BSOD when trying to install Windows Updates

Discussion in 'Windows - Virus and spyware problems' started by orngcrsh, May 15, 2009.

  1. orngcrsh

    orngcrsh Regular member

    Joined:
    Jan 3, 2006
    Messages:
    113
    Likes Received:
    0
    Trophy Points:
    26
    Hello,
    Running Windows XP. Hooked to the internet for the first time since I purchased the computer (used it in a psychology experiment).
    My computer is set to automatically download and install updates.
    When I shutdown my computer it starts installing updates that it had previously downloaded. Takes me to that blue-ish screen with the windows logo telling me that "updates are being installed... will restart automatically".

    Here's what it does: "Installing update 1 of 32" ... "Installing update 11 of 32" ... "Don't shut down your computer, windows will automatically restart when finished" ... "installing update 12 of 32" ... Then I get the blue screen saying that a critical resource was suddenly stopped and windows was shut down to prevent damage.
    --Does this every time (replicated it 4 times now)

    If I shut it down and click the option to "not install updates" it shuts down and reboots just fine. (ie only messes up when trying to install updates)

    Any help I can get will be greatly appreciated!

    Best,
    Joseph
     
  2. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78
    orngcrsh,

    Off the top of my head, it could be malware that’s stopping the patch that kills it…
    Also, many other possibilities…..
    First try this, if it doesn’t work, we can try other options..

    Using a clean computer download and burn a rescue disk from here:
    http://www.free-av.com/en/products/12/av...cue_system.html

    Then use this guide to clean your machine:
    http://forum.avira.com/wbb/index.php?page=Thread&threadID=82163

    After the cleaning, try your updates again.

    Let me know the outcome. If it doesn't work, post a fresh HijackThis Log, we will see……….


    2oG
     
  3. orngcrsh

    orngcrsh Regular member

    Joined:
    Jan 3, 2006
    Messages:
    113
    Likes Received:
    0
    Trophy Points:
    26
    2oldGeek,
    Thank you very much for the information. Unfortunately, I'm done here at the university until Monday and won't get a chance to work on it until then. But expect a response from me sometime relatively early on that day.
    I'll get back to you on it..
    Thanks again,
    Joe
     
  4. orngcrsh

    orngcrsh Regular member

    Joined:
    Jan 3, 2006
    Messages:
    113
    Likes Received:
    0
    Trophy Points:
    26
    I downloaded and ran the above utility but I still got the same problem.
    This time the updates were a bit different than before. It was installing 1 of 21, then 2 of 21 when the blue screen came up. (Before it would say 1 of 32, 11 of 32, then crash on 12 of 32).
    Probably doesn't make much of a difference but I just want to provide as much info as possible.

    Here is my hijack this log
    -----------
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 2:09:45 PM, on 5/19/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\savedump.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\WINDOWS\stsystra.exe
    C:\WINDOWS\OEM03Mon.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\PROGRA~1\AVG\AVG8\avgtray.exe
    C:\Program Files\DELL\DELL Webcam Manager\DellWMgr.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
    C:\PROGRA~1\AVG\AVG8\avgrsx.exe
    C:\PROGRA~1\AVG\AVG8\avgnsx.exe
    c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
    O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
    O4 - HKLM\..\Run: [OEM03Mon.exe] C:\WINDOWS\OEM03Mon.exe
    O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
    O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [DELL Webcam Manager] "C:\Program Files\DELL\DELL Webcam Manager\DellWMgr.exe" /s
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
    O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

    --
    End of file - 3815 bytes
     
  5. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78

    I don't have much time but looked at your log, and it's clean.
    Since your updates are not loading, it may be a bad system file.
    try this:

    http://www.updatexp.com/scannow-sfc.html

    Also run a full scan with MalwareBytes' AntiMalware in order to remove any hidden Trojans..

    see if that helps..

    2oG
     
  6. orngcrsh

    orngcrsh Regular member

    Joined:
    Jan 3, 2006
    Messages:
    113
    Likes Received:
    0
    Trophy Points:
    26
    2oG,
    Alright, I tried both that you suggested (scannow and AntiMalware)..
    Scannow was a pain to get set up but I finally figured it out. Ran it and rebooted -- Still had the problem.
    Installed and ran full scan w AntiMalware -- Problem still there.

    So I started tinkering with the updates and decided to install each one (one by one with restart after each -- yes, this was extremely tedious lol). But-- I was able to isolate the particular update that is giving my computer fits. It is the one below.

    Microsoft SQL Server 2005 Express edition service pack 3 (kb955706)
    ----------------------
    "Size: 55.7 MB

    This service pack upgrades all Microsoft SQL Server 2005 Express Edition instances and components to Service Pack 3 (SP3). If you need additional installation options, you should download this service pack at the Microsoft Download Center. For more information, see Microsoft Knowledge Base article 955706.

    More information for this update can be found at http://support.microsoft.com/kb/955706"
    ----------------------

    Do you know of any reason that might cause this update to go bad?
    Is there a way to delete this and re download it so it can install properly perhaps?

    Thanks for the ongoing help, it is greatly appreciated!
     
  7. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78
    There seems to be problems with this update all over the forums..
    SQLServer2005SP3-KB955706-x86-ENU.exe
    Go to this M$ link:
    http://www.microsoft.com/downloads/...c3-348c-4faa-8ae5-949fdfbe59c4&displaylang=en
    Then download from the section:
    Files in This Download
    The links in this section correspond to separate files available in this download. Download the files most appropriate for you.
    File Name: File Size
    SQLServer2005SP3-KB955706-IA64-ENU.exe 432.4 MB DownloadDownload

    SQLServer2005SP3-KB955706-x64-ENU.exe 377.4 MB DownloadDownload

    SQLServer2005SP3-KB955706-x86-ENU.exe 326.0 MB DownloadDownload




    Don’t know if that will help or not. I don’t use SQL.. : )

    Let me know.
    2oG
     
  8. orngcrsh

    orngcrsh Regular member

    Joined:
    Jan 3, 2006
    Messages:
    113
    Likes Received:
    0
    Trophy Points:
    26
    Fixed :)

    What I did was delete the existing file (the one listed above) from the updates folder and shut the computer down over the weekend. Booted back up this morning and let it re-download. It downloaded a file with the same name but with a different 'kb' number (didn't catch what it was, only that it was different than the previous one).
    Installed and ran fine.
    Maybe MS re-released that update since so many people were having trouble with it.
    Thank you so much for all the help. Again, greatly appreciated!

    Best,
    Joe
     
  9. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78
    You're welcome.. Glad you were able to fix it..

    2oG
     

Share This Page