Error Code 0X80240029 Solution

G

Guest

I have spent many hours today working on this problem; last 3 hours with
microsoft. This is what they had me do and it worked.

1. Uninstall Windows Defender
2. Restart in safe mode with internet
3. Go to www.sh123.notlong.com
4. There you will be prompted to download a zip file; run it now in safe mode
5. It will open the DOS window and will take some time to run; the window
will
close itself when it is finished; do not close it. This re-registers
all dll files.
6. Restart
7. Reinstall Defender and check for updates

This worked for me. I also found that there were other Microsoft updates
that I had not received (11) which then downloaded. They, as well as the
Defender updates showed in my history as being downloaded successfully
before. Good Luck.
 
G

Guest

Anybody in the know want to give feed back on this?

I would not recommend going to to a web site that will prompt me to download
a file, unzip it and run it without knowing what this site is. I don't know
this poster, can't find anyinfo on them, Never heard of www.sh123.notlong.com
and it does not sound like a Microsoft site to me.

Feed back for the Paranoid please,
?:-(
Tim
 
G

Guest

Hi Tim,

You read my mind, and better, you put it better than me.
Good ESP.
Keep it up. ;-)
 
B

Bill Sanderson MVP

I wouldn't touch this with a 10 foot pole.

I'm glad that it appears to have worked for you, and I certainly have no
knowledge that there is anything malicious at that URL, but I would
strenuously suggest that no one should follow a link to a site of unknown
reputability and download an executable based on anonymous advice in a
public forum such as this one.

I'm not for a moment suggesting that you are mistaken about your experience,
or mean any harm to others here--but this method of getting something
"fixed" can easily be more dangerous than the original malady.
 
B

Bill Sanderson MVP

OK - I've examined the file, and I don't believe that it is dangerous,
although it does appear to me to contain duplicate sections.

I would still make the recommendations I did earlier: Regardless of the
good intentions of both the poster and the originator of the downloaded
file--this is risky behavior.

Re-reading your message--did Microsoft PSS really send you to that site?
Surely they can do better than that!
 
G

Guest

I Googled and came up with Nothing!! Went to the site which immediately
downloads the file as suggested in the post. A scan with NAV 2005 came up
clean on the virus front. Took a look with Winzip which indicates its a BAT
file modified on 24.6.2006 - pre Defender. Don`t know if thats significant.
Scanned with A squared and AVG - nothing found. Question is. What happens
when you run it? At this point I would agree descretion is the better part of
valour. Wouldn`t touch it with a barge pole - think thats a bit longer than
a ten foot one ;)

Stu
 
T

Tom Emmelot

Hoi Bill,

the file does just what KayFry says it unregister and register all the
..dll files.
The file is a .bat file "run.bat" that runs in the DosWindow, this the
first part of it:

cd /d %SystemRoot%\system32
regsvr32 comcat.dll /s
regsvr32 shdoc401.dll /s
regsvr32 shdoc401.dll /i /s
regsvr32 asctrls.ocx /s
regsvr32 oleaut32.dll /s
regsvr32 shdocvw.dll /I /s
regsvr32 shdocvw.dll /s
regsvr32 browseui.dll /s
regsvr32 browseui.dll /I /s
regsvr32 msrating.dll /s
and so on, nothing harmful!!

Regards >*< TOM >*<


Bill Sanderson MVP schreef:
 
G

Guest

Hi all,

Maybe is a copy cat of Dial-a-Fix
--
OT
Hi Tom, good to see you, I was wonder about you, also about Plun. I hope
everybody is OK.

Enjoy the weekend.
--
 
G

Guest

Bill, my post meant to be a (little riddle) i left off nothing because there
was nothing.
 
G

Guest

Now I have taken a closer look I agree with you Tom and take back what I said
in my previous post. In fact its doing nothing more than has been previously
suggested (at one time or another) on these NGs over the past year but on a
grander scale. Nothing to worry about.

Stu
 
G

Guest

Bill,

Looks like I opened a can worms, hate it when I do that.
There seems to be a growing consenses (?sp) that:
1. The file might be safe.
2. It does reregister .dlls

I still find it hard to believe that MS Support would send someone to a site
like this.

I still cannot recommend that someone you to a site that starts an automatic
download. It should at the very be a page that says something like "Click on
the link below to download xys.zip. This file contains xyz.bat, which when
you extract and run it will do XXZ.

And of course who is to say that the xyz.zip which is there on Monday is the
same one which will be there on Friday (after everyone thinks it's safe)

"Yeah, I'm Paranoid, what's your point?"
?:-(
Tim
Geek w/o Portfolio
Only the Paranoid Survive.
 
G

Guest

Don`t worry Tim your signature sums it up. I think we all tend to buzz on
here occasionaly and there is a certain paranoia or put another way `healthy
caution`among us. I`m no exception - only wish I`d checked the facts first
before making a judgement. Darn! I guess in my court the philosophy would be
`Guilty until proven innocent`.

Stu
 
T

Tom Emmelot

Hi Tim,

it look likes that the part of the text that you likes to see on the
site: Quote,"It should at the very be a page that says something like
"Click on the link below to download xys.zip. This file contains
xyz.bat, which when you extract and run it will do XXZ."
KayFry wrote in his mail:
3. Go to www.sh123.notlong.com
4. There you will be prompted to download a zip file; run it now in
safe mode
5. It will open the DOS window and will take some time to run; the
window will close itself when it is finished, do not close it. This
re-registers all dll files.
So he wrote already all the things you want to know, I think you are
looking for a site where all kind of marks of "MS" and "SAFE" and things
like that give you the safe feeling.
I come out of the MSX home computer scene, where we wrote all kind of
program's for anybody that wants to use it and that was a lot of fun,
so i dont think bad when somebody write a .bat file to fix some things
in windows!!! (wrote them self a lot)
Then you dont have to click on yes when the download wants to start, you
dont have to unzip it and you dont have to run it.
The file contends no name's from anybody that makes it and there are
lines in that dont work at the moment but can if needed.
And yes Engel it does a lot what "Dial a Fix" does!
About "Yeah, I'm Paranoid, what's your point?"
I am not, but got PC-Cillin 2007 running with all the defenses up and i
am not afraid to open and unzip and read program's that dont have the
"safe/MS" mark on it!

Kind regards >*< TOM >*<


Tim Clark schreef:
 
T

Tom Emmelot

Hi Engel,

I follow the newsgroup, but the fun is a bit out of it, specially that
the most are answered by the time i look at them and answered by Bill
and You is most of the time 100% good, so i take the left overs some time ;)
Was also real busy with testing PC-Cillin 2007 and was on a lot of porno
and hacker sites to see the program working, and clicking on that sites
give some nice view in the Log files what in a few seconds is on your
PC or try to get there. I dont know about Plun, but if he reads this i
think we get a answer here. Have a nice weekend! :)

Kind regards >*< TOM >*<

Engel schreef:
 
G

Guest

Bill,

I hear Vista has 15 foot pole, which when you use it asks "Allow or Deny?"
Which they had an XP version.

?:)
Tim
 
B

Bill Sanderson MVP

In fact, the download is a batch file, contained in a zip. The batch file
deletes some sets of files and re-registers a large number of .dll files. I
don't think it is malicious, and I think it may well work. What's a mystery
to me is why a Microsoft support person would make such a referral.

--
 
B

Bill Sanderson MVP

The file as I saw it isn't dangerous.

It may well be effective for a specific purpose.

I don't know who created the file and controls whether its content changes.

I won't refer people to it, and if Microsoft PSS did, I'd like very much to
hear more about that.

--
 
G

Guest

Tom,
I'm not sure what you are saying or asking here???

"So he wrote already all the things you want to know,..."

I don't want to know these things.

I want to go to the page, look at it, read what it is about, and what it
offers, and be provided with a link that I can examine before I choose to
click on it or not.

This page starts the download process the moment you arrive and gives no
information at all.

Let us assume for a moment that the poster is a "Skank".
Let us assume he comes up with a way to defeat WD.
He could come to this group and find out that some of us are having problems
with "Error Code 0X80240029"

He could then put his malware in a file called run.bat (in a zip file) and
post here, "Hey, everyone here is the solution, I got it from Micosoft
Support"

Then someone who is having "Error Code 0X80240029" problems could see it
and think, "At last, a solution, and I know it's safe because I got the
download link thru the Windows Defender Newsgroup site".

You think this can't happen? I've seen it happen!

I would never click on a download link from a puplic disscussion/newsgroup
unless it was provided by a proven member of the group who had an establish
reputation.

And I think that should speak for itself.
...I am not, but got PC-Cillin 2007 running with all the defenses up and i
am not afraid to open and unzip and read program's that dont have the
"safe/MS"

This is great for you. I have WD, McAfee, and TeaTimer running live.
I also have AdAware, Spybot, SuperAntispyware, NSS, Yahoo AntiSpy, Xosft
portable, Avast, and ClamWin to run AFTER the Fact.

But these probably would not do me a lot of good in a "Zero Day" attack
where the malware was just released and none of these companies had a chance
to update their definitons/signatures, especially on a Saturday morning.

Reguards,
Be Safe,
Tim
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top