Member Avatar for k2cool_87

Firstly I do not know whether this is the proper place to post this thread so sorry if it should be placed somewhere else.

My work Computer has a very interesting problem. I am not able to connect to microsoft site for any updates or software downloads.All of my collegues and team mates can access.I have asked the IT guys and they assure me that microsoft site is not blocked in any way.ANy suggestions. I am to download offline versions all microsoft installers??
please let me kno if you have any solutions to the above problem.
thanks in advance.

  • 8 Contributors
  • 24 Replies
  • 345 Views
  • 5 Days Discussion Span
  • Latest Post Latest Post by slacke
Member Avatar for sparkax

Can you access other sites?
Check Firewall settings

Member Avatar for k2cool_87

Can you access other sites?
Check Firewall settings

@sparkax:
no mate. I can access all other sites.Firewall settings are same as those for others. They can access the site.Only I can't.

Member Avatar for slacke

I had several times the same problem.
When you connect to the network your network connection gets the needed values (IP address, netmask, DNS) from the DHCP. In my case it was the router or Novell servers Proxy. In both cases the DNS was the gateway of the subnet (192.168.1.1). You can check it by clicking on the network connection icon and select > support > Details.
The router has its own caching DNS server from which you get the IP adresses for the names you are looking for (for example http://windowsupdate.microsoft.com/). If the router can not find the requested name it connects the DNS server of your ISP to get it. In my case (maybe the caching DNS server on the router was poisoned?? or it has old data for that site) I could not get valid IPs for the windows update site.
So I set up my network connection for asking name queries directly from the DNS of my ISP. It helped for me.
I don't know what would tell the ISP if your PC will asking direct DNS qurries from its DNS servers, but if you are unsure you can set it, for just the moment you complete the windows update and than restore the previous settings.

Member Avatar for k2cool_87

I had several times the same problem.
When you connect to the network your network connection gets the needed values (IP address, netmask, DNS) from the DHCP. In my case it was the router or Novell servers Proxy. In both cases the DNS was the gateway of the subnet (192.168.1.1). You can check it by clicking on the network connection icon and select > support > Details.
The router has its own caching DNS server from which you get the IP adresses for the names you are looking for (for example http://windowsupdate.microsoft.com/). If the router can not find the requested name it connects the DNS server of your ISP to get it. In my case (maybe the caching DNS server on the router was poisoned?? or it has old data for that site) I could not get valid IPs for the windows update site.
So I set up my network connection for asking name queries directly from the DNS of my ISP. It helped for me.
I don't know what would tell the ISP if your PC will asking direct DNS qurries from its DNS servers, but if you are unsure you can set it, for just the moment you complete the windows update and than restore the previous settings.

thnx will try it out. Not very optimistic as others round me can access the site.So most likely a prblm with my PC and not a network prblm.

Member Avatar for k2cool_87

thnx will try it out. Not very optimistic as others round me can access the site.So most likely a prblm with my PC and not a network prblm.

changin DNS does not help....
need more opinions n suggestions.
PLs help

Member Avatar for X-Matt

I have seen problems like this when there is malware/spyware or a virus blocking access to microsoft. Check the "Hosts" file to see if its being blocked there. Most of the time any basic spyware program will fix this problem, but its always good to check.

Member Avatar for k2cool_87

Nope no spyware prblms.Just got this PC from my company like a week back.All Firewalls filter spyware.
Hosts file seems OK.
Contents of hosts file

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

127.0.0.1       localhost
Member Avatar for X-Matt

add the microsoft website to your HOSTS file - www.microsoft.com.
reboot
are you able to access any other website?

Member Avatar for k2cool_87

ya ppl...for da last time.I can connect to all other internet sites apart from WWW.MICROSOFT.COM

Member Avatar for X-Matt

Check out this Microsoft article: http://support.microsoft.com/kb/836941

since he can't get to microsoft he can't read that article, this part is for your situation.

Method B: Make sure that Windows Firewall is turned on, and temporarily disable third-party firewalls
Warning This workaround may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

To complete this method, follow these steps.
Step 1: Make sure that Windows Firewall is turned on
To do this in Windows Vista and in Windows Server 2008, follow these steps:
To open Windows Firewall, click StartCollapse this imageExpand this image, click Control Panel, click Security, and then click Window Firewall.
Click Turn Windows Firewall on or off.

Collapse this imageExpand this imageIf you are prompted for an administrator password or for confirmation, type the password, or provide confirmation.
Click On (recommended), and then click OK.
To do this in Windows 2000, in Windows XP, or in Windows Server 2003, follow these steps:
Click Start, and then click Run.
Copy and then paste (or type) the following command in the Run box, and then press ENTER:
firewall.cpl
On the General tab, make sure that On (Recommended), is selected, and then click OK.
Step 2: Temporarily disable third-party firewalls
To do this in Windows Vista and in Windows Server 2008, follow these steps:
Click StartCollapse this imageExpand this image, and then click Control Panel.
Click Security, and then click Security Center.

Collapse this imageExpand this imageIf you are prompted for an administrator password or for confirmation, type the password, or provide confirmation.

Note Please select Control Panel Home in the navigation pane on the left side if this option is not already selected.
Under Firewall, read the firewall status note. This information will indicate which, if any, firewall is installed and whether the firewall is turned on. For example, for ZoneAlarm, the notice will say ZoneAlarm Firewall is currently ON. There will also be a green On button in the corner on the right side of the firewall section that indicates that the firewall is currently running.
Open the third-party firewall application that is listed in the firewall status note, and temporarily disable the firewall. If necessary, refer to the firewall application documentation, or contact the application vendor for more information about how to temporarily disable the application.
To do this in Windows 2000, in Windows XP or in Windows Server 2003, select one of the following options:
See the documentation that was included with the program.
View the Help files for your program.
Contact the program vendor. For information about how to contact the program vendor, visit the following Microsoft Web site:
http://support.microsoft.com/gp/vendors (http://support.microsoft.com/gp/vendors)

Member Avatar for barryt

howzit k2cool
i also posted this but got no replies

I have recently posted a thread similar to what I am posting now, about no connectivity to any Microsoft sites, in the meantime things got even more complicated. I decided to redo the machine that did not want to connect to any Microsoft site just to verify a couple of things, here is what I did…I formatted the machine with a copy of my server 2003 CD and again I had no connection to any Microsoft website (all others worked) I then installed sp2 and still had no luck, I formatted the machine again and installed XP and had full connectivity, I then formatted again and installed server 2003 with the original CD and for the first time had limited connectivity to Microsoft sites. If a site was www.microsoft.com/ xxx then no problem , if the site was www.xxx.microsoft.com/xxx then i had no connectivity, I used ping to ping Microsoft.com but just got timed out , I then proceeded to trace route Microsoft just to get an 10.2.x.x IP at hop 19 ??? (Now I know you cannot get a 10.x.x.x IP but I did, I could even ping that address and get 1 out of 4 replies to it ??) I then proceeded to install sp2 and had no connectivity to Microsoft, obviously I thought that something was wrong with sp2 so I reformatted again installed again from original 2003 CD and had no connectivity, I thought that I might have made a mistake with the CD’s and reformatted again and installed again with the original CD but NO LUCK no Microsoft connectivity, I am not using wireless, its cable and the XP worked. My DNS settings and gateway settings remained the same as well as the static IP I gave throughout this exercise. There are no viruses on this machine and I even tried to set all internet settings to low. As soon as you hit Microsoft update or any other Microsoft site it just don’t want to connectWho can help me?
Any help would be appreciated
Thanks
barry

also look at my 1st thread re: the same problem

http://www.daniweb.com/forums/thread202500.html
http://www.daniweb.com/forums/thread202500-2.html

hope it helps you- even if it is just to know that there is no help out there

barry

Member Avatar for cgeier

By default, the Windows Update client records all transaction information to the following log file:

%windir%\Windowsupdate.log

(to find the value of %windir%, open a cmd/command window (Start -> run -> cmd) and type "set windir"

Open the log file and post the contents.


http://support.microsoft.com/kb/902093

Member Avatar for sparkax

What sort of connection is it ?

Member Avatar for caperjack

download hijackthis do a ,scan with log ,post the log here

Member Avatar for k2cool_87

@ cgeier

2009-07-06	13:37:42+0530	1120	744	Service Main starts
2009-07-06	13:37:42+0530	1120	744	Using BatchFlushAge = 4060.
2009-07-06	13:37:42+0530	1120	744	Using SamplingValue = 764.
2009-07-06	13:37:42+0530	1120	744	Successfully loaded event namespace dictionary.
2009-07-06	13:37:43+0530	1120	744	Successfully loaded client event namespace descriptor.
2009-07-06	13:37:43+0530	1120	744	Successfully initialized local event logger. Events will be logged at C:\WINDOWS\SoftwareDistribution\ReportingEvents.log.
2009-07-06	13:37:43+0530	1120	744	Successfully initialized NT event logger.
2009-07-06	13:37:43+0530	1120	744	Successfully initialized event uploader 0.
2009-07-06	13:37:43+0530	1120	744	Successfully initialized event uploader 1.
2009-07-06	13:37:43+0530	1120	744	WU client with version 5.4.3790.5512 successfully initialized
2009-07-06	13:37:43+0530	1120	744	Service status is now SERVICE_RUNNING
2009-07-06	13:37:44+0530	1120	464	Service received SERVICE_CONTROL_STOP control
2009-07-06	13:37:44+0530	1120	744	Exiting Service Main
2009-07-06	13:37:45+0530	1120	744	WUAUENG ServiceMain exits. Exit code is 0x240001
2009-07-06	13:37:46+0530	1120	1c4	Service Main starts
2009-07-06	13:37:46+0530	1120	1c4	Using BatchFlushAge = 4060.
2009-07-06	13:37:46+0530	1120	1c4	Using SamplingValue = 764.
2009-07-06	13:37:46+0530	1120	1c4	Successfully loaded event namespace dictionary.
2009-07-06	13:37:46+0530	1120	1c4	Successfully loaded client event namespace descriptor.
2009-07-06	13:37:46+0530	1120	1c4	Successfully initialized local event logger. Events will be logged at C:\WINDOWS\SoftwareDistribution\ReportingEvents.log.
2009-07-06	13:37:46+0530	1120	1c4	Successfully initialized NT event logger.
2009-07-06	13:37:46+0530	1120	1c4	Successfully initialized event uploader 0.
2009-07-06	13:37:46+0530	1120	1c4	Successfully initialized event uploader 1.
2009-07-06	13:37:46+0530	1120	1c4	WU client with version 5.4.3790.5512 successfully initialized
2009-07-06	13:37:46+0530	1120	1c4	Service status is now SERVICE_RUNNING
2009-07-06	13:37:47+0530	 500	20c	Trying to make out of proc datastore active
2009-07-06	13:37:52+0530	 500	20c	Service 3DA21691-E39D-4DA6-8A4B-B43877BCB1B7 added
2009-07-06	13:37:52+0530	 500	20c	Service 9482F4B4-E343-43B6-B170-9A65BC822C77 added
2009-07-06	13:37:52+0530	 500	20c	Data store successfully created
2009-07-06	13:37:52+0530	 500	20c	Out of proc datastore is now active
2009-07-06	13:37:52+0530	1120	7bc	Client Call Recorder finished delayed initialization
2009-07-06	13:37:52+0530	1120	7bc	AU is not configured yet, generating timeout to launch setup wizard
2009-07-06	13:37:52+0530	1120	7bc	AU finished delayed initialization
2009-07-06	13:37:52+0530	1120	7bc	Setting AU Approval Type to 4
2009-07-06	13:37:52+0530	1120	7bc	Setting Install Schedule Day to 0
2009-07-06	13:37:52+0530	1120	7bc	Setting Install Schedule Time to 3
2009-07-06	13:37:52+0530	1120	7bc	AU Options changed through user preference.
2009-07-06	13:37:52+0530	1120	7bc	AU Restart required....
2009-07-06	13:37:52+0530	1120	1c4	AU received event of 1
2009-07-06	13:37:52+0530	1120	1c4	Setting next AU detection timeout to 2009-07-06 08:07:52
2009-07-06	13:37:52+0530	1120	1c4	Setting AU scheduled install time to 2009-07-06 21:30:00
2009-07-06	13:37:52+0530	1120	1c4	AU received event of 1
2009-07-06	13:37:52+0530	1120	1c4	WU client succeeds CClientCallRecorder::BeginFindUpdates from AutomaticUpdates with call id {31A9324E-BB66-4CC9-9005-433E514A4B08}
2009-07-06	13:37:52+0530	1120	67c	WU client executing call {31A9324E-BB66-4CC9-9005-433E514A4B08} of type Search Call
2009-07-06	13:37:53+0530	1120	67c	Checking for different Redirector at: http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab
2009-07-06	13:37:56+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:37:56+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:37:56+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:37:56+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:37:56+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:37:56+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:37:56+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:37:56+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:37:56+0530	1120	67c	DownloadFileInternal failed for http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	13:37:56+0530	1120	67c	Failed to download the Redirector cab on try 1: 0x80072ee7
2009-07-06	13:37:56+0530	1120	67c	Checking for different Redirector at: http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab
2009-07-06	13:37:58+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:37:58+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:37:58+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:37:58+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:37:58+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:37:58+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:37:58+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:37:58+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:37:58+0530	1120	67c	DownloadFileInternal failed for http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	13:37:58+0530	1120	67c	Failed to download the Redirector cab on try 2: 0x80072ee7
2009-07-06	13:37:58+0530	1120	67c	Checking for different Redirector at: http://windowsupdate.microsoft.com/v5/redir/wuredir.cab
2009-07-06	13:38:00+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:38:00+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:38:00+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:38:00+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:38:00+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:38:00+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:38:00+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:38:00+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:38:00+0530	1120	67c	DownloadFileInternal failed for http://windowsupdate.microsoft.com/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	13:38:00+0530	1120	67c	Failed to download the Redirector cab on try 3: 0x80072ee7
2009-07-06	13:38:00+0530	1120	67c	GetWuidentUrlFromRedirector failed due to error 0x80072ee7
2009-07-06	13:38:00+0530	1120	67c	IsUpdateRequired failed with error 0x8024402c
2009-07-06	13:38:02+0530	1120	67c	PT: Using serverID {9482F4B4-E343-43B6-B170-9A65BC822C77}
2009-07-06	13:38:02+0530	1120	67c	Checking for different Redirector at: http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab
2009-07-06	13:38:02+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:38:02+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:38:02+0530	1120	67c	DownloadFileInternal failed for http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	13:38:02+0530	1120	67c	Failed to download the Redirector cab on try 1: 0x80072ee7
2009-07-06	13:38:02+0530	1120	67c	Checking for different Redirector at: http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab
2009-07-06	13:38:02+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:38:02+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:38:02+0530	1120	67c	DownloadFileInternal failed for http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	13:38:02+0530	1120	67c	Failed to download the Redirector cab on try 2: 0x80072ee7
2009-07-06	13:38:02+0530	1120	67c	Checking for different Redirector at: http://windowsupdate.microsoft.com/v5/redir/wuredir.cab
2009-07-06	13:38:02+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	13:38:02+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	13:38:02+0530	1120	67c	DownloadFileInternal failed for http://windowsupdate.microsoft.com/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	13:38:02+0530	1120	67c	Failed to download the Redirector cab on try 3: 0x80072ee7
2009-07-06	13:38:02+0530	1120	67c	WU client failed Searching for update with error 0x8024402c
2009-07-06	13:38:02+0530	1120	67c	Search Callback Failed, hr is 0x8024402c
2009-07-06	13:38:02+0530	1120	67c	Setting next AU detection timeout to 2009-07-06 13:08:02
2009-07-06	13:38:02+0530	1120	67c	Setting AU scheduled install time to 2009-07-06 21:30:00
2009-07-06	13:38:02+0530	1120	67c	WU client calls back to search call AutomaticUpdates with code Call failed and error 0x8024402c 
2009-07-06	13:38:02+0530	1120	67c	WU client completed and deleted call {31A9324E-BB66-4CC9-9005-433E514A4B08}
2009-07-06	13:38:31+0530	1120	1c4	start delayed initialization of WU client
2009-07-06	13:39:07+0530	1120	464	Service received logon notification
2009-07-06	13:39:07+0530	1120	1c4	AU received event of 3
2009-07-06	13:39:13+0530	1120	464	Service received connect notification
2009-07-06	13:39:13+0530	1120	1c4	AU received event of 3
2009-07-06	13:43:02+0530	 500	20c	Out of proc datastore is shutting down
2009-07-06	13:43:03+0530	 500	20c	Out of proc datastore is now inactive
2009-07-06	18:38:02+0530	1120	1c4	AU received event of 1
2009-07-06	18:38:02+0530	1120	1c4	WU client succeeds CClientCallRecorder::BeginFindUpdates from AutomaticUpdates with call id {BFE9F39B-5C64-45EF-A091-E44012D87367}
2009-07-06	18:38:02+0530	1120	67c	WU client executing call {BFE9F39B-5C64-45EF-A091-E44012D87367} of type Search Call
2009-07-06	18:38:02+0530	1120	67c	Checking for different Redirector at: http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab
2009-07-06	18:38:05+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:05+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:05+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:05+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:05+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:05+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:05+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:05+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:05+0530	1120	67c	DownloadFileInternal failed for http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	18:38:05+0530	1120	67c	Failed to download the Redirector cab on try 1: 0x80072ee7
2009-07-06	18:38:05+0530	1120	67c	Checking for different Redirector at: http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab
2009-07-06	18:38:07+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:07+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:07+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:07+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:07+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:07+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:07+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:07+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:07+0530	1120	67c	DownloadFileInternal failed for http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	18:38:07+0530	1120	67c	Failed to download the Redirector cab on try 2: 0x80072ee7
2009-07-06	18:38:07+0530	1120	67c	Checking for different Redirector at: http://windowsupdate.microsoft.com/v5/redir/wuredir.cab
2009-07-06	18:38:09+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:09+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:09+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:09+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:09+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:09+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:09+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:09+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:09+0530	1120	67c	DownloadFileInternal failed for http://windowsupdate.microsoft.com/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	18:38:09+0530	1120	67c	Failed to download the Redirector cab on try 3: 0x80072ee7
2009-07-06	18:38:09+0530	1120	67c	GetWuidentUrlFromRedirector failed due to error 0x80072ee7
2009-07-06	18:38:09+0530	1120	67c	IsUpdateRequired failed with error 0x8024402c
2009-07-06	18:38:09+0530	2936	648	Trying to make out of proc datastore active
2009-07-06	18:38:10+0530	2936	648	Out of proc datastore is now active
2009-07-06	18:38:10+0530	1120	67c	PT: Using serverID {9482F4B4-E343-43B6-B170-9A65BC822C77}
2009-07-06	18:38:10+0530	1120	67c	Checking for different Redirector at: http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab
2009-07-06	18:38:10+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:10+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:10+0530	1120	67c	DownloadFileInternal failed for http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	18:38:10+0530	1120	67c	Failed to download the Redirector cab on try 1: 0x80072ee7
2009-07-06	18:38:10+0530	1120	67c	Checking for different Redirector at: http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab
2009-07-06	18:38:10+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:10+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:10+0530	1120	67c	DownloadFileInternal failed for http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	18:38:10+0530	1120	67c	Failed to download the Redirector cab on try 2: 0x80072ee7
2009-07-06	18:38:10+0530	1120	67c	Checking for different Redirector at: http://windowsupdate.microsoft.com/v5/redir/wuredir.cab
2009-07-06	18:38:10+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	18:38:10+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	18:38:10+0530	1120	67c	DownloadFileInternal failed for http://windowsupdate.microsoft.com/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	18:38:10+0530	1120	67c	Failed to download the Redirector cab on try 3: 0x80072ee7
2009-07-06	18:38:10+0530	1120	67c	WU client failed Searching for update with error 0x8024402c
2009-07-06	18:38:10+0530	1120	67c	Search Callback Failed, hr is 0x8024402c
2009-07-06	18:38:10+0530	1120	67c	Setting next AU detection timeout to 2009-07-06 18:08:10
2009-07-06	18:38:10+0530	1120	67c	Setting AU scheduled install time to 2009-07-06 21:30:00
2009-07-06	18:38:10+0530	1120	67c	WU client calls back to search call AutomaticUpdates with code Call failed and error 0x8024402c 
2009-07-06	18:38:10+0530	1120	67c	WU client completed and deleted call {BFE9F39B-5C64-45EF-A091-E44012D87367}
2009-07-06	18:43:10+0530	2936	648	Out of proc datastore is shutting down
2009-07-06	18:43:11+0530	2936	648	Out of proc datastore is now inactive
2009-07-06	19:21:15+0530	1120	418	AU Restart required....
2009-07-06	19:21:15+0530	1120	1c4	AU received event of 1
2009-07-06	19:21:15+0530	3088	8dc	Trying to make out of proc datastore active
2009-07-06	19:21:17+0530	3088	8dc	Out of proc datastore is now active
2009-07-06	19:21:17+0530	1120	418	WU client succeeds CClientCallRecorder::BeginFindUpdates from Windows Internet Explorer 8 Setup Utility with call id {D4361A27-DFFD-45DE-A13F-5CD3E3CF7C29}
2009-07-06	19:21:17+0530	1120	1c4	AU is paused, not initializing any handlers
2009-07-06	19:21:17+0530	1120	67c	WU client executing call {D4361A27-DFFD-45DE-A13F-5CD3E3CF7C29} of type Search Call
2009-07-06	19:21:17+0530	1120	67c	PT: Using serverID {9482F4B4-E343-43B6-B170-9A65BC822C77}
2009-07-06	19:21:17+0530	1120	67c	Checking for different Redirector at: http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab
2009-07-06	19:21:19+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	19:21:19+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	19:21:19+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	19:21:19+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	19:21:19+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	19:21:19+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	19:21:19+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	19:21:19+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	19:21:19+0530	1120	67c	DownloadFileInternal failed for http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	19:21:19+0530	1120	67c	Failed to download the Redirector cab on try 1: 0x80072ee7
2009-07-06	19:21:19+0530	1120	67c	Checking for different Redirector at: http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab
2009-07-06	19:21:21+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	19:21:21+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	19:21:21+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	19:21:21+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	19:21:21+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	19:21:21+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	19:21:21+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	19:21:21+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	19:21:21+0530	1120	67c	DownloadFileInternal failed for http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	19:21:21+0530	1120	67c	Failed to download the Redirector cab on try 2: 0x80072ee7
2009-07-06	19:21:21+0530	1120	67c	Checking for different Redirector at: http://windowsupdate.microsoft.com/v5/redir/wuredir.cab
2009-07-06	19:21:24+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	19:21:24+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	19:21:24+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	19:21:24+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	19:21:24+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	19:21:24+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	19:21:24+0530	1120	67c	Send failed with hr = 80072ee7.
2009-07-06	19:21:24+0530	1120	67c	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-06	19:21:24+0530	1120	67c	DownloadFileInternal failed for http://windowsupdate.microsoft.com/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-06	19:21:24+0530	1120	67c	Failed to download the Redirector cab on try 3: 0x80072ee7
2009-07-06	19:21:24+0530	1120	67c	WU client failed Searching for update with error 0x8024402c
2009-07-06	19:21:24+0530	1120	67c	WU client calls back to search call Windows Internet Explorer 8 Setup Utility with code Call failed and error 0x8024402c 
2009-07-06	19:21:24+0530	1120	67c	WU client completed and deleted call {D4361A27-DFFD-45DE-A13F-5CD3E3CF7C29}
2009-07-06	19:21:24+0530	3144	1cc	Operation completed due to earlier error. (hr=8024402C)
2009-07-06	19:21:24+0530	3144	1cc	Unable to complete asynchronous search successfully. (hr=8024402C)
2009-07-06	19:26:24+0530	3088	8dc	Out of proc datastore is shutting down
2009-07-06	19:26:25+0530	3088	8dc	Out of proc datastore is now inactive
2009-07-06	19:49:58+0530	3132	df0	WUCheckForUpdatesAtShutdown failed, hr=8024A004
2009-07-06	19:50:05+0530	3132	df0	WUCheckForUpdatesAtShutdown failed, hr=8024A004
2009-07-06	19:50:15+0530	1120	464	Service received logoff notification
2009-07-06	19:50:22+0530	1120	464	Service received SERVICE_CONTROL_SHUTDOWN control
2009-07-06	19:50:22+0530	1120	1c4	Exiting Service Main
2009-07-06	19:50:22+0530	1120	1c4	WUAUENG ServiceMain exits. Exit code is 0x240001
2009-07-06	20:47:15+0530	2352	9a0	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-06	20:47:30+0530	 752	bf4	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-07	20:06:02+0530	 752	9a4	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-07	20:48:23+0530	2372	960	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-07	20:48:35+0530	 752	de4	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-08	20:54:09+0530	2560	a20	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-08	20:54:25+0530	 752	384	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-09	18:17:59+0530	1076	540	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-09	18:18:12+0530	 752	 94	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-10	20:52:25+0530	3916	f64	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-10	20:52:42+0530	 752	984	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-13	20:46:11+0530	2884	b84	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-13	20:46:24+0530	 752	aac	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-14	17:17:06+0530	 728	930	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-14	19:42:07+0530	2156	874	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-14	19:42:21+0530	1184	30c	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-15	20:16:58+0530	2516	9fc	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-15	20:17:50+0530	1188	e74	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-15	20:54:58+0530	 828	2cc	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-15	20:55:15+0530	1188	e30	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-17	20:50:30+0530	2368	968	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-17	20:50:53+0530	1188	d28	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-20	16:51:17+0530	2512	9fc	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-20	16:51:36+0530	1188	ae4	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-20	20:46:27+0530	2368	970	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-20	20:46:41+0530	1188	f90	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-21	20:55:28+0530	2544	a18	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-21	20:55:42+0530	1188	be8	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-22	12:00:44+0530	2256	908	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-22	12:01:03+0530	1184	f68	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-22	12:08:26+0530	2368	96c	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-22	12:28:13+0530	1176	850	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-22	12:34:48+0530	1176	804	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-22	17:07:50+0530	1176	49c	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-22	17:07:52+0530	1176	acc	WUAutoUpdateAtShutdown failed, hr=8024000C
2009-07-22	17:13:08+0530	1596	cf4	Service Main starts
2009-07-22	17:13:08+0530	1596	cf4	Using BatchFlushAge = 4060.
2009-07-22	17:13:08+0530	1596	cf4	Using SamplingValue = 764.
2009-07-22	17:13:08+0530	1596	cf4	Successfully loaded event namespace dictionary.
2009-07-22	17:13:08+0530	1596	cf4	Successfully loaded client event namespace descriptor.
2009-07-22	17:13:08+0530	1596	cf4	Successfully initialized local event logger. Events will be logged at C:\WINDOWS\SoftwareDistribution\ReportingEvents.log.
2009-07-22	17:13:08+0530	1596	cf4	Successfully initialized NT event logger.
2009-07-22	17:13:08+0530	1596	cf4	Successfully initialized event uploader 0.
2009-07-22	17:13:08+0530	1596	cf4	Successfully initialized event uploader 1.
2009-07-22	17:13:08+0530	1596	cf4	WU client with version 5.4.3790.5512 successfully initialized
2009-07-22	17:13:08+0530	1596	cf4	Service status is now SERVICE_RUNNING
2009-07-22	17:13:08+0530	2944	940	Trying to make out of proc datastore active
2009-07-22	17:13:08+0530	2944	940	Out of proc datastore is now active
2009-07-22	17:13:08+0530	1596	dbc	Client Call Recorder finished delayed initialization
2009-07-22	17:13:08+0530	1596	dbc	Setting next AU detection timeout to 2009-07-22 11:43:08
2009-07-22	17:13:08+0530	1596	dbc	AU finished delayed initialization
2009-07-22	17:13:08+0530	1596	cf4	AU received event of 1
2009-07-22	17:13:08+0530	1596	cf4	WU client succeeds CClientCallRecorder::BeginFindUpdates from AutomaticUpdates with call id {52E4CBF8-DAEB-45D5-926C-648226E7218A}
2009-07-22	17:13:08+0530	1596	dbc	Setting AU Approval Type to 3
2009-07-22	17:13:08+0530	1596	dbc	AU Options changed through user preference.
2009-07-22	17:13:08+0530	1596	dbc	AU settings changed through User Preference.
2009-07-22	17:13:08+0530	1596	3c0	WU client executing call {52E4CBF8-DAEB-45D5-926C-648226E7218A} of type Search Call
2009-07-22	17:13:09+0530	1596	3c0	WU client found 0 updates and 0 categories in search
2009-07-22	17:13:09+0530	1596	3c0	WU client finished Searching for update
2009-07-22	17:13:09+0530	1596	3c0	AU Detection callback: 0 updates detected
2009-07-22	17:13:09+0530	1596	cf4	AU received event of 1
2009-07-22	17:13:09+0530	1596	3c0	WU client calls back to search call AutomaticUpdates with code Call complete and error 0 
2009-07-22	17:13:09+0530	1596	3c0	WU client completed and deleted call {52E4CBF8-DAEB-45D5-926C-648226E7218A}
2009-07-22	17:13:09+0530	1596	cf4	WU client succeeds CClientCallRecorder::BeginFindUpdates from AutomaticUpdates with call id {17CF49E5-1E71-4848-93AF-404E512E2C79}
2009-07-22	17:13:09+0530	1596	3c0	WU client executing call {17CF49E5-1E71-4848-93AF-404E512E2C79} of type Search Call
2009-07-22	17:13:09+0530	1596	3c0	Checking for different Redirector at: http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab
2009-07-22	17:13:11+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:11+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:11+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:11+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:11+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:11+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:11+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:11+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:11+0530	1596	3c0	DownloadFileInternal failed for http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-22	17:13:11+0530	1596	3c0	Failed to download the Redirector cab on try 1: 0x80072ee7
2009-07-22	17:13:11+0530	1596	3c0	Checking for different Redirector at: http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab
2009-07-22	17:13:13+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:13+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:13+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:13+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:13+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:13+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:13+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:13+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:13+0530	1596	3c0	DownloadFileInternal failed for http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-22	17:13:13+0530	1596	3c0	Failed to download the Redirector cab on try 2: 0x80072ee7
2009-07-22	17:13:13+0530	1596	3c0	Checking for different Redirector at: http://windowsupdate.microsoft.com/v5/redir/wuredir.cab
2009-07-22	17:13:16+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:16+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:16+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:16+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:16+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:16+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:16+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:16+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:16+0530	1596	3c0	DownloadFileInternal failed for http://windowsupdate.microsoft.com/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-22	17:13:16+0530	1596	3c0	Failed to download the Redirector cab on try 3: 0x80072ee7
2009-07-22	17:13:16+0530	1596	3c0	GetWuidentUrlFromRedirector failed due to error 0x80072ee7
2009-07-22	17:13:16+0530	1596	3c0	IsUpdateRequired failed with error 0x8024402c
2009-07-22	17:13:16+0530	1596	3c0	PT: Using serverID {9482F4B4-E343-43B6-B170-9A65BC822C77}
2009-07-22	17:13:16+0530	1596	3c0	Checking for different Redirector at: http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab
2009-07-22	17:13:16+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:16+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:16+0530	1596	3c0	DownloadFileInternal failed for http://download.windowsupdate.com/msdownload/update/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-22	17:13:16+0530	1596	3c0	Failed to download the Redirector cab on try 1: 0x80072ee7
2009-07-22	17:13:16+0530	1596	3c0	Checking for different Redirector at: http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab
2009-07-22	17:13:16+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:16+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:16+0530	1596	3c0	DownloadFileInternal failed for http://download.microsoft.com/windowsupdate/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-22	17:13:16+0530	1596	3c0	Failed to download the Redirector cab on try 2: 0x80072ee7
2009-07-22	17:13:16+0530	1596	3c0	Checking for different Redirector at: http://windowsupdate.microsoft.com/v5/redir/wuredir.cab
2009-07-22	17:13:16+0530	1596	3c0	Send failed with hr = 80072ee7.
2009-07-22	17:13:16+0530	1596	3c0	SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)>
2009-07-22	17:13:16+0530	1596	3c0	DownloadFileInternal failed for http://windowsupdate.microsoft.com/v5/redir/wuredir.cab: error 0x80072ee7
2009-07-22	17:13:16+0530	1596	3c0	Failed to download the Redirector cab on try 3: 0x80072ee7
2009-07-22	17:13:16+0530	1596	3c0	WU client failed Searching for update with error 0x8024402c
2009-07-22	17:13:16+0530	1596	3c0	Search Callback Failed, hr is 0x8024402c
2009-07-22	17:13:16+0530	1596	3c0	Setting next AU detection timeout to 2009-07-22 16:43:16
2009-07-22	17:13:16+0530	1596	3c0	Unable to detect updates for more than 48 hours
2009-07-22	17:13:16+0530	1596	3c0	OS Version = 5.1.2600.3.0.65792
2009-07-22	17:13:16+0530	1596	3c0	Computer Brand = Gigabyte Technology Co., Ltd.
2009-07-22	17:13:16+0530	1596	3c0	Computer Model = G31M-ES2L
2009-07-22	17:13:16+0530	1596	3c0	Bios Revision = F8
2009-07-22	17:13:16+0530	1596	3c0	Bios Name = Award Modular BIOS v6.00PG
2009-07-22	17:13:16+0530	1596	3c0	Bios Release Date = 2009-02-05T00:00:00
2009-07-22	17:13:16+0530	1596	3c0	Locale ID = 1033
2009-07-22	17:13:16+0530	1596	3c0	ClientVersion: iuengine.dll = 5.4.3790.5512
2009-07-22	17:13:16+0530	1596	3c0	ClientVersion: wuapi.dll = 5.4.3790.5512
2009-07-22	17:13:16+0530	1596	3c0	ClientVersion: wuauclt.exe = 5.4.3790.5512
2009-07-22	17:13:16+0530	1596	3c0	ClientVersion: wuauclt1.exe = 5.4.3790.5512
2009-07-22	17:13:16+0530	1596	3c0	ClientVersion: wuaucpl.cpl = 5.4.3790.5512
2009-07-22	17:13:16+0530	1596	3c0	ClientVersion: wuaueng.dll = 5.4.3790.5512
2009-07-22	17:13:16+0530	1596	3c0	ClientVersion: wuaueng1.dll = 5.4.3790.5512
2009-07-22	17:13:16+0530	1596	3c0	ClientVersion: wuauserv.dll = 5.4.3790.5512
2009-07-22	17:13:16+0530	1596	3c0	ClientVersion: wucltui.dll = 5.4.3790.5512
2009-07-22	17:13:16+0530	1596	3c0	WU client calls back to search call AutomaticUpdates with code Call failed and error 0x8024402c 
2009-07-22	17:13:16+0530	1596	3c0	WU client completed and deleted call {17CF49E5-1E71-4848-93AF-404E512E2C79}
2009-07-22	17:13:21+0530	1596	3c0	REPORT EVENT: {6E556B73-4EBB-4CAC-BF34-C0E3E6DDE438}	1	2009-07-22 17:13:16+0530	1	149	102	{00000000-0000-0000-0000-000000000000}	0	0	AutomaticUpdates	Failure	Software Synchronization	Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.
2009-07-22	17:13:21+0530	1596	3c0	Created new event cache file at C:\WINDOWS\SoftwareDistribution\EventCache\{86F786DF-416C-4A4A-96E8-C1ECDEBAB2D8}.bin for writing.
2009-07-22	17:13:21+0530	1596	3c0	Created new event cache file at C:\WINDOWS\SoftwareDistribution\EventCache\{6A43A123-4E12-4B38-A6B3-56CE480CA06C}.bin for writing.
2009-07-22	17:13:54+0530	1596	cf4	start delayed initialization of WU client
2009-07-22	17:14:17+0530	1596	cf4	AU received event of 1
2009-07-22	17:14:17+0530	1596	cf4	Forced install timer expired for scheduled install
2009-07-22	17:18:21+0530	2944	940	Out of proc datastore is shutting down
2009-07-22	17:18:22+0530	2944	940	Out of proc datastore is now inactive
2009-07-22	17:18:32+0530	1596	640	Service received logoff notification
2009-07-22	17:18:32+0530	1596	cf4	AU received event of 3
2009-07-22	17:22:08+0530	1596	640	Service received logon notification
2009-07-22	17:22:08+0530	1596	cf4	AU received event of 3
2009-07-22	19:22:29+0530	3468	878	0 updates are ready to be installed at shutdown.
2009-07-22	19:22:44+0530	1596	640	Service received logoff notification
2009-07-22	19:22:44+0530	1596	cf4	AU received event of 3
2009-07-22	19:22:49+0530	1596	da4	AU Restart required....
2009-07-22	19:22:49+0530	1596	cf4	AU received event of 1
2009-07-22	19:22:49+0530	 232	86c	Trying to make out of proc datastore active
2009-07-22	19:22:49+0530	 232	86c	Out of proc datastore is now active
2009-07-22	19:22:49+0530	1596	cf4	AU is paused, not initializing any handlers
2009-07-22	19:22:51+0530	1596	640	Service received SERVICE_CONTROL_SHUTDOWN control
2009-07-22	19:22:51+0530	1596	cf4	Exiting Service Main
2009-07-22	19:22:51+0530	 232	86c	Out of proc datastore is shutting down
2009-07-22	19:22:51+0530	1596	cf4	WUAUENG ServiceMain exits. Exit code is 0x240001
2009-07-22	19:22:52+0530	 232	86c	Out of proc datastore is now inactive
2009-07-22	20:56:15+0530	2280	914	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-23	20:53:38+0530	2356	96c	WUCheckForUpdatesAtShutdown failed, hr=8024000C
2009-07-23	20:53:53+0530	1184	63c	WUAutoUpdateAtShutdown failed, hr=8024000C
Member Avatar for k2cool_87

@ caperjack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:16:22 PM, on 7/24/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Java\jre1.7.0\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Symantec AntiVirus\DoScan.exe
C:\Program Files\Barracuda\Barracuda.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Documents and Settings\All Users\Application Data\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.7.0\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.7.0\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Startup: Barracuda IM Client.lnk = C:\Program Files\Barracuda\Barracuda.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Edit with Altova X&MLSpy - C:\Program Files\Altova\XMLSpy2008\spy.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.7.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.7.0\bin\ssv.dll
O9 - Extra button: Edit with Altova X&MLSpy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - C:\Program Files\Altova\XMLSpy2008\spy.htm
O9 - Extra 'Tools' menuitem: Edit with Altova X&MLSpy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - C:\Program Files\Altova\XMLSpy2008\spy.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = st.com
O17 - HKLM\Software\..\Telephony: DomainName = st.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{77E3D5D0-EE22-4DEA-A9D3-63FFF099CBA3}: NameServer = 10.1.21.99,10.1.21.109,4.2.2.2
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = st.com
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

--
End of file - 6888 bytes
Member Avatar for caperjack

@ caperjack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:16:22 PM, on 7/24/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Java\jre1.7.0\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Symantec AntiVirus\DoScan.exe
C:\Program Files\Barracuda\Barracuda.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Documents and Settings\All Users\Application Data\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.7.0\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.7.0\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Startup: Barracuda IM Client.lnk = C:\Program Files\Barracuda\Barracuda.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Edit with Altova X&MLSpy - C:\Program Files\Altova\XMLSpy2008\spy.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.7.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.7.0\bin\ssv.dll
O9 - Extra button: Edit with Altova X&MLSpy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - C:\Program Files\Altova\XMLSpy2008\spy.htm
O9 - Extra 'Tools' menuitem: Edit with Altova X&MLSpy - {2222EF56-F49E-4d07-A14E-8D2B08766958} - C:\Program Files\Altova\XMLSpy2008\spy.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = st.com
O17 - HKLM\Software\..\Telephony: DomainName = st.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{77E3D5D0-EE22-4DEA-A9D3-63FFF099CBA3}: NameServer = 10.1.21.99,10.1.21.109,4.2.2.2
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = st.com
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

--
End of file - 6888 bytes

don't see anything there that could be causing it

Member Avatar for cgeier

Some of the following I found on these websites, I've ordered it in the way that I think that may apply best to your situation:

http://v4.windowsupdate.microsoft.com/troubleshoot/
http://www3.telus.net/dandemar/updtcl.htm
http://support.microsoft.com/?kbid=193385

Verify the following services are running. Set them to "automatic" and start them if they aren't:

    -Automatic Updates
    -Background Intelligent Transfer Service
    -Cryptographic Services
    -Remote Procedure Call (RPC)
    -System Restore Service

One way to do this is to go to: Start -> Run -> type “services.msc”

-----------------------------------------------

Internet Explorer:

Add the following URLs to your Internet Trusted sites list in Internet Explorer: 
       *.windowsupdate.microsoft.com
       *.windowsupdate.com
       *.microsoft.com

-------------------------------------------------------
Verify Internet Explorer connection settings
-Open Internet Explorer
-Go to Internet Options (in older IE versions, Tools -> Internet
     Options)
-Click "Connections."
-Click "LAN Settings."  
-Delete anything in the Automatic Configure text box and clear the "Use automatic configuration script" check box.

-------------------------------------------------------
Set Advanced Internet Explorer options:
 
    -Open Internet Explorer
    -Go to Internet Options (in older IE versions, Tools -> Internet
     Options)
    -Click on “Advanced” tab
    -Check the "Use HTTP 1.1" check box. 
    -Check the "Use HTTP 1.1 through proxy connections" check box.
    -Uncheck “Check for server certificate revocation”
    -Restart Internet Explorer

----------------------------------------------------------

Check your Internet Explorer security settings 

- In Internet Explorer click "Tools," and then click "Internet Options."
- Click "Security."

If using  "Custom Level."
    - Make sure that "File Download" is enabled.
    - Make sure that "Run Active X controls and plug-ins" is enabled.
    - Make sure that "Active Scripting" is enabled.
    - Set your Java Permissions to "Medium safety."
    - Make sure that "Launching applications and files in an IFRAME"
      is enabled.

If using “Default”, set to Medium

A virus or trojan can be downloaded any time you go on the internet or open an e-mail attachment, so if the above hasn't worked I would run a free scan with Windows Live OneCare:
http://onecare.live.com/site/en-us/default.htm

If none of this works, run "ipconfig /all" from your computer and post the results. Then do the same from a co-worker's computer whose is working.

Member Avatar for micro_komputer

I had experienced the incident as you experience. my komputer is virusses invected.virus infected my computer i cleaning first.and then I do a security update from microsoft and can connect to the stable.

corec me if i am wrong because i am newbie
best regard

SNIP

Member Avatar for k2cool_87

Dont really know how he solved it butne of the guys in IT dept got it. Something to do with a registry entry.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost

was changed. dunno know what exactly he did as we had da weekend off.
this is the registry upon change.
match to see da changes....sry if I cant be of further help.
THNX for your inputs.
http://img36.imageshack.us/img36/9763/regeditd.png

Member Avatar for k2cool_87

ya got da difference.
You have to delete two keys in da SVC registry.Match n remove da once not in da image.

Member Avatar for slacke

In such cases like this I always catch the communication by wireshark network analyzer. Sometimes it gives good feedback about what is happening.
You should se there how your PC asks DNS about the name ...microsoft.com, you should see from who you get this information and in the response the correct IP address for the windows update site.
It happens me once that although I set the DNS of my ISP the PC asked some unknown IP address about the name (It was the AVG update).
Maybe you can not resolve the problem with wireshark but it can bring some lite in what happens...

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.