Error number: 0x80244FFF

No matter whether I choose Express or Custom, the update function fails with
error 0x80244FFF. The error description is a catch-all and doesn't help at
all.

I thought possibly IE had something wrong and so upgraded to version 8. Same
failure.

I have rebooted, made sure nothing else was running, and still have no clue
what to chase down.

No help to date.

However, when I tried to install the latest version of ZoneAlarm, it said I
wasn't on SP3 and was on SP0.

I figured that might have something to do with the problem so I downloaded
SP3 standalone and reinstalled it.

ZoneAlarm then installed OK.

Tried to do a Windows Update and got the same failure.

No joy.

Mike

"Mike Cebula" wrote:

> No matter whether I choose Express or Custom, the update function fails with
> error 0x80244FFF. The error description is a catch-all and doesn't help at
> all.
>
> I thought possibly IE had something wrong and so upgraded to version 8. Same
> failure.
>
> I have rebooted, made sure nothing else was running, and still have no clue
> what to chase down.
>
>

This isn't your first Windows Update problem, is it, Mike? =>
http://groups.google.com/group/micro...a2cad66e142d80

You're probably seeing the effects of a hijackware infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/...moving_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachi...php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
www.banthecheck.com


Mike Cebula wrote:
> No help to date.
>
> However, when I tried to install the latest version of ZoneAlarm, it said
> I
> wasn't on SP3 and was on SP0.
>
> I figured that might have something to do with the problem so I downloaded
> SP3 standalone and reinstalled it.
>
> ZoneAlarm then installed OK.
>
> Tried to do a Windows Update and got the same failure.
>
> "Mike Cebula" wrote:
>> No matter whether I choose Express or Custom, the update function fails
>> with error 0x80244FFF. The error description is a catch-all and doesn't
>> help at all.
>>
>> I thought possibly IE had something wrong and so upgraded to version 8.
>> Same failure.
>>
>> I have rebooted, made sure nothing else was running, and still have no
>> clue
>> what to chase down.

Automatic updates were on and the failures seem to have started around 8/9/9.
I noticed it some time later when I did a manual check to see where I stood
and got the error. Event log entries haven't help except to identify the
first failure date.

Over the last few weeks I have followed all your suggestions up to the point
of obtaining help from one of the hijackware sites.

Even pulled the drive and ran all the antivirus/adware/malware/rootkit
software I could get my hands on against it from another system via USB
connection.

Even downloaded and forced reinstall of Windows Update Agent to latest level.

What is really interesting is that nothing else fails on the laptop.
However, I did notice one other program that thinks something is wrong.
Running Secunia PSI, an incidental error log entry pops up that reads:

"Check that the Windows Update service is running on the Host and that you
use the correct administrative login credentials. NOTE: This means that
certain Microsoft products for this Host, are listed with a potential
incorrect security state."

Auto Update service is set to Automatic and is Started. BITS is manual.
There is only one login on the laptop - mine and is the administrator (guest
is OFF). Don't know what could be wrong with credentials.
I have been trying to figure out what 'potential incorrect security state'
means.

I've been using MBSA to find any security updates recently released,
download them individually and install. No problems doing this.

Mike Cebula

"PA Bear [MS MVP]" wrote:

> This isn't your first Windows Update problem, is it, Mike? =>
> http://groups.google.com/group/micro...a2cad66e142d80
>
> You're probably seeing the effects of a hijackware infection!
>
> NB: If you had no anti-virus application installed or the subscription had
> expired *when the machine first got infected* and/or your subscription has
> since expired and/or the machine's not been kept fully-patched at Windows
> Update, don't waste your time with any of the below: Format & reinstall
> Windows. A Repair Install will NOT help!
>
> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/ma...e/default.mspx
>
> NB: Run the FULL scan, not the QUICK scan! You may need to download the
> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
> machine and rename it to SCAN.EXE before running it.
>
> 2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
> (only!) in Safe Mode with Networking, if need be:
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 3. Run a /thorough/ check for hijackware, including posting the requested
> logs in an appropriate forum, not here.
>
> Checking for/Help with Hijackware
> http://aumha.net/viewtopic.php?f=30&t=4075
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://www.elephantboycomputers.com/...moving_Malware
>
> **Chances are you will need to seek expert assistance in
> http://spywarehammer.com/simplemachi...php?board=10.0,
> http://www.spywarewarrior.com/viewforum.php?f=5,
> http://www.dslreports.com/forum/cleanup,
> http://www.bluetack.co.uk/forums/index.php,
> http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**
>
> If these procedures look too complex - and there is no shame in admitting
> this isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
> www.banthecheck.com
>
>
> Mike Cebula wrote:
> > No help to date.
> >
> > However, when I tried to install the latest version of ZoneAlarm, it said
> > I
> > wasn't on SP3 and was on SP0.
> >
> > I figured that might have something to do with the problem so I downloaded
> > SP3 standalone and reinstalled it.
> >
> > ZoneAlarm then installed OK.
> >
> > Tried to do a Windows Update and got the same failure.
> >
> > "Mike Cebula" wrote:
> >> No matter whether I choose Express or Custom, the update function fails
> >> with error 0x80244FFF. The error description is a catch-all and doesn't
> >> help at all.
> >>
> >> I thought possibly IE had something wrong and so upgraded to version 8.
> >> Same failure.
> >>
> >> I have rebooted, made sure nothing else was running, and still have no
> >> clue
> >> what to chase down.
>
>

> Over the last few weeks I have followed all your suggestions up to the
> point
> of obtaining help from one of the hijackware sites.

I'd recommend doing so now, if only to rule out the possibility of an
infection, Mike. Or you could...

Backup your personal data, then do a format & clean install of Windows.
Please note that a Repair Install (AKA in-place upgrade) will NOT fix this!

cf. http://michaelstevenstech.com/cleanxpinstall.html#steps

After the clean install, you'll have the equivalent of a "new computer" so
take care of everything on the following page before otherwise connecting
the machine to the internet or a network and before using a USB key that
isn't brand-new or hasn't been freshly formatted:

5 steps to help protect your new computer before you go online
http://www.microsoft.com/protect/com...nced/xppc.mspx

HOW TO get a computer running WinXP Gold (no Service Packs) fully patched
(after a clean install)
http://groups.google.com/group/micro...5afa8ed33e121c

HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a
clean install)
http://groups.google.com/group/micro...66ae41add7dd2b
--
~PA Bear
www.banthecheck.com


Mike Cebula wrote:
> Automatic updates were on and the failures seem to have started around
> 8/9/9. I noticed it some time later when I did a manual check to see where
> I stood and got the error. Event log entries haven't help except to
> identify the first failure date.
>
> Over the last few weeks I have followed all your suggestions up to the
> point
> of obtaining help from one of the hijackware sites.
>
> Even pulled the drive and ran all the antivirus/adware/malware/rootkit
> software I could get my hands on against it from another system via USB
> connection.
>
> Even downloaded and forced reinstall of Windows Update Agent to latest
> level.
>
> What is really interesting is that nothing else fails on the laptop.
> However, I did notice one other program that thinks something is wrong.
> Running Secunia PSI, an incidental error log entry pops up that reads:
>
> "Check that the Windows Update service is running on the Host and that you
> use the correct administrative login credentials. NOTE: This means that
> certain Microsoft products for this Host, are listed with a potential
> incorrect security state."
>
> Auto Update service is set to Automatic and is Started. BITS is manual.
> There is only one login on the laptop - mine and is the administrator
> (guest
> is OFF). Don't know what could be wrong with credentials.
> I have been trying to figure out what 'potential incorrect security state'
> means.
>
> I've been using MBSA to find any security updates recently released,
> download them individually and install. No problems doing this.
>
> "PA Bear [MS MVP]" wrote:
>> This isn't your first Windows Update problem, is it, Mike? =>
>> http://groups.google.com/group/micro...a2cad66e142d80
>>
>> You're probably seeing the effects of a hijackware infection!
>>
>> NB: If you had no anti-virus application installed or the subscription
>> had
>> expired *when the machine first got infected* and/or your subscription
>> has
>> since expired and/or the machine's not been kept fully-patched at Windows
>> Update, don't waste your time with any of the below: Format & reinstall
>> Windows. A Repair Install will NOT help!
>>
>> 1. See if you can download/run the MSRT manually:
>> http://www.microsoft.com/security/ma...e/default.mspx
>>
>> NB: Run the FULL scan, not the QUICK scan! You may need to download the
>> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
>> machine and rename it to SCAN.EXE before running it.
>>
>> 2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection'
>> scan
>> (only!) in Safe Mode with Networking, if need be:
>> http://onecare.live.com/site/en-us/center/howsafe.htm
>>
>> 3. Run a /thorough/ check for hijackware, including posting the requested
>> logs in an appropriate forum, not here.
>>
>> Checking for/Help with Hijackware
>> http://aumha.net/viewtopic.php?f=30&t=4075
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> **Chances are you will need to seek expert assistance in
>> http://spywarehammer.com/simplemachi...php?board=10.0,
>> http://www.spywarewarrior.com/viewforum.php?f=5,
>> http://www.dslreports.com/forum/cleanup,
>> http://www.bluetack.co.uk/forums/index.php,
>> http://aumha.net/viewforum.php?f=30 or other appropriate forums as
>> well.**
>>
>> If these procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Client - since 2002
>> www.banthecheck.com
>>
>>
>> Mike Cebula wrote:
>>> No help to date.
>>>
>>> However, when I tried to install the latest version of ZoneAlarm, it
>>> said
>>> I wasn't on SP3 and was on SP0.
>>>
>>> I figured that might have something to do with the problem so I
>>> downloaded
>>> SP3 standalone and reinstalled it.
>>>
>>> ZoneAlarm then installed OK.
>>>
>>> Tried to do a Windows Update and got the same failure.
>>>
>>> "Mike Cebula" wrote:
>>>> No matter whether I choose Express or Custom, the update function fails
>>>> with error 0x80244FFF. The error description is a catch-all and doesn't
>>>> help at all.
>>>>
>>>> I thought possibly IE had something wrong and so upgraded to version 8.
>>>> Same failure.
>>>>
>>>> I have rebooted, made sure nothing else was running, and still have no
>>>> clue what to chase down.

Finally fixed! Want to close this out with the resolution info:

Did a restore of the windows\system32 directory and the files (not folders)
in the windows directory from a 4-month old backup and windows update then
worked. Something had been clobbered - don't know what.

Ran for a few days and noticed other stuff was starting to give me problems.
To make a long story short, the 160 GB WD Scorpio drive I installed last
December was failing. I put my old 120G drive back in, updated XP and then
managed to get all the important data that wasn't completely up to date on
the backup drive off the 160 drive. Then ran the WD diags on the 160 - it
could not successfully write zeros across the entire drive. SCRAP!

The drive model is a WD1600BEVE and I have since discovered via the net that
these seem to have a high failure rate.

Running clean now for over a week and am finally happy - and tired of
pursuing this problem.

Thanks for all the help provided via this forum.

Mike Cebula

"PA Bear [MS MVP]" wrote:

> > Over the last few weeks I have followed all your suggestions up to the
> > point
> > of obtaining help from one of the hijackware sites.
>
> I'd recommend doing so now, if only to rule out the possibility of an
> infection, Mike. Or you could...
>
> Backup your personal data, then do a format & clean install of Windows.
> Please note that a Repair Install (AKA in-place upgrade) will NOT fix this!
>
> cf. http://michaelstevenstech.com/cleanxpinstall.html#steps
>
> After the clean install, you'll have the equivalent of a "new computer" so
> take care of everything on the following page before otherwise connecting
> the machine to the internet or a network and before using a USB key that
> isn't brand-new or hasn't been freshly formatted:
>
> 5 steps to help protect your new computer before you go online
> http://www.microsoft.com/protect/com...nced/xppc.mspx
>
> HOW TO get a computer running WinXP Gold (no Service Packs) fully patched
> (after a clean install)
> http://groups.google.com/group/micro...5afa8ed33e121c
>
> HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a
> clean install)
> http://groups.google.com/group/micro...66ae41add7dd2b
> --
> ~PA Bear
> www.banthecheck.com
>
>
> Mike Cebula wrote:
> > Automatic updates were on and the failures seem to have started around
> > 8/9/9. I noticed it some time later when I did a manual check to see where
> > I stood and got the error. Event log entries haven't help except to
> > identify the first failure date.
> >
> > Over the last few weeks I have followed all your suggestions up to the
> > point
> > of obtaining help from one of the hijackware sites.
> >
> > Even pulled the drive and ran all the antivirus/adware/malware/rootkit
> > software I could get my hands on against it from another system via USB
> > connection.
> >
> > Even downloaded and forced reinstall of Windows Update Agent to latest
> > level.
> >
> > What is really interesting is that nothing else fails on the laptop.
> > However, I did notice one other program that thinks something is wrong.
> > Running Secunia PSI, an incidental error log entry pops up that reads:
> >
> > "Check that the Windows Update service is running on the Host and that you
> > use the correct administrative login credentials. NOTE: This means that
> > certain Microsoft products for this Host, are listed with a potential
> > incorrect security state."
> >
> > Auto Update service is set to Automatic and is Started. BITS is manual.
> > There is only one login on the laptop - mine and is the administrator
> > (guest
> > is OFF). Don't know what could be wrong with credentials.
> > I have been trying to figure out what 'potential incorrect security state'
> > means.
> >
> > I've been using MBSA to find any security updates recently released,
> > download them individually and install. No problems doing this.
> >
> > "PA Bear [MS MVP]" wrote:
> >> This isn't your first Windows Update problem, is it, Mike? =>
> >> http://groups.google.com/group/micro...a2cad66e142d80
> >>
> >> You're probably seeing the effects of a hijackware infection!
> >>
> >> NB: If you had no anti-virus application installed or the subscription
> >> had
> >> expired *when the machine first got infected* and/or your subscription
> >> has
> >> since expired and/or the machine's not been kept fully-patched at Windows
> >> Update, don't waste your time with any of the below: Format & reinstall
> >> Windows. A Repair Install will NOT help!
> >>
> >> 1. See if you can download/run the MSRT manually:
> >> http://www.microsoft.com/security/ma...e/default.mspx
> >>
> >> NB: Run the FULL scan, not the QUICK scan! You may need to download the
> >> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
> >> machine and rename it to SCAN.EXE before running it.
> >>
> >> 2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection'
> >> scan
> >> (only!) in Safe Mode with Networking, if need be:
> >> http://onecare.live.com/site/en-us/center/howsafe.htm
> >>
> >> 3. Run a /thorough/ check for hijackware, including posting the requested
> >> logs in an appropriate forum, not here.
> >>
> >> Checking for/Help with Hijackware
> >> http://aumha.net/viewtopic.php?f=30&t=4075
> >> http://mvps.org/winhelp2002/unwanted.htm
> >> http://inetexplorer.mvps.org/data/prevention.htm
> >> http://inetexplorer.mvps.org/tshoot.html
> >> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> >> http://www.elephantboycomputers.com/...moving_Malware
> >>
> >> **Chances are you will need to seek expert assistance in
> >> http://spywarehammer.com/simplemachi...php?board=10.0,
> >> http://www.spywarewarrior.com/viewforum.php?f=5,
> >> http://www.dslreports.com/forum/cleanup,
> >> http://www.bluetack.co.uk/forums/index.php,
> >> http://aumha.net/viewforum.php?f=30 or other appropriate forums as
> >> well.**
> >>
> >> If these procedures look too complex - and there is no shame in admitting
> >> this isn't your cup of tea - take the machine to a local, reputable and
> >> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> >> --
> >> ~Robear Dyer (PA Bear)
> >> MS MVP-IE, Mail, Security, Windows Client - since 2002
> >> www.banthecheck.com
> >>
> >>
> >> Mike Cebula wrote:
> >>> No help to date.
> >>>
> >>> However, when I tried to install the latest version of ZoneAlarm, it
> >>> said
> >>> I wasn't on SP3 and was on SP0.
> >>>
> >>> I figured that might have something to do with the problem so I
> >>> downloaded
> >>> SP3 standalone and reinstalled it.
> >>>
> >>> ZoneAlarm then installed OK.
> >>>
> >>> Tried to do a Windows Update and got the same failure.
> >>>
> >>> "Mike Cebula" wrote:
> >>>> No matter whether I choose Express or Custom, the update function fails
> >>>> with error 0x80244FFF. The error description is a catch-all and doesn't
> >>>> help at all.
> >>>>
> >>>> I thought possibly IE had something wrong and so upgraded to version 8.
> >>>> Same failure.
> >>>>
> >>>> I have rebooted, made sure nothing else was running, and still have no
> >>>> clue what to chase down.
>
>