Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Automatic Updates service could not start. Error Code 2


  • Please log in to reply

#1
aliengreen

aliengreen

    Member

  • Member
  • PipPip
  • 19 posts
Hello all,

I tried to download updates for my home pc [Win XP(SP3)] yesterday, but since I've set it to manual, I had to restart the service. However, when I ran services.msc and right-clicked Start on the Automatic Updates line, I get an error message "Could not start the Automatic Update service on Local Computer. Error 2: The system could not find the file specified." I've gone online and found out this is usually caused by some malware attack (is this true?). I've then tried to do the following recommended fixes:

1.Ran my local AV program (avast!) and found nothing.

2.Downloaded MS Security Essentials, updated and ran it, but again no malware was found.

3.Checked the ImagePath Value in the Registry key HKLM\SYSTEM\CurrentControlSet\Services\wuauserv and verified it is "%systemroot%\system32\svchost.exe -k netsvcs" and not a fake path like %fystemroot%\.. netsvcs.

4.Ran sfc.ex /scannow and no prompts came up.

5.Ran HijackThis and spotted this suspicious line --- O23 - Service: UPHClean - Unknown owner - ?:\P?ogr?m Files\UPHClean\uphclean.exe (file missing). I've tried several times to delete this but it still comes back, and still shows up after running HJT several times.

As of today, I still can't get updates or restart the service. This thing has me worried like a cornered cat, and I'll really appreciate any help you guys could extend me.
  • 0

Advertisements


#2
godawgs

godawgs

    Teacher

  • GeekU Moderator
  • 8,228 posts
Hello aliengreen,

uphclean.exe is a process belonging to Microsoft's User profile cleanup service, see this link, or this link.
The thing that looks suspicious to me is the P?ogr?m Files part of the HiJackThis entry.
There are a number of things that will cause Microsoft update not to work, but when it happened to me it was caused by a rootkit. I would recommend going to the Virus, Spyware and Malware removal forum and letting the staff members help you out. Click on BEGIN HERE: Malware and Spyware Cleaning Guide ». Since you have already set up an account, go to Step 2 to download OTL and post the log in a new topic in that forum. Be sure to provide a link to this post so that you aren't getting duplicate help.

Also, if you are running both Avast and MSSE anti-virus programs, you need to chose one only. Running multiple AV programs can cause conflicts with each other, produce false alerts and cause other system problems. Actually I'm pretty amazed that you got MSSE to install with Avast already on the machine.

Good luck!
  • 0

#3
aliengreen

aliengreen

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
Hello godawgs, thanks for your reply. It hadn't occurred to me that it might possibly be a rootkit at work here. I'll take your lead and follow those links you posted and be off to the Virus, Spyware and Malware removal forum right after. I did download OTL prior to starting this thread and gave it a try, but was astounded by how much info it logged; in fact, a bit too much for my liking. Also, OTL didn't show the suspicious 023 line ?:\P?ogr?m Files\UPHClean\uphclean.exe (file missing) that HJT found. Anyway, I'll try it again and read the OTL tutorial more carefully.

I did get a notice when I was installing MSE that avast! was a potential conflict so I turned its real-time scanners off and just proceeded with it. Voilà! Both are running right now. But you're right; I never liked two AV programs running simultaneously as well, much less installing them. I'll be chucking one of them out after I resolve this.

Thanks again godawgs, appreciate it muchos...

Edited by aliengreen, 11 August 2011 - 12:22 AM.

  • 0

#4
godawgs

godawgs

    Teacher

  • GeekU Moderator
  • 8,228 posts
HJT was replaced by OTL as a primary diagnostic tool here a while back because it does do a much more thorough job of checking places where malware hides in the system. That's why there is so much more information. And unless you know what you're doing, I wouldn't worry about the OTL tutorial. I would make sure that I downloaded the program to the desktop, (that's very important), run it and post the log for a staff member to look at. They are very knowledgeable and should get you cleaned up.
And you will probably find that the staff member who helps you will have you uninstall one of the AV programs up front. You definitely shouldn't run more than one at a time, and you really shouldn't even have more than one installed on the computer at a time.
If it helps you make your decision, MSSE is a GeeksToGo recommended AV program, see this thread. It uses less system resources and has a much smaller footprint than Avast. The choice is yours, but you really should uninstall one of them now.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP