Receiving Error number: 0x8024001E

Running Windows XP Pro SP3 on DELL Inspiron 6400/E1505 w/IE8

I am attempting to run 'Express' for Windows Update. After I see the
"Checking for the latest updates for your computer" progress bar - the
process stops and produces "The site cannot continue because one or more of
these Windows services is not running:" (Error number: 0x8024001E). I have
attempted all corrections to Services.msc recommended by error message text.
By now I believe I know the Service that is causing Windows Update to
continue to fail is 'Automatic Updates' (AU). When I initially view AU
within the Services list I see no value under the 'Status' column. Following
the error message's recommendations, I right-click on 'Properties' where I
see the Status listed as 'Stopped'. Already weird...no value for Status on
the Services list page but then a Status of Stopped under AU's Properties. I
then click on 'Start' and am told the process is Started where it remains
only for a few seconds (5 max) before abruptly ending and reverting the
Status to 'Stopped'. Curiously though when exiting Properties, the Status
of Automatic Updates on the Services list diplays as 'Started'. Subsequent
right-clicking of AU produces drop-down that lists 'Start' as avaliable with
'Stop' greyed out.
--
Thank you - MAK

There is a very good chance that you are seeing the effects of a hijackware
infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/...moving_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachi...php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002


MAK 39 wrote:
> Running Windows XP Pro SP3 on DELL Inspiron 6400/E1505 w/IE8
>
> I am attempting to run 'Express' for Windows Update. After I see the
> "Checking for the latest updates for your computer" progress bar - the
> process stops and produces "The site cannot continue because one or more
> of
> these Windows services is not running:" (Error number: 0x8024001E). I
> have
> attempted all corrections to Services.msc recommended by error message
> text.
> By now I believe I know the Service that is causing Windows Update to
> continue to fail is 'Automatic Updates' (AU). When I initially view AU
> within the Services list I see no value under the 'Status' column.
> Following the error message's recommendations, I right-click on
> 'Properties' where I see the Status listed as 'Stopped'. Already
> weird...no value for Status on the Services list page but then a Status of
> Stopped under AU's Properties. I then click on 'Start' and am told the
> process is Started where it remains only for a few seconds (5 max) before
> abruptly ending and reverting the Status to 'Stopped'. Curiously though
> when exiting Properties, the Status of Automatic Updates on the Services
> list diplays as 'Started'. Subsequent right-clicking of AU produces
> drop-down that lists 'Start' as avaliable with 'Stop' greyed out.

Thank you for your attention PA Bear. I did run HiJackThis and I do have an
account at Spyware Hammer but ran out of time to post my HJT log - will be
doing that. I have run Malwarebytes Anti-Malware (found and Qt'd some
files)...I have run Windows Live Safety Center's 'Protection' scan (it found
nothing that concerned it)...I ran SpyBot S&D and came out clean. In process
of looking for reputable shop in Hartford CT area - know any?
--
Thank you - MAK


"PA Bear [MS MVP]" wrote:

> There is a very good chance that you are seeing the effects of a hijackware
> infection!
>
> NB: If you had no anti-virus application installed or the subscription had
> expired *when the machine first got infected* and/or your subscription has
> since expired and/or the machine's not been kept fully-patched at Windows
> Update, don't waste your time with any of the below: Format & reinstall
> Windows. A Repair Install will NOT help!
>
> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/ma...e/default.mspx
>
> NB: Run the FULL scan, not the QUICK scan! You may need to download the
> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
> machine and rename it to SCAN.EXE before running it.
>
> 2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
> (only!) in Safe Mode with Networking, if need be:
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 3. Run a /thorough/ check for hijackware, including posting the requested
> logs in an appropriate forum, not here.
>
> Checking for/Help with Hijackware
> http://aumha.net/viewtopic.php?f=30&t=4075
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://www.elephantboycomputers.com/...moving_Malware
>
> **Chances are you will need to seek expert assistance in
> http://spywarehammer.com/simplemachi...php?board=10.0,
> http://www.spywarewarrior.com/viewforum.php?f=5,
> http://www.dslreports.com/forum/cleanup,
> http://www.bluetack.co.uk/forums/index.php,
> http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**
>
> If these procedures look too complex - and there is no shame in admitting
> this isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>
>
> MAK 39 wrote:
> > Running Windows XP Pro SP3 on DELL Inspiron 6400/E1505 w/IE8
> >
> > I am attempting to run 'Express' for Windows Update. After I see the
> > "Checking for the latest updates for your computer" progress bar - the
> > process stops and produces "The site cannot continue because one or more
> > of
> > these Windows services is not running:" (Error number: 0x8024001E). I
> > have
> > attempted all corrections to Services.msc recommended by error message
> > text.
> > By now I believe I know the Service that is causing Windows Update to
> > continue to fail is 'Automatic Updates' (AU). When I initially view AU
> > within the Services list I see no value under the 'Status' column.
> > Following the error message's recommendations, I right-click on
> > 'Properties' where I see the Status listed as 'Stopped'. Already
> > weird...no value for Status on the Services list page but then a Status of
> > Stopped under AU's Properties. I then click on 'Start' and am told the
> > process is Started where it remains only for a few seconds (5 max) before
> > abruptly ending and reverting the Status to 'Stopped'. Curiously though
> > when exiting Properties, the Status of Automatic Updates on the Services
> > list diplays as 'Started'. Subsequent right-clicking of AU produces
> > drop-down that lists 'Start' as avaliable with 'Stop' greyed out.
>
>