An old issue regarding updating Windows

happygolucky212 · 12-04-2005, 01:05 PM

I'm back with the hope that someone can help me with this one. I need to update windows (98SE) yet whenever I go to the update page it tells me that i need to be an administrator in order to do so. This is a home computer that never had an admin account....everything I have read so far on the microsoft support site works for 2000 and XP, but no 98.

Is there a way i can find out if there is an admin account on my pc? And if there is not, how can I upate windows to keep the holes patched??

Cheers
Happy

Chevy · 12-04-2005, 03:15 PM

Win98 didn't provide for that level of security. However, some third-party apps did.

Have you installed any security software (not firewalls)?

happygolucky212 · 12-04-2005, 03:45 PM

nope. I have no security software running whatsoever. Geek girl just helped me out with a trojan i got due to that fact.
I have looked on microsoft support website and it seems that there are a few others having the same problem....however no solution there. There are no other threads here either.

I can't update at all!

Cheers and thanks.
Any ideas?

tummypony86 · 12-04-2005, 09:12 PM

http://groups.google.com/group/micro...&start=1&num=3

**oshwyn5** · 12-11-2005, 12:20 PM

Quote:

Originally Posted by happygolucky212

nope. I have no security software running whatsoever. Geek girl just helped me out with a trojan i got due to that fact.
I have looked on microsoft support website and it seems that there are a few others having the same problem....however no solution there. There are no other threads here either.

I can't update at all!

Cheers and thanks.
Any ideas?

Can you link to that thread? I suspect that you have not finished the trojans removal and repair of the damage. It appears that it has inserted a registry entry to prompt for admin at windows update which must be removed.

Also, this may be your problem
http://v4.windowsupdate.microsoft.com/troubleshoot/

Quote:

You recieve the message:
Access Denied. Please check with your System Administrator (Windows 98 and Windows ME)
when accessing windows update.

To resolve this issue, please follow these steps:

1. Click on Start, Run and type "regedit" (w/o the quotes). The Registry Editor will open.
WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall Windows 98/ME. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

2. Navigate to the following key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

3. You should see a key called "NoWindowsUpdate".

Check the data value for this key. In order to access the Windows Update site, the data value should be a zero "0". If the value is set to a one "1", then your PC is currently configured to DENY access to the Windows Update site. You need to change the value of this key to a zero "0" to allow your PC access to the site. To change the data value, double-click on the key name and set the value to a zero "0".

4. Once the data value has been changed, close the registry editor, reboot your PC and try the Windows Update site again.

If after verifying that the NoWindowsUpdate key is set to a zero "0" and re-booting your PC you are still seeing the Access Denied error on the Windows Update web site, then try these steps:

1. Open the Registry Editor.
2. Navigate to the following key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

3. Select the "NoWindowsUpdate" key and Delete it.
4. Close the registry editor, reboot your PC and try the site again.

For more steps to try, refer to this Microsoft KB article:

http://support.microsoft.com/default...b;en-us;228548

I suppect that your trojan inserted this or a similar line.

Geekgirl · 12-11-2005, 08:57 PM

Yes I remember the thread but you never mentioned you couldnt recieve updates. I asked if there were any problems and if not you were set to go. I also gave you a link to install AVG because you didnt have an anti-virus installed. Heres the link http://www.techsupportforum.com/hija...-me-ahhhh.html

You had the W32/Spybot-R is a P2P worm that spreads via the KaZaA file sharing network. But I didnt see any reference to KaZaA installed on your system thru the HJT log. It was squeeky clean other than the worm file.

**oshwyn5** · 12-12-2005, 07:53 AM

Well, I do not think either
http://www.sophos.com/virusinfo/anal...rojmasota.html
or
http://www.sophos.com/virusinfo/anal...32spybotr.html
Would do this, but from the line

Quote:

It seems that I have been taken over by Trojans and can't get rid of them. I am unable to open msconfig or regedit

I would bet that he had something more sinister such as
http://www.symantec.com/avcenter/ven....redlof.b.html
Which would account for the problems and he did not do the needed followup registry repairs after removing it .
There are so many now which do similar things to disable regedit, windows update, msconfig , task manager etc that you really need to know just which one they removed in order to find the specific registry keys to repair. That is why it is always advised that if you clean a virus , you consult the log of your antivirus and go to the manufacturers web site to find if additional steps are needed; or ask an expert to help you with followup. Likewise, it is why you should never "fix" anything with hijackthis until an expert has reviewed your log file and identified the specific infestation and given you a step by step manual removal and repair instruction.

Geekgirl · 12-12-2005, 08:05 AM

Quote:

That is why it is always advised that if you clean a virus , you consult the log of your antivirus and go to the manufacturers web site to find if additional steps are needed; or ask an expert to help you with followup. Likewise, it is why you should never "fix" anything with hijackthis until an expert has reviewed your log file and identified the specific infestation and given you a step by step manual removal and repair instruction.

Hmmm well I assumed I was that expert

from what I read the removal of those regisrty entries was optional in Windows 95/98/Me.
The log didnt show anything more sinister. I can only assume he is needing to do a repair install or he could try running the system file checker.

oshwyn5 do you have authority to give instructions using HJT? Have you gone through the Academy?

happygolucky212 · 12-18-2005, 12:06 PM

ok, so what do i do then? sorry i have not gotten back to you in a while but i am not often able to try and fix this problem.

I still can't update....sorry i didnt mention it earlier but it never occured to me that the two were even related!

Thanks again for your help.

Cheers

Geekgirl · 12-18-2005, 08:26 PM

Do a Repair Install:

http://www.microsoft.com/windowsxp/u...ps/doug92.mspx

Configure your computer to start from the CD-ROM drive. Most computers you can hit the DEL key at boot and change the settings in the BIOS. Then insert your Windows XP Setup CD, and restart your computer.

1.When the Press any key to boot from CD message is displayed on your screen, press a key to start your computer from the Windows XP CD.

2.Press ENTER when you see the message To setup Windows XP now, and then press ENTER displayed on the Welcome to Setup screen.

3.Do not choose the option to press R to use the Recovery Console.

4.In the Windows XP Licensing Agreement, press F8 to agree to the license agreement.

5.Make sure that your current installation of Windows XP is selected in the box, and then press R to repair Windows XP.

6.Follow the instructions on the screen to complete Setup.

happygolucky212 · 12-19-2005, 09:09 AM

I am using windows 98SE though....should i or can i even do a repair install? I have a windows XP cd from my laptop, do you want me to use that to repair my win98 system?

**oshwyn5** · 12-19-2005, 10:38 AM

No do not use your XP cd on win98.

Please tell us if you have a win98 cd or if your computer has the folder
C:\Win\Options\Cabs
(I noted in your Hijackthis log that you are using C:\Win instead of C:\Windows is there any reason you did this or did it just come that way?)

Did you check the registry key I suggested earlier?

IS the value 0 or 1?

Changing this key back from 1 to 0 is a necessary step in recovery from this and several other viruses.

What antivirus do you have? Have you used it to clear any specific infestations"?

Other than what was in the hijackthis log thread, did you have any viruses removed and which ones? (So we can look up the manual followup recovery steps and see which ones you may have missed).

Also these entries in your hijackthis log
0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = ;www.google.com;127.0.0.1;<local>
O4 - HKLM\..\Run: [CriticalUpdate] C:\WIN\SYSTEM\wucrtupd.exe -startup
make me wonder if you may have this worm
http://vil.nai.com/vil/content/v_100790.htm

Could you please locate the file
C:\WIN\SYSTEM\wucrtupd.exe
Right click and choose properties , tell us what it says

Geekgirl · 12-19-2005, 12:33 PM

I am so sorry, I forgot you were running 98. With the system booted place the 98cd in the cd drive and proceed to install. It will let you install over top existing o.s.
Dont forget to install all the Critical Updates and Service Packs once you get it reinstalled.

oshwyn5, happygolucky212 had the W32/Spybot-R worm, its a P2P that spreads via the KaZaA file sharing network.

Quote:

Also these entries in your hijackthis log
0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = ;www.google.com;127.0.0.1;<local>
O4 - HKLM\..\Run: [CriticalUpdate] C:\WIN\SYSTEM\wucrtupd.exe -startup
make me wonder if you may have this worm
http://vil.nai.com/vil/content/v_100790.htm

These were checked by me. wucrtupd.exe is a process checking for the latest updates for Windows.

happygolucky212 was not using any anti-virus at the time, I have instructed him to use AVG Free Edition.

happygolucky212 · 12-22-2005, 01:39 PM

I have looked into the registry key and it does not exist, so I could not change the value. I have installed AVG and will try to reinstall the OS. However can you help me find the CD among the mess ;)

Cheers

**oshwyn5** · 12-24-2005, 09:57 AM

If you have the folder C:\Windows\Options\Cabs
You can navigate there from a command prompt only boot
(C:_>
CD C:\windows\options\cabs (hit enter)
C:\Windows\Opitons\cabs_>
Setup.exe(hit enter)
windows setup begins for a dirty install of windows over itself.

Note that if you do this or install from cd, you will probably have to reinstall most programs to get them to work. Also, you will have to get all windows updates again.

No biggie if you do not have this.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\Explorer

However, if you navigate to C:\Windows\Wupdmgr
Right click and choose properties.
Is version 5.00.201.3.1 ? Source microsoft?
What happens if you double click it?

Is the folder C:\WUTEMP empty? If not delete the contents.

IN IE, have you tried going to tools/ security / trusted zone
Add a site
*.microsoft.com
(With the * )

Have you tried going to IE/ tools/ internet options/ general / temp internet files/ settings/ view objects/ locate and delete "Update class"
It should reinstall when you visit windows update.

happygolucky212 · 01-12-2006, 01:43 PM

i will try that seeing as i cant find my 98 cd. If I can't find it and these dont work....is that all i can do? Never to update my OS

**oshwyn5** · 01-12-2006, 05:14 PM

Well, you can try going to belarc.com and under downloads get the free belarc advisor and run it. At the bottom it will give links to missing or damaged windows updates that you can get manually.
I think PCpitstop does the same thing.

12-04-2005, 01:05 PM	#1 (permalink)
happygolucky212 Registered User Join Date: Dec 2005 Posts: 22 OS: XP	An old issue regarding updating Windows I'm back with the hope that someone can help me with this one. I need to update windows (98SE) yet whenever I go to the update page it tells me that i need to be an administrator in order to do so. This is a home computer that never had an admin account....everything I have read so far on the microsoft support site works for 2000 and XP, but no 98. Is there a way i can find out if there is an admin account on my pc? And if there is not, how can I upate windows to keep the holes patched?? Cheers Happy

12-11-2005, 08:57 PM	#6 (permalink)
Geekgirl Assistant Manager, Microsoft Support Join Date: Jan 2005 Location: Six-burgh, Pennsylvania Posts: 14,164 OS: XP Home SP3/XP Pro SP3/Vista Ultimate SP2/Windows 7 Professional	Yes I remember the thread but you never mentioned you couldnt recieve updates. I asked if there were any problems and if not you were set to go. I also gave you a link to install AVG because you didnt have an anti-virus installed. Heres the link http://www.techsupportforum.com/hija...-me-ahhhh.html You had the W32/Spybot-R is a P2P worm that spreads via the KaZaA file sharing network. But I didnt see any reference to KaZaA installed on your system thru the HJT log. It was squeeky clean other than the worm file. __________________ Compare NOD32 to your current antivirus and anti-spyware solution, HERE How to back up and restore the registry in Windows XP and Windows Vista Or Windows 7 How to back up and restore the registry in Windows 98/ ME / NT 4.0 / 2000 I DO NOT ACCEPT EMAILS AND WILL NOT REPLY TO THEM !!!!! TSF DOES NOT SUPPORT ASSISTANCE THROUGH EMAIL OR PRIVATE MESSAGES, PLEASE KEEP ALL QUESTIONS IN THE OPEN FORUM *The Pittsburgh Steelers - 6 X Superbowl Champions !!!!!!!* *The Pittsburgh Penguins - 2009 Stanley Cup Champions !!!!!!!*

12-18-2005, 08:26 PM	#10 (permalink)
Geekgirl Assistant Manager, Microsoft Support Join Date: Jan 2005 Location: Six-burgh, Pennsylvania Posts: 14,164 OS: XP Home SP3/XP Pro SP3/Vista Ultimate SP2/Windows 7 Professional	Do a Repair Install: http://www.microsoft.com/windowsxp/u...ps/doug92.mspx Configure your computer to start from the CD-ROM drive. Most computers you can hit the DEL key at boot and change the settings in the BIOS. Then insert your Windows XP Setup CD, and restart your computer. 1.When the Press any key to boot from CD message is displayed on your screen, press a key to start your computer from the Windows XP CD. 2.Press ENTER when you see the message To setup Windows XP now, and then press ENTER displayed on the Welcome to Setup screen. 3.Do not choose the option to press R to use the Recovery Console. 4.In the Windows XP Licensing Agreement, press F8 to agree to the license agreement. 5.Make sure that your current installation of Windows XP is selected in the box, and then press R to repair Windows XP. 6.Follow the instructions on the screen to complete Setup. __________________ Compare NOD32 to your current antivirus and anti-spyware solution, HERE How to back up and restore the registry in Windows XP and Windows Vista Or Windows 7 How to back up and restore the registry in Windows 98/ ME / NT 4.0 / 2000 I DO NOT ACCEPT EMAILS AND WILL NOT REPLY TO THEM !!!!! TSF DOES NOT SUPPORT ASSISTANCE THROUGH EMAIL OR PRIVATE MESSAGES, PLEASE KEEP ALL QUESTIONS IN THE OPEN FORUM *The Pittsburgh Steelers - 6 X Superbowl Champions !!!!!!!* *The Pittsburgh Penguins - 2009 Stanley Cup Champions !!!!!!!*

12-19-2005, 10:38 AM	#12 (permalink)
oshwyn5 Registered User Join Date: Sep 2005 Location: Dallas , Tx Posts: 1,435 OS: DOS,Win95,98,ME,XP, Fedora	No do not use your XP cd on win98. Please tell us if you have a win98 cd or if your computer has the folder C:\Win\Options\Cabs (I noted in your Hijackthis log that you are using C:\Win instead of C:\Windows is there any reason you did this or did it just come that way?) Did you check the registry key I suggested earlier? IS the value 0 or 1? Changing this key back from 1 to 0 is a necessary step in recovery from this and several other viruses. What antivirus do you have? Have you used it to clear any specific infestations"? Other than what was in the hijackthis log thread, did you have any viruses removed and which ones? (So we can look up the manual followup recovery steps and see which ones you may have missed). Also these entries in your hijackthis log 0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = ;www.google.com;127.0.0.1;<local> O4 - HKLM\..\Run: [CriticalUpdate] C:\WIN\SYSTEM\wucrtupd.exe -startup make me wonder if you may have this worm http://vil.nai.com/vil/content/v_100790.htm Could you please locate the file C:\WIN\SYSTEM\wucrtupd.exe Right click and choose properties , tell us what it says __________________ Hello and Welcome to TSF My name is Pete but call me Oshwyn Click here for the five steps for Malware Removal If we have been of assistance please consider Donating to TSF to keep the forum running. Last edited by oshwyn5; 12-19-2005 at 10:54 AM.

12-24-2005, 09:57 AM	#15 (permalink)
oshwyn5 Registered User Join Date: Sep 2005 Location: Dallas , Tx Posts: 1,435 OS: DOS,Win95,98,ME,XP, Fedora	If you have the folder C:\Windows\Options\Cabs You can navigate there from a command prompt only boot (C:_> CD C:\windows\options\cabs (hit enter) C:\Windows\Opitons\cabs_> Setup.exe(hit enter) windows setup begins for a dirty install of windows over itself. Note that if you do this or install from cd, you will probably have to reinstall most programs to get them to work. Also, you will have to get all windows updates again. No biggie if you do not have this. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\Explorer However, if you navigate to C:\Windows\Wupdmgr Right click and choose properties. Is version 5.00.201.3.1 ? Source microsoft? What happens if you double click it? Is the folder C:\WUTEMP empty? If not delete the contents. IN IE, have you tried going to tools/ security / trusted zone Add a site .microsoft.com (With the ) Have you tried going to IE/ tools/ internet options/ general / temp internet files/ settings/ view objects/ locate and delete "Update class" It should reinstall when you visit windows update. __________________ Hello and Welcome to TSF My name is Pete but call me Oshwyn Click here for the five steps for Malware Removal If we have been of assistance please consider Donating to TSF to keep the forum running.

12-04-2005, 03:15 PM	#2 (permalink)
Chevy Retired Join Date: Jul 2003 Location: Notlob Posts: 5,452 OS: Vista Ultimate My System	Win98 didn't provide for that level of security. However, some third-party apps did. Have you installed any security software (not firewalls)?

12-04-2005, 03:45 PM	#3 (permalink)
happygolucky212 Registered User Join Date: Dec 2005 Posts: 22 OS: XP	nope. I have no security software running whatsoever. Geek girl just helped me out with a trojan i got due to that fact. I have looked on microsoft support website and it seems that there are a few others having the same problem....however no solution there. There are no other threads here either. I can't update at all! Cheers and thanks. Any ideas?

12-04-2005, 09:12 PM	#4 (permalink)
tummypony86 Registered User Join Date: Mar 2005 Posts: 174 OS: Win xp	http://groups.google.com/group/micro...&start=1&num=3

12-18-2005, 12:06 PM	#9 (permalink)
happygolucky212 Registered User Join Date: Dec 2005 Posts: 22 OS: XP	ok, so what do i do then? sorry i have not gotten back to you in a while but i am not often able to try and fix this problem. I still can't update....sorry i didnt mention it earlier but it never occured to me that the two were even related! Thanks again for your help. Cheers

12-19-2005, 09:09 AM	#11 (permalink)
happygolucky212 Registered User Join Date: Dec 2005 Posts: 22 OS: XP	I am using windows 98SE though....should i or can i even do a repair install? I have a windows XP cd from my laptop, do you want me to use that to repair my win98 system?

12-22-2005, 01:39 PM	#14 (permalink)
happygolucky212 Registered User Join Date: Dec 2005 Posts: 22 OS: XP	I have looked into the registry key and it does not exist, so I could not change the value. I have installed AVG and will try to reinstall the OS. However can you help me find the CD among the mess ;) Cheers

01-12-2006, 01:43 PM	#16 (permalink)
happygolucky212 Registered User Join Date: Dec 2005 Posts: 22 OS: XP	i will try that seeing as i cant find my 98 cd. If I can't find it and these dont work....is that all i can do? Never to update my OS

01-12-2006, 05:14 PM	#17 (permalink)
oshwyn5 Registered User Join Date: Sep 2005 Location: Dallas , Tx Posts: 1,435 OS: DOS,Win95,98,ME,XP, Fedora	Well, you can try going to belarc.com and under downloads get the free belarc advisor and run it. At the bottom it will give links to missing or damaged windows updates that you can get manually. I think PCpitstop does the same thing. __________________ Hello and Welcome to TSF My name is Pete but call me Oshwyn Click here for the five steps for Malware Removal If we have been of assistance please consider Donating to TSF to keep the forum running.