Windows Update will not work, getting error 80244004

It looks like enabling SSL-protocol scanning is causing the trouble on my system.

 Go into ESET Advanced Setup

Web and email – Protocol filtering - SSl

It’s not enabled by default, but ESET is asking you to enable it (Parental Control Settings)

 

eset_ess_5_userguide_enu.pdf

4.3.4.2 Excluded applications

To exclude communication of specific network-aware applications from content filtering, select them in the list. HTTP/POP3/IMAP communication of the selected applications will not be checked for threats. We recommend using this option only for applications that do not work properly with their communication being checked.

Running applications and services will be available here automatically. Click the Add... button to manually select an application not shown on the protocol filtering list.

I selected: C:\Windows\System32\svchost.exe in the list, and re-enabled:  Always scan SSL protocol – Select this option to scan all SSL protected communications except communications protected by certificates excluded from checking. If a new communication using an unknown, signed certificate is established, you will not be notified and the communication will automatically be filtered. When you access a server with an un-trusted certificate that is marked by you as trusted (it is added to the trusted certificates list), communication to the server is allowed and the content of the communication channel is filtered.

HTTPS protocol checking filter = enabled!!

4.3.1.1 HTTP, HTTPs

By default, ESET Smart Security is configured to use the standards of most Internet browsers. However, the HTTP

scanner setup options can be modified in Advanced setup (F5) > Web and email > Web access and antiphishing

protection > HTTP, HTTPS. In the main HTTP/HTTPS scanner window, you can select or deselect the Enable HTTP

checking option. You can also define the port numbers used for HTTP communication. By default, the port numbers 80

(HTTP), 8080 and 3128 (for Proxy server) are predefined.

ESET Smart Security supports HTTPS protocol checking. HTTPS communication uses an encrypted channel to transfer

information between server and client. ESET Smart Security checks communications utilizing the SSL (Secure Socket

Layer), and TLS (Transport Layer Security) encryption methods. HTTPS checking can be performed in the following

modes:

Do not use HTTPS protocol checking – Encrypted communication will not be checked.

Use HTTPS protocol checking for selected ports – HTTPS checking only for ports defined in Ports used by HTTPS

protocol.

Use HTTPS protocol checking for selected ports – The program will only check those applications that are specified in

the browsers section and that use ports defined in Ports used by HTTPS protocol. Port 443 is set by default.

Encrypted communication will be not scanned. To enable the scanning of encrypted communication and view the

scanner setup, navigate to SSL protocol checking in Advanced setup section, click Web and email > Protocol filtering

> SSL and enable the Always scan SSL protocol option.

The solution provided here?

http://answers.microsoft.com/en-us/windows/forum/windows_other-windows_update/i-cannot-check-for-updates-with-windows-7-computer/965d8d8c-6534-40b3-9f07-81e6fd500c69

For some reason didn’t work for me.

4.3.4.4 SSL protocol checking

ESET Smart Security enables you to check protocols encapsulated in SSL protocol. You can use various scanning modes

for SSL protected communications using trusted certificates, unknown certificates, or certificates that are excluded from

SSL-protected communication checking.

Always scan SSL protocol – Select this option to scan all SSL protected communications except communications

protected by certificates excluded from checking. If a new communication using an unknown, signed certificate is

established, you will not be notified and the communication will automatically be filtered. When you access a server

with an untrusted certificate that is marked by you as trusted (it is added to the trusted certificates list), communication

to the server is allowed and the content of the communication channel is filtered.

This solution works! I have also sent a customer service request to ESET to point out that there is a problem with their HTTPS scanning.

After receiving Windows Update agent 7.6.7600.256 on my other system with Vista x64 this morning, I had to do everything all over again.  Eset and Windows Update were working perfectly before this update (before the update I didn't have to select  C:\Windows\System32\svchost.exe in the list).   I'm still wondering what's going on exactly.  Thank you for your reply.