Upgrade Manager error message

[Martin Berry]

Hi all

I hope someone may be able to help out with this. I've
used Windows Update today (first time for ages) and
downloaded / installed a lot of upgrades, etc from
Microsoft. Having done all that, ever time I now connect
to the Internet (AOL is my ISP) I get an error meesage as
soon as AOL finishes loading. Here's the message and the
details:

UPDMGR caused an invalid page fault in
module MFC42.DLL at 0167:6c3cbf41.
Registers:
EAX=00000000 CS=0167 EIP=6c3cbf41 EFLGS=00010202
EBX=0041336c SS=016f ESP=0063fa6c EBP=0063fab8
ECX=00008004 DS=016f ESI=00000002 FS=3967
EDX=81732fe4 ES=016f EDI=0063fccc GS=2abf
Bytes at CS:EIP:
8b 01 6a 00 ff 50 64 e9 09 5d fa ff e8 a6 51 fa
Stack dump:
0063fb08 00008b78 0063fb54 000002b0 00008004 00000000
00000000 00000000 00000000 00000000 6c371018 0000000d
0063fb08 00008b78 0041336c 0063fa6c

UPDMGR is the upgrade manager (it's not still open, I'd
thought of that). As everything has been working perfectly
well pre-Windows Update and now I'm getting this message,
it seems to me that something's happened during the update
download or installation process. Once I cancel the
message box, AOL seems to run OK but I don't want this
problem continuing.

Shutdown / Restarting the PC makes no difference.

Any ideas, please? Ideally, I'd ask MS Tech Support as
this is almost certainly caused by their download but I
can't contact them - I've got OEM software & the MS site
refers me to the shop where I bought the machine which is
no use at all.

Thanks for your time & effort.

Martin Berry

[Brian A.]

If that happens to be updmgr.exe, it may not be what you think and if I suspect
correctly it's a variant of the KeenValue hijacking parasite.
http://pestpatrol.com/pestinfo/e/euniverse.asp

It may also be time for a thorough check/clean of other parasites that may be
installed.

**It is pertinent to run the update for each program before running to be sure you
have the latest definitions.**
Download/run Cool Web Shredder from:
http://www.spywareinfo.com/~merijn/downloads.html

For Info on Cool Web Search Variants:
http://www.spywareinfo.com/~merijn/cwschronicles.html

Then download/install/run Ad-Aware to detect/rid of any other parasites/spyware that
may be installed. It can be obtained free from:
http://www.lavasoftusa.com/
After installing Ad-Aware, open it and click on the ref update to get the latest
up-to-date ref file, then run Ad-Aware and delete everything it finds.

And/or download/install/run:
Spybot - Search & Destroy:
http://security.kolla.de/index.php?lang=en&page=download
Run it at it's default settings until you learn an know more about it. Spybot S&D is
more of an advanced users tool and changing from the default settings can be
dangerous to the novice user. Items found in the default settings that are RED can
usually be safely removed. If you are unsure of a found item, do not remove it and
ask for help.

If you still have problems, download/run HijackThis from:
http://www.merijn.org/
Do not remove anything with it until you get advice on what to remove, HJThis will
list many apps that are needed along with the bad ones. Removing items listed
hap-hazardly without knowing what they are can/will create a royal mess. Read the
quick start here on how to create a log file that can be copied/pasted into a forum
that can provide assistance on removal of unwanted pests.
http://mjc1.com/mirror/hjt/#quick

Then post the logs to an appropriate NG here where they specialize in
spyware/hijacker removal:
http://forums.spywareinfo.com/

It's also a good idea to have a HOSTS file to block bad sites, scroll to HOSTS File
Manager here:
http://www.mvps.org/PracticallyNerded/Software.htm

Another good app is SpywareBlaster which stops the badboys before they even get a
chance to install:
http://www.javacoolsoftware.com/spywareblaster.html

--
Brian A.

Jack of all trades, Master of none.
One can never truly be a master as there is always more to learn.


"Martin Berry" > wrote in message
...
> Hi all
>
> I hope someone may be able to help out with this. I've
> used Windows Update today (first time for ages) and
> downloaded / installed a lot of upgrades, etc from
> Microsoft. Having done all that, ever time I now connect
> to the Internet (AOL is my ISP) I get an error meesage as
> soon as AOL finishes loading. Here's the message and the
> details:
>
> UPDMGR caused an invalid page fault in
> module MFC42.DLL at 0167:6c3cbf41.
> Registers:
> EAX=00000000 CS=0167 EIP=6c3cbf41 EFLGS=00010202
> EBX=0041336c SS=016f ESP=0063fa6c EBP=0063fab8
> ECX=00008004 DS=016f ESI=00000002 FS=3967
> EDX=81732fe4 ES=016f EDI=0063fccc GS=2abf
> Bytes at CS:EIP:
> 8b 01 6a 00 ff 50 64 e9 09 5d fa ff e8 a6 51 fa
> Stack dump:
> 0063fb08 00008b78 0063fb54 000002b0 00008004 00000000
> 00000000 00000000 00000000 00000000 6c371018 0000000d
> 0063fb08 00008b78 0041336c 0063fa6c
>
> UPDMGR is the upgrade manager (it's not still open, I'd
> thought of that). As everything has been working perfectly
> well pre-Windows Update and now I'm getting this message,
> it seems to me that something's happened during the update
> download or installation process. Once I cancel the
> message box, AOL seems to run OK but I don't want this
> problem continuing.
>
> Shutdown / Restarting the PC makes no difference.
>
> Any ideas, please? Ideally, I'd ask MS Tech Support as
> this is almost certainly caused by their download but I
> can't contact them - I've got OEM software & the MS site
> refers me to the shop where I bought the machine which is
> no use at all.
>
> Thanks for your time & effort.
>
> Martin Berry