I don't blame you for not allowing OneCare to fix registry errors without first seeing what the purported errors were.
Registry errors can cause connectivity issues with the update servers but you should be able to discern if that's the case from the CBS.log [WINDOWS\Logs\CBS]
Were any malwares detected during the OneCareSafety Scan ?
BTW, you can uninstall the OneCare scanning components from within Programs and Features in the Control Panel.
To keep things clear here ... the system was infected, cleaned, and then SP2 was installed, correct ?
Please open System Information by running msinfo32 from the Run line
From: How to determine and to recover from Winsock2 corruption in Windows Server 2003, in Windows XP, and in Windows Vista
Manual steps to determine whether the Winsock2 keys is corrupted
- Click Start , click Run , type Msinfo32 , and then click OK .
- Expand Components , expand Network , and then click Protocol .
- Ten sections appear under Protocol. The section headings will include the following names if the Winsock2 key is undamaged:
- MSAFD Tcpip [TCP/IP]
- MSAFD Tcpip [UDP/IP]
- MSAFD Tcpip [TCP/IPv6]
- MSAFD Tcpip [UDP/IPv6]
- RSVP UDP Service Provider
- RSVP TCP Service Provider
- RSVP UDPv6 Service Provider
- RSVP TCPv6 Service Provider
- MSAFD NetBIOS [\Device\NetBT_Tcpip...
- MSAFD NetBIOS [\Device\NetBT_Tcpip...
- MSAFD NetBIOS [\Device\NetBT_Tcpip...
- MSAFD NetBIOS [\Device\NetBT_Tcpip...
- MSAFD NetBIOS [\Device\NetBT_Tcpip...
- MSAFD NetBIOS [\Device\NetBT_Tcpip...
If the names are anything different from those in this list, the Winsock2 key is corrupted, or you have a third-party add-on such as proxy software installed.
If you have a third-party add-on installed, the name of the add-on will replace the letters "MSAFD" in the list.If there are more than ten sections in the list, you have third-party additions installed.If there are fewer than ten sections, there is information missing.
MowGreen MVP Data Center Management - Update Services Consumer Security