Archive for May, 2008

XP SP3 broke Windows Update

Sunday, May 11th, 2008

More precisely:
IE7 install breaks Windows and Microsoft Update after install of SP3 on a clean OS install of XP SP2

Fix is here:

http://download.windowsupdate.com/WindowsUpdate/redist/standalone/
7.0.6000.381/WindowsUpdateAgent30-x86.exe


From CMD prompt:
net stop wuauserv
“%userprofile%\Desktop\WindowsUpdateAgent30-x86.exe” /wuforce (don’t forget the quotation marks)
net start wuauserv

 http://msmvps.com/blogs/markd/archive/2008/05/09
/windows-xp-sp3-breaks-windows-update.aspx

I tried this and it works.

For search engines:
Windows Update does not work after installing XP SP3
SP3 damages Microsoft Update.

More Vundo

Sunday, May 11th, 2008

I ran yet another malware detector on the drive mentioned below.
Microsofts Live scanner:
http://onecare.live.com/site/en-au/default.htm?mkt=en-au


detected 8 more VUNDO infected files.

The Live Scanner is a nice tool.

Vundo and fake anti-malware software

Saturday, May 10th, 2008

By far the number one consumer/home user problem I see is fake antispyware/antivirus software that holds a system hostage.
At the core of this problem is the VUNDO trojan. See http://en.wikipedia.org/wiki/Vundo_trojan
In my tests this  Medusa’s head  malware infestation is best remedied by zero filling the hard drive and installing from a trusted source.
In past tests the popular countermeasures Ad-Aware and Spybot were useless as was Norton’s Vundo removal tool.
Today we tested  Malwarebytes Anti-Malware.  After five passes the product declared the drive clean and indeed the symptoms were gone. I removed the drive and mounted it in a test machine and ran Avira Antivir against it and found three more instances of Vundo.
To me this confirms that you cannot be  confident that malware has been removed even if your tester shows a drive clean and confirms that the best approach is wipe and reload.

Scary Vista

Thursday, May 1st, 2008

Scenario:
Vista Business on a brand new Dell desktop hosting a network share of a HP 8100 USB printer.
One of the  networked computers is Windows 98 and there is no 98 driver for HP 8100.
I tried the tried and true old trick of loading a Generic driver for the HP8100 and sharing it  so the  98 machine would have at least basic printing abilities until it gets replaced in a few days.
Bad idea.
I  ran a  test print from within the Windows Vista  printer wizard dialogue.  The printer printed correctly  but the  wizard app stopped responding. The error cascaded to an open instance of Open Office and to Windows Explorer.
I shut down through Task Manager and after an extrodinarily long shutdown process, restarted the machine.
After a long wait, Vista came up in a crippled state. I could not start Control Panel, could not start System Restore (well I couldn’t find it…Why did Microsoft move everything in Vista?) , could  not start Open Office. I started Task Manager but could not see anything amiss.
After another 5 minute shutdown sequence I booted to Safe Mode.
I opened the System Restore FAQ in Help which answered many questions but not  “Where I can I click to start System Restore?”. One of the FAQs near the bottom of the page offered a way to start from the command line.  I rolled back two days and my problem was fixed.
My advice :
DO NOT TURN OFF VISTA SYSTEM RESTORE !