From: Unknown on
Baloney.
"PA Bear [MS MVP]" <PABearMVP(a)gmail.com> wrote in message
news:uqI%23fOLNLHA.4288(a)TK2MSFTNGP06.phx.gbl...
> There is a very good chance that you are seeing the effects of a
> hijackware infection!
>
> NB: If you had no anti-virus application installed or the subscription had
> expired *when the machine first got infected* and/or your subscription has
> since expired and/or the machine's not been kept fully-patched at Windows
> Update, don't waste your time with any of the below: Format & reinstall
> Windows. A Repair Install will NOT help!
>
> Menno Hershberger wrote:
>> eMachine - Windows XP SP3
>> A lady brought this machine to me because it had slowed to a crawl. Task
>> Manager was showing high CPU usage (40%-90%) although it didn't show what
>> process(es) were using it. Showed System Idle process 90-99%. Process
>> Explorer identified the culprit as "Hardware Interrupts". In msconfig I
>> disabled all the startup items and all non-Microsoft services. That
>> didn't
>> help. The problem did not exist in Safe Mode. It also did not exist in
>> normal mode if I chose diagnostic startup in msconfig. That disables ALL
>> services and makes Windows useless. So I re-enabled all the Microsoft
>> services and the problem returned. In task manager I started randomly
>> killing the processes that would allow it. When I killed wuauclt.exe the
>> problem ceased. So I turned off Windows Update, re-enabled all the non-
>> Microsoft services and startup items that had been originally enabled.
>> Everything is still okay. So I went to the Windows Update site to make
>> sure
>> the updates were up to date, and got an error message that automatic
>> updates had to be turned on. So that's where I'm stuck now. Everything is
>> fine as long as Automatic Updates is hut off. I tired turning it back on
>> just to confirm that was the problem and it went right back to the
>> original
>> behavior.
>> Avira, Malwarebytes, SuperAntispyware were all run in Safe Mode. SAS
>> found
>> a few cookies. The lady said it was working fine the night before last
>> and
>> the problem started when she booted it up this morning.
>> Sorry I was so long winded, but I was trying to answer all the questions
>> that I'm bound to be asked ahead of time.
>> What do I do about Windows Automatic Update?
>


From: Menno Hershberger on
=?Utf-8?B?TWlsdA==?= <Milt(a)discussions.microsoft.com> wrote in
news:8A5667ED-DE3D-40D7-BE16-C3A4A17AF1DB(a)microsoft.com:

>
> Hi Menno,
>
> Can you please post back after solving your problem with Windows
> Update and let us know what you found. I'm asking because, as of Aug.
> 3 I'm having similar problems.
>
> I'm aware of Microsoft's "Fix-It" tool and manual procedure in Article
> ID: 971058,
> "How do I reset Windows Update components?". But I am reluctant to run
> it. I think the problem may be on Microsoft's end.
>
> I say that because the problem here is on three computers. One is
> XP-SP 3 Pro and the other two are XP-SP 3 Home. And it appeared with
> the Automatic Update notice for KB2286198. The update notice slows
> down my machines badly. Looking in Windows Task Master I see
> wuauclt.exe and a svchost.exe entry using ten to fifteen times normal
> memory unless I disable the Update Notification. My Pagefile usage is
> double what it is normally.
>
> If I go to Windows Update and try either Express or Custom, the page
> just searches endlessly but doesn't find anything.

You just didn't wait long enough.... :-)

> But if I download
> the update from the taskbar notification tray, it downloads and
> installs fine.

Since I've already cloned the drive, I went ahead and ran that Fix-It
tool. I ran it in both default and agressive mode. It didn't fix anything
but it didn't break anything either.
I turned Automatic Updates back on and then went to the update site to
see if there were, in fact, any updates. It took the best part of an hour
to find, download and install one update which was for Office 2003. If I
remember right, it didn't require a reboot, but I rebooted anyway and the
problem seems to have gone away. But I'm not really trusting it to stay
away since it's hard to believe an Office update is what fixed it.
The lady took it home today and will try it for a few days. If the
problem comes back then we'll wipe and reinstall.

--
--- Long live Fat32! ---
From: Lil' Abner on
It has the free version of Avast which is up to date.
But I fear a bug has gotten to it anyway. It seems to be OK at the moment
but if it comes back it'll be a wipe and reinstall. I don't do repair
installs anymore... never had much luck with them.

"PA Bear [MS MVP]" <PABearMVP(a)gmail.com> wrote in
news:uqI#fOLNLHA.4288(a)TK2MSFTNGP06.phx.gbl:

> There is a very good chance that you are seeing the effects of a
> hijackware infection!
>
> NB: If you had no anti-virus application installed or the subscription
> had expired *when the machine first got infected* and/or your
> subscription has since expired and/or the machine's not been kept
> fully-patched at Windows Update, don't waste your time with any of the
> below: Format & reinstall Windows. A Repair Install will NOT help!
>
> Menno Hershberger wrote:
>> eMachine - Windows XP SP3
>> A lady brought this machine to me because it had slowed to a crawl.
>> Task Manager was showing high CPU usage (40%-90%) although it didn't
>> show what process(es) were using it. Showed System Idle process
>> 90-99%. Process Explorer identified the culprit as "Hardware
>> Interrupts". In msconfig I disabled all the startup items and all
>> non-Microsoft services. That didn't help. The problem did not exist
>> in Safe Mode. It also did not exist in normal mode if I chose
>> diagnostic startup in msconfig. That disables ALL services and makes
>> Windows useless. So I re-enabled all the Microsoft services and the
>> problem returned. In task manager I started randomly killing the
>> processes that would allow it. When I killed wuauclt.exe the problem
>> ceased. So I turned off Windows Update, re-enabled all the non-
>> Microsoft services and startup items that had been originally
>> enabled. Everything is still okay. So I went to the Windows Update
>> site to make sure
>> the updates were up to date, and got an error message that automatic
>> updates had to be turned on. So that's where I'm stuck now.
>> Everything is fine as long as Automatic Updates is hut off. I tired
>> turning it back on just to confirm that was the problem and it went
>> right back to the original
>> behavior.
>> Avira, Malwarebytes, SuperAntispyware were all run in Safe Mode. SAS
>> found a few cookies. The lady said it was working fine the night
>> before last and the problem started when she booted it up this
>> morning. Sorry I was so long winded, but I was trying to answer all
>> the questions that I'm bound to be asked ahead of time.
>> What do I do about Windows Automatic Update?
>



--
--- Everybody has a right to my opinion. ---
From: PA Bear [MS MVP] on
Who are you and what did you do with Menno Hershberger?

Lil' Abner wrote:
> It has the free version of Avast which is up to date.
> But I fear a bug has gotten to it anyway. It seems to be OK at the moment
> but if it comes back it'll be a wipe and reinstall. I don't do repair
> installs anymore... never had much luck with them.
>
> "PA Bear [MS MVP]" <PABearMVP(a)gmail.com> wrote in
> news:uqI#fOLNLHA.4288(a)TK2MSFTNGP06.phx.gbl:
>
>> There is a very good chance that you are seeing the effects of a
>> hijackware infection!
>>
>> NB: If you had no anti-virus application installed or the subscription
>> had expired *when the machine first got infected* and/or your
>> subscription has since expired and/or the machine's not been kept
>> fully-patched at Windows Update, don't waste your time with any of the
>> below: Format & reinstall Windows. A Repair Install will NOT help!
>>
>> Menno Hershberger wrote:
>>> eMachine - Windows XP SP3
>>> A lady brought this machine to me because it had slowed to a crawl.
>>> Task Manager was showing high CPU usage (40%-90%) although it didn't
>>> show what process(es) were using it. Showed System Idle process
>>> 90-99%. Process Explorer identified the culprit as "Hardware
>>> Interrupts". In msconfig I disabled all the startup items and all
>>> non-Microsoft services. That didn't help. The problem did not exist
>>> in Safe Mode. It also did not exist in normal mode if I chose
>>> diagnostic startup in msconfig. That disables ALL services and makes
>>> Windows useless. So I re-enabled all the Microsoft services and the
>>> problem returned. In task manager I started randomly killing the
>>> processes that would allow it. When I killed wuauclt.exe the problem
>>> ceased. So I turned off Windows Update, re-enabled all the non-
>>> Microsoft services and startup items that had been originally
>>> enabled. Everything is still okay. So I went to the Windows Update
>>> site to make sure
>>> the updates were up to date, and got an error message that automatic
>>> updates had to be turned on. So that's where I'm stuck now.
>>> Everything is fine as long as Automatic Updates is hut off. I tired
>>> turning it back on just to confirm that was the problem and it went
>>> right back to the original
>>> behavior.
>>> Avira, Malwarebytes, SuperAntispyware were all run in Safe Mode. SAS
>>> found a few cookies. The lady said it was working fine the night
>>> before last and the problem started when she booted it up this
>>> morning. Sorry I was so long winded, but I was trying to answer all
>>> the questions that I'm bound to be asked ahead of time.
>>> What do I do about Windows Automatic Update?
From: Milt on
Menno,

Thank you for the update.

Milt

"Menno Hershberger" wrote:

> =?Utf-8?B?TWlsdA==?= <Milt(a)discussions.microsoft.com> wrote in
> news:8A5667ED-DE3D-40D7-BE16-C3A4A17AF1DB(a)microsoft.com:
>
> >
> > Hi Menno,
> >
> > Can you please post back after solving your problem with Windows
> > Update and let us know what you found. I'm asking because, as of Aug.
> > 3 I'm having similar problems.
> >
> > I'm aware of Microsoft's "Fix-It" tool and manual procedure in Article
> > ID: 971058,
> > "How do I reset Windows Update components?". But I am reluctant to run
> > it. I think the problem may be on Microsoft's end.
> >
> > I say that because the problem here is on three computers. One is
> > XP-SP 3 Pro and the other two are XP-SP 3 Home. And it appeared with
> > the Automatic Update notice for KB2286198. The update notice slows
> > down my machines badly. Looking in Windows Task Master I see
> > wuauclt.exe and a svchost.exe entry using ten to fifteen times normal
> > memory unless I disable the Update Notification. My Pagefile usage is
> > double what it is normally.
> >
> > If I go to Windows Update and try either Express or Custom, the page
> > just searches endlessly but doesn't find anything.
>
> You just didn't wait long enough.... :-)
>
> > But if I download
> > the update from the taskbar notification tray, it downloads and
> > installs fine.
>
> Since I've already cloned the drive, I went ahead and ran that Fix-It
> tool. I ran it in both default and agressive mode. It didn't fix anything
> but it didn't break anything either.
> I turned Automatic Updates back on and then went to the update site to
> see if there were, in fact, any updates. It took the best part of an hour
> to find, download and install one update which was for Office 2003. If I
> remember right, it didn't require a reboot, but I rebooted anyway and the
> problem seems to have gone away. But I'm not really trusting it to stay
> away since it's hard to believe an Office update is what fixed it.
> The lady took it home today and will try it for a few days. If the
> problem comes back then we'll wipe and reinstall.
>
> --
> --- Long live Fat32! ---
> .
>