Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Win64.ZAccess [Solved]


  • This topic is locked This topic is locked

#76
PoorestFish

PoorestFish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 62 posts
Attached is the log file.

Attached Files

  • Attached File  OTL.Txt   3.76KB   114 downloads

  • 0

Advertisements


#77
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
Hi PoorestFish,

I would like to see your hosts file. Could you please upload it to dropbox.

It is located at C:\Windows\System32\drivers\etc

It may be hidden. If so click on the Start orb, type "run" and press enter. Then type "C:\Windows\System32\drivers\etc\hosts" in to the box and press enter. When asked how to open the file, choose notepad.

Also, was this computer ever part of a business network?

  • 0

#78
PoorestFish

PoorestFish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 62 posts
Attached is the requested file and no this computer used to be on a school network, but has since been a home computer for the past two years with no issues.

# Copyright © 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost

It says I cannot attach just the host file so I just copied the text from notepad.
  • 0

#79
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
Hi PoorestFish,

Just wanted to let you know that I am still here. I should have another fix for you soon.
  • 0

#80
PoorestFish

PoorestFish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 62 posts
Thanks Buddierdl. I appreciate it and please take your time.
  • 0

#81
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
Hi PoorestFish,

Let try forcing a reset of the update components. Please download the attached batch to your desktop, then right click it and Run as Administrator.


If that doesn't help, could you try updating with the computer booted to Safe Mode with Networking.

Attached Files


  • 0

#82
PoorestFish

PoorestFish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 62 posts
No changes after applying the update batch file. :unsure:
  • 0

#83
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
Did it make a log on your desktop?

Did you try Safe Mode with Networking?
  • 0

#84
PoorestFish

PoorestFish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 62 posts
Safe Mode returns the same errors.

Attached Files


  • 0

#85
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
Hi PoorestFish,

I made a little change to the batch file. Could you please download the new one and run again. Make sure to delete the old one first. Run it as administrator and post the resulting log.

Also, let's have a look at another registry entry.

Hello, user. Please run the following scan for me.
Open OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /S
  • Select the None box in the middle on the top of the window
  • Click the Run Scan button. Post the log it produces in your next reply.

Attached Files


  • 0

Advertisements


#86
PoorestFish

PoorestFish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 62 posts
Buddierdl,

I am back.

Ran the batch file and everything went smoothly though there were some errors that occurred that certain modules could not be found as with the previous batch file you asked me to run. Attached are the two files you asked for. Thank you for staying with me through this.

Attached Files


  • 0

#87
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
Hi PoorestFish,

Please click on the start orb and type in "cmd". Right-click on the icon that comes up and select "Run as Administrator." Please type in each of the lines below, pressing enter after each one and determine which one throws an access denied error. You can copy/paste the lines to avoid typing errors. To paste into the command prompt, just right-click on the window and select "paste."

Del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"
Ren %systemroot%\SoftwareDistribution\DataStore DataStoreBackup.bak
Ren %systemroot%\SoftwareDistribution\Download DownloadBackup.bak
Ren %systemroot%\system32\catroot2 catroot2backup.bak


When you find out which line threw the error, please open up Windows Explorer and navigate to the given folder. I believe it will be the catroot2 one that gives you the error. Please then rename that folder to the same name, but adding a .bak to the end of the name. Windows will require you to take ownership of the file first. (If it is the first line that throws the error, you will just need to delete any files in the C:\ProgramData\Application Data\Microsoft\Network\Downloader\ starting with qmgr.)

Try Windows Updates now.

If no joy, please reset your firewall as shown here and uninstall Spybot. Then try updating again.

Also, see if browsing to http://www.update.mi...muv4wuredir.cab using Internet Explorer downloads a small file.
  • 0

#88
PoorestFish

PoorestFish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 62 posts
Followed your instructions and you were correct, but I cannot rename the folder as it gives me a "the action can't be completed because the folder or a file in it is open in another program" folder usage prompt. Any ideas?
  • 0

#89
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
Hi PoorestFish,

Ok, I see the problem. Before you rename the catroot2 folder, you must open an command prompt as before (make sure to select "Run as Administrator" again), and type each line below followed by enter. Make sure you type correctly.

net stop bits
net stop wuauserv
net stop cryptsvc


Now, you should be able to rename the catroot2 folder to catroot2.old. Please restart you computer after this (very important) and try to update now. Make sure to continue with the other steps if this doesn't help.

If no joy, please reset your firewall as shown here and uninstall Spybot. Then try updating again.

Also, see if browsing to http://www.update.mi...muv4wuredir.cab using Internet Explorer downloads a small file.


If nothing works, let me know if you get the same error still. I have another something we can try.
  • 0

#90
PoorestFish

PoorestFish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 62 posts
Nothing worked, but I uninstalled Spybot and also downloaded the small file from Internet Explorer.

The Windows Update Error is still the same.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP