Window Defender cannot remove WindUpdates

G

Guest

I ran Windows Defender. It found "WindUpdates" whicg it classified as Alert
Level "Severe". When I tried to remove it, it fails, as it did at a second
attempt. Status is Failed, 0x80508026
What am I to do?

Leo
 
G

Guest

Don't follow you.
What am I to do the the list of links you provide?
Why does Window Defender not work?
Leo
 
G

Guest

Hello Leo,

WindUpdates is a trojan downloader that by itself will deliver popup
advertisements to your system. This is NOT the part thats so bad... It also
installs a number of other adware/spyware applications and is installed on
your system through an activex control that installs itself on alot of IE
users systems without them ever knowing it. All they hav do do is visit the
wrong site! Use Siteadvisor NOW!
http://www.siteadvisor.com/preview/


Jason's Toolbox
http://www.jasons-toolbox.com/BrowserSecurity/


PA Bear is given you a multiple choices where to go and clean up WindUpdates.

Also check this post;
Subject: Browser Plug-in threat.
10/21/2005 5:02 AM PST
By: Trish
In: general NG.

I hope that (this) post is helpful, let us know how it works ºut.
Еиçеl
 
G

Guest

Hi Leo,

About the error 0x80508026 from Mike T.

Subject: Information on errors 0x8020800c, 0x80508026, 0x80501001
2/15/2006 10:32 PM PST
By: Mike Treit [Msft]
In: announcements NG


= Error 0x80508026 or 0x80501001 when trying to remove a threat ==
This error will occur if a threat is detected inside of a container such as
a ZIP file, RAR archive, etc.

The "remove" action cannot (in most cases) be applied to an object inside of
such containers, without deleting the entire container.

It might be worth noting that the original Antispyware beta did not have the
ability to scan inside such containers.

We still need to work on the best way to handle this scenario. The issue is
that you may have a ZIP file with tons of non-malicious file in it, but one
or more "bad" files as well that are detected. The question is: how should we
handle that? Deleting the entire container may inadvertently delete the clean
files as well, and that might not be what you want.

For now you can check if the ZIP file has anything else inside of it that
you want to keep. If not, just delete the ZIP file yourself and you will have
removed the threat.

If you really want to keep the ZIP file around but do not want to see this
error (and again, you can expect that in the future we will have a better
story here - at least not such a cryptic error message) you can disable
scanning inside archives. Clear the checkbox for "Scan inside archives" in
the General Settings section under the Tools menu. Generally, threats inside
archives, while good to know about, are not "active", meaning they can't
doanything bad to your system while inside the archive.
Thanks
-Mike


Good luck
Let us know how it works ºut.
Еиçеl
 
G

Guest

Thanks, but need some extra help...
1. how do I usentify which ZIP file?
2. how do I unzip it to see its contents?
Thanks,
Leo

Engel said:
Hi Leo,

About the error 0x80508026 from Mike T.

Subject: Information on errors 0x8020800c, 0x80508026, 0x80501001
2/15/2006 10:32 PM PST
By: Mike Treit [Msft]
In: announcements NG


= Error 0x80508026 or 0x80501001 when trying to remove a threat ==
This error will occur if a threat is detected inside of a container such as
a ZIP file, RAR archive, etc.

The "remove" action cannot (in most cases) be applied to an object inside of
such containers, without deleting the entire container.

It might be worth noting that the original Antispyware beta did not have the
ability to scan inside such containers.

We still need to work on the best way to handle this scenario. The issue is
that you may have a ZIP file with tons of non-malicious file in it, but one
or more "bad" files as well that are detected. The question is: how should we
handle that? Deleting the entire container may inadvertently delete the clean
files as well, and that might not be what you want.

For now you can check if the ZIP file has anything else inside of it that
you want to keep. If not, just delete the ZIP file yourself and you will have
removed the threat.

If you really want to keep the ZIP file around but do not want to see this
error (and again, you can expect that in the future we will have a better
story here - at least not such a cryptic error message) you can disable
scanning inside archives. Clear the checkbox for "Scan inside archives" in
the General Settings section under the Tools menu. Generally, threats inside
archives, while good to know about, are not "active", meaning they can't
doanything bad to your system while inside the archive.
Thanks
-Mike


Good luck
Let us know how it works ºut.
Еиçеl
--


LeoK said:
I ran Windows Defender. It found "WindUpdates" whicg it classified as Alert
Level "Severe". When I tried to remove it, it fails, as it did at a second
attempt. Status is Failed, 0x80508026
What am I to do?

Leo
 
G

Guest

Hi Leo,

Run Ewido on line, probably can give you the location
www.ewido.net/en


Also, look in the Event log:
Start > Run > type "eventvwr.msc", hit "OK" Windows Defender is logged in
the "System" log.
OR, alternatively: Start>control panel>Performance and
Maintenance>ADministrative Tools>event viewer>system. If you see WinDefend,
you can right click on the entry to see more information. If there are errors
visible, you can click on a link within the info box and Windows Explorer
will connect with the Mircrosoft knowledge base if you are connected to the
Internet. --

Еиçеl
--

LeoK said:
Thanks, but need some extra help...
1. how do I usentify which ZIP file?
2. how do I unzip it to see its contents?
Thanks,
Leo

Engel said:
Hi Leo,

About the error 0x80508026 from Mike T.

Subject: Information on errors 0x8020800c, 0x80508026, 0x80501001
2/15/2006 10:32 PM PST
By: Mike Treit [Msft]
In: announcements NG


= Error 0x80508026 or 0x80501001 when trying to remove a threat ==
This error will occur if a threat is detected inside of a container such as
a ZIP file, RAR archive, etc.

The "remove" action cannot (in most cases) be applied to an object inside of
such containers, without deleting the entire container.

It might be worth noting that the original Antispyware beta did not have the
ability to scan inside such containers.

We still need to work on the best way to handle this scenario. The issue is
that you may have a ZIP file with tons of non-malicious file in it, but one
or more "bad" files as well that are detected. The question is: how should we
handle that? Deleting the entire container may inadvertently delete the clean
files as well, and that might not be what you want.

For now you can check if the ZIP file has anything else inside of it that
you want to keep. If not, just delete the ZIP file yourself and you will have
removed the threat.

If you really want to keep the ZIP file around but do not want to see this
error (and again, you can expect that in the future we will have a better
story here - at least not such a cryptic error message) you can disable
scanning inside archives. Clear the checkbox for "Scan inside archives" in
the General Settings section under the Tools menu. Generally, threats inside
archives, while good to know about, are not "active", meaning they can't
doanything bad to your system while inside the archive.
Thanks
-Mike


Good luck
Let us know how it works ºut.
Еиçеl
--


LeoK said:
I ran Windows Defender. It found "WindUpdates" whicg it classified as Alert
Level "Severe". When I tried to remove it, it fails, as it did at a second
attempt. Status is Failed, 0x80508026
What am I to do?

Leo
 
G

Guest

Hi...
I r4un ewido and cleaned up its numerous finding (none found but Defender).
Theb runDefender, and it found nothing, so I belive ewido dealt with
WinDefend. So- is ewido abetter tool than Defender?

Thanks a lot for help!
Leo

Engel said:
Hi Leo,

Run Ewido on line, probably can give you the location
www.ewido.net/en


Also, look in the Event log:
Start > Run > type "eventvwr.msc", hit "OK" Windows Defender is logged in
the "System" log.
OR, alternatively: Start>control panel>Performance and
Maintenance>ADministrative Tools>event viewer>system. If you see ,
you can right click on the entry to see more information. If there are errors
visible, you can click on a link within the info box and Windows Explorer
will connect with the Mircrosoft knowledge base if you are connected to the
Internet. --

Еиçеl
--

LeoK said:
Thanks, but need some extra help...
1. how do I usentify which ZIP file?
2. how do I unzip it to see its contents?
Thanks,
Leo

Engel said:
Hi Leo,

About the error 0x80508026 from Mike T.

Subject: Information on errors 0x8020800c, 0x80508026, 0x80501001
2/15/2006 10:32 PM PST
By: Mike Treit [Msft]
In: announcements NG


= Error 0x80508026 or 0x80501001 when trying to remove a threat ==
This error will occur if a threat is detected inside of a container such as
a ZIP file, RAR archive, etc.

The "remove" action cannot (in most cases) be applied to an object inside of
such containers, without deleting the entire container.

It might be worth noting that the original Antispyware beta did not have the
ability to scan inside such containers.

We still need to work on the best way to handle this scenario. The issue is
that you may have a ZIP file with tons of non-malicious file in it, but one
or more "bad" files as well that are detected. The question is: how should we
handle that? Deleting the entire container may inadvertently delete the clean
files as well, and that might not be what you want.

For now you can check if the ZIP file has anything else inside of it that
you want to keep. If not, just delete the ZIP file yourself and you will have
removed the threat.

If you really want to keep the ZIP file around but do not want to see this
error (and again, you can expect that in the future we will have a better
story here - at least not such a cryptic error message) you can disable
scanning inside archives. Clear the checkbox for "Scan inside archives" in
the General Settings section under the Tools menu. Generally, threats inside
archives, while good to know about, are not "active", meaning they can't
doanything bad to your system while inside the archive.
Thanks
-Mike


Good luck
Let us know how it works ºut.
Еиçеl
--


:

I ran Windows Defender. It found "WindUpdates" whicg it classified as Alert
Level "Severe". When I tried to remove it, it fails, as it did at a second
attempt. Status is Failed, 0x80508026
What am I to do?

Leo
 
P

PA Bear

What am I to do the the list of links you provide?

Read them and discover ways you might remove WindUpdates.
Why does Window Defender not work?

No one anti-spyware app will remove /all/ spyware.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top