Windows Update crashes IE7

Last night I was attempting to install the latest SiSoft Sandra diagnostic
program and when I went to run it, it crashed complaining that it couldn't
make a connection to the MDAC database. It suggested I try upgrading to the
latest version of MDAC.

I have IE7 freshly installed (as in fresh since 5/19/2007) and went to
Windows Updates to see if I could find this MDAC update.

After WU attempted to see if I had the latest software update for WU, IE7
crashed:

AppName: iexplore.exe AppVer: 7.0.5730.11 ModName: wuweb.dll
ModVer: 5.8.0.2469 Offset: 00018003

I tried various steps including stopping the automatic updates using a
procedure for people experiencing error number: 0x80245003

> Rename the SoftwareDistribution folder (it will be recreated next time you
> visit WU again)
> You will lose your history but that's not important.
>
> Click Start, Choose Run.
> In the Run box, type services.msc.
> Click OK.
> Right-click the Automatic Updates service.
> Click Stop.
> Stopping the service will take a moment.
>
> Rename the "SoftwareDistribution" folder:
> a. Click Start, click Run, type %systemroot%, and then click OK.
> b. Right-click the SoftwareDistribution folder, and then click Rename.
> c. Type SoftwareDistribution.old, and then press ENTER to rename this folder.
>
> Click Start. Choose Run.
> In the Run box, type services.msc.
> Click OK.
> Right-click the Automatic Updates service.
> Click Start.
> Starting the service will take a moment.


This DID NOT WORK.

I turned off automatic updates, the service, as well as the BITS service. I
uninstalled IE7, reverted back to IE6 did the WU process as I described above
and turned BITS back on and reran updates. Same issue, IE6 crashed as well.

After this, I ran a scan with OneCare to see if there was any other problems
and it found a Trojan Downloader: Win32.Tearspear. OneCare claims to have
cleaned this up and so I rebooted, reinstalled IE7 and tried Windows Updates
again. CRASH.

What is going on? It seems like a few people are having this issue (as I see
in this newsgroup) and some have success with the WU stop/remove/re-activate
process.

-Joseph

Joseph,

Strongly suggest that you read this tutorial:
http://aumha.net/viewtopic.php?t=15574

Then boot the system to Safe Mode with Networking and have it scanned by
the Kaspersky Online Scanner:
http://www.kaspersky.com/virusscanner

It's always best to do at least 2 anti-malware scans to ensure that the
system is not infected. It sounds like OneCare did NOT successfully
remove the Trojan. If that's the case, either manually delete what the
Kaspersky scan detects or, post to a reputable anti-malware forum.
Please read the guidelines of the forum of your choice prior to posting:

http://www.bleepingcomputer.com/foru...lysis-f22.html
http://spywarewarrior.com/viewforum....1bac3189d22184
http://forums.spywareinfo.com/index.php?showforum=44
http://castlecops.com/f67-Hijackthis...ans_Oh_My.html
http://aumha.net/viewforum.php?f=30

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


Joseph Palmer wrote:

> Last night I was attempting to install the latest SiSoft Sandra diagnostic
> program and when I went to run it, it crashed complaining that it couldn't
> make a connection to the MDAC database. It suggested I try upgrading to the
> latest version of MDAC.
>
> I have IE7 freshly installed (as in fresh since 5/19/2007) and went to
> Windows Updates to see if I could find this MDAC update.
>
> After WU attempted to see if I had the latest software update for WU, IE7
> crashed:
>
> AppName: iexplore.exe AppVer: 7.0.5730.11 ModName: wuweb.dll
> ModVer: 5.8.0.2469 Offset: 00018003
>
> I tried various steps including stopping the automatic updates using a
> procedure for people experiencing error number: 0x80245003
>
> > Rename the SoftwareDistribution folder (it will be recreated next time you
>
>>visit WU again)
>>You will lose your history but that's not important.
>>
>>Click Start, Choose Run.
>>In the Run box, type services.msc.
>>Click OK.
>>Right-click the Automatic Updates service.
>>Click Stop.
>>Stopping the service will take a moment.
>>
>>Rename the "SoftwareDistribution" folder:
>>a. Click Start, click Run, type %systemroot%, and then click OK.
>>b. Right-click the SoftwareDistribution folder, and then click Rename.
>>c. Type SoftwareDistribution.old, and then press ENTER to rename this folder.
>>
>>Click Start. Choose Run.
>>In the Run box, type services.msc.
>>Click OK.
>>Right-click the Automatic Updates service.
>>Click Start.
>>Starting the service will take a moment.
>
>
>
> This DID NOT WORK.
>
> I turned off automatic updates, the service, as well as the BITS service. I
> uninstalled IE7, reverted back to IE6 did the WU process as I described above
> and turned BITS back on and reran updates. Same issue, IE6 crashed as well.
>
> After this, I ran a scan with OneCare to see if there was any other problems
> and it found a Trojan Downloader: Win32.Tearspear. OneCare claims to have
> cleaned this up and so I rebooted, reinstalled IE7 and tried Windows Updates
> again. CRASH.
>
> What is going on? It seems like a few people are having this issue (as I see
> in this newsgroup) and some have success with the WU stop/remove/re-activate
> process.
>
> -Joseph
>
>

A suggestion from MJD to someone else. Go to the link below to download
a file, install and it should work. It worked for me. Its for 32bit.

Thanks to MJD


x86-based versions of Windows (most users)
http://download.windowsupdate.com/v7...gent30-x86.exe


"MowGreen [MVP]" wrote:

> Joseph,
>
> Strongly suggest that you read this tutorial:
> http://aumha.net/viewtopic.php?t=15574
>
> Then boot the system to Safe Mode with Networking and have it scanned by
> the Kaspersky Online Scanner:
> http://www.kaspersky.com/virusscanner
>
> It's always best to do at least 2 anti-malware scans to ensure that the
> system is not infected. It sounds like OneCare did NOT successfully
> remove the Trojan. If that's the case, either manually delete what the
> Kaspersky scan detects or, post to a reputable anti-malware forum.
> Please read the guidelines of the forum of your choice prior to posting:
>
> http://www.bleepingcomputer.com/foru...lysis-f22.html
> http://spywarewarrior.com/viewforum....1bac3189d22184
> http://forums.spywareinfo.com/index.php?showforum=44
> http://castlecops.com/f67-Hijackthis...ans_Oh_My.html
> http://aumha.net/viewforum.php?f=30
>
> MowGreen [MVP 2003-2007]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>
>
> Joseph Palmer wrote:
>
> > Last night I was attempting to install the latest SiSoft Sandra diagnostic
> > program and when I went to run it, it crashed complaining that it couldn't
> > make a connection to the MDAC database. It suggested I try upgrading to the
> > latest version of MDAC.
> >
> > I have IE7 freshly installed (as in fresh since 5/19/2007) and went to
> > Windows Updates to see if I could find this MDAC update.
> >
> > After WU attempted to see if I had the latest software update for WU, IE7
> > crashed:
> >
> > AppName: iexplore.exe AppVer: 7.0.5730.11 ModName: wuweb.dll
> > ModVer: 5.8.0.2469 Offset: 00018003
> >
> > I tried various steps including stopping the automatic updates using a
> > procedure for people experiencing error number: 0x80245003
> >
> > > Rename the SoftwareDistribution folder (it will be recreated next time you
> >
> >>visit WU again)
> >>You will lose your history but that's not important.
> >>
> >>Click Start, Choose Run.
> >>In the Run box, type services.msc.
> >>Click OK.
> >>Right-click the Automatic Updates service.
> >>Click Stop.
> >>Stopping the service will take a moment.
> >>
> >>Rename the "SoftwareDistribution" folder:
> >>a. Click Start, click Run, type %systemroot%, and then click OK.
> >>b. Right-click the SoftwareDistribution folder, and then click Rename.
> >>c. Type SoftwareDistribution.old, and then press ENTER to rename this folder.
> >>
> >>Click Start. Choose Run.
> >>In the Run box, type services.msc.
> >>Click OK.
> >>Right-click the Automatic Updates service.
> >>Click Start.
> >>Starting the service will take a moment.
> >
> >
> >
> > This DID NOT WORK.
> >
> > I turned off automatic updates, the service, as well as the BITS service. I
> > uninstalled IE7, reverted back to IE6 did the WU process as I described above
> > and turned BITS back on and reran updates. Same issue, IE6 crashed as well.
> >
> > After this, I ran a scan with OneCare to see if there was any other problems
> > and it found a Trojan Downloader: Win32.Tearspear. OneCare claims to have
> > cleaned this up and so I rebooted, reinstalled IE7 and tried Windows Updates
> > again. CRASH.
> >
> > What is going on? It seems like a few people are having this issue (as I see
> > in this newsgroup) and some have success with the WU stop/remove/re-activate
> > process.
> >
> > -Joseph
> >
> >
>

A good suggestion BUT ... this system has been compromised and the
Trojan is still present. That's the most likely cause for the updating
issues.

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


Wheeler wrote:

> A suggestion from MJD to someone else. Go to the link below to download
> a file, install and it should work. It worked for me. Its for 32bit.
>
> Thanks to MJD
>
>
> x86-based versions of Windows (most users)
> http://download.windowsupdate.com/v7...gent30-x86.exe
>
>
> "MowGreen [MVP]" wrote:
>
>
>>Joseph,
>>
>>Strongly suggest that you read this tutorial:
>>http://aumha.net/viewtopic.php?t=15574
>>
>>Then boot the system to Safe Mode with Networking and have it scanned by
>>the Kaspersky Online Scanner:
>>http://www.kaspersky.com/virusscanner
>>
>>It's always best to do at least 2 anti-malware scans to ensure that the
>>system is not infected. It sounds like OneCare did NOT successfully
>>remove the Trojan. If that's the case, either manually delete what the
>>Kaspersky scan detects or, post to a reputable anti-malware forum.
>>Please read the guidelines of the forum of your choice prior to posting:
>>
>>http://www.bleepingcomputer.com/foru...lysis-f22.html
>>http://spywarewarrior.com/viewforum....1bac3189d22184
>>http://forums.spywareinfo.com/index.php?showforum=44
>>http://castlecops.com/f67-Hijackthis...ans_Oh_My.html
>>http://aumha.net/viewforum.php?f=30
>>
>>MowGreen [MVP 2003-2007]
>>===============
>> *-343-* FDNY
>>Never Forgotten
>>===============
>>
>>
>>Joseph Palmer wrote:
>>
>>
>>>Last night I was attempting to install the latest SiSoft Sandra diagnostic
>>>program and when I went to run it, it crashed complaining that it couldn't
>>>make a connection to the MDAC database. It suggested I try upgrading to the
>>>latest version of MDAC.
>>>
>>>I have IE7 freshly installed (as in fresh since 5/19/2007) and went to
>>>Windows Updates to see if I could find this MDAC update.
>>>
>>>After WU attempted to see if I had the latest software update for WU, IE7
>>>crashed:
>>>
>>>AppName: iexplore.exe AppVer: 7.0.5730.11 ModName: wuweb.dll
>>>ModVer: 5.8.0.2469 Offset: 00018003
>>>
>>>I tried various steps including stopping the automatic updates using a
>>>procedure for people experiencing error number: 0x80245003
>>>
>>> > Rename the SoftwareDistribution folder (it will be recreated next time you
>>>
>>>
>>>>visit WU again)
>>>>You will lose your history but that's not important.
>>>>
>>>>Click Start, Choose Run.
>>>>In the Run box, type services.msc.
>>>>Click OK.
>>>>Right-click the Automatic Updates service.
>>>>Click Stop.
>>>>Stopping the service will take a moment.
>>>>
>>>>Rename the "SoftwareDistribution" folder:
>>>>a. Click Start, click Run, type %systemroot%, and then click OK.
>>>>b. Right-click the SoftwareDistribution folder, and then click Rename.
>>>>c. Type SoftwareDistribution.old, and then press ENTER to rename this folder.
>>>>
>>>>Click Start. Choose Run.
>>>>In the Run box, type services.msc.
>>>>Click OK.
>>>>Right-click the Automatic Updates service.
>>>>Click Start.
>>>>Starting the service will take a moment.
>>>
>>>
>>>
>>>This DID NOT WORK.
>>>
>>>I turned off automatic updates, the service, as well as the BITS service. I
>>>uninstalled IE7, reverted back to IE6 did the WU process as I described above
>>>and turned BITS back on and reran updates. Same issue, IE6 crashed as well.
>>>
>>>After this, I ran a scan with OneCare to see if there was any other problems
>>>and it found a Trojan Downloader: Win32.Tearspear. OneCare claims to have
>>>cleaned this up and so I rebooted, reinstalled IE7 and tried Windows Updates
>>>again. CRASH.
>>>
>>>What is going on? It seems like a few people are having this issue (as I see
>>>in this newsgroup) and some have success with the WU stop/remove/re-activate
>>>process.
>>>
>>>-Joseph
>>>
>>>
>>

For what it's worth I had the exact same problem and Wheeler's link
worked - i didn't even have to do a reset.

Thanks,
Neel