antivirus and windows update FAIL

[tvrb]

Yesterday I got infected with Malware and then removed with SUPERAntiSpyware + Malbytes.

Here is the original forum post I made -- but now it's no longer a malware issue (I don't think), but rather a software/setup issue (I think).
http://forums.majorgeeks.com/showthread.php?p=1494257

I'm still having an issue where my Avira Antivirus won't update/work and Windows Update won't update/work either.
Avira simply fails at accessing the Internet.
The windows update error I get says it is prevented from accessing the Internet. However, it is able to get to 35% before FAIL. Hmmm.

Chrome also won't work, but I think this issue can be solved once I can apply the windows updates I need.

I appreciate any help/suggestions that can help me solve this problem! Thank you!

[tvrb]

I'm attaching a ss of what I see when trying to update Avira (it turns into just chinese characters...).
aviraerror1
aviraerror2

For some reason windows update now decided to work! I have no idea what changed.

Here is the error I get in Chrome:

More information on this error
Below is the original error message

Error 102 (net::ERR_CONNECTION_REFUSED): Unknown error.

[sikvik]

Try updating Avira manually. This may fix the auto update and then again maybe not!
http://www.avira.com/en/support/kbdetails.php?id=95
Is IE connecting fine?
May need to uninstall and reinstall both Avira and Chrome.

Cheers

[tvrb]

Thank you for the response.

IE does not work.
Chrome does not work.

When I follow the steps for updating Avira manually, nothing happens. Is there a better AntiVirus program I could use? Could my Avira be infected somehow?

Thanks for your help.

[sikvik]

Do you have any net connectivity? Are you posting from yet another browser or PC? I'm wondering if Windows actually updated! Any exclamation marks in Device Managers - Network adapter.
Cheers..

[theefool]

During that time with the update failure do you get any events in event viewer?

Click START, then RUN, then type in: eventvwr.msc

If UAC pops up, click yes.

Click "Windows Logs" arrow, then check
Application and system for any errors related to windows update.
Post them here.


Also try this for windows update:

http://majorgeeks.com/Fix_WU_d6278.html


In addition, can you attach your hosts file here?

Located: C:\windows\system32\drivers\etc

[tvrb]

@sikvik,
I have net connectivity. Firefox works. IE and Chrome do not work. Windows update does not work. Avira auto update does not work. Malbytes autoupdate does work.

In other news, I had my computer off overnight and tried to update avira first thing and it worked! however, it still won't autoupdate. A scan didn't find anything.

In Device Manager, my network card says "This device is working properly."

I may have uninstalled some SQL and C++ programs from 'programs and features', could these be making a difference?

I ran the Fix WU, but my WU still doesn't work.
Here is the error I get:Windows Update error 80072efd

If you receive Windows Update error 80072efd while checking for updates, it usually means that a program running on your computer is preventing Windows Update Services (SVCHOST) from accessing the Internet. ...

I don't see any windows update errors in the event log. Should I look for other stuff? There are ~6000 events.

I am attaching the hosts file, but I'm not sure it is very informative. I renamed it to .txt because without an extension I couldn't upload it.


Thanks for everyone help ... really hoping to fix this to keep my computer safe.

[sikvik]

Two highlighted entries in your HJT may have to do with the connectivity issues. I'm not a HJT analyst and shall not advise you to fix the two. Do wait for brighter minds to respond.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:58:38 PM, on 5/29/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\MGTools\analyse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555

Cheers..

[tvrb]

sikvik!

Thank you once again for the response. Don't sell yourself short (brighter minds? -- you found the problem!).

I saw what you highlighted and went into IE Internet Options. I found that I had been routing through a random proxy server (could malware have done this?). I set it to NOT do that anymore, and now my Windows Update works, my Avira Autoupdate works, and everything *seems* to be very happy! IE works and Google Chrome works too!

<3 <3 thank you very much!

I still have a couple issues with a parsing application I use, but it could easily be completely unrelated.

Thank you for everyone's help!