Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 848
  • Last Modified:

I can't open Windows Updates web page

I have ran FixNCR.reg and RKill and ran Malwarebytes and it found 12 infections but I still have a problem getting to windows updates. The error message tells me I have a connection problem but I can go to an other sites. I also ran Housecall Online Virus scan and it found one trojan virus in jave program. The PC is still acting up and stills has problems. Sometimes it want restart, McAfee security program has a problem and want scan. Is there other steps that one of you experts would take. What programs would you install and run to see if there is spyware/malware or virus' present. I have also already put in the XP cd and repaired the OS which has SP3 but can't do any of the updates.
Thanks,
bbbb2
0
bbbb2
Asked:
bbbb2
  • 13
  • 4
  • 4
  • +6
2 Solutions
 
bbbb2Author Commented:
I forgot to say that I also get a error message stating something about "Generic Host Process for Win32 services has encontered a problem and needs to close."
Thanks,
bbbb2
0
 
Dr. KlahnPrincipal Software EngineerCommented:
Recommend you run a few more online scanners:

Microsoft Rootkit Revealer
Symantec (extremely slow, but thorough)
Eset
BitDefender

As a side note, if you are unable to get to any of these sites, you can be reasonably sure that there is still at least one rootkit or virus in the system.
0
 
bbbb2Author Commented:
Thanks. I will start these and see what I find. I will post what I find tomorrow.
Thanks again,
bbbb2
0
Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

 
mzafpkCommented:
If the above scan does not fix the issue, try stinger of McCafe.
And to goto Windows Update website check by changing the DNS of your PC.
You may try 4.2.2.2 as DNS and then try to open windows update.
0
 
younghvCommented:
A similar tool to RKill is "RogueKiller", with a built-in DNS repair function.
Try using Menu Item #5:
http://www.experts-exchange.com/A_4922.html (Rogue-Killer-What-a-great-name)
0
 
bbbb2Author Commented:
I am having mo luck with any of these programs suggested. I am having a problem with iexplorer. It seems to lock up and then I get an error message. Dang, I wrote it down but can't find it. It sats something like: error at 0c2C2784269 at memory 0x00000000... and so on. I cant believe I can't find it. I have to run and I will turn internet explorer and try an recreate the error message. If you know what error message I am trying to interpret or have other suggestions please say so.
Thanks
bbbb2
0
 
askurat1Commented:
We need to know what error you get when trying to open windows updates.
0
 
bbbb2Author Commented:
I get a message "Internet Explorer cannot display this page and  just a button for me to "diagnose connection problem". It says there is no problem. lol
bbbb2
0
 
askurat1Commented:
I assume you have an internet connection?
0
 
askurat1Commented:
0
 
bbbb2Author Commented:
I have tried that autofix and it didn't work.
Also here is the error message I get after I leave the PC running and run malware bytes and have a web page opened.
In the top in Blue: svchost - Application Error
Then below that it says: "The instruction at "0x7c923825" refrenced memory at 0x00000000. The memory could not be read".

Press OK to end the program.
Press Cancel to debug the program.

Also another error message that says: Generic Host Process for in32 Services encountered a problem and needs to close. After I debiug it another window pops up asking me if I want to send the error to Microsoft, with buttons Send or don't send.
Thanks
bbbb2
0
 
bbbb2Author Commented:
I also have the red Window Security icon at the bottom right in the window say that windows automatic updates are turned off but I have them turned on.

bbbb2
0
 
bbbb2Author Commented:
That is a lot of scanning to do. I will be awhile it will take hours. I will post my results when I am done.
bbbb2
0
 
bbbb2Author Commented:
I went all the way through combofix and I still had the problems. I the got to MGTools and it frooze  at the end of running the program. I don't have a clue! I need to expert help on this on or I am going to have to back up the data and format.
bbbb2
0
 
askurat1Commented:
Unfortunately that might be your best bet. You can also try and run TDSSKiller: http://support.kaspersky.com/viruses/solutions?qid=208280684
0
 
rpggamergirlCommented:
Can we look at the ComboFix log?

Sounds like a file infector may be at work there.

Do an online Kaspersky scan, or download and run DrWebCureit and see what they find.
http://www.freedrweb.com/cureit/?lng=en
0
 
bbbb2Author Commented:
Here is the Combofix log. I have two of them ComboFix.txt ComboFix-quarantined-files.txt
0
 
bbbb2Author Commented:
@rpggamergirl, can I install DrWebCureit with McAfee already installed?
Thanks
bbbb2
0
 
bbbb2Author Commented:
WOW! I have never seen this. I was going to look at task manager and when I pressed "ctrl, Alt, and when I pressed the delete key the monitor screen turned 90 degrees to the left. Like going from landscape to portrait. and now I dont know how to turn the screen back upright. Unbelievable!!  Does anybody have a clue as to why that happened?
bbbb2
0
 
jmlambCommented:
Disable System Restore, boot to safe mode with no networking support, perform a full scan with whatever antivirus program you happen to have installed right now.

Try CTRL+ALT+RIGHT OR LEFT ARROW to correct your display.
0
 
Darr247Commented:
> Like going from landscape to portrait. and now I dont know how to turn the screen back upright.

Did you already try holding down Ctrl+Alt and pressing Del again to see if it rotated another 90 degrees?

If so, 2 more times after that should get you back to 'normal'.

If the Ctrl+Alt+Del keys have been remapped to no longer open Task Manager, you should be able to open it manually using

Start->Run, %windir%\system32\taskmgr.exe  [Enter]
0
 
rpggamergirlCommented:
Not a good idea to "disable system restore" while in the process of cleanup.

Yes, DrWebCureIt will run even if you have a resident AV, CureIt doesn't need to be installed, just doubleclick the tool.

The ComboFix log, CF had deleted legit files....the log is not too clear.. also shows hook on driver\atapi, probably in memory not the physical file(maybe bootkit?).
CF was able to read mbr successfully, so the hook maybe some other apps but nothing showed.

Probably a very good idea to format and start again.....if you backup files make sure they are scanned and clean before putting them back later.
0
 
rpggamergirlCommented:
You can try running this script, it may help,  you can also try scanning with TDSSKiller as had been suggested and see.

Run combofix again using this script.
 
1. Open Notepad.
2. Now copy/paste the text between the lines below into the Notepad window:
------------------------------------------------------------------------

File::
c:\windows\SET150.tmp
c:\windows\SET144.tmp
c:\windows\SET141.tmp
c:\windows\System32\itlnfw32.dll
c:\windows\System32\itlpfw32.dll

Driver::
itlperf

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
"itlsvc"=-

------------------------------------------------------------------------
3. Save the above as CFScript.txt in the same location as Combofix.exe.
4. Then drag the CFScript.txt into ComboFix.exe. This will start ComboFix again.




0
 
bbbb2Author Commented:
Thanks to everyone for the help but I was getting nowhere with the troubleshooting so I backed up the data and formatted the hard drive.
It is running fine now.
Thanks
bbbb2
0
 
bbbb2Author Commented:
The scans never fixed whatever infection I had on this PC so I formatted the hard drive and reinstalled the OS.
bbbb2
0
 
rpggamergirlCommented:
Sorry we weren't able to help you.
You made a wise decision to reformat and reinstall.
0
 
SteveO-BTSCommented:
I had this issue once.  I accessed the Win Updates from IE tools menu and it worked fine.  Got the "page cannot be displayed error" from the link in Control Panel.
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

  • 13
  • 4
  • 4
  • +6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now