Solved Problem installing windows updates & IE after malware

[marcuspassey]

Hi everyone

Hope someone can help

I have windows 7 on a dell studio xps

Had Malware problem and just been talking to a guy there for 2 days but couldnt fix it

My computer just will not install windows updates and update IE

The guy tried loads of things but no joy

Thanks

Marcus

 

[marcuspassey]

This was previous thread for the malware plus tried to find out why wouldnt install windows updates

http://malwaretips.com/threads/conduit-malware.23708/

 

[Ink]

Could you tell us what solutions you have tried already?

 

[marcuspassey]

Hey Huracan

Thanks for the reply if you quickly scan through this thread

http://malwaretips.com/threads/conduit-malware.23708/

It has everything we did in there

Thanks very much

Marcus

 

[Ink]

It's easier if you tell us, you know what you've tried or haven't. Plus 250+ replies is a lot to read through. Cheers.

Have you Google searched the error code:
https://www.google.co.uk/search?q=0x80070003

- Microsoft Fix It
http://support.microsoft.com/kb/910336

 

[marcuspassey]

ill go through and paste everything in here yes looked up error codes and trouble shooted no joy

 

[illumination]

Are we positive all the malware has been successfully removed from the system? If so have you tried resetting the windows update components?

Here are two options, one to either do it automatically, the other manually..
Microsoft Fix It
http://support.microsoft.com/kb/971058

 

[marcuspassey]

this is pretty much what we have done so far

Download and register ADWCleaner

Download Shortcut_Module from this link :

http://www.telecharger.sosvirus.net/download/shortcut-module/

save it to your desktop

ok let's do a diagnostic

Download From this link OTL : http://oldtimer.geekstogo.com/OTL.exe

Save it to your desktop

If you have XP => double-click , else , right-click "Run as administrator" to launch it

That's OK so...

ok now we have to see if , like I thougt , you're infected or not by Ramnit , by security I prefer to prevent.

all "non-essential windows" process will be cut, save your work. There will be an extinction of the office during the scan -> do not panic.

Download and save Pre_Scan to your desktop:

http://www.telecharger.sosvirus.net/download/pre-scan/

(click on the green boutton )

if the tool detects a proxy and you do not have it installed click "delete proxy"

It may be that black windows flash, let it work.

Let the tool restart the pc.

. Pre_Scan_date_hour.txt will appear at the root of the system drive (usually C: \)

DO NOT MAIL TO THE FORUM! (It is too long), attach it

ok before doing what i whote above , try to do that

Start Menu => Programs => Accessories => right click on "command prompt" => "run as administrator"

in the black windows type (or paste)

net stop wuauserv (then [enter])

ren %windir%\Softwaredistribution %Windir%\SoftwareDistribution.bak (then [enter])

net start wuauserv (then [enter])

close the command prompt , reboot your machine and try again your updates

ok you'll have to rename manually

keep the command prompt opened.

start Menu => my computer => Disk C: => Windows

rename the "SoftwareDistribution" folder by "SoftwareDistribution.bak"

and then when it's OK return to the command prompt and :

net start wuauserv

then [enter]

is it ok ?

start menu / programs / windows updates

(it'll say that you've never done updates logically , it's normal)

It is disturbing

do a complete scan of all your disks with drweb free :

https://www.freedrweb.com/download cureit free/?lng=en

try this FixIt

http://blogs.msdn.com/b/robmar/arch...using-windows-update-or-microsoft-update.aspx

ok

go to "windows" Folder , in the "System32" folder , and right click on "wuapi.dll" , properties , Detail tab , and give me the number of the file's version please

return to command prompt and enter these commands :

sc query sharedaccess
sc query BITS
sc query wuauserv

give me what's written on each line "State" for each command

I do not understand because Pre_Scan would have of to repair this service...

download WinupdateFix : http://general-changelog-team.fr/en/downloads/viewdownload/20-outils-de-xplode/11-winupdatefix

click here : http://cjoint.com/14ma/DChujIRtS1s.htm

run it , check all and execute

the log will be C:\Winupdatefix.log

ok ,

"Windows" Key + "R" ,

"Run" Window opens

type : Regedit (then [enter])

Expand :

HKEY_LOCAL_MACHINE
\System
\CurrentControlSet
\Services
\SharedAccess

right click on sharedAccess and select "Export" , save it by the name you want to your destop , and attach it

ok I changed some values in the key

download it by the link below , and execute , and accept the entry in the registry when windows asks it

http://www.aht.li/2314535/sharedaccess2.reg

then reboot the computer and try again the updates now

it's ok

I don't understand why it doesn't work ....

left click on "parameters" , "serviceDll" , is there this on the right ? %SystemRoot%\System32\ipnathlp.dll

execute this http://go.microsoft.com/?linkid=9775982

reboot the computer and try again the updates

Go in the SoftwareDistribution folder in Windows folder
Go in DataStore and delete all it's content
Go back and go in "Download" folder and delete all its content

reboot the machine and try updates

try this other Fix made for the same situation

http://go.microsoft.com/?linkid=9830262

run the computer in safemode and in a command prompt put :

sfc /scannow ( pay attention to the space before "/" and not after )

then after it's ended , reboot the computer in normal mode and try again

hello I've perhaps another idea

download this on your desktop : http://windowsitpro.com/content/content/83387/safemsi.zip

unzip it

reboot the computer in safemode and execute safemsi.exe, you will have a message saying windows installer in active.(normally it's not active in safe mode)

try to install manually IE you downloaded before

open a command prompt , and type :

CHKDSK /F /R ( spaces before every "/")

and [enter]

it will say it can't do cause the volume is in use, and purpose to do that at the reboot , accept and reboot the machine.

try this fix : http://www.microsoft.com/en-us/download/details.aspx?id=20858

for this

try this fix : http://www.microsoft.com/en-us/download/details.aspx?id=20858

 

[marcuspassey]

Hey illumination yes did that and it says no problems to report...

 

[illumination]

Hey illumination yes did that and it says no problems to report...

After reading everything above you posted, i am at a loss as well.. Personally, if it were me, i would reformat the system and start from scratch after attempting all that and not being able to resolve.

 

[marcuspassey]

I was just gonna get a external hard drive for all my files and photos and restore to factory settings

microsoft support told me I would have broken files and registry after the malware

Its only windows updates its really frustrating

 

[illumination]

I was just gonna get a external hard drive for all my files and photos and restore to factory settings

microsoft support told me I would have broken files and registry after the malware

Its only windows updates its really frustrating

I know it can be. The time you have invested in trying to figure this out, you could have reformatted already though, and is why i would personally do so at this point.

 

[marcuspassey]

so by formatting you mean restore to factory settings yes?

btw I have no discs I believe I just press F8 and I have the options there to restore to factory settings

Also how do I know that restoring to factory settings will totally fix it, how do I tell if I have a dying hard drive?

Thanks

Marcus

 

[illumination]

so by formatting you mean restore to factory settings yes?

btw I have no discs I believe I just press F8 and I have the options there to restore to factory settings

Also how do I know that restoring to factory settings will totally fix it, how do I tell if I have a dying hard drive?

Thanks

Marcus

Yes restoring to factory settings is basically the same thing, it will wipe all data and restore the system back to original manufacturer settings. This can be done to fix stubborn issues such as you face, or even stubborn malware.

Here is a link for checking your hard drive for errors.

http://support.microsoft.com/kb/2641432/en-US

 

[marcuspassey]

I followed the link to check the hard drive but I got no report or anything so I dont know if the hard drive is ok or not what should I do?

Marcus

 

[illumination]

I followed the link to check the hard drive but I got no report or anything so I dont know if the hard drive is ok or not what should I do?

Marcus

You followed the steps in this link, of clicking "properties" the "tools" then in error checking "check now" button? Did you check mark the "scan for and attempt recovery of bad sectors?" this will then ask if you want to schedule a disk check, which will occur upon restart of the system.