Windows Update after Vundo removal

Followed the start-run-sevices.msc start updat sevices
To make sure these services are running:
1. Click Start, and then click Run.
2. Type services.msc and then click OK.
3. In the list of services, double-click on Automatic Updates and then click
Properties.
4. In the Startup type list, select Automatic and click Apply.
5. Verify that the Service status is started, if the Service Status is
Stopped click on the Start Button.
When I check the status it comes up 'disabled' and will not go to
'automatic'.

The path to the executable shows:
C:\WINDOWS\system32\svchost.exe -k netsvcs
but I can only find svchost not svchost.exe -k netsvcs.

Is the executable path correct, or do I have another issue? how can I
restore thee proper path? It will not allow me to change the path.

You have much more work to do, Max.

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

2. Run this online scan (in safe mode w/networking, if need be):
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run additional checks for hijackware, including posting your hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
=====================
Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Max Wedge wrote:
> Followed the start-run-sevices.msc start updat sevices
> To make sure these services are running:
> 1. Click Start, and then click Run.
> 2. Type services.msc and then click OK.
> 3. In the list of services, double-click on Automatic Updates and then
> click
> Properties.
> 4. In the Startup type list, select Automatic and click Apply.
> 5. Verify that the Service status is started, if the Service Status is
> Stopped click on the Start Button.
> When I check the status it comes up 'disabled' and will not go to
> 'automatic'.
>
> The path to the executable shows:
> C:\WINDOWS\system32\svchost.exe -k netsvcs
> but I can only find svchost not svchost.exe -k netsvcs.
>
> Is the executable path correct, or do I have another issue? how can I
> restore thee proper path? It will not allow me to change the path.

"Max Wedge" wrote:

> Followed the start-run-sevices.msc start updat sevices
> To make sure these services are running:
> 1. Click Start, and then click Run.
> 2. Type services.msc and then click OK.
> 3. In the list of services, double-click on Automatic Updates and then click
> Properties.
> 4. In the Startup type list, select Automatic and click Apply.
> 5. Verify that the Service status is started, if the Service Status is
> Stopped click on the Start Button.
> When I check the status it comes up 'disabled' and will not go to
> 'automatic'.
>
> The path to the executable shows:
> C:\WINDOWS\system32\svchost.exe -k netsvcs
> but I can only find svchost not svchost.exe -k netsvcs.
>
> Is the executable path correct, or do I have another issue? how can I
> restore thee proper path? It will not allow me to change the path.

Ran Anti-malware program, and created hijackthis report, and had TrendMicro
analyze it for me and made the suggested fixes.

Updating still gets me 1058 error, and the Automatic Updates property will
swithc to automatic, but it still will not start.

What to do now?

Max Wedge wrote:
:: Ran Anti-malware program, and created hijackthis report, and had
:: TrendMicro analyze it for me and made the suggested fixes.
::
:: Updating still gets me 1058 error, and the Automatic Updates
:: property will swithc to automatic, but it still will not start.
::
:: What to do now?


On the assumption you're clean of malware etc -

Service does not start and displays "Error 1058"
http://support.microsoft.com/kb/241584

You cannot manually start the Automatic Updates service and you receive an
"Error 1058" error message on a computer that is running Windows XP or
Windows XP Tablet PC Edition 2005
http://support.microsoft.com/kb/896224

"Could not start the Remote Procedure Call (RPC) Service. Error 1058" error
message when you manually start the Remote Procedure Call service
http://support.microsoft.com/kb/838428

--

TaurArian [MVP] 2005-2009 - Update Services
http://taurarian.mvps.org
======================================
How to ask a question: http://support.microsoft.com/kb/555375
Disclaimer: The information has been posted "as is" with no warranties
or guarantees and doesn't give any rights. Computer Maintenance:
Acronis / Diskeeper / Paragon / Raxco

Repost:

Post your lHJT og to
http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum [i.e., not
submit it to Trend Micro] for review by an expert in such matters...

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/


Max Wedge wrote:
> Ran Anti-malware program, and created hijackthis report, and had
> TrendMicro
> analyze it for me and made the suggested fixes.
>
> Updating still gets me 1058 error, and the Automatic Updates property will
> swithc to automatic, but it still will not start.
>
> What to do now?

This fixed it. http://support.microsoft.com/kb/838428

I did the updates. Thanks.

"TaurArian" wrote:

> Max Wedge wrote:
> :: Ran Anti-malware program, and created hijackthis report, and had
> :: TrendMicro analyze it for me and made the suggested fixes.
> ::
> :: Updating still gets me 1058 error, and the Automatic Updates
> :: property will swithc to automatic, but it still will not start.
> ::
> :: What to do now?
>
>
> On the assumption you're clean of malware etc -
>
> Service does not start and displays "Error 1058"
> http://support.microsoft.com/kb/241584
>
> You cannot manually start the Automatic Updates service and you receive an
> "Error 1058" error message on a computer that is running Windows XP or
> Windows XP Tablet PC Edition 2005
> http://support.microsoft.com/kb/896224
>
> "Could not start the Remote Procedure Call (RPC) Service. Error 1058" error
> message when you manually start the Remote Procedure Call service
> http://support.microsoft.com/kb/838428
>
> --
>
> TaurArian [MVP] 2005-2009 - Update Services
> http://taurarian.mvps.org
> ======================================
> How to ask a question: http://support.microsoft.com/kb/555375
> Disclaimer: The information has been posted "as is" with no warranties
> or guarantees and doesn't give any rights. Computer Maintenance:
> Acronis / Diskeeper / Paragon / Raxco
>
>
>
>
>

Thanks for the feedback Max, it may help others.
K



"Max Wedge" <> wrote in message
news:35087FD2-E8F9-4EE8-9624-...
> This fixed it. http://support.microsoft.com/kb/838428
>
> I did the updates. Thanks.
>
> "TaurArian" wrote:
>
>> Max Wedge wrote:
>> :: Ran Anti-malware program, and created hijackthis report, and had
>> :: TrendMicro analyze it for me and made the suggested fixes.
>> ::
>> :: Updating still gets me 1058 error, and the Automatic Updates
>> :: property will swithc to automatic, but it still will not start.
>> ::
>> :: What to do now?
>>
>>
>> On the assumption you're clean of malware etc -
>>
>> Service does not start and displays "Error 1058"
>> http://support.microsoft.com/kb/241584
>>
>> You cannot manually start the Automatic Updates service and you receive
>> an
>> "Error 1058" error message on a computer that is running Windows XP or
>> Windows XP Tablet PC Edition 2005
>> http://support.microsoft.com/kb/896224
>>
>> "Could not start the Remote Procedure Call (RPC) Service. Error 1058"
>> error
>> message when you manually start the Remote Procedure Call service
>> http://support.microsoft.com/kb/838428
>>
>> --
>>
>> TaurArian [MVP] 2005-2009 - Update Services
>> http://taurarian.mvps.org
>> ======================================
>> How to ask a question: http://support.microsoft.com/kb/555375
>> Disclaimer: The information has been posted "as is" with no warranties
>> or guarantees and doesn't give any rights. Computer Maintenance:
>> Acronis / Diskeeper / Paragon / Raxco
>>
>>
>>
>>
>>

[Let's see how long it's fixed...]

TaurArian wrote:
> Thanks for the feedback Max, it may help others.
> K
>
>
>
> "Max Wedge" <> wrote in message
> news:35087FD2-E8F9-4EE8-9624-...
>> This fixed it. http://support.microsoft.com/kb/838428
>>
>> I did the updates. Thanks.
>>
>> "TaurArian" wrote:
>>
>>> Max Wedge wrote:
>>>>> Ran Anti-malware program, and created hijackthis report, and had
>>>>> TrendMicro analyze it for me and made the suggested fixes.
>>>>>
>>>>> Updating still gets me 1058 error, and the Automatic Updates
>>>>> property will swithc to automatic, but it still will not start.
>>>>>
>>>>> What to do now?
>>>
>>>
>>> On the assumption you're clean of malware etc -
>>>
>>> Service does not start and displays "Error 1058"
>>> http://support.microsoft.com/kb/241584
>>>
>>> You cannot manually start the Automatic Updates service and you receive
>>> an
>>> "Error 1058" error message on a computer that is running Windows XP or
>>> Windows XP Tablet PC Edition 2005
>>> http://support.microsoft.com/kb/896224
>>>
>>> "Could not start the Remote Procedure Call (RPC) Service. Error 1058"
>>> error
>>> message when you manually start the Remote Procedure Call service
>>> http://support.microsoft.com/kb/838428
>>>
>>> --
>>>
>>> TaurArian [MVP] 2005-2009 - Update Services
>>> http://taurarian.mvps.org
>>> ======================================
>>> How to ask a question: http://support.microsoft.com/kb/555375
>>> Disclaimer: The information has been posted "as is" with no warranties
>>> or guarantees and doesn't give any rights. Computer Maintenance:
>>> Acronis / Diskeeper / Paragon / Raxco

Hi,
I had the same problem and today I find the solution in one another forum.
If you received the Error 1058 while doing Automatic Updates then you should
download and scan your system using SuperAntispyware. Here is the Lin
http://www.superantispyware.com/down...NTISPYWAREFREE

Here is the Link of the forum I found the solutio
http://www.microsoft.com/communities...&lang=en&cr=US

Search for AVG Antispyware 7.5 in Antispyware
Hope it works for you too.
Thanks


"Max Wedge" wrote:

> Followed the start-run-sevices.msc start updat sevices
> To make sure these services are running:
> 1. Click Start, and then click Run.
> 2. Type services.msc and then click OK.
> 3. In the list of services, double-click on Automatic Updates and then click
> Properties.
> 4. In the Startup type list, select Automatic and click Apply.
> 5. Verify that the Service status is started, if the Service Status is
> Stopped click on the Start Button.
> When I check the status it comes up 'disabled' and will not go to
> 'automatic'.
>
> The path to the executable shows:
> C:\WINDOWS\system32\svchost.exe -k netsvcs
> but I can only find svchost not svchost.exe -k netsvcs.
>
> Is the executable path correct, or do I have another issue? how can I
> restore thee proper path? It will not allow me to change the path.