PDA

View Full Version : Windows update problem



QW.
11-11-2012, 02:02 PM
Whenever I use my Windows 7 PC it says it cannot connect to Windows Update. It comes up with 8024402f as the error. I have run the program it suggests to fix it but it still will not connect to Windows Update.

Could McAfee be causing the problem?

Speedy Gonzales
11-11-2012, 02:06 PM
Wouldnt be surprised if Mcafee is the cause. Its not that great. It'll probably crash the computer sooner or later. One thing its good at. Disable it, then see if it works. If it does thats probably the culprit

QW.
11-11-2012, 02:11 PM
Disable the antivirus?

Speedy Gonzales
11-11-2012, 02:17 PM
Is it the AV or does it include the firewall?? If it includes the firewall disable it

QW.
11-11-2012, 02:20 PM
Think it is both the antivirus and firewall.

Speedy Gonzales
11-11-2012, 02:21 PM
Disable it then in its options, then see if windowsupdate works

QW.
11-11-2012, 02:36 PM
No luck with turning the antivirus and the firewall off. Still not connecting to Windows Update

Speedy Gonzales
11-11-2012, 02:41 PM
What does it say under ipv4 under the network/LAN connection??

I take it this can get on the net / it loads sites?

Get this, run it then tick all options except the last one (http://www.bleepingcomputer.com/download/farbar-service-scanner/). Post the text that comes up, after you click on scan and after it finishes scanning

wainuitech
11-11-2012, 03:50 PM
Dont bother pissing about running various fix it programs, total waste of time.

Have a look at the following thread- EXACT same problem same error message, and fix. http://pressf1.pcworld.co.nz/showthread.php?127587-Windows-Update-issue

Direct link to actual fix, use method #8 http://support.microsoft.com/kb/2509997

QW.
11-11-2012, 04:05 PM
Dont bother pissing about running various fix it programs, total waste of time.

Have a look at the following thread- EXACT same problem same error message, and fix. http://pressf1.pcworld.co.nz/showthread.php?127587-Windows-Update-issue

Direct link to actual fix, use method #8 http://support.microsoft.com/kb/2509997

I tried method 8 and it didn't work at all.

Speedy Gonzales
11-11-2012, 04:22 PM
Or you may have to do this. Post #4 (http://www.vistax64.com/windows-updates/296520-windows-update-error-8024402f.html)

Except, put your ISP's ip's in for the DNS server ips

QW.
11-11-2012, 04:26 PM
Or you may have to do this. Post #4 (http://www.vistax64.com/windows-updates/296520-windows-update-error-8024402f.html)

Except, put your ISP's ip's in for the DNS server ips

What is Xtra's DNS IP's then?

Speedy Gonzales
11-11-2012, 04:30 PM
Look on the Xtra site. I have no idea. I'm not with Xtra

QW.
11-11-2012, 04:38 PM
Or you may have to do this. Post #4 (http://www.vistax64.com/windows-updates/296520-windows-update-error-8024402f.html)

Except, put your ISP's ip's in for the DNS server ips

Tried this and it doesn't work.

sk69ersnz
11-11-2012, 04:46 PM
When you tried that Method 8 did you get a access denied message?
If so do it in safe mode,worked for me.

Speedy Gonzales
11-11-2012, 04:52 PM
Get the file I posted in post 8. That'll tell you if something is missing that windowsupdate needs

QW.
11-11-2012, 05:13 PM
Here is the results ---


Farbar Service Scanner Version: 09-11-2012
Ran by USERNAME (administrator) on 11-11-2012 at 17:01:46
Running from "K:\"
Windows 7 Home Premium Service Pack 1 (X86)
Boot Mode: Normal
************************************************** **************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcore.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys
[2012-09-13 18:01] - [2012-08-23 06:16] - 1292144 ____A (Microsoft Corporation) A5EBB8F648000E88B7D9390B514976BF

C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****

Speedy Gonzales
11-11-2012, 05:15 PM
And you ticked all the options except the last one, then clicked on scan?? Besides that it looks OK

QW.
11-11-2012, 05:19 PM
And you ticked all the options except the last one, then clicked on scan?? Besides that it looks OK

Yes all the options expect the last one as you said.

Speedy Gonzales
11-11-2012, 05:22 PM
Youre not using DD-WRT firmware on the router are you? If you are, you need to untick the Filter ActiveX option in it. Looks like this can also cause that error, if its enabled / ticked

Alex B
11-11-2012, 05:27 PM
Try some the other fixes from that ms page on page one. Some clutching at straws going on here.

QW.
11-11-2012, 05:36 PM
Youre not using DD-WRT firmware on the router are you? If you are, you need to untick the Filter ActiveX option in it. Looks like this can also cause that error, if its enabled / ticked

Where would I find that on my D-Link DSL-G604T?

Speedy Gonzales
11-11-2012, 05:39 PM
Did you put DD-WRT on it?? If you didn't you wont see it. Put teamviewer on this, and I'll have a look. Send the ID and pw it gives you, to me in a PM

QW.
11-11-2012, 05:40 PM
Did you put DD-WRT on it?? If you didn't you wont see it.

Don't know if it is there or not.

Speedy Gonzales
11-11-2012, 05:43 PM
Probably isnt then, if you cant remember. The option wont be there

QW.
11-11-2012, 05:51 PM
So what else could be causing Windows Update not work.

wainuitech
11-11-2012, 05:54 PM
What happened when you changed the software distribution folder ??

Was there any sort of message ??

Saying " it didn't work at all"means nothing really.

BTW, if McAfee is the cause, then simply disabling it wont work, you have to actually fully uninstall/remove it.

Has windows update actually worked in the past with the current software / Hardware etc ?

QW.
11-11-2012, 06:04 PM
What happened when you changed the software distribution folder ??

Was there any sort of message ??

Saying " it didn't work at all"means nothing really.

BTW, if McAfee is the cause, then simply disabling it wont work, you have to actually fully uninstall/remove it.

Has windows update actually worked in the past with the current software / Hardware etc ?

I got the message like in the post in the other thread that you linked

http://pressf1.pcworld.co.nz/showthread.php?127587-Windows-Update-issue&p=1127962&viewfull=1#post1127962

No hardware been added. Did have MSE installed but got rid of because of the so called return to sender emails were coming in the inbox. Wasn't my choice to install it. Software nothing has been changed that I am aware of. Could have something there I don't nothing about. Windows update was working fine till McAfee was installed.

catspyjamas
11-11-2012, 06:06 PM
Interesting. I'm having exactly the same problem in addition to the post I made here: http://pressf1.pcworld.co.nz/showthread.php?127735-Strange-problem.

I was able to fix this with wainuitech's suggestion (option 8 - http://support.microsoft.com/kb/2509997). This worked for two days and then the problem came back. I had to do it a second time (but rename it something different to softwaredistribution.old as had existing folder with same name) and again it worked for 2-3 days. Now this solution isn't working at all for me either. I also tried the system readiness hotfix in method 2 in the same link, and also a MS fixit tool for WU probs (can't find link), which said it corrected something, but the problem persists - repeated 8024402f errors). I also tried google proxy addresses since that appears to have helped some.

I googled "8024402f October 2012" and there are a LOT of results for vista and win7, with very varied fixes. The problem began for me on 18/10/2012 - seems around the same time for many.

We have the same modem/router I note.

Speedy Gonzales
11-11-2012, 06:11 PM
MSE wouldnt cause the return to sender ermails. You probably sent emails to non-existent email addressees. And they've bounced back to you. If WU was working, before Mcafee was installed, uninstall it then use its removal tool. Obviously, its blocking something. Since both of you are using the same modem/router does it have the latest firmware on it?

wainuitech
11-11-2012, 06:28 PM
If you got the "access denied" message, then nothing has actually changed.

It comes up with that message when the Windows update service is still running, thats why you have to stop it Via a Command prompt.

Failing that, you can start the PC in safe mode Windows update service wont run in Safe mode, then you can change the Folders name, when rebooting normally, assuming its a corrupted Software Distribution Folder windows update should now run normally.

As I mentioned in the other Thread "Normally I do it slightly different to the instructions, I actually cut/paste the SoftwareDistribution folder to another location,instead of renaming, say the desktop, then once working you can delete it."

The above has to be done with the Update service stopped or in safe mode.

It actually appears that theres a update out thats causing some problems. OR something on the PC's is clashing, sometimes it can be antivirus software, or some other programs.

Personally i wouldn't trust mcAfee, its caused lots of problems sometimes. Cant remember how many times I've had to remove it from customers PC's as it stopped everything from working on the persons internet due to it corrupting its self

QW.
11-11-2012, 06:31 PM
MSE wouldnt cause the return to sender ermails. You probably sent emails to non-existent email addressees. And they've bounced back to you. If WU was working, before Mcafee was installed, uninstall it then use its removal tool. Obviously, its blocking something. Since both of you are using the same modem/router does it have the latest firmware on it?

I have V3.02B01T01.NZ.20070329 on the router

Speedy Gonzales
11-11-2012, 06:38 PM
The firmware has been updated 3 times since then. Thats the original firmware (http://www.dlink.com.au/tech/download/download.aspx?product=DSL-G604T-GenII_NZ&revision=REV_C&filetype=Firmware)

I would update it, then see if its got the same prob. I would still uninstall McAfee

catspyjamas
11-11-2012, 06:48 PM
We have different firmware and McAffee has never been on this machine (Nortons pre-installed but removed that with norton removal tool years ago, leftovers removed manually after that since NRT isn't that efficient). It doesn't seem to be common to a modem or AV that I can see in the many posts I've looked at for this error for this month & last month. Mind you the successful fixes aren't that in common either.

Not sure about the OP but I ran the command in option 8 as an admin (in normal mode) and did not get access denied message - got message saying service successfully stopped, and at end successfully started. It fixed Windows Update the first two times using this method, but not the third time it sprung an error.

Speedy Gonzales
11-11-2012, 07:07 PM
Run IE and look under tools. Activex filtering isnt ticked here is it?? If it is, untick it QW. Get tdsskiller then run it (http://support.kaspersky.com/faq/?qid=208283363). See if it finds any rootkits. If it does, select cure wait for it to finish, then reboot

QW.
11-11-2012, 08:34 PM
Run IE and look under tools. Activex filtering isnt ticked here is it?? If it is, untick it QW. Get tdsskiller then run it (http://support.kaspersky.com/faq/?qid=208283363). See if it finds any rootkits. If it does, select cure wait for it to finish, then reboot

Tried the tdsskiller and nothing showed up. Removed McAfee and replaced with MSE. Still not connecting to Windows Update. Checked the ActiveX fitering and it isn't selected.

zqwerty
11-11-2012, 10:56 PM
Is the Background Intelligent Transfer Service (B.I.T.S.) running, if it isn't the computer won't update.

QW.
11-11-2012, 11:18 PM
Is the Background Intelligent Transfer Service (B.I.T.S.) running, if it isn't the computer won't update.

Don't know where to find this or where to start.

I guess a reinstall is on the cards if it cannot be sorted.

zqwerty
12-11-2012, 12:01 AM
I'm on Win8 at the moment but if you start Task Manager, Ctrl+Alt+Delete, or right click task bar on desktop choose Task Manager, there should be a Services tab where you would find the BITS service alphabetically listed, alternatively look in Control Panel for Services.

sk69ersnz
12-11-2012, 07:55 AM
Problem has returned for me as well on my partners laptop.My desktop is fine.

Speedy Gonzales
12-11-2012, 08:15 AM
I would say BITS is running / working. Otherwise post #17 would have said the service isnt there / the service is missing. Or the reg entry/entries for it are missing

Thats what farbar service scanner does. It scans for the services, and it'll list any that are missing, if they're not running. Or if the reg entries are missing.

The one that was posted looks OK. If something was wrong / missing, it'd list it alongside the service. And would also list the registry entry for the service (it'd say it doesnt exist / or its missing)

sk69ersnz
12-11-2012, 08:23 AM
The method 8 fix is not working anymore.Looks like I'm in the same boat as QW.

Speedy Gonzales
12-11-2012, 08:24 AM
Whats your error Sk69? Is it the same error QW is getting?? Run farbar service scanner. Tick all options, except the last one. And click on scan. Post the results here. We'll see if any services are missing on your PC

sk69ersnz
12-11-2012, 08:39 AM
A duplicate file name exists,or the file cannot be found.
thats what I get when I run the method 8 fix.
Windows update error is Code 8024402f

Farbar Service Scanner Version: 09-11-2012
Ran by Julie (administrator) on 12-11-2012 at 08:28:17
Running from "E:\"
Windows 7 Home Premium Service Pack 1 (X86)
Boot Mode: Normal
************************************************** **************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\windows\system32\nsisvc.dll => MD5 is legit
C:\windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\windows\system32\dhcpcore.dll => MD5 is legit
C:\windows\system32\Drivers\afd.sys => MD5 is legit
C:\windows\system32\Drivers\tdx.sys => MD5 is legit
C:\windows\system32\Drivers\tcpip.sys
[2012-09-12 08:31] - [2012-08-23 06:16] - 1292144 ____A (Microsoft Corporation) A5EBB8F648000E88B7D9390B514976BF

C:\windows\system32\dnsrslvr.dll => MD5 is legit
C:\windows\system32\mpssvc.dll => MD5 is legit
C:\windows\system32\bfe.dll => MD5 is legit
C:\windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\windows\system32\SDRSVC.dll => MD5 is legit
C:\windows\system32\vssvc.exe => MD5 is legit
C:\windows\system32\wscsvc.dll => MD5 is legit
C:\windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\windows\system32\wuaueng.dll => MD5 is legit
C:\windows\system32\qmgr.dll => MD5 is legit
C:\windows\system32\es.dll => MD5 is legit
C:\windows\system32\cryptsvc.dll
[2012-11-01 21:21] - [2012-06-02 17:36] - 0140288 ____A (Microsoft Corporation) 96C0E38905CFD788313BE8E11DAE3F2F

C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\windows\system32\svchost.exe => MD5 is legit
C:\windows\system32\rpcss.dll => MD5 is legit


**** End of log ****

Speedy Gonzales
12-11-2012, 08:42 AM
Hmm ok. Looks like the services on your PC are OK too. I could have a look using teamviewer, if you want Sk69. See what else I can find, why it wont update

sk69ersnz
12-11-2012, 08:48 AM
I'm thinking it's MSE.My pc is running Nod.The MSE definitions are getting through.Looking at the Windows update history.

Speedy Gonzales
12-11-2012, 08:50 AM
You dont need both. Altho, I've never heard of MSE blocking windowsupdate. Since, its not a firewall, its an AV program. NOD doesnt have an activex filter option in its options does it??

sk69ersnz
12-11-2012, 08:52 AM
Sorry,partners pc has MSE,mine has Nod.

Speedy Gonzales
12-11-2012, 08:56 AM
OK that farbar service scanner log, is from your partners laptop right not yours?? Since her laptop has the prob, not your desktop? I still doubt MSE would cause that error. I could have a look with teamviewer, if you / she wants.

sk69ersnz
12-11-2012, 08:56 AM
Last Windows update was KB2749655

sk69ersnz
12-11-2012, 08:57 AM
Sure,pm me.

Speedy Gonzales
12-11-2012, 08:59 AM
You need to PM me, with the ID and password, once you install / run teamviewer. So, I can log in

sk69ersnz
12-11-2012, 09:01 AM
Done.Did you get it?

Speedy Gonzales
12-11-2012, 10:14 AM
Ok I managed to fix Sk69's prob. I changed the DNS server ip's under the network connection to Google's DNS server ip's 8.8.8.8 and 8.8.4.4. I did what I posted in Post #11.

zqwerty
12-11-2012, 10:17 AM
Ok good.

sk69ersnz
12-11-2012, 10:32 AM
Updated successfully.Thanks again Speedy.

QW.
12-11-2012, 11:09 AM
Ok I managed to fix Sk69's prob. I changed the DNS server ip's under the network connection to Google's DNS server ip's 8.8.8.8 and 8.8.4.4. I did what I posted in Post #11.

I wonder if that would work. Do I do this in the network sharing centre in the control panel?

sk69ersnz
12-11-2012, 11:25 AM
Network and Sharing Center then Change adapter settings,Wireless Network Connection (for me),right click,properties,Internet Protocol Version 4 (TCP/IPv4) click properties then use the following DNS server addresses.

sk69ersnz
12-11-2012, 11:35 AM
Or just wait for Speedy to run you through it

wainuitech
12-11-2012, 11:37 AM
Ok I managed to fix Sk69's prob. I changed the DNS server ip's under the network connection to Google's DNS server ip's 8.8.8.8 and 8.8.4.4. I did what I posted in Post #11. So whose IP 's were there originally, in other words which ISP is blocking windows updates ?

sk69ersnz
12-11-2012, 11:45 AM
So whose IP 's were there originally, in other words which ISP is blocking windows updates ?

I'm with Telecom.

Speedy Gonzales
12-11-2012, 01:03 PM
There were no ips under the wireless connection. It was on auto. I left the top 1/2 on auto. And put in Google's ip addresses for the DNS server ips

Speedy Gonzales
12-11-2012, 01:06 PM
Updated successfully.Thanks again Speedy.

Sweet :) QW install teamviewer then send me the ID and password it gives you to me in a PM. And I'll do what I did on Sk69's PC. We'll see if it works

linw
12-11-2012, 01:14 PM
Nice to know how/why the DNS mod works.

Speedy Gonzales
12-11-2012, 01:18 PM
It sounds like an ip / DNS prob somewhere. Like something didnt get resolved. And thats what was causing WU to bring up that error. I added the 3 MS sites to IE's trusted sites as well. But, I dont thinik that did anything. Because, it brought up the same error after I had added them. WU didn't work, until I changed the DNS server ips from auto, to Google's ip addresses.

linw
12-11-2012, 01:47 PM
Sure is weird. My son seems to have a similar problem which he thinks is related to Office 10 updates. I have pointed him to your solution, Speedy, so will report back when he tries it.

QW.
12-11-2012, 02:01 PM
Ok I managed to fix Sk69's prob. I changed the DNS server ip's under the network connection to Google's DNS server ip's 8.8.8.8 and 8.8.4.4. I did what I posted in Post #11.

Just tried this and so far it is still checking for updates. No error has appeared.

Speedy Gonzales
12-11-2012, 02:03 PM
Good the longer it takes to check for updates, the more chance of it working. Its when it takes less than 1-2 minutes, yoiu know its going to fail with an error

Speedy Gonzales
12-11-2012, 02:07 PM
Sure is weird. My son seems to have a similar problem which he thinks is related to Office 10 updates. I have pointed him to your solution, Speedy, so will report back when he tries it.

If it comes up with an error, post it here.

QW.
12-11-2012, 02:52 PM
Well it seems that using the google DNS settings has done the trick. I was to install 15 important updates plus 5 optional and had no problems at all.

Thanks Speedy for your help.

Speedy Gonzales
12-11-2012, 02:55 PM
sweet!

catspyjamas
12-11-2012, 07:00 PM
OMG Speedy how many chocolate fish can I send you??!!!!! :D THANK-YOU!!

It took 40mins to check for updates after this but SUCCESS!!!!! You know the stupid thing? I had already done this with Xtra (level 2 helpdesk) a few days ago - he got me to change the DNS settings to Google's only he gave me 8888 and 8484 instead of 8844 for the second one. (*head-desk-thump*) When I still couldn't open those the websites I was having trouble with (see here: http://pressf1.pcworld.co.nz/showthread.php?127735-Strange-problem) helpdesk dude told me it can't be Telecom it had to be my modem or computer. And given that other Telecom clients on pressf1 have reported having no difficulty opening those 4 sites AND given my inability to connect to the internet via an ethernet (can only connect wirelessly) - I was forced to agree. Guess what? With Google DNS settings I can open all four of those websites as well as check for windows updates. Whaddya know! I'd cleared the cache and tested all four sites right before I did this and they still didn't work, but they loaded immediately after changing the DNS to those Google addresses.

wainuitech
12-11-2012, 07:40 PM
Hmmmmmm the question should be " What the hell are xtra up to" ??

If their own help desk are suggesting to use googles DNS, Xtra obviously playing silly buggers someplace, OR Xtra has been put on to many black lists ( again)

Speedy Gonzales
12-11-2012, 07:48 PM
Woohoo Cats ! Yup WT, it sounds like Teloecom have done somethng somewhere.

catspyjamas
12-11-2012, 07:57 PM
If their own help desk are suggesting to use googles DNS, Xtra obviously playing silly buggers someplace, OR Xtra has been put on to many black lists ( again)

Yeah I think that was just to check if it was a DNS issue or my equipment. He said if it worked with Google's numbers it had to be Telecom and they'd fix it, but given that he gave me the wrong numbers - it didn't. (At least that is how he explained it to me).

Wainuitech may I pick your brain please? It was suggested in a comment in my other post (see http://pressf1.pcworld.co.nz/showthread.php?127735-Strange-problem) that my host's file may be hijacked given that it was tech help forums & sites that are a part of MS that I could not access. At the time of posting I had considered this but thought that might be because 90% of my web surfing in recent times has been to such forums to try and solve my stupid windows update error, and I hadn't checked a lot of other types of sites. I have now, and yeah - it was only those four tech type sites. So...if my HOST's file has been hijacked, would using these Google settings override the HOST's file? Because if that's the case then I may have a malware problem I need to fix. It does seem weird that no-one else on here had problems opening the above sites. Also I would have thought something would have been found on my avast, MBAM pro, Hitman Pro & SAS scans (or in realtime) by now if I was infected, but everything is 100% clean and has been running/updating etc normally. I don't really know how HOST's files & DNS settings work so sorry if this seems a silly question.

Oh and another question - can I keep these Google settings in the mean time? Or could this set me up for problems? If it could cause problems or risk my computer's safety somehow then I'll change it back and employ this trick only to check for Windows Update. Thanks.

catspyjamas
12-11-2012, 08:06 PM
Yeah Speedy it certainly seems like Telecom may be a common denominator with the NZ threads about 802440f error. I found one on geekzone.co.nz too - also a Telecom customer. Thanks again. Just in time for WU this Wednesday. :) :)

Speedy Gonzales
12-11-2012, 08:07 PM
If you had malware, virus / trojan, or whatever, it would / could add sites, like Symantec, norton, kaspersky, or any other AV program's site to the hosts files.

And maybe windows update / the Microsoft site. So you couldn't get programs to remove the malware, or update windows. And it may have killed the services you need (like the firewall, the windowsupdate service). And others. And, unless you know how to import the registry entries that are missing back into the system, you'll be stuffed

You could check the hosts file to see whats in it

Open notepad then go to C:\windows\system32\drivers\etc. Change the txt document bit on the right to all files. So you can see the hosts file

Something you type in / or add like DNS server ip's don't get added to the hosts file. A person would have to add the entry / entries. Or things like trojans / malware would add entries to the hosts file.

catspyjamas
12-11-2012, 08:34 PM
Thanks for instructions. Yeah I could go to every other tech forum site it seems except those listed, and MOST microsoft sites as well as Eset, Avira, Kaspersky, Symantec, Avast, AVG, Bitdefender, McAffee, Prevx, F-Secure, SAS, Spybot, MBAM etc etc etc so I figured that was a good sign.

Things are happening here at home so I will need to come back to this HOST file thingy tomorrow. Will report back. :) Have a nice rest of your night.

wainuitech
12-11-2012, 09:07 PM
Re post # 75 and questions: Theres no silly questions - if someone doesn't know something then ask. NO ONE knows everything, better to ask and someone answer than make a total dogs breakfast of what ever it is, then spend a lot longer trying to fix it.

Just to add to Speedy's post -- "most" infections that change settings so you cant open security related sites, usually cover them all, not just one or two.

As for the Googles DNS -- if its working - cant see any real reason why not to carry on using them.

Just had a look back over several customers ISP providers that have had some sort of connection problems over the last month or so -- Care to take a guess at who 99% of them have :rolleyes: :D

Googles DNS are used by many people world wide, if there was a inherent danger then I would expect they wouldn't use them. If they ever give troubles, then return Xtra's and see what happens.

Simple rule: if you make changes, make one at a time, and make sure you know what you did so it can be reversed if needed. Seen it many times people change several settings, "one" works - but which one was the actual fix ;)

"IF" you want to reset your HOST file back to default, then MS have a "fix it" that will do it. http://support.microsoft.com/kb/972034

sk69ersnz
13-11-2012, 06:54 AM
I wonder why it didn't happen to my other pc's.Should I be touching wood about now?

catspyjamas
13-11-2012, 11:12 AM
OK I followed your instructions Speedy and went to the HOST's file. Wainuitech thanks for the link because this showed me what it should look like in Vista. I've copied and pasted my HOST's file to show you, because while there are no things ADDED - I do notice there is a bit missing off the bottom! Please note I have NOT reset my HOST's file using the fixit thing:

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host


According to the info in that link from Wainuitech there should also be this at the bottom, but there isn't:

127.0.0.1 localhost
::1 localhost

Is this missing bit a problem??

I have a possible explanation for this - I note it was modified the day I had computer technician visit in March 2009 after Windows Defender had a detection for a Windows file that was actually a false positive (I have the invoice still so I know it was that day), but MS said it could change the hosts file. There were instructions relating to this false detection and how to fix this on a MS website (somewhere on here: http://www.microsoft.com/security/portal/Threat/Encyclopedia/Browse.aspx but I no longer have the exact link), but I didn't feel confident to make the change so had this guy come out and do it. (I was even less computer savvy back then!) I wonder if the computer technician didn't do it quite right? Or is this something Malware could have done subsequently?

Speedy Gonzales
13-11-2012, 12:00 PM
Thats fine. If it had anything under the last entry like windowsupdate, or the name of anti-virus sites, something like malware would have added them to the hosts file

catspyjamas
13-11-2012, 12:06 PM
Good that there is no sign of malware interference, but is it a problem to have the localhost bit at bottom missing? Will that stop anything working properly on my machine, or make it less safe?

Speedy Gonzales
13-11-2012, 12:07 PM
Nope what you posted is exactly what mine says in Windows 8

catspyjamas
13-11-2012, 12:29 PM
Ah good, thanks :) The kb in the link above doesn't mention those two lines on the Vista HOST's file being optional, so wanted to check.

I found this: http://www.h-online.com/security/news/item/Windows-Defender-False-alarm-triggered-by-hosts-file-740445.html << that was what I was referring to exactly.

Side note - look at how many views this thread has versus others on pressf1! Lots of people having 8024402f errors one wonders?? I hope some of the views are from Telecom!! I am going to ring them back later and tell them that the CORRECT Google DNS numbers solved both the WU prob after all - I was just given the wrong numbers by them the other day. Thanks for all the help with this btw Speedy and Wainuitech. Tis much appreciated. :) I am a nurse so much better with the workings of hearts and kidneys rather than computers - really good to be able to come on here for help.

1101
13-11-2012, 04:20 PM
Side note - look at how many views this thread has versus others on pressf1! Lots of people having 91967121 errors one wonders?? ........Google DNS numbers

Just a note.
Ive a laptop here with the exact same issue: 91967121 error on Winupdate.
To fix I changed the DNS to googles DNS numbers, ran Winupdate & wait while it found some updates * problem fixed.

I then changed DNS back to obtain from DCHP (Telecom) & restarted .
Win Update now works even with Xtra's DNS
Searching overseas forums, others are resolving this with the exact same fix(DNS): so it cant be Xtra's DNS causing all these issues, unless there is a worldwide DNS issue

perhaps "ipconfig /flushdns" would also have solved the issues ???


:badpc: