Window Update goes to Google search page

[Sumeet_Attri]

Hello,

whenever I try updating my Win XP pro via the Tools menu by clicking on
"Windows Update" it takes me to the Google search page.

Can somebody help pls

Thanks
Sumeet Attri

 

[David B.]

What happens when you click Start > All Programs > Windows Update?

 

[Jose]

Hello,

whenever I try updating my Win XP pro via the Tools menu by clicking on
"Windows Update" it takes me to the Google search page.

Can somebody help pls

Thanks
Sumeet Attri

You could be a victim of the dreaded DNSChanger Trojan.

The Trojan does not want you to go to the Windows Update page (and
probably other pages) because you might detect it and then delete it.

Download, install, update and do a full scan with these three free
malware detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
AVG (AVG): http://free.avg.com/

Even going to these pages may not work if the Trojan knows about them
too, but try it. Try all three if one does not do it.

If none of the three work, try booting in Safe Mode with Networking.

You must scan for malicious software.

If that fails, you have some other work to do here.

Jose

 

[Ant.]

Hi!

I had the same problem (on Win XP SP2 Build 5.1.2600) . Using the Windows
Update link from All Programs directed me to Google. Using the
installation-supplied Windows Update link directly from Internet Explorer
(Ver 7.0.5730.13) gave me a Microsoft search page (I don't know what you're
looking for).

I first found this problem when I tried to d/l the Win XP SP3 update. I
couldn't d/l anything else from the microsoft site either, not .NET 3.5 SP1,
not VSC++2005 or 2008, not the latest malware tool either.

Another problem I had was that chkdsk did not work... not at startup and not
explicitly (from the Tools tab after clicking Properties on the hard disks
from My Computer)

I tried to run the utilities suggested above...

MBAM... I don't have a credit card so I couldn't d/l this from the official
site
SuperAntiSpyware... this did find and remove a DNSRedirect trojan, but it
didn't fix the problem
AVG Free V8.5... found nothing, not impressed

My disappointment with the above may be that I could not update their virus
databases either. I think those IP addresses were hijacked too.

I also ran Spybot Search and Destroy (found nothing). I ran the latest
version of SDFIX which also found malware but did not fix the problem (see
below).

I finally found this:

http://www.google.com/support/forum/p/Web Search/thread?tid=5a019ee9fd30bae2&hl=en

This recommended looking in the Hosts file (see one of the replies in the
link above), but mine was as default (just the 127.0.0.1 entry).

Another possibility is that your modem has been hijacked... resetting to
defaults and re-entering your ISP info may help (but only after you are sure
all malware has been removed... do below first).

I downloaded the TrojanRemover program V6.7.9... this did find and fix my
problem! I could not d/l this utility from their site:

http://www.simplysup.com/tremover/download.html

but any of the suggested download mirrors should work. I used the UK one.
Below are the pertinent parts from the TrojanRemover log:

Hidden Service Keyname: msqpdxserv.sys
Hidden Service: \systemroot\system32\drivers\msqpdxbayxdinl.sys
C:\WINDOWS\system32\drivers\msqpdxbayxdinl.sys
74240 bytes
Created: 7/01/2009 3:35 PM
Modified: 7/01/2009 3:35 PM
Company: [no info]
Entry has been scheduled for deletion when the PC is restarted
C:\WINDOWS\system32\drivers\msqpdxbayxdinl.sys - file backed up to
C:\WINDOWS\system32\drivers\msqpdxbayxdinl.sys.vir
C:\WINDOWS\system32\drivers\msqpdxbayxdinl.sys - file has been erased using
RAW erasure.

NB: SDFIX DID find this but apparently did not fix it it successfully.

So, try the Trojan Remover utility. It is free for the first 30 days of
usage. Worked for me Fixed both my Windows Update and chkdsk problems.

 

[Shenan Stanley]

<snipped>

I had the same problem (on Win XP SP2 Build 5.1.2600) . Using the
Windows Update link from All Programs directed me to Google. Using
the installation-supplied Windows Update link directly from
Internet Explorer (Ver 7.0.5730.13) gave me a Microsoft search page
(I don't know what you're looking for).

I first found this problem when I tried to d/l the Win XP SP3
update. I couldn't d/l anything else from the microsoft site
either, not .NET 3.5 SP1, not VSC++2005 or 2008, not the latest
malware tool either.

Another problem I had was that chkdsk did not work... not at
startup and not explicitly (from the Tools tab after clicking
Properties on the hard disks from My Computer)

I tried to run the utilities suggested above...

MBAM... I don't have a credit card so I couldn't d/l this from the
official site

<snipped>

What?!

You must have been mistaken - a credit card is not needed to download,
utilize and remove malware using MBAM (MalwareBytes AntiMalware.)