Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
AutoUpdate (KB941569) Also Trojan:win32/Penda RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

     

    GOT WINDOWS LIVE ONE CARE WORKING ON PROBLEM.5-DAYS LEVEL2-TECH. EVERYONES NICE

    BUT NO SUCCESS. KEEPS BUMPIN' IT AND WANTS TO RE-UPDATE. SOMETIMES SHOWS SHOUTH.EXE-NO DISK

    WINDOW.

    THINK IT ALL STARTED WITH THE TROJAN:WIN32/PENDA

    ANYONE WITH ISSUSES OR SUGGESTION

    WE NEED HELP

    SEARCHED THE NET NO ONE IS SHOWING THAT THEY HAVE SEEN THIS.

    THANKS

    RAY

    Monday, December 17, 2007 8:28 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks for the explanation, Ray.

     

    As I understand it, you are planning on wiping the system with the HP restore disks, in effect returning it to factory condition. Yes, this will remove the Trojan (along with everything else - data, programs, updates and OneCare).

     

    Since it will be a factory restore, you will then need to remove whatever programs you don't want, such as AOL and the like, particularly their Security software. Make sure that the AOL software (and any other security software provided by HP - Norton, McAfee, etc) is removed and then install OneCare from http://onecare.live.com and activate with the same LiveID you used to subscribe. Good luck, Ray.

    -steve

     

    Thursday, December 20, 2007 2:48 AM
    Moderator

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    What is the reference to the December security update in the subject line? Is this update failing?

    Are you working with OneCare support on the Trojan issue? Are you still infected?

    For Windows Update problems, see the Windows Update Solution Center - http://support.microsoft.com/ph/6527

    -steve

     

    Tuesday, December 18, 2007 2:22 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hey Steve, Thanks for your insite. If you don't mind I would like to give you alittle info about my problem.

    As I said I am still learning. Been on line since 99'. Love the info that is at my beckon call.

    Sometimes get bummed when you can't find what you are looking for.

    Really enjoy all the help I can get.

    Started 12/11/07 with Windows-No disk/Exception Processing Message c000013 Parameters---

    75b6bF9c 4 75b6bf9c 75b6bf9c.

    Auto Update Sec Update Win-xp (KB941569) This seems to want to update cause I don't it knows that it did it.

    12/12/07 shouth.exe-No Disk. There is no disk inthe drive please insert a disk into Drive F. Never had one in to begin with.

    I/M  HP help support.( I will not bad mouth these people for they are young and are looking at a screen telling what to do and not having the comonsence.)

    I did a system restore to 11/30/07 at a time I belive that there was no problem WRONG!!!!!!!!!

    Live care stated Unwanted soft ware Trojan:Win32/Penda. tried to remove it but it keeps popping back up.

    12/14/07 Live care tech help. Went to share and that one tried alot to no availle

    Prefetch- Temp-%Temp%. Nothing Kept coming back

    12/15/07 Live Care Tech tried again. Shared again and I watch most of the day of them trying to fix problem.

    Told me they needed to jump it to Level-2 Tech. Will Call me. (Hey don't get me wroung they have been trying and they treated me with concern and respect.)

    They suggested that I should remove some programs that I really was'nt useing alot.

    Dumped Aol AIM /AOL Security and Tried to remove the AOL main But I think It needs to be there(Don't know)

    Reboot and this one. Update.exe Application Error - The exception unknow software exception (0x0eedfade) occured in the application at location 0x7c812a5b

    c:\windows\win32\append.dll->(UPX)       Then

    Application Error---- Exception EInOutError in module B4E96D82,exe at 0000B444. File access denied.

    Got tiried went ot bed

    12/16/07 Live care - Downloaded One Care Safty Scanner Ran Nothin'

    Trojan:Win32/Pendav - Win32/Agentbypass.gen!G

    Cleaned the latter but after startup cmes back

    12/17/07 Level2 Tech all moring trying to no availle

    Will be back Thursday and continue

    Called HP to order a reboot disc should be here in afew days.

    (?? Question if I reboot with the disc and I guess it reformates computer to out of box condition do you think that it will erease the trojan ???)

    HP also told me they recomend using Norton Soft ware????

    Searched the net and acouple of other areas for any info of this so called Penda

    Seems no one knows nothing about it.

    Every time I come back on I get those 2 Win32/Penda and also Win32/AgentBypass.gen!G - go to Clean one goes and the Penda returns but the system says it was removed and the other Quarantined. just like a bad date it still comes back

    Steve, I will try that web you suggested and see whats up. Thursday Live Care will try and contact me. And will see Wish me luck Ray

     

    Thursday, December 20, 2007 2:33 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Oh By the way all info was sent via laptop

     

    All of the said problems are happening on my desk top

    Thanks again for you insite

    RAy

     

    Thursday, December 20, 2007 2:40 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks for the explanation, Ray.

     

    As I understand it, you are planning on wiping the system with the HP restore disks, in effect returning it to factory condition. Yes, this will remove the Trojan (along with everything else - data, programs, updates and OneCare).

     

    Since it will be a factory restore, you will then need to remove whatever programs you don't want, such as AOL and the like, particularly their Security software. Make sure that the AOL software (and any other security software provided by HP - Norton, McAfee, etc) is removed and then install OneCare from http://onecare.live.com and activate with the same LiveID you used to subscribe. Good luck, Ray.

    -steve

     

    Thursday, December 20, 2007 2:48 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

     

    Hey Steve, Thanks.

    I just got the Restore disks from HP(8-Disks) Iam going to I/M Hp support and make sure that I got everything right.

    The sad part of the whole thing is not having someone somewhere know how-where-what this trojan is. As I said in the beginning that even though been using computers since 99' I am still learning. Igot to go slower then most with all the mobo-jumbo of tech talk. You know the old story of ADD and CRS (Can't remember S%*#) but if I take my time I do ok.

     

    So back to Windows Live One Care Yea-Yea I know its a hoilday Week. So maybe Thursday They will get back to me about the Problem.

    Speaking of which. the MicroSoft Update Keeps wanting to install updates.

    KB942763/941568/941569/942615/944653/937894.

    I go to there web and I install the updates and they show it was successful  on all 6. But KB941569 wants to keep updating. Thought the Live one care.

    This happens every time I start my computer.

     

    Been intouch with HP/support and they have said that they recommmend Norton soft ware for there computers.

    From the early days I have used McAfee and Norton. I do like Norton better.

    The only reason I went and switched to Windows live Care was I figure with the windows name and reputation what would be so wroung. I had it for a year with no problems. But you know what happens when you get upset with a company when you don't get satisfaction and the problem fixed. Well you move on and go back to tried and true.

    I can get the Norton360 for both my desktop and laptop with all the same stuff that windows has.

     

    Well, I will give level-2 Tech one more try.

    Got some time off in January to work with the desktop and resore and reload all the things I had before

    Stiil I don't want to screw up anything.

    So what do you thing. Am I wroung?

    Thanks

    Ray  

    Tuesday, December 25, 2007 3:22 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    No, you're not wrong. Use whatever security package you are comfortable with. Personally, I don't care for the Norton products, so never use them. I've used McAfee in the past and still use Avast and Nod32 on some machines. I've got OneCare on several machines, of course, and like it very much, but it isn't perfect, either.

    Windows Update problems are a pain when they happen. There's a whole other support area you can try to resolve any problems with updates that are failing to install or be registered properly - http://support.microsoft.com/ph/6527

    I do hope that OneCare support follows up with you and helps resolve your problem, but, since you plan to wipe the PC clean and start from scratch, I'd probably not both dealing with any of those problems and just do the full reinstall after confirming with HP that you've got the instructions down. Their support web site should have some good instructions for you particular PC that you may be able to print out and follow.

    -steve

     

    Tuesday, December 25, 2007 7:37 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hey Steve, Thanks for the info and your help.

    Well, to catch-up about what I have done.

    Did not need to restore computer. But at least I have the restore CD's for just in case. As you said no one is perfect.

     

    Touched base with HP/tech support. And like any company they perfer Norton on there computers. I went out and perchased the Norton360. Before I downloaded the program, HP had me go to www.free.grisoft.com and download there virus scan.

    Holy Crapp. There download found 202-threats. Most where Trojan Horse PSW:Generic, Trojan Horse Dowloader and 2-viruus's. 1-Java/Byte and Worm Generic.

    So after cleaning out all of the stuff, I followed instruction from the Norton360. It did what it had to do and so far so good.

    I know it is early. But I don't know why left Norton in the first placed.

    I guess I figured with a name like Windows they should have the stuff together. I had it for a year and in November I resubscribed for another year and 1-month later the problem began.

     

    Well I thought I would touch base with you and let you know how things turned out.

    thanks for your suggestions and support.

    Happy New Years

    Ray

     

     

    Tuesday, January 1, 2008 4:17 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks for the update, Ray, and best of luck to you going forward. Sorry that Windows Live OneCare didn't work out for you.

    And, Happy New Year to you, too.

    -steve

     

    Wednesday, January 2, 2008 2:54 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    I have used norton for 7 years and never gotten anything, no problems, and i am a puter geek, online a lot, but I have this bug you re talking about.  And I think it happened when I had a new hard drive put in, and for some reason, Microsoft kept taking over my security system -- changing the setting every time I did an update, and making it the primary security system.  By the time I figured out how it was happening, I had this bug.  And norton is not getting rid of it.  Any further ieas?

     

    By the way, I swear bynorton, and if it were not for microsoft chaging the settings I would nevr have gotten this -- and Micrsoft is ot the greatest thing sicne sliced bread, but often out to lunch on many issues like this.  However, I am deperate and turning to it for help IF anyone actually can help me on this issue.

     

    Sunday, February 10, 2008 1:02 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
     dcat wrote:

    I have used norton for 7 years and never gotten anything, no problems, and i am a puter geek, online a lot, but I have this bug you re talking about.  And I think it happened when I had a new hard drive put in, and for some reason, Microsoft kept taking over my security system -- changing the setting every time I did an update, and making it the primary security system.  By the time I figured out how it was happening, I had this bug.  And norton is not getting rid of it.  Any further ieas?

     

    By the way, I swear bynorton, and if it were not for microsoft chaging the settings I would nevr have gotten this -- and Micrsoft is ot the greatest thing sicne sliced bread, but often out to lunch on many issues like this.  However, I am deperate and turning to it for help IF anyone actually can help me on this issue.

     

    If  you are not using Windows Live OneCare, you are off topic for this forum. This is not a general forum for viruses, spyware, or Windows Help. For help with spyware issues, you may want to try the forums here: 

    http://aumha.net/ For help with virus removal, contact the maker of your Antivirus program.

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

    Sunday, February 10, 2008 3:41 AM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Having same issue.  Keep clicking cancel and it goes away.  Then, it comes back.  I click cancel, etc.  I only first started to see this when I installed Norton 360 and on download the program advised there was some type of virus and that it was going to quarintine it.  I am running a full system scan.  I only find it mildly irritating as it is still relatively new.  When I get some results, I will post them if they would be helpful.  If I am not busy clicking the "cancel" button.

    Sunday, December 7, 2008 6:32 AM