Windows Updates Error

[webpete]

After launching Windows Updates I receive;

The website has encountered a problem and cannot display the page you are trying to view.

Error number: 0x80072EFF

[Maurice Naggar]

Hello webpete and welcome to MalwareBytes forums.

Always state your Windows & IE browser versions when having an issue like this.

It would also greatly help to know which antivirus app this has & whether the AV has script-blocking on.

Are you able to reach MS Windows Update site with IE? y/n

The exception error you noted means "Network problems are preventing connection to the Windows Update servers."

First, insure your AV & security programs do not block running of scripts.

Review the options "Automatically detect settings" and "Use automatic configuration script" for Internet Explorer.

To do this:

1. Open Internet Explorer.

2. Click "Tools," and then click "Internet Options."

3. Click "Connections," and then click "LAN Settings."

4. Make sure the check boxes for "Automatically detect settings" and "Use automatic configuration script" are not selected.

5. Apply changes

You may run a test: disable temporarily your AV & revisit Windows Update site.

Does that help?

P.S. Also see this Microsoft article

"You may encounter temporary connection-related errors when you use Windows Update or Microsoft Update to install updates"

http://support.microsoft.com/kb/836941/

[jftitan]

I have this similar issue as well. However, I receive error, 0x80072EFE, which has something else to do with this similar problem. Along with MBAM_ERROR_UPDATE (12030, 0, WinHttpSendRequest) error.

I ran pretty much everything MBAM, MS Security Essentials, ComboFix and took care of all virus/Trojan related issues. However I cannot successfully run Windows Update, MBAM update, MSSE Update, nor browse the internet using Internet Explorer or Firefox. I have performed CHKDSK /R, using a Vista Recovery DVD.

So technically I am stuck in a AFTERMATH of a Trojan that killed all internet connectivity. I can however, connect to the network, wifi or Ethernet, I can successfully ping websites like google, yahoo, and msn. Including security websites like insecure.org. BUT I cannot browse, or perform any standard method updates. I have manually installed Service Pack 2 for Vista, and added all the additional updates manually with help using Microsoft's Security Analysis tool. I can join a home network, and share files, and see other computers within the same LAN/network.

I have performed 'netsh ip, firewall, winsocks reset' multiple times, I 've also gone through Windows Firewall settings and set the defaults including resetting Internet Explorer 8, and I have completely removed/deleted drivers of both my ethernet and wireless adapters. I've downloaded the latest drivers for both network devices, and have successfully reinstalled them, with the same issues of not being able to browse the internet using normal means.

The quirk I have discovered is, any web address I go to http://www.google.com will not work, but if I go to https://www.google.com or even to a banking website with SSL I can access those websites without any issues. So right now, I'm stumped as to what my next step is, to correct my current internet access issues.

I have MBAM, MSSE, Windows Firewall, and HJT currently installed & manually updated the definitions. I do not see, or have encountered any residual effects of the virus that was installed. The Trojan/Scareware that infected the laptop I've been working on came with these additional files that were infected and have been removed thanks to MBAM, ComboFix, and VundoFix.

AKM AntiVirus 2010 Pro.exe

khvcol.exe

kmw.exe

rundll32.exe

These files have been removed, including the sys, dll files that this nasty pain in the arse has left me with.

Any suggestions? or any questions please let me know, and I'll respond immediately. (I'll be here until I figure out this last bit to fix this machine)

As a LAST resort, I do not wish to perform a clean install of Vista (too much data to backup/restore) Unfortunately, Restore Points were also removed during the clean up process, so I have nothing to revert back to, to before the system was infected.

Thanks in advance, I'm glad you guys exist.

[noknojon]

Hello ,Welcome to Malwarebytes Forum

There may still be minor infections left behind - I would like you to submit this to the experts (not reinstall) -

They usually save everything (most things) for You -

As we don't work on Malware removal or diagnostics in the general forums please follow these directions -

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post - Please allow at least 48 hours for a reply as the experts can get busy at times -

Also add a brief note to the experts as to your problems -

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Always use the ADD REPLY Tab at the bottom of the page when you reply -

Thank You -

[jftitan]

Thank you for the Reply, I found the issue was still with the Windows Firewall (I had to recreate outbound connections which explained why...

When using Firefox, IE, Opera, etc, browsers, I could see in the status bars, that the browsers were able to connect to websites (ie: google.com, yahoo.com would show Connected, Connecting... Connected... etc) under the normal http://, Beforehand my issue was nothing, I could only connect to websites under the https://, I didn't notice earlier that the browsers were indeed connecting to the sites but not able to 'sync' or receive data. After awhile of steady stare, I could see nothing was going out.

Before I began working on the laptop in question, someone had previously installed Norton 360, it was removed incorrectly, and many firewall rules were left disabled, and removed because of of it.

I ended up having to download Norton 360 again, reinstalled it (to make sure it would, re-establish or recreate the FW rules for me), (which it did), Uninstalled 360 properly, then used a NortonRemover just to make sure.

Voila!

Fixed my issue with Windows Updates, MSSE, MBAM, etc.

I'm just glad I didn't have to nuke a machine and go through a tedious backup and restore, for someone who doesn't do it for themselves. )

If anyone is Google Searching for this type of answer, MBAM_ERROR_UPDATE (12030, 0, WinHttpSendRequest) <-- "see it?, it tells you right there LoL" means, your firewall (rules) are more than likely screwed up. Check them against Microsoft's default firewalls rules using a properly working machine. Along with Windows Update Error 0x80073EFE, which also pertains to connections for updates failing to establish outbound requests.

Of course this only applies to this machine in question. This machine was completely cleaned out, and no presence of trojan, or virus remained. The only remote access application installed was LogMeIn.com (which the user uses).

[webpete]

I have this similar issue as well. However, I receive error, 0x80072EFE, which has something else to do with this similar problem. Along with MBAM_ERROR_UPDATE (12030, 0, WinHttpSendRequest) error.

I ran pretty much everything MBAM, MS Security Essentials, ComboFix and took care of all virus/Trojan related issues. However I cannot successfully run Windows Update, MBAM update, MSSE Update, nor browse the internet using Internet Explorer or Firefox. I have performed CHKDSK /R, using a Vista Recovery DVD.

So technically I am stuck in a AFTERMATH of a Trojan that killed all internet connectivity. I can however, connect to the network, wifi or Ethernet, I can successfully ping websites like google, yahoo, and msn. Including security websites like insecure.org. BUT I cannot browse, or perform any standard method updates. I have manually installed Service Pack 2 for Vista, and added all the additional updates manually with help using Microsoft's Security Analysis tool. I can join a home network, and share files, and see other computers within the same LAN/network.

I have performed 'netsh ip, firewall, winsocks reset' multiple times, I 've also gone through Windows Firewall settings and set the defaults including resetting Internet Explorer 8, and I have completely removed/deleted drivers of both my ethernet and wireless adapters. I've downloaded the latest drivers for both network devices, and have successfully reinstalled them, with the same issues of not being able to browse the internet using normal means.

The quirk I have discovered is, any web address I go to http://www.google.com will not work, but if I go to https://www.google.com or even to a banking website with SSL I can access those websites without any issues. So right now, I'm stumped as to what my next step is, to correct my current internet access issues.

I have MBAM, MSSE, Windows Firewall, and HJT currently installed & manually updated the definitions. I do not see, or have encountered any residual effects of the virus that was installed. The Trojan/Scareware that infected the laptop I've been working on came with these additional files that were infected and have been removed thanks to MBAM, ComboFix, and VundoFix.

AKM AntiVirus 2010 Pro.exe

khvcol.exe

kmw.exe

rundll32.exe

These files have been removed, including the sys, dll files that this nasty pain in the arse has left me with.

Any suggestions? or any questions please let me know, and I'll respond immediately. (I'll be here until I figure out this last bit to fix this machine)

As a LAST resort, I do not wish to perform a clean install of Vista (too much data to backup/restore) Unfortunately, Restore Points were also removed during the clean up process, so I have nothing to revert back to, to before the system was infected.

Thanks in advance, I'm glad you guys exist.

Try the repair tool TDSSKiller.exe that I attached or go to this website to get it. http://support.kaspersky.com/viruses/solutions?qid=208280684

Windows_Update_Repair_Tool.zip