Can't connect to windows update.

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by tagged, Dec 13, 2004.

  1. Matacumbie

    Matacumbie Rocky Top

    tagged,

    I noticed that the shortcut address was wrong earlier and have been trying to find a solution, the only thing I can locate is for Win98 not W2K. I will furnish you the link below and see if it might work for you.

    http://www.kbalertz.com/kb_Q193691.aspx

    Your Wupdmgr.exe file will be located in C:\Windows\I386, I think, not that familiar with Windows 2000. You could just do a search also and look for the one in I386.

    Maybe someone can offer a better way or easier solution that they are sure of before you head off to work.

    Steve
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    For Win 2000, the Windows root directory is normally c:\winnt and sometimes the i386 directory is c:\i386. Other times it is c:\winnt\i386

    But you should also have c:\winnt\system32\wupdmgr.exe


    Change this:
    "%SystemRoot%\system32\wupgr.exe".

    to

    "%SystemRoot%\system32\wupdmgr.exe".
     
    Last edited: Dec 22, 2004
  3. tagged

    tagged Private E-2

    Steve,

    My Wupdmgr.exe file is located in C:\WINNT\System32. I don't know if it's supposed to be in windows, but it's not. The only thing in my windows file is an empty folder named 'temp'. The modified date on my windows folder is 10-27-04. I think that is shortly after my problems started.

    When I click on my Wupdmgr.exe it gives me the same error as when I click on my Windows Update icon on my start menu.

    I assume this means there's something wrong with the file? On that win98 article they say to reinstall the file from the cd-rom but, as I mentioned before, I can't find mine.

    What should I do now?

    Thanks
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I just booted up my old Win 2000 SP4 PC and checked. My c:\winnt\system32\wupdmgr.exe file is 47,376 bytes in size and its version is 5.0.2134.1

    Check your file size and version!

    When I double click it, it works just fine takes me to the windows update link I gave your earlier.
     
  5. tagged

    tagged Private E-2

    Chaslang,

    My c:\winnt\system32\wupdmgr.exe file is 47,376 bytes in size and its version is 5.0.2134.1 also. When I double click on it I get an error message:


    Line: 72
    Char: 3
    Error: Automation server can't create object
    Code: 0
    URL: http:// windows update.microsoft.com/

    Then it doesn't do anything but show a blank window. What do you think?
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If my previous message does not help, check your Security settings in Internet Explorer, Tools, Internet Options and make sure Scripting has:
    Active scripting = enable
    Allow paste operations via script = enable
    Scripting of Java applets = enable
     
  8. tagged

    tagged Private E-2

    Chaslang,

    That Microsoft Windows Script 5.6 (Windows 2000, XP) is the same one you had me download last week. I did it again just to make sure, but it didn't seem to make a difference.

    I checked my security settings and those three were enabled.

    What should I do now?

    And by the way, do you think the problems I'm having now are malware related, or is this something I screwed up trying to fix it?

    Thanks
     
  9. tagged

    tagged Private E-2

    Also by the way,

    I put a new shortcut icon on my desktop with the link from Chaslang's post to Windows Update, so I can connect to Windows update now from there. I still can't do it from the Start Menu though.

    My biggest problem now is that I can't open my company webmail inbox folder or deleted folder from my work computer. I still get my 'automation server can't create object' message when I try. I can check it from my home computer, forward it to my home e-mail account and check my home e-mail from my office computer. It's kind of like getting your newspaper by mail-always a day late.

    Hopefully you guys can figure this out, but if it's looking like a lost cause, maybe there's a way I can automatically forward my mail from my company account to my home account?

    Also, if you think my problems aren't spyware related anymore and want me to start bothering somebody else, just let me know! I really appreciate all you've done, but I'd just as soon not be a pest!

    Thanks again!
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Sorry about that! I forgot we tried that already.
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If you go to Start and right click the Windows Update icon, tell me exactly what is in the below boxes:
    - Target:
    - Start in:
     
  12. tagged

    tagged Private E-2

    I can't believe this! I just drafted a fairly brilliant reply, and my home dial-up connection cut me off right when I was submitting it! Hopefully it doesn't miraculously show up, because it wasn't really that brilliant!

    Back to business.
    I'm on the wrong computer to actually bring this stuff up, but the Target was "%SystemRoot%\system32\wupdmgr.exe". Exactly. I managed to omit a couple letters the first time I posted it. I don't know the 'Start in:' because I'm at home and my wife will think I have a girlfriend in town if I run back to work. I did try running the file by itself by double clicking on it though, it gave me the same error. I'm thinking this means it's not in the shortcut, huh? The wupdmgr.exe file shows that it was last modified 12-7-99, so if it has been working before, it must be something else causing the problem?

    I went through a bunch of the trouble shooting articles on the Microsoft Windows 2000 Homepage, but I haven't found anything that relates.

    What do you think?
     
  13. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If you go to the Windows Update via the link I gave you and have it check your PC for updates, what does it find. It it requires updates, you should do them.

    Right now I don't think it is a spyware problem!
     
  14. tagged

    tagged Private E-2

    That's what I'm starting to think too. I went to windows update and there were no critical updates that I was missing, and I downloaded all the recomended updates that had anything to do with me.

    If you've got time, could you look at this HJT log and tell me if there's anything to worry about?

    I think I'll try to figure out how to redirect my company e-mail so I can use it at work.

    Thanks again, and Merry Christmas!

    P.S. I went from E-2 to PFC in one screw-up! That's the army for ya!

    PPS I guess they won't let me re-attache my HJT log 11. It's a couple pages back. Maybe you already looked at it?
     
  15. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Didn't we see a HJT log for this already and say it was clean?
     
  16. tagged

    tagged Private E-2

    No, the last thing we did spywarewise was you had me change the names of those two files to .bad's.

    You may have checked that log though.
     
  17. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay! Post a log and we can see if anything else needs to be fixed.
     
  18. tagged

    tagged Private E-2

    This is the most current HJT log I have. When you see the date, you'll see I didn't just run it, but it's still current.

    Drat! I tried to change the name and upload the same HJT log from this 12-20-04, 17:53 posting, but it won't let me. If you skip back to page 2 you can see it. If you've already looked at it, just tell me it's clean!

    Thanks again!
     
  19. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your last log was post in message #41. It's from
    Logfile of HijackThis v1.99.0
    Scan saved at 7:24:44 AM, on 12/20/2004
     
  20. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If the log is still the same,

    Back in message number 7, I asked if you knew what these tsargent items are for. Do you? If not, have HJT fix them.
    O16 - DPF: {2FE68711-8830-417D-95E0-EAB307DB0447} (mpsPwLc7.PMWebSiteLogin) - http://www.tsargent.com/PW/mpsPwLc7.CAB
    O16 - DPF: {A2401FD4-1DD3-47A4-8B9B-B883C6960E6D} (FileMgt.FileMgtCtrl) - http://www.tsargent.com/pmwebsite6/FileMgt.CAB
    O16 - DPF: {DCE60322-DEAB-41F5-BCEA-BF0B9FEE058F} (FileMgt.FileMgtCtrl) - http://www.tsargent.com/pmwebsite6/FileMgt.CAB

    Also exit all browsers and have HJT fix the below lines.
    O23 - Service: Station Client - Unknown - C:\WINNT\system32\station.exe (file missing)
    O23 - Service: DameWare NT Utilities 2.6 - Unknown - C:\WINNT\SYSTEM32\DNTUS26.EXE (file missing)
    O23 - Service: fxSVC - Unknown - C:\WINNT\fxsvc.exe (file missing)
    O23 - Service: ms-off ExportTool - Unknown - c:\winnt\system32\MsOffExport.dll (file missing)
    O23 - Service: Remote Administrator Service - Unknown - C:\WINNT\system32\audio.exe (file missing)
    O23 - Service: Windows Management NetWork Service Extensions - Unknown - NetManager.exe (file missing)
     
  21. tagged

    tagged Private E-2

    Those tsargent lines have to do with my company's Prolog Projects website I believe. I don't have to use it on every job, but the next one I might.

    I'll have HJT fix the other things.

    Thanks
     
  22. tagged

    tagged Private E-2

    Here's my new HJT log. It looks pretty clean, I think.
     

    Attached Files:

  23. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Yes, it is clean. But I guess you still have that problem with clicking the links to get to Windows Update?

    Did you go to there and check for and get all updates?
     
  24. tagged

    tagged Private E-2

    Well, I'm glad it's clean! (although I also wish there was something on it that was causing my Automation Server can't create object message)

    Yes, I went to windows update and downloaded everything they had except some audio driver.

    Like I said before, I've gotten around the Update thing by putting a link on my desktop from the link on your post, so if I can think of a way around my webmail roadblock, I've got it whipped.

    Thanks again for getting my system clean!
     
  25. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.

    Try posting a message over in the Software Forum about your remaining problems. Perhaps someone there is more familiar with a fix for that.
     
  26. tagged

    tagged Private E-2

    I'll do that!

    Thanks again, and Merry Christmas Chaslang!
     
  27. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome!

    And Merry Christmas to you too! Here's hoping you have a malware free holiday season (and even better - a malware free new year ;) )
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds