XP SP3 automatic updates not notifying me

I admit this is not the first time this question has appeared in the
newsgroup.

I have an administrator account on my office computer, which is of
course part of a company-wide network.

Up until June, I was automatically notified that updates were ready to
install on my computer each "patch Wednesday" (for whatever reason,
the "patch Tuesday" updates would always show up on Wednesday). I'd
install them, do a restart of my computer if necessary, and life would
resume as before within 15 minutes.

Starting in June, these notifications stopped coming. I've played
around with the control panel settings, switching among automatic,
download but don't install, and notify before downloading (not their
exact names, but you know what I mean). Made no difference.

I also followed some long instructions I found that involved changing
or deleting some registry keys. Again, no luck.

Anytime I run Windows Update on the computer, it finds the critical
updates, downloads them, and installs them.

And I don't necessarily *mind* administering the update process like
this, especially since my preferred setting for updates is that I
review the proposed updates before installing. But I'm curious about
what I might need to do, to allow Windows updates to again push
updates to my machine, or at least notify me of the updates.

Is Automatic Updates still enabled?

Start | Run | (type in) SERVICES.MSC | OK => Are the Services "Automatic
Updates" and "Cryptographic Services" marked Automatic and Started, and is
"Background Intelligent Transfer Service" (BITS) marked Manual?

> Starting in June, these notifications stopped coming.

Did the updates stop being offered after you'd installed WinXP SP3?

How to troubleshoot Windows Update, Microsoft Update, and Windows Server
Update Services installation issues:
http://support.microsoft.com/kb/906602

1. Check your WindowsUpdate.log (%windir%\WindowsUpdate.log) for errors
associated with the download/install.

How to read the WindowsUpdate.log file
http://support.microsoft.com/kb/902093

2. Compare errors to those listed here:
http://www.bleepingcomputer.com/blog...showentry=1122
and/or go to http://windowsupdate.microsoft.com > click on Help and Support
link in left pane > Solve problems on your own.

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

Support for Windows Update:
http://support.microsoft.com/gp/wusupport
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

nospam1@nospam.xxy wrote:
> I admit this is not the first time this question has appeared in the
> newsgroup.
>
> I have an administrator account on my office computer, which is of
> course part of a company-wide network.
>
> Up until June, I was automatically notified that updates were ready to
> install on my computer each "patch Wednesday" (for whatever reason,
> the "patch Tuesday" updates would always show up on Wednesday). I'd
> install them, do a restart of my computer if necessary, and life would
> resume as before within 15 minutes.
>
> Starting in June, these notifications stopped coming. I've played
> around with the control panel settings, switching among automatic,
> download but don't install, and notify before downloading (not their
> exact names, but you know what I mean). Made no difference.
>
> I also followed some long instructions I found that involved changing
> or deleting some registry keys. Again, no luck.
>
> Anytime I run Windows Update on the computer, it finds the critical
> updates, downloads them, and installs them.
>
> And I don't necessarily *mind* administering the update process like
> this, especially since my preferred setting for updates is that I
> review the proposed updates before installing. But I'm curious about
> what I might need to do, to allow Windows updates to again push
> updates to my machine, or at least notify me of the updates.

On Fri, 21 Nov 2008 03:03:09 -0500, "PA Bear [MS MVP]"
<PABearMVP@gmail.com> wrote:

>Is Automatic Updates still enabled?
>
>Start | Run | (type in) SERVICES.MSC | OK => Are the Services "Automatic
>Updates" and "Cryptographic Services" marked Automatic and Started, and is
>"Background Intelligent Transfer Service" (BITS) marked Manual?

Yes, the services are as indicated.

>
>> Starting in June, these notifications stopped coming.
>
>Did the updates stop being offered after you'd installed WinXP SP3?

Updates stopped being offered prior to my mid-August install of SP3.

>
>How to troubleshoot Windows Update, Microsoft Update, and Windows Server
>Update Services installation issues:
>http://support.microsoft.com/kb/906602
>
>1. Check your WindowsUpdate.log (%windir%\WindowsUpdate.log) for errors
>associated with the download/install.
>
>How to read the WindowsUpdate.log file
>http://support.microsoft.com/kb/902093
>

I have posted below several lines of interest from my
WindowsUpdate.log file. The formatting won't be right because of the
line length restrictions, but someone who knows what to look for (I
don't) can probably wade through this okay. Let me know anything that
jumps out:

2008-11-11 23:43:03:958 872 bf4 PT WARNING: PTError:
0x80244019
2008-11-11 23:43:03:958 872 bf4 PT WARNING:
GetConfig_WithRecovery failed: 0x80244019
2008-11-11 23:43:03:958 872 bf4 PT WARNING:
RefreshConfig failed: 0x80244019
2008-11-11 23:43:03:958 872 bf4 PT WARNING:
RefreshPTState failed: 0x80244019
2008-11-11 23:43:03:958 872 bf4 PT WARNING: PTError:
0x80244019
2008-11-11 23:43:03:958 872 bf4 Report WARNING:
Reporter failed to upload events with hr = 80244019.
2008-11-12 00:00:33:937 872 6fc AU AU was unable to
detect updates for more than 48 hours
2008-11-12 00:00:38:937 872 c74 Report REPORT EVENT:
{D40D4731-34BD-4D21-A271-BEE9CCC789FB} 2008-11-12 00:00:33:937-0500
1 149 102 {00000000-0000-0000-0000-000000000000} 0 0
AutomaticUpdates Failure Software Synchronization Unable to
Connect: Windows is unable to connect to the automatic updates service
and therefore cannot download and install updates according to the set
schedule. Windows will continue to try to establish a connection.
2008-11-12 00:09:54:680 872 c74 PT WARNING: GetConfig
failure, error = 0x80244019, soap client error = 10, soap error code =
0, HTTP status code = 404
2008-11-12 00:09:54:680 872 c74 PT WARNING: PTError:
0x80244019
2008-11-12 00:09:54:680 872 c74 PT WARNING:
GetConfig_WithRecovery failed: 0x80244019
2008-11-12 00:09:54:680 872 c74 PT WARNING:
RefreshConfig failed: 0x80244019
2008-11-12 00:09:54:680 872 c74 PT WARNING:
RefreshPTState failed: 0x80244019
2008-11-12 00:09:54:680 872 c74 PT WARNING: PTError:
0x80244019
2008-11-12 00:09:54:680 872 c74 Report WARNING:
Reporter failed to upload events with hr = 80244019.
2008-11-12 00:13:50:881 872 6fc AU #############
2008-11-12 00:13:50:881 872 6fc AU ## START ## AU:
Search for updates
2008-11-12 00:13:50:881 872 6fc AU #########
2008-11-12 00:13:50:881 872 6fc AU <<## SUBMITTED ##
AU: Search for updates [CallId =
{B8F9C3B9-AF99-49F1-AF41-CBDD3E0EC6EB}]
2008-11-12 00:13:50:881 872 c74 Agent *************
2008-11-12 00:13:50:881 872 c74 Agent ** START **
Agent: Finding updates [CallerId = AutomaticUpdates]
2008-11-12 00:13:50:881 872 c74 Agent *********
2008-11-12 00:13:50:881 872 c74 Agent * Online =
Yes; Ignore download priority = No
2008-11-12 00:13:50:881 872 c74 Agent * Criteria =
"IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and
IsAssigned=1 or IsHidden=0 and IsPresent=1 and
DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and
IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and
RebootRequired=1 or IsHidden=0 and IsInstalled=0 and
DeploymentAction='Uninstallation' and IsAssigned=1 and
RebootRequired=1"
2008-11-12 00:13:50:881 872 c74 Agent * ServiceID =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
2008-11-12 00:13:50:881 872 c74 Agent * Search Scope
= {Machine}
2008-11-12 00:13:50:881 872 c74 Misc WARNING: WinHttp:
SendRequestToServerForFileInformation failed with 0x80190194
2008-11-12 00:13:50:881 872 c74 Misc WARNING: WinHttp:
ShouldFileBeDownloaded failed with 0x80190194
2008-11-12 00:13:50:881 872 c74 Misc WARNING:
DownloadFileInternal failed for http://CCYFS1/selfupdate/wuident.cab:
error 0x80190194
2008-11-12 00:13:50:881 872 c74 Setup FATAL:
IsUpdateRequired failed with error 0x80244019
2008-11-12 00:13:50:881 872 c74 Setup WARNING:
SelfUpdate: Default Service: IsUpdateRequired failed: 0x80244019
2008-11-12 00:13:50:881 872 c74 Setup WARNING:
SelfUpdate: Default Service: IsUpdateRequired failed, error =
0x80244019
2008-11-12 00:13:50:881 872 c74 Agent * WARNING:
Skipping scan, self-update check returned 0x80244019
2008-11-12 00:13:50:897 872 c74 Agent * WARNING:
Exit code = 0x80244019
2008-11-12 00:13:50:897 872 c74 Agent *********
2008-11-12 00:13:50:897 872 c74 Agent ** END **
Agent: Finding updates [CallerId = AutomaticUpdates]
2008-11-12 00:13:50:897 872 c74 Agent *************
2008-11-12 00:13:50:897 872 c74 Agent WARNING: WU
client failed Searching for update with error 0x80244019
2008-11-12 00:13:50:897 872 cb8 AU >>## RESUMED ##
AU: Search for updates [CallId =
{B8F9C3B9-AF99-49F1-AF41-CBDD3E0EC6EB}]
2008-11-12 00:13:50:897 872 cb8 AU # WARNING: Search
callback failed, result = 0x80244019
2008-11-12 00:13:50:897 872 cb8 AU # WARNING: Failed
to find updates with error code 80244019
2008-11-12 00:13:50:897 872 cb8 AU #########
2008-11-12 00:13:50:897 872 cb8 AU ## END ## AU:
Search for updates [CallId = {B8F9C3B9-AF99-49F1-AF41-CBDD3E0EC6EB}]
2008-11-12 00:13:50:897 872 cb8 AU #############
2008-11-12 00:13:50:897 872 cb8 AU AU setting next
detection timeout to 2008-11-12 10:13:50
2008-11-12 00:13:55:881 872 c74 Report REPORT EVENT:
{34FE404A-8560-4C6E-B05B-61B77EAECFF0} 2008-11-12 00:13:50:881-0500
1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 0
80244019 SelfUpdate Failure Software Synchronization
Windows Update Client failed to detect with error 0x80244019.
2008-11-12 00:38:01:334 872 d28 PT WARNING: GetConfig
failure, error = 0x80244019, soap client error = 10, soap error code =
0, HTTP status code = 404
2008-11-12 00:38:01:334 872 d28 PT WARNING: PTError:
0x80244019

[Thread history:
http://groups.google.com/group/micro...87ef394b9fefd6 ]

nospam1@nospam.xxy wrote:
> PA Bear wrote:
>> Is Automatic Updates still enabled?
>>
>> Start | Run | (type in) SERVICES.MSC | OK => Are the Services "Automatic
>> Updates" and "Cryptographic Services" marked Automatic and Started, and
>> is
>> "Background Intelligent Transfer Service" (BITS) marked Manual?
>
> Yes, the services are as indicated.
>
>>> Starting in June, these notifications stopped coming.
>> Did the updates stop being offered after you'd installed WinXP SP3?
>
> Updates stopped being offered prior to my mid-August install of SP3.
<snip>
> I have posted below several lines of interest from my
> WindowsUpdate.log file. The formatting won't be right because of the
> line length restrictions, but someone who knows what to look for (I
> don't) can probably wade through this okay. Let me know anything that
> jumps out:
<snip>
> 2008-11-11 23:43:03:958 872 bf4 Report WARNING:
> Reporter failed to upload events with hr = 80244019.
> 2008-11-12 00:00:33:937 872 6fc AU AU was unable to
> detect updates for more than 48 hours
> 2008-11-12 00:00:38:937 872 c74 Report REPORT EVENT:
> {D40D4731-34BD-4D21-A271-BEE9CCC789FB} 2008-11-12 00:00:33:937-0500
> 1 149 102 {00000000-0000-0000-0000-000000000000} 0 0
> AutomaticUpdates Failure Software Synchronization Unable to
> Connect: Windows is unable to connect to the automatic updates service
> and therefore cannot download and install updates according to the set
> schedule. Windows will continue to try to establish a connection.
<snip>

The most recent 50 or so lines (e.g., from today or yesterday) may have been
more useful to us. Nevertheless, it give us something to work with.

0x80244019 SUS_E_PT_HTTP_STATUS_NOT_FOUND
Translation: Automatic Updates is unable to connect to the update servers

=> You cannot download updates when you access the Windows Update Web site
from a Windows XP-based computer that is behind a firewall or a proxy
server:
http://support.microsoft.com/kb/896226

=> What anti-virus application or security suite is installed and is your
subscription current? What anti-spyware applications (other than Defender)?
What third-party firewall (if any)?

=> Was a Norton or McAfee application ever installed on the machine (e.g., a
free-trial version that came preinstalled on the machine when you bought
it)?

=> Note that a severe hijackware infection (e.g., DNS.Changer; ZLOB; Vundo;
and/or an SDBot-variant & a rootkit) is the most likely cause of this
problem right now, so I'll include the following in this reply:

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

2. Run this online scan (in safe mode w/networking, if need be):
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run additional checks for hijackware, including posting your hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/