Windows Update Service Disabled - Error 80070422 RRS feed

  • Question

  • Hi,

    On Windows Vista Ultimate SP1, when I go to Windows Update I see a "Check For Updates" button. When I click it I get an 80070422 error and "Try Again" button which does not work.


    I have tried all that is explained in Help on this error, but it's still not working. Let me write in more detail: I opened "Administrative Tools", went to "Services", "Windows Update" service is disabled. I set the "Startup Type" to "Automatic", click on Apply and then I click the "Start" button to start the service. I get an error: 1058: "Windows could not start the Windows Update service on Local Computer", "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it".


    I downloaded "WindowsUpdateAgent30-x86.exe" and installed it, hoping that the problem will be fixed, but no luck.

    I read somewhere on this forum that a user faced a similar problem and searched in "Windows\System32" for "wu*.*" files and changed the security settings for all of them to allow SYSTEM and Administrators full control and re-registered through "regsvr32" all of the .dll files, but, after doing all of these I still had no luck.


    My Windows Update still displays the error 80070422 and when I try to start the Windows Update service I get the error that the service cannot be started and it always sets itself on "Disabled", no matter what I do.


    Could someone please help me with this problem? I really don't know what else to do.

    Tuesday, May 20, 2008 5:58 PM


  • I was having the exact same problem and did many of the same things until i found your post.  Thank you for your hard work.  Here is what worked for me.

    Malwarebytes' Anti-Malware   http://www.malwarebytes.org/mbam.php

    It is a free download.  If it works for you, please help say thank you to the authors by purchasing a copy.  Just this one fix was well worth the price to me.  Imagine the cost in asprin you will save.

    Saturday, May 31, 2008 3:22 PM

All replies

  • Okay, found another step that I tried: I checked if the Background Intelligent Transfer Service [BITS] and the Windows Modules Installer Service are not disabled. "If these services are disabled, Vista cannot properly install its updates from Windows Update." so I read. I checked BITS and it was enabled, and I checked on Win Modules Installer and it was stopped. I started it, but when I want to start the Windows Update service I still get the same error and it won't start.


    Does anyone have a clue? Thanks!

    Tuesday, May 20, 2008 6:31 PM
  • same jam here ... will reinstall SP1 and will say if it helps
    Tuesday, May 20, 2008 6:57 PM
  • Okay, here's what's what:

    Three days ago I got infected with a virus. I had Norton AV 2007 up-to-day virus updated and everything, but it still got through. It hit hard: Windows Updates and Task Manager were unable to start and system performance and stability really got hit. I don't know how I got infected, but it could have been a program/activeX control etc from the Internet as someone else was using the computer at the time, too, and I didn't really know what pages were visited, what got installed etc. Needless to say, Windows updates were all up-to-date, too. I figured I should try to disinfect the PC somehow and I ran Panda ActiveScan and Kaspersky Online scan and even NOD32 online scan, alongside Norton AV scan from my PC and Panda reported some cookies, Kaspersky I think found a virus file and NOD32 and Norton got nothing. Not being able to disinfect I just formated my partitions and installed Vista fresh. The thing is, I don't know exactly when it happend, but after I downloaded SP1 and installed Messenger and other small apps, like NetLimiter and Billeo, Windows Update got disabled in the process somehow. I tried all the methods that I've written about just above and still nothing. This morning I tried this:

    I ran msconfig and looked at the startup programs. I found and disabled the following:

    98d8e608 - Unknown - Rundll32.exe "..." - HKLM\...
    BM9bebd594 - Unknown - Rundll32.exe "..." - HKLM\...
    MSServer - Unknown - Rundll32.exe ... - HKLM\...
    Language Application - Unknown - [Path to CyberLink PowerDVD, but I disabled it to be sure] - HKLM\...

    And just to be really sure I disabled some more processes that I thought were not critical, like Symantec or Creative or HP or NVidia. I also checked under Services and (after I hid all Microsoft services) and I disabled some, just to be sure:

    FLEXnet Licensing Service - Macrovision... - [Don't know exactly what it is]
    Adobe Active File Monitor V6 - Unknown - [I presume if it were from Adobe it wouldn't have written Unknown under Manufacturer]
    Symantec Core LC - Unknown [Again, some apps under Manufacturer had Symantec Corporation, this one had Unknown and I disabled it]

    And some others that I thought were not critical and could do without, just to be sure and in case they got infected.
    One important note: if you try and remove the some startup items while running in Windows Normal Mode they just get enabled again, jsut run msconfig again and you'll see they get enabled instantly. So in order for this not to happen I started Windows in Safe Mode and done all of the above.

    After I done the above in Safe Mode I started Windows normally. I went to Administrative Tools, Services, checked that BITS is running (it was running), Windows Modules Installer is running (was not running) and then enabled Windows Update service (it was disabled and stopped) and started it. Then I could establish a connection to Windows Update, it worked.

    Some interesting things I found along the way: if you execute Windows Internet Explorer, the startup baddies will be enabled. Also, sometimes I get a fake warning for installing I-don't-know-what program or plug-in for spyware and malware detection etc. So clearly there's a new virus in town that makes all these bad things. Also note: I have the windows taskbar in autohide mode and since I got infected (before reinstalling Windows and just after Windows Update got disabled) the bar just keeps popping up from time to time and then goes back just as fast, but it's really annoying.

    In order to browse the Internet I installed FireFox and the baddies don't get enabled or new entries into the startup tab from msconfig. Note that the above names, like BM9bebd594 might be random and different on another machine.

    After all this I scanned my PC again, this time with Norton AV 2008 (I do have NIS 2008 and the firewall sometimes displays an info that Download or Downloader program was stoped downloading certain files to my computer) and again with Panda, but nothing was found.

    Does anyone have any idea about what kind of virus this is and how can and with what AV solution one can get rid of it? Thanks a lot!
    Wednesday, May 21, 2008 7:14 AM

    duuuuude. i have this exact same problem. tried all the steps that you took and windows update seemed to work. Showed me all available updates, i went to install them and then bam, got that error 80070442 ***. What. the. hell.

    But this is a minor problem i'm having at the moment. I can't even install my nvidia drivers without my resolution deciding not to go over 1024x768 (when it should be 1650x1050). I've formatted about 15 times in the last 4 days. I had a virus initially before all this started so i formatted, and since then nothing seems to work the way it usually would. I had another hard drive which i thought could be conflicting or had virus' on it but i deleted every suss looking thing on the damn drive. I don't get it, HOW can it be doing this from a FRESH format. Is it hardware related?? Half the time updates do work but as you said, when you install other things before it or whatever, it doesn't work.

    Wednesday, May 21, 2008 12:16 PM
  • Okay, I scanned my PC again with the free online tools, but as many AntiVirus programs there are out there, as many different viruses are found (and cleaned, whether manually or automatically - files deleted etc). I also guess that the AV scanners only find what the main virus downloads and installs, the viruses that get installed by it, but my fear is that the main problem of them all is not found. I thought about reinstalling Windows again, this time unplugging the Internet connection cable from my PC, make all the updates, then plug the cable back in. The only problem is... how can I make the updates if I don't have an Internet connection? I could save all the updates and install them offline, but my main concern is that, anyway, they may get infected when I try to burn them to an optical media. Oh, boy! I suspect that the virus got in using a vulnerability in Windows or something from my local network to which I am connected and through which I also connect to the Internet. I tried to get to my AV support by entering in chat with them, but they said it would cost me (even though I am a customer) if I wanted them to further investigate into this and I dropped the idea, as I have no more cash on my credit card. I also sent an e-mail to Microsoft support with a short description and a link to this e-mail, maybe someone will follow this thread and something will be done as fast as it can be done. My only hope now rests that the big AV corporations and Microsoft will find a way to get this virus out of our systems and patch the vulnerability. All hope rests with them. If I find other solutions or decide to reformat and update the system somehow or whatever I can do to help, I will post here. If someone else tries something and it works (partially or fully), please also post here. Thanks!

    Wednesday, May 21, 2008 1:19 PM
  • Okay, I think I might got it: after doing all of the above, disabling startup items and some suspected services, try and run a system scan using as many, if not all of the above mentioned antivirus solutions. Try and remove all reported files. (You might need to enter in safe mode). In Internet Explorer go to Internet Options, set all security levels to their default values (virus will change to low) and disable all suspected add-ons (just to be sure, although I will mention another setting that may disable them all at once). Then go to the Advanced Tab and uncheck "Enable third-party browser extensions*", under the Security item the first 3 options refer to allowing active content and software to run. Disable them, if enabled in the first place. The next 3 options are checked on my PC (all 3 of them start with "Check..."), the "Empty Temporary Internet Files folder when browser is closed" must be checked, and the very last 3 options are checked on my PC (they start with "Enable..."). Also, just for safety, the Phishing filter is on, and the "Warn about certificate..." is enabled on my PC, although I don't know how much it helps. The others I think are not so important. After doing all these the virus should not manifest itself anymore (or at least not so violently), although it's still present. A good firewall is mandatory, of course. And, last but not least, use Firefox or another web browser, at least until Microsoft fixes the vulnerabilitie(s), try to avoid IE at all costs. Note: even without the above mentioned settings, without starting IE, but when starting Windows Update, the virus opened up some internet pages. With the above settings those pages will not be opened anymore. Also note: you might have to restart the WU service manually a couple of times after reboot before the above settings set in. Now, after the N-th reboot/restart, with the above settings in effect, WU seems to be working normally, the firewall seems to not be bothered by Downloader trying to install viruses on my PC and no pages wanting to install viruses on my PC appear anymore. Until a fix comes from MS and the AV companies, I think one can live with these annoyances, if it doesn't have any other choice (and, usually, we don't). Just be careful not to spread the infection to others, don't send executables and other crytical files through messenger or by any other means. Thanks and I hope this helps. If someone else finds out what kind of virus this is, how it's called, a way to get it out or any other important info, please share. Thanks!
    Wednesday, May 21, 2008 6:30 PM
  • so i...was looking at some bad stuff online, and STUPIDLY decided to download an activeX from a website that was OBVIOUSLY malicious.  yes, yes i know.  whatever.
    so i got this damn antispywaremaster blah, blah virus, and maaaaaad trojans on my computer.

    i use spyware doctor, and yesterday, i also got *gasp* spyhunter 3 to punish myself for my misdeeds.  but contrary to all the *** that i read about it on the internet, it works!  (for the trojans and stuff, i mean)
    anyway, after i got rid of the virus, automatic updates wasn't working, and everything you guys have talked about so far became relevant in my quest to thwart this dastardly spyware.  mind you...i have better things to do, like study for my chem exam tomorrow, but it seems like this is a serious problem. 

    i'm more into biology, but i'm pretty good at messing around with computers.  i dont know all about the tech lingo and whatnot, but........i fixed it.  seriously. 

    unfortunately, it took literally 12 hours of tinkering around with a bunch of stuff, but what it came down to was the fact that the automatic update service was "disabled." i use mozilla for everyday things, and explorer for...you know...and i noticed that mozilla wasn't affected, and i didn't get random popups while working with mozilla.  this led me to believe that IE7 was housing/facilitating the virus.  so i made an attempt to uninstall it completely using this process:

    Uninstalling Internet Explorer 7 RC1

    Start, click Run, type %windir%\ie7\spuninst\spuninst.exe, and then press ENTER.

    Note: %windir% is the location of your Windows directory, which can usually be found at C:\Windows. To do this, you need to have "view hidden folders" enabled.


    my intention was to reinstall IE6 from the microsoft website upon reboot, but when i tried to install it, like many people have said, the computer still knew that IE7 was the latest software, and wouldn't regress to IE6.

    so i'm like, great, now IE7 won't even leave.  but i did notice that it wasn't as upgraded as before, which was encouraging....now all i needed to do was upgrade!  but.....since the automatic updates service wasn't running...that wasn't going to work, now, was it?

    another thing i noticed was that upon reboot after my failed attempt at uninstalling IE was that my system was running as fast as it used to prior to the onslaught of viral activity.  so i said to myself...F-you, virus, i'm gonna beat you at your own game.  literally. 

    over the whole day of messing with my compy, i noticed that everytime viral-like things started happening, the taskmanager was running a process called run32dll.dll or something like that, and everytime i ended that process, the viral activity would stop. that meant (to me) that inorder for the virus to be active, it ALSO had to start up everytime the computer rebooted, and work it's evil, sly tricks to take over, and disable the AU service.  since my computer was running faster again, with the shedded weight of IE7 proper, AS SOON as i rebooted, and the desktop came alive, i went to:

    Run, typed services.msc, clicked on automatic updates, changed "start type" to AUTOMATIC, hit "apply" and then changed "service status to "start."  and it started!  and then that ******** balloon popped up, but!!! my service had started!  so i clicked on the balloon, hit "turn on automatic updates," and GREEEEEEN, sweet green. 

    i'm so serious...this is exactly what i did.  and it worked. 

    as soon as i got the automatic updates on, WITHOUT REBOOTING i went to the microsoft updates website, and installed the new service pack 3 because i use XP.  when it was done, it asked me to restart, and i did, and that security balloon popped up, but then it went away when i clicked on it!

    like i said..i dont actually know much about computers, but i do know that i was able to change the status of the updater service because i beat the virus during the initial setup.  at least....i think i know that. 

    i hope that if you try my method that it works.  mind you....this isn't everything i did...i'd also been messing around with the registry, changing/deleting a whole bunch of things that i don't even understand.  i hope all the changes that i made weren't integral to my eventual success, but i guess we'll know if you try my method and succeed.  it might also help to clean your registry afterwards, using Abexo Free registry cleaner...just to be certain.  if it tries to die in the middle of a scan, note how many files it managed to pick up before it shuts down, and then as soon as it gets to that number, stop, and clean....that's just my idea of optimizing, but do what you wanna do.

    let me know if you have any questions!  i sincerely hope this helps, and if it helps, we must share this information with the world!
    best wishes! 

    Thursday, May 22, 2008 5:10 PM
  • Today I tried another AV on-line scan solution and I had to install Java (run time environment, I think). Surely enough, just before the installation was complete, the virus activated itself, wanted to download more junk from the Internet, restored the startup items that I have disabled and disabled Windows Update. Had to reboot in safe mode and redo all the things discussed above to deactivate the virus. Also, in FireFox, Tools->Options->Content->Enable Java I have unchecked. Seems everything is under control for now. So don't install any Java stuff if you know you have the same virus.


    I would really like to thank Microsoft's support team for answering my e-mails and forwarding this thread and my messages to tech and security support teams, I have faith they'll find a fix. They also said they'll get back to me once they find a solution and, if they do, I will post anything useful here.


    On the same note, I would really like to NOT thank Symantec's team for anything. I tried to chat with them and all they wanted was more money to investigate into this, although I have a valid subscription, I have problems with their latest Norton Internet Security 2008 software which crashes when I try to perform a Full System Scan and so on. I will definitely be looking for a better security solution in the future, even though I still have over a month subscription period, I'd rather renounce that and find a better solution which really do give a monkey's *** on their paying customers and don't treat them as nothing. Before this incident I promoted Symantec's security solutions to all my friends, but I think the corporation's policies have really changed towards a negative downslide in the past time. They really don't care anymore about their paying customers and making their products competitive on the market anymore. If you buy something you should get what you paid for and it fails miserably. Sorry, guys, but you really don't give a damn, do you?
    Tuesday, May 27, 2008 7:34 AM
  • I was having the exact same problem and did many of the same things until i found your post.  Thank you for your hard work.  Here is what worked for me.

    Malwarebytes' Anti-Malware   http://www.malwarebytes.org/mbam.php

    It is a free download.  If it works for you, please help say thank you to the authors by purchasing a copy.  Just this one fix was well worth the price to me.  Imagine the cost in asprin you will save.

    Saturday, May 31, 2008 3:22 PM
  • Wow, great!


    I ran the tool that you mentioned and the virus in question was detected as: Trojan.Vundo

    Maybe the logs will help some others, too: Here's the log on the first scan:



    Malwarebytes' Anti-Malware 1.14
    Database version: 808

    8:40:22 PM 5/31/2008
    mbam-log-5-31-2008 (20-40-22).txt

    Scan type: Full Scan (C:\|D:\|)
    Objects scanned: 169731
    Time elapsed: 42 minute(s), 47 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 1
    Registry Keys Infected: 9
    Registry Values Infected: 1
    Registry Data Items Infected: 1
    Folders Infected: 0
    Files Infected: 8

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    C:\Windows\System32\byXOHaBU.dll (Trojan.Vundo) -> Unloaded module successfully.

    Registry Keys Infected:
    HKEY_CLASSES_ROOT\CLSID\{1449fa3b-f8a5-40ec-87da-707e80637ddd} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1449fa3b-f8a5-40ec-87da-707e80637ddd} (Trojan.Vundo) -> Delete on reboot.
    HKEY_CLASSES_ROOT\CLSID\{663656df-6bae-460c-a612-8133df519346} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.

    Registry Values Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{663656df-6bae-460c-a612-8133df519346} (Trojan.Vundo) -> Quarantined and deleted successfully.

    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\byxohabu  -> Quarantined and deleted successfully.

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    C:\Windows\System32\byXOHaBU.dll (Trojan.Vundo) -> Delete on reboot.
    C:\Users\Shere Khan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LK0KREDB\kb516107[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\fccywwts.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\gEwtTLFy.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\yayvSiHb.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\_Shere_Quarantine\fmsnvygd.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\byXnMghG.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\byXPfgfe.dll (Trojan.Vundo) -> Quarantined and deleted successfully.


    Here's the log on the second scan, after a restart:


    Malwarebytes' Anti-Malware 1.14
    Database version: 808

    9:48:01 PM 5/31/2008
    mbam-log-5-31-2008 (21-48-01).txt

    Scan type: Full Scan (C:\|D:\|)
    Objects scanned: 168808
    Time elapsed: 56 minute(s), 31 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 2

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    C:\Windows\System32\byXOHaBU.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\dqhreobq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.


    On the third scan, no other infections were found. The files and locations and one or two registry entries are similar to what I suspected was not allright, so I guess the (right) virus has been found and eliminated. Have enabled Java in FireFox and everything seems fine, haven't touched Internet Explorer just to be on the safe side so I can't say anything about that, but everything looks allright. Seems this was the problem. Thanks again, mate, your post was a life saver. Smile

    Sunday, June 1, 2008 5:45 AM
  • Thanks!

    The Anti-Malware software solved the problem for me, yay :-)

    Note that users might need to do a couple of scans to fully get rid of the unwanted stuff and then try re-enabling the Windows Update following the original windows help.
    Sunday, June 1, 2008 9:09 AM
  • Guys this Malwarebytes' Anti-Malware software saved my life............ Install this and scan your computer completely twice or thrice...... all your malware and spamware will be cleared!

    Thanks Guys................

    Saturday, June 7, 2008 7:14 PM
  • hi !

    this soft is radical!!

    it kicked out that bad trojan and aotu updates are enabled and working like a charm!!!

    thank you skritch2



    Saturday, June 7, 2008 8:55 PM
  • Hey, I had the same problem, and well, It was a trojan that disabled my Windows Update in the first place, so couldn't get it to start up untill that trojan was deleted by a Anti-virus.After it was deleted, just to go administrative Options, then Services,
    Right-click Windows Update and select properties and select automatic, and click apply, if it still doesn't show that its started, then click start on that dialog. That should do that trick, if it doesn't start, then some trojan must be blocking it.
    Tuesday, June 10, 2008 12:35 PM
  • Just checking in to see how things went.  I am glad that it helped.  Thank you Shere Khan for your hard work.  If not for that, I  would not have had the time to look for and trip over the answer.  Cheers!
    Thursday, June 12, 2008 5:13 AM
  • Just to let you know i had exactly the same problem (nightmare that Norton or defender did not notice). Google lead me to your webpage, i downloaded Malwarebytes' Anti-Malware 1.18 (latest) and now my computer's cured. So: thanks!!

    Only problem (and question) is that i nowhave Norton 2008 + Bitdefender (both didn't really work). So i end up having 3 such software using RAM+CPU... would anyone advise me to get rid of one? two? If yes, which ones?


    Sunday, June 22, 2008 10:14 AM
  • Skritch2 UR THE MAN !!!!!!!!... GUYS I HAD 50 TROJAN VIRUS ON MY SYSTEM AND THANKS TO Skritch2 IT'S ALL GONE !!!!!!!!... Windows update is working + my system is fast now !!!!... WHO EVER DEVELOPED ' MALWAREBYTES' , IS A HERO !!!. I STILL CAN'T BELIEVE IT !!!!!!!!!!!!!!!!!!!!!!!!!!!


    Monday, June 23, 2008 7:23 PM

    Monday, June 23, 2008 7:25 PM
  • Man, you guys are the best!
    I was thinking on refotmatting my computer because of this problem!
    I started downloading
    Malwarebytes' Anti-Malware and after that i started a full system scan. amazingly after a few minutes i already had 75 objects infected, something which all the anti virus i tested couldn't find.
    and patrice, i personally use mcafee cause i dont like norton at all.
    thanks again.
    take care, phil
    Sunday, June 29, 2008 10:30 AM
  • Your message encouraged me to download and scan with the Malwarebytes' Anti Malware.  What great software.  Scanned my computer and removed 25 infected files that had not been picked up  by my McAfee. My auto updates is now working.  Thank You 




    Sunday, June 29, 2008 7:45 PM
  • guys! ...  this program is like the magic . finally after 3 days working on this s***  new virous , this lil thing solv the problem. and i start thinking to reformat all my hard drive

    i really was going to lose my work for many years just because of stupid virous . thanks god and really thank you guys . you saved my life . i actually don't know what to say but just thanks alot.
    Monday, June 30, 2008 2:32 AM

    Malwarebytes is the boloocks, gud to go, thanks guys
    Saturday, July 19, 2008 9:33 PM
  •  Skritch2 wrote:
    I was having the exact same problem and did many of the same things until i found your post.  Thank you for your hard work.  Here is what worked for me.

    Malwarebytes' Anti-Malware   http://www.malwarebytes.org/mbam.php

    It is a free download.  If it works for you, please help say thank you to the authors by purchasing a copy.  Just this one fix was well worth the price to me.  Imagine the cost in asprin you will save.


    Thank you so much, this really worked!
    Sunday, October 26, 2008 1:18 PM


    WHAT A "LIVE SAVER" !!!  




    P.S: Make sure you close all the applications before you run the scan and/or REMOVE those found virus/spyware... and then RE-RUN SCANNING AGAIN to make sure your system is clean from those virus/spyware.


    Friday, October 31, 2008 7:15 PM
  • This is what you have and anyone else experiencing this issue  Vundo there is a fix for it. Note:
    Windows Defender No Anti Virus programs seem to pick this up b4 it gets installed.  Vundofix is the name of the program you will need to fix this. You should research anything in a forum setting to make sure your not downloading more viruses, malware or spyware. Hope I helped someone out. P.S. If you are peer to peer viruses are now being installed on mp3,mp4,wma,wmv,avi etc files so b4 you share know whom you share with.

    trojan.vundo virus -------
    Friday, November 14, 2008 12:09 PM
  • Thanks ChandraMurali, I installed that anti malware and my problem is gone. I appreciate it!

    Tuesday, December 2, 2008 4:26 PM
  • It is well known that many forms of malware and viruses are out on the internet now. However, there are free solutions! I keep all my PCs running clean by installing and regularly running all of the following free programs!

    AVG Free
    Spybot Search & Destroy (Make sure you enable teatimer!)
    Advanced System Care Free
    Microsoft Windows Defender
    Processguard (Prompts you when programs execute)

    You must be logged in as an administrator (or have administration credentials in Vista and windows 7) in order to use these programs correctly. I hope this helps!
    Wednesday, September 30, 2009 6:05 AM
  • I too spent many hours trying to resolve Error 80070422 that prevented my computer from installing automatic updates before I asked my techie brother to help me fix it.  THIS WORKED FOR ME:

    For Windows 7:

    Type in "Services" in Startup Search Box

    Select "Services" with wheels icon

    Scroll down to "Windows Module Installer Properties" and select

    Under "General" tab, find "Startup type" and select "Automatic" from drop down

    Under "Service status" click the "Start" button.

    Click OK.

    Type in "Windows Update" in Startup Search Box and select

    Click / select check for updates & Restart.


    If virus suspected - also start computer in safe mode (on Lenovo, type in "msconfig" in Startup Search Box and select "msconfig.exe" . . . Under "Boot" tab, select "Safe Boot" with networking under "Boot Options". Restart in safe mode. Download "Housecall" from Trendmicro website (free). Run the scan while in safe mode to check for viruses.


    My brother's advice for the future was to stay calm when the computer malfunctions during an important project and don't go downloading fixes off the internet willy nilly because you could wind up with a virus or malware if you don't properly vet your downloads.


    Wednesday, January 15, 2014 7:57 AM
  • I know this is an old thread, but I came across it when I had the same error code, trying to install a security update on Vista 32 bit, in the wake of the WCrypt ransomware alert.
    In my case, the error was solved by simply enabling and starting the Windows Update Service (which was disabled - possibly by myself when trying to sort out another problem a few months back).

    Hope this helps anyone else with the same problem.

    Monday, May 15, 2017 10:10 AM