Swatkat's rants

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Sunday, 24 August 2008

Windows Automatic Update fails to install updates!

Posted on 01:12 by Unknown
Sometimes Automatic Update in Windows behaves in a weird manner. It downloads all the updates but fails to install them. The installation fails with error code 0x8007F0EA. An example screen shot is shown below:



This issue can be fixed by reinstalling the Windows Update Agent, by following the steps mentioned below:

  • Download wuredist.cab file from here.

  • Open wuredist.cab using any of the file archival tools, and extract the file wuredist.xml present in it.

  • Open wuredist.xml in a text editor. The contents of the file will be something like this:
    <?xml version="1.0" ?>
    <WURedist>
    <StandaloneRedist Version="30">
    <architecture name="x86" clientVersion="7.0.6000.381" downloadUrl="http://download.windowsupdate.com/WindowsUpdate/redist/standalone/7.0.6000.381/WindowsUpdateAgent30-x86.exe"/>
    <architecture name="x64" clientVersion="7.0.6000.381" downloadUrl="http://download.windowsupdate.com/WindowsUpdate/redist/standalone/7.0.6000.381/WindowsUpdateAgent30-x64.exe"/>
    <architecture name="ia64" clientVersion="7.0.6000.381" downloadUrl="http://download.windowsupdate.com/WindowsUpdate/redist/standalone/7.0.6000.381/WindowsUpdateAgent30-ia64.exe"/>
    <MUAuthCab RevisionId="6" DownloadURL="http://download.windowsupdate.com/v7/windowsupdate/redist/standalone/MUAuth.cab"/>
    </StandaloneRedist>
    </WURedist>

  • As you might have guessed, this xml file contains download links to Windows Update Agent installer for different architecture like x86 (32 bit PCs), x64 (64 bit) and ia64 (Intel Itanium 64 bit). Copy the download link suitable to your system architecture and download the installer. For example, if it is a 32 bit PC, then corresponding Windows Update Agent installer will be WindowsUpdateAgent30-x86.exe.

  • Open Command Prompt and navigate (using "cd" command) to the folder where Windows Update Agent installer is present. Finally, run the following command to reinstall the Windows Update Agent:
    WindowsUpdateAgent30-x86.exe /wuforce


Reboot the PC and try running Automatic Updates again.
Read More
Posted in | No comments

Saturday, 23 August 2008

Zlob fake codec updates

Posted on 05:53 by Unknown
Here are some websites that are pushing new, not-so-well detected Zlob fake codecs. Most of these variants drop junk like fake security programs, security toolbars etc.
http://codecdownload.bigfreesoftarchive.net (VirusTotal scan result)
http://aviupdate.com (VirusTotal scan result)
http://mydownloadbackup.com (VirusTotal scan result)
http://www.swfapplication.com (VirusTotal scan result)
Read More
Posted in | No comments
Newer Posts Older Posts Home
Subscribe to: Posts (Atom)

Popular Posts

  • Ax Video Plugin
    Ax Video Plugin is one of the latest fake codec/plugin in the block. The site http://axvideodownload.com/ uses the same old fake "Vide...
  • Spyware Guard 2008
    Spyware Guard 2008 is a new rogue application. Does that name sound familiar? Well, yes, there is a legitimate application named SpywareGuar...
  • Javacool EULAlyzer!
    Have you ever read those ultra-long EULA (End User License Agreement) pages while you are installing any software? I think no one will read ...
  • Zlob brings back fake MP3s!
    Last August, I had blogged about Zlob gang using fake MP3 download sites to push their malware (link here ). Afterwards, we started to see m...
  • Myphonegames.co.uk hacked?!
    It seems that some pages of a mobile-phone games website www.myphonegames.co.uk have been hacked to execute malicious looking Javascript. A...
  • twitcurl - C++ twitter API library
    twitcurl is an open-source pure C++ library for twitter REST APIs. Currently, it has support for most of the twitter APIs and it will be upd...
  • DomPlayer - Rogue Multimedia Player
    DomPlayer is a new rogue multimedia player on the loose. The gang behind DomPlayer is making use of fake video files (available as torrents)...
  • Some new malware - a.exe, gop.exe etc
    We have some "new" malware this time, ranging from trojans to rootkits. One of them is a trojan which detected by some of the AVs ...
  • ThinkPoint rogue antivirus
    ThinkPoint is a new addition to the long list of rogue antivirus programs. ThinkPoint uses fake codec download tricks for its distribution. ...
  • Removing Mailbot.AZ (aka Rustok.A) Rootkit
    Mailbot.AZ (also known as PE386 or Rustock.A) is a kernel mode rootkit backdoor virus. It contains only one file-its driver-and it is stored...

Categories

  • a.exe
  • Autohotkey
  • C++
  • fake mp3 downloads
  • gop.exe
  • NewMediaCodec
  • OAuth
  • Orkut hating virus
  • Privacy Protector
  • rootkit
  • SysProt AntiRootkit
  • TDSServ rootkit removal
  • twitCurl
  • twitter
  • Udefender
  • Ultimate Cleaner
  • vdo_
  • Zlob
  • Zlob rootkit

Blog Archive

  • ►  2013 (1)
    • ►  June (1)
  • ►  2010 (6)
    • ►  October (2)
    • ►  September (2)
    • ►  July (1)
    • ►  April (1)
  • ►  2009 (12)
    • ►  September (1)
    • ►  May (1)
    • ►  April (1)
    • ►  March (4)
    • ►  January (5)
  • ▼  2008 (44)
    • ►  December (6)
    • ►  November (6)
    • ►  October (4)
    • ►  September (15)
    • ▼  August (2)
      • Windows Automatic Update fails to install updates!
      • Zlob fake codec updates
    • ►  June (2)
    • ►  May (1)
    • ►  April (1)
    • ►  March (6)
    • ►  January (1)
  • ►  2007 (38)
    • ►  December (1)
    • ►  November (2)
    • ►  October (9)
    • ►  September (2)
    • ►  August (8)
    • ►  July (11)
    • ►  June (3)
    • ►  March (2)
  • ►  2006 (6)
    • ►  September (1)
    • ►  August (2)
    • ►  May (1)
    • ►  February (2)
  • ►  2005 (30)
    • ►  December (2)
    • ►  November (2)
    • ►  October (4)
    • ►  September (5)
    • ►  August (11)
    • ►  July (6)
Powered by Blogger.

About Me

Unknown
View my complete profile