A one-click fix for Windows Update problems - How do I reset Windows Update components ?

I don't blame you for not allowing OneCare to fix registry errors without first seeing what the purported errors were.

Registry errors can cause connectivity issues with the update servers but you should be able to discern if that's the case from the CBS.log [WINDOWS\Logs\CBS]

Were any malwares detected during the OneCareSafety Scan ?

BTW, you can uninstall the OneCare scanning components from within Programs and Features in the Control Panel.

To keep things clear here ... the system was infected, cleaned, and then SP2 was installed, correct ?

Please open System Information by running msinfo32 from the Run line

From: How to determine and to recover from Winsock2 corruption in Windows Server 2003, in Windows XP, and in Windows Vista

Manual steps to determine whether the Winsock2 keys is corrupted

1. Click Start , click Run , type Msinfo32 , and then click OK .
2. Expand Components , expand Network , and then click Protocol .
3. Ten sections appear under Protocol. The section headings will include the following names if the Winsock2 key is undamaged:
   • MSAFD Tcpip [TCP/IP]
   • MSAFD Tcpip [UDP/IP]
   • MSAFD Tcpip [TCP/IPv6]
   • MSAFD Tcpip [UDP/IPv6]
   • RSVP UDP Service Provider
   • RSVP TCP Service Provider
   • RSVP UDPv6 Service Provider
   • RSVP TCPv6 Service Provider
   • MSAFD NetBIOS [\Device\NetBT_Tcpip...
   • MSAFD NetBIOS [\Device\NetBT_Tcpip...
   • MSAFD NetBIOS [\Device\NetBT_Tcpip...
   • MSAFD NetBIOS [\Device\NetBT_Tcpip...
   • MSAFD NetBIOS [\Device\NetBT_Tcpip...
   • MSAFD NetBIOS [\Device\NetBT_Tcpip...

If the names are anything different from those in this list, the Winsock2 key is corrupted, or you have a third-party add-on such as proxy software installed.

If you have a third-party add-on installed, the name of the add-on will replace the letters "MSAFD" in the list.If there are more than ten sections in the list, you have third-party additions installed.If there are fewer than ten sections, there is information missing.

MowGreen MVP Data Center Management - Update Services Consumer Security

First, see this Knowledge Base article: Error message when you try to install updates by using Windows Update "Code:0x800736CC"

If deleting the contents of the Download subfolder does not resolve the error, then run the System Update Readiness Tool http://support.microsoft.com/kb/947821

Then try to update once more. If the system fails to update, then post the following logs, please:

1. CheckSUR.log ( located at WINDOWS\Logs\CBS )
2. At least the last 50 or so lines of the WindowsUpdate.log ( located in WINDOWS; the most recent entries are at the bottom of the log )

The updating issue is being caused by inconsistencies in the WinSxS subdirectory of WINDOWS.

MowGreen MVP Data Center Management - Update Services Consumer Security

What a great tool!  although I had to run it in the Agressive Mode to correct my Windows Update error 80244019.  Why is it buried so deeply in the Microsoft world?

When the scanner was done with the computer I used it on, it offered NO report, and said xxx number of problems were found in the registry did I want them "fixed"  (just like the rogue security programs lol). Heck no, not without seeing what it wanted to "fix." I don't have access right now to that computer, but it (onecare) left itself on there, I saw that when going through the files. I remember the event vividly as it hacked me off that it operated like one of those ads you see for reg cleaners.

While a format and re install is always an option, and many times even a quicker resolution to any problem, there HAS to be a way to fix anything without killing the whole system. I prefer to find that way when I can.

I don't know which specific malware was found after the MBAM and SAS were run. I quarantined and deleted them as they came up, again, without access to the computer I can't check the logs. WInpatrol and Avast were run after the computer was cleaned and as such, they both came up clean. After the SAS MBRAM, and Spybot were run, we did HJT, Combofix,

I ran the SUR before I did the SP2. LOL It was the first I had heard of it, (SUR). When I read this message: Important This update is offered on Windows Update only to computers that have a condition that the tool could resolve, I assumed when it did not run that it was not needed. was that an incorrect assumption? I followed the following link i found on: support.microsoft.com/default.aspx/kb/947821:

Collapse this image Expand this image

Download the System Update Readiness Tool for Windows Vista x64 (KB947821) package now. (http://www.microsoft.com/downloads/details.aspx?FamilyID=b950e3b1-3267-41c2-8f10-1fe9a4bfa44d)

LOL that  above didn't post correctly.

The only thing the system cannot access is Microsoft update.