Re: error 80072EFD Windows update at wits end

Thanks for posting the requested information. It helps *immensely*.

1) When was McAfee removed from the system and did you run their removal tool *afterwards* ?
http://service.mcafee.com/FAQDocument.aspx?id=TS100507

The link to it is under Step 2 on the above page.

Since Spysweeper comes in differing forms you would need Webroot Antivirus with Spysweeper or Webroot Internet Security Essentials installed in order to remove a trojan. Spysweeper itself, only removes spyware.
You also mention
The only 3rd party firewall I've used was the
one on spysweeper.
Which leads one to assume that this is *not* Spysweeper, but one of
the other Webroot products.

2) Please post *which* Webroot product is installed and it's version.
How many antivirus programs are installed and monitoring the system ?

You also mention that AVG is installed. IF there's another AV included with Spysweeper that means there are 2 antivirus programs monitoring the system. That's never a good thing. Only one AV should be monitoring the system at a time.

3) Were you asked to check the what's contained in the Hosts file ?
Click the Start orb, in the Start Search field type in
system32
Click on system32.
Open the 'drivers' folder, then open the 'etc' subfolder.
Double click the hosts file and choose Notepad to open it.
There should be no entries for *any* Microsoft sites present.
If any are present they will look something like

127.0.0.1 update.microsoft.com
127.0.0.1 download.microsoft.com
127.0.0.1 onecare.live.com <-- this is the OneCare Safety Scanner's URL

The beginning of each entry is the same, 127.0.0.1.
The second part is the name of the MS site or any sites that are being blocked so that the system can not access them.

So, a clean hosts file would contain no sites except for what's there when Vista was installed:

127.0.0.1 localhost
::1 localhost

IF any MS sites are listed, delete them, and then click File > Save and close the hosts file.


Please provide the answers to 1, 2, and 3 in your reply.


MowGreen
===============
*-343-* FDNY
Never Forgotten
===============





karaliecaitsith wrote:

sorry it's taken me so long to reply. I actually didn't know that I
could install manually (I can if I can find the download). According to
my husband it was a trojan that went into system 32 it began with a M
and was a few letters and numbers.. he said "mvc or something like that"
McAfee wouldn't pick it up, spysweeper is what found it and I had a heck
of a time getting rid of it. After spysweeper removed it is when the
dll error started, and after I ran a checkdisk I didnt get the error
again.

Microsoft did a remote assist 3 different times. They opened notepad
and tried to reset the batch, they tried resetting settings for windows
update, they went into internet explorer and were checking all of the
settings there, they ran a scan through norman, they ran a malware scan,
they checked the bts settings. The last representative said that she
was going to escalate it, but I've never received a call back. They also
tried to connect to onecare under their id but for some reason my pc
cannot connect to the windows servers.

I found last night that I can download the updates that I can find, but
if I tell the pc to check for them it cant. Windows defender is the
same way. My pc is somehow blocking the connection to microsoft, but
there are currently no firewalls aside from windows firewall installed.
My virus scanner is AVG. The only 3rd party firewall I've used was the
one on spysweeper.

The system is a home connection, I have DSL ran through a wireless
router (I've tried running straight from modem to pc and still the same
result)


.

Relevant Pages

  • Re: Restore hidden updates, apply changes, and GDI+ scan button are grayed out
    ... I do not believe that entries in my hosts file (HostsMan, Spybot, MVPS ... Since Microsoft Update seems to be working now, ... Is it a Windows Update or malware? ... Automatic Updates is set to notify me but not to download or install. ...
    (microsoft.public.windowsupdate)
  • Re: belarc advisor hotfix message
    ... I use a hosts file from ... Windows XP itself. ... Visit http://windowsupdate.microsoft.com/ and install whatever it ... Updates yourself. ...
    (microsoft.public.windowsxp.basics)
  • Re: belarc advisor hotfix message
    ... It was my understanding that using the hosts file will help protect ... Windows XP itself. ... Visit http://windowsupdate.microsoft.com/ and install whatever it ... Updates yourself. ...
    (microsoft.public.windowsxp.basics)
  • Re: Security Center shows wrong a/v
    ... "Windows Protection Suite." ... I was able manually deleted the hosts file and then ... A Repair Install will NOT help! ... Protection Suite reports that it is up to date and virus scanning is on." ...
    (microsoft.public.windowsxp.general)
  • Re: very slow WIN XP Pro and other issues
    ... >> Install, but do not run it yet, it will be needed later. ... Your hosts file is probably hijacked also. ... you'll get a Windows dialog box saying ... See below for HijackThis links. ...
    (microsoft.public.windowsxp.general)