Windows 7 will not update - Geeks to Go Forums

Jump to content

Log in Register Register Malware removal guide How it works

Windows 7 will not update

#31 buckman

  • Group: Member
  • Posts: 29
  • Joined: 31-May 11

Posted 25 February 2012 - 01:06 PM

I ran the scan and here is the log as you requested. Thank you.





Farbar Service Scanner Version: 22-02-2012
Ran by Matt Work (administrator) on 25-02-2012 at 14:02:57
Running from "C:\Users\Matt Work\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P4MYSJEC"
Microsoft Windows 7 Home Premium (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Yahoo IP is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============
wscsvc Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open wscsvc registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open wscsvc registry key. The service key does not exist.
Checking ServiceDll: Attention! Unable to open wscsvc registry key. The service key does not exist.


Windows Update:
============

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll
[2009-07-13 19:09] - [2009-07-13 20:41] - 0824832 ____A (Microsoft Corporation) AECAB449567D1846DAD63ECE49E893E3

C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll
[2009-07-13 18:36] - [2009-07-13 20:41] - 0170496 ____A (Microsoft Corporation) 765A27C3279CE11D14CB9E4F5869FCA5

C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll
[2012-02-22 11:39] - [2012-02-22 11:39] - 2424024 ____A (Microsoft Corporation) FB3796754FE00F0BDC87A36F164A5F4D

C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

#32 Essexboy

  • Group: GeekU Moderator
  • Posts: 55,566
  • Joined: 31-May 06

Posted 25 February 2012 - 04:05 PM

Hi this could be part of the problem

Quote

wscsvc Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open wscsvc registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open wscsvc registry key. The service key does not exist.
Checking ServiceDll: Attention! Unable to open wscsvc registry key. The service key does not exist.
It is the security centre entries

Download the attached zip file and extract wscsvc.reg file to the desktop
Right click the reg file and select merge
Accept the warnings
Reboot

Rerun Farbar and try windows updates again

#33 buckman

  • Group: Member
  • Posts: 29
  • Joined: 31-May 11

Posted 27 February 2012 - 09:06 AM

Did as asked and still no change. Log is posted below:

Farbar Service Scanner Version: 22-02-2012
Ran by Matt Work (administrator) on 27-02-2012 at 10:00:41
Running from "C:\Users\Matt Work\Desktop"
Microsoft Windows 7 Home Premium (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Yahoo IP is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Windows Update:
============

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll
[2009-07-13 19:09] - [2009-07-13 20:41] - 0824832 ____A (Microsoft Corporation) AECAB449567D1846DAD63ECE49E893E3

C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll
[2009-07-13 18:36] - [2009-07-13 20:41] - 0170496 ____A (Microsoft Corporation) 765A27C3279CE11D14CB9E4F5869FCA5

C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll
[2012-02-22 11:39] - [2012-02-22 11:39] - 2424024 ____A (Microsoft Corporation) FB3796754FE00F0BDC87A36F164A5F4D

C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

#34 buckman

  • Group: Member
  • Posts: 29
  • Joined: 31-May 11

Posted 27 February 2012 - 09:08 AM

I'm not sure if the post from Adamstuart is for me?

#35 Macboatmaster

  • Group: Member
  • Posts: 7,233
  • Joined: 13-March 10

Posted 27 February 2012 - 11:12 AM

In reply to your post 35, it was totally irrelevant to your situation and was mainly a link to a fee paying service purporting to offer solutions to problems.

#36 Essexboy

  • Group: GeekU Moderator
  • Posts: 55,566
  • Joined: 31-May 06

Posted 27 February 2012 - 02:13 PM

OK now we have the registry keys in the right place

Download Windows Repair (all in one) from this site

Install the programme then run

Go to step 2 and allow it to run Disc check
Posted Image

Once that is done then go to step 3 and allow it to run SFC
Posted Image


On the start repairs tab select advanced mode and click start
Posted Image

Select the items shown ticked, after the reboot then try again

#37 buckman

  • Group: Member
  • Posts: 29
  • Joined: 31-May 11

Posted 28 February 2012 - 09:41 AM

SUCCESS!!!! Thank you so very much. Everything seems to be working. Anything else I need to do?

#38 Macboatmaster

  • Group: Member
  • Posts: 7,233
  • Joined: 13-March 10

Posted 28 February 2012 - 11:57 AM

buckman

Pleased it is working please wait for my colleague to reply

Essexboy
Thanks from me for looking at it for me.

#39 Essexboy

  • Group: GeekU Moderator
  • Posts: 55,566
  • Joined: 31-May 06

Posted 28 February 2012 - 02:43 PM

My pleasure Mac - payback time :lol:

Just delete FSS from your desktop and uninstall (or keep) all in one

#40 Ztruker

  • Group: Technician
  • Posts: 4,955
  • Joined: 01-December 07

Posted 28 February 2012 - 06:52 PM

Essexboy, thanks for the instruction! I saved the link to this thread as I think it may be significant to others with similar problems.

Buckman, I'm very happy you got this fixed.


Ztruker

That will cost - you can pay the next time I need help.
Macboatmaster

#41 Essexboy

  • Group: GeekU Moderator
  • Posts: 55,566
  • Joined: 31-May 06

Posted 29 February 2012 - 01:57 PM

FSS is a good tool for examining the registry to see if any damage has been caused by malware

Share this topic:


  • 3 Pages +
  • 1
  • 2
  • 3