locked
automatic updates. RRS feed

  • Question

  •  

    I keep getting the message that windows live cannot turn on automatic updates at this time... how do I get this to resolve.. my status shows red all the time and it worries me that there may be other threats.
    Wednesday, November 26, 2008 3:27 PM

Answers

All replies

  • I have a similar problem. Are you also getting a lot of unwanted popup ads?

     

    I believe your PC has a virus and it was hijacked. You cannot even enable the Automatic Update service ... it automatically switches back to "disable". I suggest running the Safety Scanner that is available on OneCare's web site to see if that catches any problems. I would run this in "Safe Mode with Networking" if you have XP.

     

    Anyone else have a fix for this problem?

     

    Wednesday, November 26, 2008 4:02 PM
  • I'm going to move this to the Tune-up folder as that is the part of OneCare that deals with Automatic Updates for Windows.

    Try going to Control Panel/Automatic Updates from the Start menu and see if you can turn it on there. If not, please contact OneCare support -

    How to reach support (FAQ) - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

     

    -steve

    Wednesday, November 26, 2008 4:13 PM
    Moderator
  • Hi Stephen. In my case, it cannot be started in Control Panel, Automatic Updates because everything is grayed out. This is on a XP Home PC, not XP Professional, with SP3 (not SP2). When I go into Safe Mode, it is the same thing.

     

    It should be noted that this PC (from a colleague) had 27 different viruses and malware, including 3 rootkits. I have a screenshot on what Adaware found. They were all removed by both Adaware and OneCare, but the disabled Automatic Updates with the random IE Ad popups still occur (it is IE 7, BTW). I am surprised that the PC still functions.

     

    I will contact OneCare support when I get home where the PC is located. Thanks.

     

    Wednesday, November 26, 2008 5:25 PM
  • It does sound like your case is due to one of the infections that was cleaned, but the ability to configure AU has been disabled and needs to be repaired. It probably involves a registry edit. Did the infection happen to include one for XP Antivirus Pro or similar?

    -steve

     

    Wednesday, November 26, 2008 6:08 PM
    Moderator
  • Yes, I believe XP Antivirus Pro was one of the listed malwares.

     

    The funny thing was that the massive infections even took down XP firewall and disabled AVG antivirus (v8 free edition), while turning off Automatic Update. So obviously the infections are getting very smart on determining what steps are needed per antivirus/antimalware product to disable or turn them off.

     

    Wednesday, November 26, 2008 6:25 PM
  • Yes indeed. There are some very malicious bits of malware out there that are designed to thrwart removal at all costs.

    -steve

     

    Wednesday, November 26, 2008 7:11 PM
    Moderator
  • OK, I have been in contact with OneCare Technical Support three times (ticket number 1086014853) and they have been unable to re-enable the Automatic Updates. I am still waiting for a callback.

     

    Safe Boot with Networking --> OneCare Safety Scanner revealed that not all of the malwares were removed. One remained: Trojan:Win32/Vundo.gen!AG. It took 5 OneCare scans (both online and desktop) to finally get rid of this malware. However, the Automatic Updates (AU) is trashed, to the point that it does not show up in Services list.

     

    On my own, I reinstalled AU by going into C:\WINDOWS\INF\AU.INF (had to get my XP Home CD for source), then reinstalled SP 3. AU returned in Services, but still disabled. I then tried to start it after setting it to Automatic, and I receive Event ID 1058 error. In looking in the Event Viewer, System Log, I get the following DCOM error (Event ID 10005):

    DCOM got error "The service cannot be started, either because ..." attempt in to start service wuauserv with arguments ... {E60687F7-01A1-40AA-86AC-DB1CBF673334}

     

    I reviewed several Microsoft Support Knowledgebase articles, and none of the suggested fixes worked. The service's properties has the proper hardware profile enabled (for Automatic Updates) and I even re-registered the WU files.

     

    Any ideas would be appreciated.

     

    Friday, November 28, 2008 1:41 AM
  • Hi,

    Has anyone been able to figure out a solution for this problem? I have the exact same problem of not being able to turn on automatic updates and am also getting numerous pop up ads/websites.

    Thanks
    Sunday, December 7, 2008 5:04 PM
  •  bobo72 wrote:
    Hi,

    Has anyone been able to figure out a solution for this problem? I have the exact same problem of not being able to turn on automatic updates and am also getting numerous pop up ads/websites.

    Thanks

    Both symptoms you are experiencing are indications of a malware infection. My wife's PC, running OneCare, was infected by a Vundo variant which caused the exact behavior.

    If you are using Windows Live OneCare and you have been infected, but OneCare did not detect or cannot remove the malware, please contact support to report this and for help with removal.

    How to reach support (FAQ) - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

     

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx  for details.  For international information, see your local subsidiary Support site.

     

    -steve

    Monday, December 8, 2008 6:56 PM
    Moderator
  • I suggest the following: Restart your PC and press F8 after the PC boot screen (before Windows screen) to get to Safe Mode with Networking. You will need to select this from the menu and may need to press 58 multiple times to get the PC's attention. Once in Safe Mode, go to http://onecare.live.com/ then to Help and Support. Select "OneCare Safety Scanner" to scan your PC for viruses and malware. Do a Complete Scan.

     

    I suggest running it twice. If you get any messages that states that OneCare scanner could NOT remove any malware, contact OneCare Technical Support.

     

    It took about 4 days with remote support from Microsoft OneCare Technical Support to remove the Trojan Vundo AG malware and have Automatic Updates repaired. I believe Vundo AG morphs itself so it becomes dormant for a while, then reappears. Once the PC was cleaned and repaired, I created Norton Ghost Recovery Disks so that in the future, all I need to do is restore from the Recovery Disks if I get this type of malware. Then restore my data backups to be current.

    Monday, December 8, 2008 7:19 PM
  • Even easier and better, assuming it is Vundo, go here for instructions on how to remove it:

    http://www.bleepingcomputer.com/malware-removal/remove-vundo-virtumonde

    -steve

    Monday, December 8, 2008 8:32 PM
    Moderator
  • I installed Windows Live after Virtumonde and Trojan issues (that avast couldn't solve). It seems to have solved that problem.

     

    But I still cannot start automatic updates. What I haven't seen mentioned here is "Error 1058" which I keep seeing even after I go to: Start; Run; services.msc: Automatic Updates: startup type set to automatic: start.

     

    Buller?

     

     

     

    Tuesday, December 9, 2008 12:51 AM
  • Your PC still may have remnants of Virtumondo/Vundo on it.

    I suggest contacting OneCare support for help.

    How to reach support (FAQ) - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

     

    Or run the Malwarebytes/Vundofix process from my prior post.

     

    -steve

    • Proposed as answer by treet007 Wednesday, December 29, 2010 6:15 PM
    Tuesday, December 9, 2008 1:56 PM
    Moderator
  • Actually, in my case, even with Vundo gone, Automatic Updates had to be reinstalled then the registry settings corected from Vundo's changes.

    Thursday, December 11, 2008 5:08 AM
  • How do you reinstall de AU ¿? I hae the samje problem and do anything they do... reinstall SP3, reinstal AU C:\WINDOWS\INF\AU.INF  but the service is missing... and the BITsw service too, because the conflicker virus...
    Monday, July 6, 2009 11:48 AM
  • How do you reinstall de AU ¿? I hae the samje problem and do anything they do... reinstall SP3, reinstal AU C:\WINDOWS\INF\AU.INF  but the service is missing... and the BITsw service too, because the conflicker virus...

     

    If  you are not using Windows Live OneCare, you are off topic for this forum. This is not a general forum for viruses, spyware, or Windows Help. For help with spyware issues, you may want to try the forums here: 

    http://aumha.net/ For help with virus removal, contact the maker of your Antivirus program.

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

     

    Windows Update Solution Center - http://support.microsoft.com/ph/6527

     

    Vista Solution Center - http://support.microsoft.com/ph/11732#tab0

     

    XP Solution Center - http://support.microsoft.com/ph/1173#tab2


    Microsoft MVP Windows Live / Windows Live OneCare, Live Mesh, & MS Security Essentials Forums Moderator
    Monday, July 6, 2009 3:22 PM
    Moderator