explorer's
> security settings to accept all cookies and prevents security from being
> enabled again in the same manner.
>
> My question is whether there is a way to manually access updates for
> Windows. My hope is that either my virus detection software will advance
> enough to detect this type of virus and fix the damage, or a Windows update
> will help block the exploit the virus is using to forcibly change these
> configurations. While Automatic Updates is disabled, however, the
> conventional update methods don't work, hence my problem.
>
> (If there is a log file or some sort of data archive which would tell me
> where the instructions are coming to change these security settings,
> theoretically I could figure out how to disable them manually as well, but
> I'm pretty inept with computers, so I'm hoping AVG or Windows Update will
> provide an easier answer.)


VirusRemover2008 Removal Guide (Uninstall Instructions)
http://www.bleepingcomputer.com/malw...er2008-removal
 
Reply With Quote
 
PA Bear [MS MVP]
Guest
Posts: n/a

 
      12-29-2008
You'll either have to remove the hijackware or format & reinstall Windows.
NB: A Repair Install will NOT help.

Chances are that you're seeing the affects of a hijackware infection.

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

2. Run this online scan (in safe mode w/networking, if need be):
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run additional checks for hijackware, including posting your hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
=====================

Or you can...

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Samael wrote:
> OS: Microsoft Windows XP / Home Edition / Version 2002 / Service Pack 3
> PC: Dell brand XPS 410
>
>
> VirusRemover2008 (or something which came packaged with or containing) has
> disabled Automatic Updates and all attempts to reenable it from Windows
> Security Center, System Properties (which displays Automatic Updates as
> enabled), and Services (services.msc) fail due to the virus automatically
> switching Automatic Updates off again (in the case of Services, even
> before
> the configuration tab is closed). The virus also changes Internet
> Explorer's
> security settings to accept all cookies and prevents security from being
> enabled again in the same manner.
>
> My question is whether there is a way to manually access updates for
> Windows. My hope is that either my virus detection software will advance
> enough to detect this type of virus and fix the damage, or a Windows
> update
> will help block the exploit the virus is using to forcibly change these
> configurations. While Automatic Updates is disabled, however, the
> conventional update methods don't work, hence my problem.
>
> (If there is a log file or some sort of data archive which would tell me
> where the instructions are coming to change these security settings,
> theoretically I could figure out how to disable them manually as well, but
> I'm pretty inept with computers, so I'm hoping AVG or Windows Update will
> provide an easier answer.)


 
Reply With Quote
 
DrJoeJr
Guest
Posts: n/a

 
      12-31-2008
I had problems with Microsoft Windows Automatic Update as well as lots of
others involving pop-ups. I found that I had several viruses on my machine.

Searching for information on how to remove the series of "Vundo",
"Virtumonde" and "Smithfraud-c" trojan viruses from my computer. I tried
Microsoft Onecare.live site and downloaded the software. It located some of
the viruses but did NOT remove them... much to my disappointment! One of the
viruses prevented Automatic Windows Update from operating and it would not
allow the Automatic Updates to be set from the Microsoft Windows XP Security
Center. I searched the Microsoft.com Communities Newsgroups and found that
there have been several hundred people who experienced the same problems
cause by this "Vundo" virus family. I tried many of the solutions proposed by
various contributors... some by Microsoft employees, but none of them worked.
I tried Spybot, Norton 360 and AdWare SE... they did not work either. The
saving grace was that I found buried a post provided by a person named
"ronrieger" on 12/30/2008. He described how he downloaded free software from
www.SUPERAntispye.com, ran it and found the trojans that other programs
failed to find AND better yet, it removed them! Then he went back to WUAUSERV
and was able to set the Automatic Updates entry to "Start" and the problem
was resolved! I give all the credit to "ronrieger". I repeated his suggestion
and it worked! I would suggest that Microsoft inform ALL it's Windows users
that this is a quick and easy solution to the Automatic Windows Update
problem and that it is an excellent software which Microsoft should recommend
to the hundreds or thousands of users experiencing the same problem. It would
save thousands of manhours of work and frustration to your users. Thanks
again to ronrieger and the creators of SuperAntispyware.com. I will indeed
make a voluntary donation to these people. Obviously they have a superior
product!

--
DrJoeJr


"Samael" wrote:

> OS: Microsoft Windows XP / Home Edition / Version 2002 / Service Pack 3
> PC: Dell brand XPS 410
>
>
> VirusRemover2008 (or something which came packaged with or containing) has
> disabled Automatic Updates and all attempts to reenable it from Windows
> Security Center, System Properties (which displays Automatic Updates as
> enabled), and Services (services.msc) fail due to the virus automatically
> switching Automatic Updates off again (in the case of Services, even before
> the configuration tab is closed). The virus also changes Internet Explorer's
> security settings to accept all cookies and prevents security from being
> enabled again in the same manner.
>
> My question is whether there is a way to manually access updates for
> Windows. My hope is that either my virus detection software will advance
> enough to detect this type of virus and fix the damage, or a Windows update
> will help block the exploit the virus is using to forcibly change these
> configurations. While Automatic Updates is disabled, however, the
> conventional update methods don't work, hence my problem.
>
> (If there is a log file or some sort of data archive which would tell me
> where the instructions are coming to change these security settings,
> theoretically I could figure out how to disable them manually as well, but
> I'm pretty inept with computers, so I'm hoping AVG or Windows Update will
> provide an easier answer.)

 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Automatic Updates (disabled) ppmharley Windows Update 11 02-04-2009 11:20 AM
automatic updates disabled AJnino Windows Vista General Discussion 1 06-06-2007 06:15 PM
Automatic Updates service keeps being disabled huff-n-puff Windows Update 3 09-20-2006 05:40 AM
Automatic Updates Service disabled KN Windows Update 1 12-29-2004 05:09 PM
Automatic Update gets disabled (perhaps a virus?) Ezekiel Windows Update 3 10-06-2004 09:17 PM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59