automatic windows update service

hi i have xp prof sp3 (freshly repaired) but the problem happens after a
trojan raid my pc.
if i try to start the automatic update service or the intelligent background
transmission service. it tells me no file found.
so no manual update via ms webpage.
if i look in update.log some veresion seems too low.
FATAL: Update required for C:\WINDOWS\system32\cdm.dll: target version =
5.5.3790.5512, required version = 7.2.6001.788
FATAL: Update required for C:\WINDOWS\system32\wuapi.dll: target version =
5.4.3790.5512, required version = 7.2.6001.788
FATAL: Update required for C:\WINDOWS\system32\wuauclt.exe: target version =
5.4.3790.5512, required version = 7.2.6001.788
FATAL: Update required for C:\WINDOWS\system32\wuaucpl.cpl: target version =
5.4.3790.5512, required version = 7.2.6001.788
FATAL: Update required for C:\WINDOWS\system32\wuaueng.dll: target version =
5.4.3790.5512, required version = 7.2.6001.788
FATAL: Update required for C:\WINDOWS\system32\wucltui.dll: target version =
5.4.3790.5512, required version = 7.2.6001.788
FATAL: Update required for C:\WINDOWS\system32\wups.dll: target version =
5.4.3790.5512, required version = 7.2.6001.788
FATAL: Update required for C:\WINDOWS\system32\wups2.dll: target version =
0.0.0.0, required version = 7.2.6001.788
Setup * IsUpdateRequired = Yes

the mui files seem ok!
more important is the following:
Registering binary: C:\WINDOWS\system32\regsvr32.exe /s
"C:\WINDOWS\system32\wuaueng.dll"
2009-06-22 22:58:06:125 4056 cc4 Misc =========== Logging initialized
(build: 7.2.6001.788, tz: +0200) ===========
2009-06-22 22:58:06:125 4056 cc4 Misc = Process:
C:\WINDOWS\system32\regsvr32.exe
2009-06-22 22:58:06:125 4056 cc4 Misc = Module:
C:\WINDOWS\system32\wuaueng.dll
2009-06-22 22:58:06:125 4056 cc4 Service FATAL: ChangeServiceConfig failed
with error 0x80070005
2009-06-22 22:58:06:125 4056 cc4 Service FATAL: WU client fail to create WU
service with error 0x80070005

can you help?
thanks Thomas

A Repair Install will NOT resolve a Trojan/hijackware infection! You have
more work to do.

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. Another Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/...moving_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachi...php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

=====================
Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002


tango13 wrote:
> hi i have xp prof sp3 (freshly repaired) but the problem happens after a
> trojan raid my pc.
> if i try to start the automatic update service or the intelligent
> background
> transmission service. it tells me no file found.
> so no manual update via ms webpage.
<snip>

"PA Bear [MS MVP]" wrote:

> A Repair Install will NOT resolve a Trojan/hijackware infection! You have
> more work to do.
>
>
stop stop, the pc is clean ! it was cleaned by hijackthis team.
a newvirusscanner is also installed. i feared something was
broken/eliminated in windows during the cleaning, therefor i started the
repair.

i wll follow you advice but these malware tools are all done
sincerely thomas

If the PC was clean, it'd be functioning properly...which would include
being able to use Windows Update and Automatic Updates.

Please post a link to the forum thread where your machine was declared
clean.

If you had IE7 and/or IE8 installed and then did a Repair Install without
having first uninstalled IE7 and/or IE8, you're ONLY choice now is a format
& clean install. See...

How to perform a repair installation of Windows XP if a later version of
Internet Explorer is installed:
http://support.microsoft.com/kb/917964


tango13 wrote:
> "PA Bear [MS MVP]" wrote:
>
>> A Repair Install will NOT resolve a Trojan/hijackware infection! You
>> have
>> more work to do.
>>
>>
> stop stop, the pc is clean ! it was cleaned by hijackthis team.
> a newvirusscanner is also installed. i feared something was
> broken/eliminated in windows during the cleaning, therefor i started the
> repair.
>
> i wll follow you advice but these malware tools are all done
> sincerely thomas

Hi it was a german language forum. hijackthis is well known here. the people
are professional.

http://www.hijackthis-forum.de/hijac...tml#post294564

the repair was done with an IE 6.0 . After this i updated to ie 7.x, because
i hoped it will better work with auto update together. ;-]

"PA Bear [MS MVP]" wrote:

> If the PC was clean, it'd be functioning properly...which would include
> being able to use Windows Update and Automatic Updates.
>
> Please post a link to the forum thread where your machine was declared
> clean.
>
> If you had IE7 and/or IE8 installed and then did a Repair Install without
> having first uninstalled IE7 and/or IE8, you're ONLY choice now is a format
> & clean install. See...
>
> How to perform a repair installation of Windows XP if a later version of
> Internet Explorer is installed:
> http://support.microsoft.com/kb/917964
>
>
> tango13 wrote:
> > "PA Bear [MS MVP]" wrote:
> >
> >> A Repair Install will NOT resolve a Trojan/hijackware infection! You
> >> have
> >> more work to do.
> >>
> >>
> > stop stop, the pc is clean ! it was cleaned by hijackthis team.
> > a newvirusscanner is also installed. i feared something was
> > broken/eliminated in windows during the cleaning, therefor i started the
> > repair.
> >
> > i wll follow you advice but these malware tools are all done
> > sincerely thomas
>
>

Hi PA,
we worked with Hijackthis guy on cleaning the PC the whole week
and execute some software:
RSIT
combofix
malwarebytes
superantispyware
kaspersky online scan
etc....

all scans found nothing more in the log files.

sincerely thomas