Windows update software is taking over my computer.

Something has come in with Windows update on my computer that is allowing someone remote access to my computer. It seems to have total control over my computer and hard drive and is now running me on a shadow copy of my own hardrive. I've never seen anything so invasive before, it has complete control of java, windows, and of my anti spyware, anti virus,  firewall and every piece of software it can get its hands on. If I load up my computer it will run fine but as soon as I try to tinker with it it automatically blocks me from even looking it up on google. Like i said it has complete control of my computer but is running me on a copy of my harddrive. When I look through my files it has copies of every stock trade, password, credit card anything i've ever written on my computer it has a copy of that it is sending somewhere else. I downloaded anti hacking software and ran it to see if their was anything suspicous. Well for the first minute it ran fine and alerted me that there was several critical problems but before i had time to even look through the list the computer shut it down and a window came up saying it had an "update" for that software and disabled me from being able to decline. It completely took over the anti hacking software and is now disguising itself as my computer. I think it may be a part windows update as when you go through the system to find the descriptions everything is certified by microsoft or is doing a damn good job at mimicking certification because it got past all of my firewalls. It appears that it might be sending the information to microsoft which as far as i know of is illegal. i went over my brothers house to use the internet on his computer, for the heck of it i looked in his system and discovered his computer was infected too, it is soo good at disguising itself that he had it for who knows how long without discovering it. If anyone can help me or needs information please leave feedback as i am running out of ideas.
Answer
Answer

Based on the information you've given me so far, I don't see any indication that "Windows Update software" has taken over your computer - but one or more updates being offered via Automatic Updates (and which are failing to install) may be playing a role here. [1] 

That being said and assuming it's a Vista 32-bit computer, proceed as follows:

ACTIONS:

[You may want to print these instructions for offline reference.  DON'T SKIP ANY STEP!  If a Step says to reboot, reboot! ]

1a. Right-click on the following link, select SAVE TARGET AS... & download the Norton Removal Tool, saving it to your desktop:  ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe

1b. Right-click on the following link, select SAVE TARGET AS... & download the McAfee Consumer Products Removal Tool, saving it to your desktop: http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe

2a. Close all open applications (i.e., anything with an icon on the taskbar).

2b. IMPORTANT! => If you have backups of the changes CCleaner Registry Cleaner has EVER made to your computer, restore ALL of them now - then reboot.  See http://www.piriform.com/ccleaner/faq/using/how-do-i-restore-registry-backups

3a. Right-click on the file you saved in Step #1a above and select Run as Administrator. to run the utility. Don't TOUCH your keyboard until the run completes, then reboot.

3b. Right-click on the file you saved in Step #1b above and select Run as Administrator. to run the utility. Don't TOUCH your keyboard until the run completes, then reboot again.

4a. Right-click on the following link & SAVE the download to your desktop: http://iefaq.info/attachments/133/ie8-rereg.zip [2]

Note: Good for IE9 & IE7, too.

4b. Right-click on the file you downloaded in #4a above (i.e., ie8-rereg.zip) and EXTRACT its contents to the desktop. This will create a new folder on your desktop named ie8-rereg.

4c. Close any open applications (i.e., anything with an icon on the taskbar), open the new folder created in #4b above, double-click on the file ie8-rereg.cmd to run the script, and then reboot.

5. Re-assert Internet Explorer as the default Browser in the CUSTOM (<=important!) section of Set Program Access and Computer Defaults. [3]

6a. Right-click on the following link and SAVE the download to your desktop: http://www.slipstick.com/problems/reg/chromehtml.reg [4]

6b. Double-click on the file you saved in #6a above & accept the prompt to MERGE the data with the Registry.

7. Reboot again.

8. Open Internet Explorer (only!) to http://support.microsoft.com/kb/923737 [ignore any DOES NOT APPLY warnings as well as the APPLIES TO section] & run the Fix It.

    Note=> For optimal results, check the Delete personal settings option.

9a. Open Internet Explorer (only!) to http://support.microsoft.com/kb/910336 [ignore the title & Symptoms].

9b. IMPORTANT! => Dismiss/close the automated troubleshooter pop-up! - then...

9c. Ignoring any "Not recommended" or similar warnings, run Fix It 50202 in DEFAULT and then AGGRESSIVE modes. [5]

10a. Reboot once more then test by running a manual check for updates.

  • HOW TO run a manual check for updates
     http://windows.microsoft.com/en-us/windows-vista/How-can-I-tell-if-my-computer-is-up-to-date

10b. IMPORTANT! => Write down the KB number(s) of any updates being offered, and then...

10c. Hide ("Don't show me this update again") all of them (temporarily)!

   • How to Hide or Unhide a Windows Update in Vista
     http://www.vistax64.com/tutorials/72491-windows-update.html

10d. Close the Windows Update applet.

11. Test your computer functionality (including Internet Explorer) for an hour or two.

12. Reply to this post with a status report. In your reply:

    • Include the KB number(s) of the update(s) you hid in #10c above.

    • Also tell me if Avast and/or S*PERAntiSpyware has EVER detected & removed anything (other than third-party cookies).

==========================================================
[1] cf. http://blogs.technet.com/b/mu/archive/2008/10/02/windows-update-and-automatic-reboots.aspx

[2] Trusted Source: http://iefaq.info/index.php?action=artikel&cat=42&id=133&artlang=en - good for IE9, too!

[3] Only after we've finished this thread, feel free to reassert Chrome as the default if you wish.

[4] Trusted Source: http://www.slipstick.com/problems/this-operation-has-been-cancelled-due-to-restrictions/

[5] Full Disclosure: Running the Fix It in AGGRESSIVE mode will delete your Update History but not the list of Installed Updates.

--
~Robear Dyer (PA Bear)
Microsoft MVP (Windows Client) since October 2002

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated January 31, 2025 Views 805 Applies to: