From: MacMelmac on
I have Windows XP SP3
From: Ǝиçεl on
Hello MacMelmac,

0x80072EFF ERROR_INTERNET_CONNECTION_RESET
<http://support.microsoft.com/kb/836941>

A general fix, *IF* there's no malware issue, would be to reset the
updating components: How do I reset Windows Update components?
http://support.microsoft.com/kb/971058>

The most effective way to employ the above Fixit is to download, *save* it,
configure the system to Clean boot, then run MicrosoftFixit 50202.msi, and
first choose the Default mode. Restart.

See if the system can update now. If no joy, run it again with the
system connected to the internet, in the Aggressive mode. Restart.

See if the system can update now.

Then UNdo the Clean boot steps and see if it can search for updates in
normal Windows mode.

How to configure Windows XP to start in a clean boot state
http://support.microsoft.com/kb/310353>


I think it's fairly obvious that the computer is not back to it's original
pre-infection state. How do you know that you removed all of the malware
that was installed rebuild format Time to format. ;-(
<http://technet.microsoft.com/en-us/library/cc512587.aspx>
-=-

http://search.yahoo.com/search;_ylt=A0oGdDB9CRZMF_QAHRZXNyoA?p=Trojan.Gadja&fr2=sb-top&fr=hp-pvdt&sao=1

-=-
http://search.yahoo.com/search?p=Trojan.Gadja.Injected&ei=UTF-8&fr=hp-pvdt


Hope this helps, if not wait for more responses, please.
-=-

"MacMelmac" wrote:

> I had some problems wit Trojan.Gadja.Injected that ruined the file
> Userinit.exe.
> I ran sfc /Scannow and then MalwareBytes and everything dissapeared.
>
> But I still can't access the Windows Update site, neither through the Icon
> in Windows or through the Microsoft Webpage. Everything that has Windows
> update int the address-feild opf IE8 ends up on a page where it sais it can't
> be shown.
> I notice that ther is a warning down to the left in IE8. Error on page. Soem
> Java script error perhaps.
> The Windows Defender gives me the same erroro code when I try to update the
> files.
>
> I have tried to fix around with the Internet Security etc. in the Internet
> Options menu, I have tried to re-install SP3, I have tried to re-register the
> dll files connectied to the updtae function. I have troed to re-install java.
> I have tried everything I can find when I google "Windows Update error".
>
> Please help me.
From: PA Bear [MS MVP] on
MacMelmac wrote:
> I had some problems wit Trojan.Gadja.Injected that ruined the file
> Userinit.exe.
> I ran sfc /Scannow and then MalwareBytes and everything dissapeared.
>
> But I still can't access the Windows Update site, neither through the Icon
> in Windows or through the Microsoft Webpage. Everything that has Windows
> update int the address-feild opf IE8 ends up on a page where it sais it
> can't be shown.
> I notice that ther is a warning down to the left in IE8. Error on page.
> Soem
> Java script error perhaps.
> The Windows Defender gives me the same erroro code when I try to update
> the
> files.
>
> I have tried to fix around with the Internet Security etc. in the Internet
> Options menu, I have tried to re-install SP3, I have tried to re-register
> the dll files connectied to the updtae function. I have troed to
> re-install
> java. I have tried everything I can find when I google "Windows Update
> error".
<paste>
> I have Windows XP SP3

You also have much more work to do!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now post the requested logs in an appropriate forum for assistance by an
expert in such matters. DO NOT SKIP THIS STEP!!

I can recommend the expert assistance offered in these forums:
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php, and
http://aumha.net/viewforum.php?f=30

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

From: MacMelmac on
My F-Secure is Client Security V8, so it's not the latest but it is updateing
everything automaticly every day. I will by the 2010 version next time I
re-install Win XP next time.

Still I can download the updates manually from Microsoft Download center.

I have downloaded and used MSRT, but I will try the "transfer from a clean
machine" thing.

I have also used OneCare Live, and it found several infected Java files. I
will try to run it in safe-mode aswell.

I discovered that when I try to click on the "solve connection problem" (Or
what it's called, I have Swedish language) when the empty WU page comes up, I
get Java Error. I can see that down in the left corner of IE8.

I uninstalled JAVA and re-installed the update 20, but still thew same error.
(Something with //IFrame line 264.) I have saved the error code and will
post it later.

It's very strange because all of the posts I found about the
Trojan.Gadja.Injected seem to be out of trouble when they got rid of it. I'm
pretty dure there is something else here that is not right.
From: PA Bear [MS MVP] on
Move on to Step #3 now.

MacMelmac wrote:
> My F-Secure is Client Security V8, so it's not the latest but it is
> updateing everything automaticly every day. I will by the 2010 version
> next
> time I re-install Win XP next time.
>
> Still I can download the updates manually from Microsoft Download center.
>
> I have downloaded and used MSRT, but I will try the "transfer from a clean
> machine" thing.
>
> I have also used OneCare Live, and it found several infected Java files. I
> will try to run it in safe-mode aswell.
>
> I discovered that when I try to click on the "solve connection problem"
> (Or
> what it's called, I have Swedish language) when the empty WU page comes
> up,
> I get Java Error. I can see that down in the left corner of IE8.
>
> I uninstalled JAVA and re-installed the update 20, but still thew same
> error. (Something with //IFrame line 264.) I have saved the error code and
> will post it later.
>
> It's very strange because all of the posts I found about the
> Trojan.Gadja.Injected seem to be out of trouble when they got rid of it.
> I'm
> pretty dure there is something else here that is not right.

 |  Next  |  Last
Pages: 1 2
Prev: Updates fail to install
Next: Error Code 0x80072EFF