« Links to the Latest Version of the Windows Update Agent | Main | Garlic Mushrooms and other stuff ... »

NOD32 - Windows Update Issue

Follow up: 12/7/2007
Installed V. 3.0.566 and the issue was resolved.

This issue is in regards to NOD32 Version 2.7.39. It's been observed on XP Pro SP2 and Media Center 2005.

In the course of checking the WindowsUpdate.log I noticed this:

2007-12-05 07:42:51:313 984 d28 Misc WARNING: Send failed with hr = 80072efd.
2007-12-05 07:42:51:333 984 d28 Misc WARNING: SendRequest failed with hr = 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2007-12-05 07:42:51:333 984 d28 Misc WARNING: WinHttp: SendRequestUsingProxy failed for . error 0x80072efd
2007-12-05 07:42:51:333 984 d28 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd
2007-12-05 07:42:51:333 984 d28 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072efd
2007-12-05 07:42:51:333 984 d28 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072efd
2007-12-05 07:42:53:586 984 d28 Misc WARNING: Send failed with hr = 80072efd.
2007-12-05 07:42:53:586 984 d28 Misc WARNING: SendRequest failed with hr = 80072efd. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2007-12-05 07:42:53:586 984 d28 Misc WARNING: WinHttp: SendRequestUsingProxy failed for . error 0x80072efd
2007-12-05 07:42:53:586 984 d28 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072efd

Did a few troubleshooting steps which included Stopping and Restarting the Automatic Updates service. The service failed to restart so I ran
sc query wuauserv
This was the error: 0x8007277A

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 12/6/2007
Time: 12:16:24 PM
User: N/A
Computer: C4DFF7AF7CA
Description:
The Automatic Updates service terminated with the following error:
The requested service provider could not be loaded or initialized.


Looked the error up on Google and found a thread which attributed it to
NOD32.
Disabled the AMON service and AU still failed
Disabled the IMON service and the AU service Started

Checked the NOD32 event log and apparently this issue started after the installation of one of these virus signature database updates:

Time Module Event User
12/4/2007 16:46:37 PM Kernel The virus signature database has been successfully updated to version 2703 (20071205).
Time Module Event User
12/4/2007 9:58:23 AM Kernel The virus signature database has been successfully updated to version 2701 (20071204).

Restarted the AMON service in NOD32, ran wuauclt /detectnow
no error in the WU.log
Restarted the IMON service in NOD32, ran wuauclt /detectnow again and the error reappeared in the WU.log
Stopped it and AU successfully connected.

I've pinged someone at Eset, the publisher of NOD32, to notify him of this issue. Will post a follow up when I hear something. [see top of page for the follow up]

TrackBack

TrackBack URL for this entry:
http://busterbunny.castlecops.com/MT/mt-tb.cgi/1238

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)