Rorschach112, a security warrior from the Spybot Search & Destroy Forums sent me over to this forum with a problem he feels you guys will be able to help me solve. My computer was infected with some malware and for the past few days Rorschach112 has been working with me to get rid of it. Now my system is clean and my computer is running normally, except for one thing:
Since running into this malware problem, Windows updates are failing to download and install. The auto updates icon appears near the clock at the bottom right corner > I click it > select all updates and click install. The update window disappears. No success message or error message. Then after a while, the icon shows up again and the exact same updates are listed to be installed again... strange. So I opened the update history page in windows update section of their website and saw that since the date of the malware problem - all updates have failed to install.
The updates I am trying to download and install are:
Security Update for Windows XP K3941693
Security Update for Windows XP K3945553
Security Update for Windows XP K3948590
Rorschach112 suggested the following:
Download Dial-a-Fix to your desktop and unzip it to it's own folder
Run it
Under WU/WUAU, check the box beside "Fix Windows Update", then click Go
Reboot your PC and see if Windows Update works now
I did as he suggested. I got some error messages and after reboot, updates still failed.
I posted the Dial-a-Fix log and that's when he referred me over to here. Below I've copy/pasted the log file. Whad'ya think?
Here is the Dial-a-Fix log:
Notes about this log:
1) "->" denotes an external command being executed, and "-> (number)" indicates
the return code from the previous command
2) Not all external command return codes are accurate, or useful
3) Sometimes commands return 0 (no error) even when they fail or crash
4) If an error occurs while registering an object, please send an email to:
[email protected] and include a copy of this log
DAF version: v0.60.0.24
--- System info ---
OS: Microsoft Windows XP Service Pack 2
IE version: 7.0.5730.13
MPC: 55274-640
CPU: Intel® Pentium® 4 CPU 2.40GHz (~2390MHz)
BIOS: 2/13/2005
Memory (approx): 1021MB
Uptime: 0 hour(s)
Current directory: C:\Documents and Settings\Dog Machine\My Documents\DOWNLOADS\dial a fix\Dial-a-fix-v0.60.0.24
---
5/4/2008 9:30:39 PM -- Dial-a-fix : [v0.60.0.24] -- started
9:30:39 PM | Policy scan started
9:30:39 PM | Policy scan ended - no restrictive policies were found
--- Windows Update ---
--- Registration: Windows Update/Automatic Update DLLs ---
9:31:08 PM | Unregistered: C:\WINDOWS\system32\msxml.dll
9:31:08 PM | Registered: C:\WINDOWS\system32\msxml.dll
9:31:09 PM | Unregistered: C:\WINDOWS\system32\msxml2.dll
9:31:09 PM | Registered: C:\WINDOWS\system32\msxml2.dll
9:32:15 PM | Error during unregistration of C:\WINDOWS\system32\msxml3.dll - version: . The error returned is: Unspecified error
(-2147467259)
9:32:29 PM | Error during registration of C:\WINDOWS\system32\msxml3.dll - version: . The error returned is: Access is denied.
(-2147024891)
9:32:29 PM | Unregistered: C:\WINDOWS\system32\msxml4.dll
9:32:29 PM | Registered: C:\WINDOWS\system32\msxml4.dll
9:32:30 PM | Unregistered: C:\WINDOWS\system32\qmgr.dll
9:32:30 PM | Registered: C:\WINDOWS\system32\qmgr.dll
9:32:30 PM | Unregistered: C:\WINDOWS\system32\qmgrprxy.dll
9:32:30 PM | Registered: C:\WINDOWS\system32\qmgrprxy.dll
9:32:30 PM | Unregistered: C:\WINDOWS\system32\muweb.dll
9:32:30 PM | Registered: C:\WINDOWS\system32\muweb.dll
9:32:30 PM | Unregistered: C:\WINDOWS\system32\winhttp.dll
9:32:30 PM | Registered: C:\WINDOWS\system32\winhttp.dll
9:32:31 PM | Registered: C:\WINDOWS\system32\wuapi.dll
9:32:31 PM | Unregistered: C:\WINDOWS\system32\wuaueng.dll
9:32:33 PM | Registered: C:\WINDOWS\system32\wuaueng.dll
9:32:33 PM | Unregistered: C:\WINDOWS\system32\wuaueng1.dll
9:32:33 PM | Registered: C:\WINDOWS\system32\wuaueng1.dll
9:32:33 PM | Unregistered: C:\WINDOWS\system32\wucltui.dll
9:32:33 PM | Registered: C:\WINDOWS\system32\wucltui.dll
9:32:33 PM | Unregistered: C:\WINDOWS\system32\wups.dll
9:32:33 PM | Registered: C:\WINDOWS\system32\wups.dll
9:32:33 PM | Unregistered: C:\WINDOWS\system32\wups2.dll
9:32:33 PM | Registered: C:\WINDOWS\system32\wups2.dll
9:32:33 PM | Unregistered: C:\WINDOWS\system32\wuweb.dll
9:32:33 PM | Registered: C:\WINDOWS\system32\wuweb.dll
9:32:33 PM | Registered: C:\WINDOWS\system32\ole32.dll
--- SSL/HTTPS/Cryptography ---
9:33:00 PM | Executed 'cmd.exe /c rmdir /q /s C:\WINDOWS\system32\Catroot2'
--- Registration: SSL/HTTPS/Cryptography ---
9:33:04 PM | Unregistered: C:\WINDOWS\system32\cryptdlg.dll
9:33:04 PM | Registered: C:\WINDOWS\system32\cryptdlg.dll
9:33:05 PM | Unregistered: C:\WINDOWS\system32\cryptui.dll
9:33:05 PM | Registered: C:\WINDOWS\system32\cryptui.dll
9:33:05 PM | Unregistered: C:\WINDOWS\system32\cryptext.dll
9:33:05 PM | Registered: C:\WINDOWS\system32\cryptext.dll
9:33:05 PM | Unregistered: C:\WINDOWS\system32\dssenh.dll
9:33:05 PM | Registered: C:\WINDOWS\system32\dssenh.dll
9:33:06 PM | Unregistered: C:\WINDOWS\system32\gpkcsp.dll
9:33:06 PM | Registered: C:\WINDOWS\system32\gpkcsp.dll
9:33:06 PM | Unregistered: C:\WINDOWS\system32\initpki.dll
9:34:21 PM | Registered: C:\WINDOWS\system32\initpki.dll
9:34:23 PM | Unregistered: C:\WINDOWS\system32\licdll.dll
9:34:24 PM | Registered: C:\WINDOWS\system32\licdll.dll
9:34:24 PM | Unregistered: C:\WINDOWS\system32\mssign32.dll
9:34:24 PM | Registered: C:\WINDOWS\system32\mssign32.dll
9:34:24 PM | Unregistered: C:\WINDOWS\system32\mssip32.dll
9:34:24 PM | Registered: C:\WINDOWS\system32\mssip32.dll
9:34:25 PM | Unregistered: C:\WINDOWS\system32\scardssp.dll
9:34:25 PM | Registered: C:\WINDOWS\system32\scardssp.dll
9:34:25 PM | Unregistered: C:\WINDOWS\system32\sccbase.dll
9:34:25 PM | Registered: C:\WINDOWS\system32\sccbase.dll
9:34:25 PM | Unregistered: C:\WINDOWS\system32\scecli.dll
9:34:30 PM | Registered: C:\WINDOWS\system32\scecli.dll
9:34:30 PM | Unregistered: C:\WINDOWS\system32\softpub.dll
9:34:31 PM | Registered: C:\WINDOWS\system32\softpub.dll
9:34:31 PM | Unregistered: C:\WINDOWS\system32\slbcsp.dll
9:34:31 PM | Registered: C:\WINDOWS\system32\slbcsp.dll
9:34:31 PM | Unregistered: C:\WINDOWS\system32\regwizc.dll
9:34:31 PM | Registered: C:\WINDOWS\system32\regwizc.dll
9:34:31 PM | Unregistered: C:\WINDOWS\system32\rsaenh.dll
9:34:31 PM | Registered: C:\WINDOWS\system32\rsaenh.dll
9:34:31 PM | Unregistered: C:\WINDOWS\system32\winhttp.dll
9:34:31 PM | Registered: C:\WINDOWS\system32\winhttp.dll
9:34:31 PM | Unregistered: C:\WINDOWS\system32\wintrust.dll
9:34:32 PM | Registered: C:\WINDOWS\system32\wintrust.dll
--- Registration: Programming cores/runtimes ---
9:34:32 PM | Registered: C:\WINDOWS\system32\atl.dll
9:34:32 PM | Registered: C:\WINDOWS\system32\corpol.dll
9:34:32 PM | Registered: C:\WINDOWS\system32\jscript.dll
9:34:32 PM | Registered: C:\WINDOWS\system32\dispex.dll
9:34:37 PM | Error during registration of C:\WINDOWS\system32\scrrun.dll - version: 5.6.0.8820. The error returned is: Unspecified error
(-2147467259)
9:34:37 PM | Registered: C:\WINDOWS\system32\scrobj.dll
9:34:38 PM | Registered: C:\WINDOWS\system32\vbscript.dll
9:34:38 PM | Registered: C:\WINDOWS\system32\wshext.dll