WUAUCLT.EXE and 0x76c941a9 error

Recently I removed OneCare from my PC. Ever since then I have been getting
this 0x76c941a9 error on the auauclt.exe program. No mstter what I try to do,
I can't get any Windows updates to work. Can anyone help?

Thanks.

Cardnut

Please state your full Windows version (e.g., WinXP SP3; Vista SP1) when
posting to this newsgroup.

And what anti-virus application is installed now?
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

cardnut wrote:
> Recently I removed OneCare from my PC. Ever since then I have been getting
> this 0x76c941a9 error on the auauclt.exe program. No mstter what I try to
> do, I can't get any Windows updates to work. Can anyone help?
>
> Thanks.
>
> Cardnut

Sorry about that.

WinXP SP3. The anti virus is Cyber Defender.

cardnut

"PA Bear [MS MVP]" wrote:

> Please state your full Windows version (e.g., WinXP SP3; Vista SP1) when
> posting to this newsgroup.
>
> And what anti-virus application is installed now?
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
> cardnut wrote:
> > Recently I removed OneCare from my PC. Ever since then I have been getting
> > this 0x76c941a9 error on the auauclt.exe program. No mstter what I try to
> > do, I can't get any Windows updates to work. Can anyone help?
> >
> > Thanks.
> >
> > Cardnut
>
>

Thanks. Assuming this is a sudden, new problem, there's a very strong
possibility that it's being caused by a hijackware infection.

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

2. Run this online scan (in safe mode w/networking, if need be):
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run additional checks for hijackware, including posting your hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
=====================
Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

cardnut wrote:
> Sorry about that.
>
> WinXP SP3. The anti virus is Cyber Defender.
>
> "PA Bear [MS MVP]" wrote:
>> Please state your full Windows version (e.g., WinXP SP3; Vista SP1) when
>> posting to this newsgroup.
>>
>> And what anti-virus application is installed now?
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.net/
>>
>> cardnut wrote:
>>> Recently I removed OneCare from my PC. Ever since then I have been
>>> getting
>>> this 0x76c941a9 error on the auauclt.exe program. No mstter what I try
>>> to
>>> do, I can't get any Windows updates to work. Can anyone help?

Yes this is a new problem. But it did it right after I removed Onecare.

I followed the first thing you said to do - Run MRST manually.

I did.

I got the same instruction error 0x76c941a9 on MRT.exe.

How bad is it now?

cardnut

"PA Bear [MS MVP]" wrote:

> Thanks. Assuming this is a sudden, new problem, there's a very strong
> possibility that it's being caused by a hijackware infection.
>
> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/ma...e/default.mspx
>
> 2. Run this online scan (in safe mode w/networking, if need be):
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 3. Run additional checks for hijackware, including posting your hijackthis
> log to an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://wiki.castlecops.com/Malware_R...:_Introduction
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine2.blogspot.com/
> http://www.elephantboycomputers.com/...moving_Malware
>
> When all else fails, HijackThis v2.0.2
> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
> conjuction with some other utilities). HijackThis will NOT fix anything on
> its own, but it will help you to both identify and remove any
> hijackware/spyware with assistance from an expert. **Post your log to
> http://spywarehammer.com/simplemachi...php?board=10.0,
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
> by an expert in such matters, not here.**
>
> If the procedures look too complex - and there is no shame in admitting this
> isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> =====================
> Start a free Windows Update support incident request:
> https://support.microsoft.com/oas/de...spx?gprid=6527
>
> Support for Windows Update:
> http://support.microsoft.com/gp/wusupport
>
> For home users, no-charge support is available by calling 1-866-PCSAFETY in
> the United States and in Canada or by contacting your local Microsoft
> subsidiary. There is no-charge for support calls that are associated with
> security updates.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
> cardnut wrote:
> > Sorry about that.
> >
> > WinXP SP3. The anti virus is Cyber Defender.
> >
> > "PA Bear [MS MVP]" wrote:
> >> Please state your full Windows version (e.g., WinXP SP3; Vista SP1) when
> >> posting to this newsgroup.
> >>
> >> And what anti-virus application is installed now?
> >> --
> >> ~Robear Dyer (PA Bear)
> >> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> >> AumHa VSOP & Admin http://aumha.net
> >> DTS-L http://dts-l.net/
> >>
> >> cardnut wrote:
> >>> Recently I removed OneCare from my PC. Ever since then I have been
> >>> getting
> >>> this 0x76c941a9 error on the auauclt.exe program. No mstter what I try
> >>> to
> >>> do, I can't get any Windows updates to work. Can anyone help?
>
>

Bad enough. Skip to #3. Use a non-infected computer (that's NOT connected
to any network) do download your tools and post to the forum.

Repost:
>> If the procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA) computer repair shop.

NB: If the machine's on a network and you've got a DNS.Changer infection,
you MUST clean ALL machines AND Reset or Reinstall the router, else the
machine will be reinfected within seconds.

Good luck.

cardnut wrote:
> Yes this is a new problem. But it did it right after I removed Onecare.
>
> I followed the first thing you said to do - Run MRST manually.
>
> I did.
>
> I got the same instruction error 0x76c941a9 on MRT.exe.
>
> How bad is it now?
>
> cardnut
>
> "PA Bear [MS MVP]" wrote:
>
>> Thanks. Assuming this is a sudden, new problem, there's a very strong
>> possibility that it's being caused by a hijackware infection.
>>
>> 1. See if you can download/run the MSRT manually:
>> http://www.microsoft.com/security/ma...e/default.mspx
>>
>> 2. Run this online scan (in safe mode w/networking, if need be):
>> http://onecare.live.com/site/en-us/center/howsafe.htm
>>
>> 3. Run additional checks for hijackware, including posting your
>> hijackthis
>> log to an appropriate forum.
>>
>> Checking for/Help with Hijackware
>> http://aumha.org/a/parasite.htm
>> http://aumha.org/a/quickfix.htm
>> http://aumha.net/viewtopic.php?t=5878
>> http://wiki.castlecops.com/Malware_R...:_Introduction
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://defendingyourmachine2.blogspot.com/
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> When all else fails, HijackThis v2.0.2
>> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use
>> (in conjuction with some other utilities). HijackThis will NOT fix
>> anything on its own, but it will help you to both identify and remove any
>> hijackware/spyware with assistance from an expert. **Post your log to
>> http://spywarehammer.com/simplemachi...php?board=10.0,
>> http://forums.spybot.info/forumdisplay.php?f=22,
>> http://aumha.net/viewforum.php?f=30, or another appropriate forum for
>> review by an expert in such matters, not here.**
>>
>> If the procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>> =====================
>> Start a free Windows Update support incident request:
>> https://support.microsoft.com/oas/de...spx?gprid=6527
>>
>> Support for Windows Update:
>> http://support.microsoft.com/gp/wusupport
>>
>> For home users, no-charge support is available by calling 1-866-PCSAFETY
>> in
>> the United States and in Canada or by contacting your local Microsoft
>> subsidiary. There is no-charge for support calls that are associated
>> with
>> security updates.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.net/
>>
>> cardnut wrote:
>>> Sorry about that.
>>>
>>> WinXP SP3. The anti virus is Cyber Defender.
>>>
>>> "PA Bear [MS MVP]" wrote:
>>>> Please state your full Windows version (e.g., WinXP SP3; Vista SP1)
>>>> when
>>>> posting to this newsgroup.
>>>>
>>>> And what anti-virus application is installed now?
>>>> --
>>>> ~Robear Dyer (PA Bear)
>>>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>>>> AumHa VSOP & Admin http://aumha.net
>>>> DTS-L http://dts-l.net/
>>>>
>>>> cardnut wrote:
>>>>> Recently I removed OneCare from my PC. Ever since then I have been
>>>>> getting
>>>>> this 0x76c941a9 error on the auauclt.exe program. No mstter what I try
>>>>> to
>>>>> do, I can't get any Windows updates to work. Can anyone help?