[Channeal]

Hello there!

 

I am running Windows 7 Home Premium on an old Dell Dimension 9150 desktop.

 

Yesterday, I was surprised to suddenly get a message flash up telling me to change the Windows Update settings because Windows Update was turned off. I clicked on it and agreed to change it and assumed that everything was okay. However, a little while ago I got the same message again.

 

If I go to Windows Update, Change Settings it tells me that 'Install Updates automatically' is already selected and if I look at the update history, it says that updates were last installed on the 13th December. So what are these messages about?

 

I ran Speccy and that says updates have been installed (see http://speccy.pirifo...fgYtEhBCwGMWDHF)

 

Many thanks, Chris.

 

PS I have had another of these messages flash up since starting this post.

[Advertisements]

Suspect that it was not a real message from your Windows or from Microsoft.  Probably some malware trying to get on your system.  Try running a boot-time scan with Avast:

 

Click on the Avast ball.  Then click on Protection, then on Antivirus, then on Other Scans then on Boot-time Scan.  Click on Install Special Definitions.  Click on Run on Next PC Reboot.

  Reboot and let it run a scan.  It may take hours.
Once it finishes it should load windows.   Mute your speakers so it doesn't wake you up when Windows boots.

When you reboot you will see the scan start.  It will tell you where it saves its log.  Usually it's C:\ProgramData\AVAST Software\Avast\report\aswBoot.txt but it might change so verify the location.   This is a hidden location so you will need to tell Windows to let you see it:

http://www.howtogeek...-windows-vista/

Copy and paste the text from the log to a Reply when done.

 

You can also try MBAR:

https://www.malwareb...om/antirootkit/

 

[RKinner]

Suspect that it was not a real message from your Windows or from Microsoft.  Probably some malware trying to get on your system.  Try running a boot-time scan with Avast:

 

Click on the Avast ball.  Then click on Protection, then on Antivirus, then on Other Scans then on Boot-time Scan.  Click on Install Special Definitions.  Click on Run on Next PC Reboot.

  Reboot and let it run a scan.  It may take hours.
Once it finishes it should load windows.   Mute your speakers so it doesn't wake you up when Windows boots.

When you reboot you will see the scan start.  It will tell you where it saves its log.  Usually it's C:\ProgramData\AVAST Software\Avast\report\aswBoot.txt but it might change so verify the location.   This is a hidden location so you will need to tell Windows to let you see it:

http://www.howtogeek...-windows-vista/

Copy and paste the text from the log to a Reply when done.

 

You can also try MBAR:

https://www.malwareb...om/antirootkit/

 

[Channeal]

Thanks for your reply.

 

While I was waiting for an answer to my post, I decided to run Malwarebytes. This only found some PUPs associated with Auslogics Disk Defrag. I will add the results at the end of this message.

 

I ran the Avast boot scan as suggested, but the only thing that found was a corrupted file in the Downloads folder: File C:\Users\channeal\Downloads\childs.zip|>CHILDSGA Error 42125 {ZIP archive is corrupted.}

I have no idea what that file was for or where it came from, but I have deleted it now.

 

I also ran the Malwarebytes AntiRootKit scan but that didn't find anything at all.

 

The message about Windows Update still keeps on appearing though!

 

Chris.

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 12/17/19
Scan Time: 8:19 PM
Log File: 84c4a702-210a-11ea-9475-00137216c65c.json

-Software Information-
Version: 3.7.1.2839
Components Version: 1.0.538
Update Package Version: 1.0.13895
License: Free

-System Information-
OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: NEAL1-DELL\channeal

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 201977
Threats Detected: 54
Threats Quarantined: 54
Time Elapsed: 16 min, 12 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 2
PUP.Optional.AuslogicsDiskDefrag, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, HKLM\SOFTWARE\AUSLOGICS\Disk Defrag, Quarantined, [922], [350021],1.0.13895

Registry Value: 1
PUP.Optional.AuslogicsDiskDefrag, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1|DISPLAYNAME, Quarantined, [922], [722903],1.0.13895

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 5
PUP.Optional.AuslogicsDiskDefrag, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\AUSLOGICS\Disk Defrag, Quarantined, [922], [350023],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Setup, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Data, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Lang, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\PROGRAM FILES\AUSLOGICS\DISK DEFRAG, Quarantined, [922], [350025],1.0.13895

File: 46
PUP.Optional.AuslogicsDiskDefrag, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics\Disk Defrag\Auslogics Disk Defrag on the Web.url, Quarantined, [922], [350023],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics\Disk Defrag\Auslogics Disk Defrag.lnk, Quarantined, [922], [350023],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics\Disk Defrag\Check Your PC Performance.url, Quarantined, [922], [350023],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics\Disk Defrag\Uninstall Auslogics Disk Defrag.lnk, Quarantined, [922], [350023],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Data\main.ini, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Lang\deu.lng, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Lang\enu.lng, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Lang\esp.lng, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Lang\fra.lng, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Lang\ita.lng, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Lang\jpn.lng, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Lang\rus.lng, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Setup\SetupCustom.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\AxComponentsRTL.bpl, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\AxComponentsVCL.bpl, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\BrowserHelper.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\cdefrag.exe, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\CFAHelper.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\ciniwin-dll.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\CommonForms.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\CommonForms.Site.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\DebugHelper.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\DiskCleanerHelper.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\DiskDefragHelper.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\DiskWipeHelper.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\EULA.rtf, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\GoogleAnalyticsHelper.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Localizer.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\ndefrg32.exe, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\ReportHelper.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\rtl250.bpl, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\SendDebugLog.exe, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x32.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\ShellExtension.ContextMenu.x64.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\ShellExtension.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\sqlite3.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\TaskSchedulerHelper.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\TrackEraserHelper.dll, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\unins000.dat, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\unins000.exe, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\unins000.msg, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\Uninstall_Icon.ico, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\vcl250.bpl, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\vclimg250.bpl, Quarantined, [922], [350025],1.0.13895
PUP.Optional.AuslogicsDiskDefrag, C:\Program Files\Auslogics\Disk Defrag\VolumesHelper.dll, Quarantined, [922], [350025],1.0.13895
Generic.Malware/Suspicious, C:\USERS\CHANNEAL\DOWNLOADS\DISK-DEFRAG-SETUP.EXE, Quarantined, [0], [392686],1.0.13895

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

[RKinner]

OK Try: System Update Readiness Tool for Windows 7

This link is for 64 bit:
https://www.microsof...s.aspx?id=20858

This one for 32 bit:
https://www.microsof...ls.aspx?id=3132

It will pretend to install a KB.

Once that runs then get

 KB3083710 and KB3102810 if you don't have them:

https://www.microsof...s.aspx?id=49172

https://www.microsof...s.aspx?id=49542

 

The above correct most update problems.  Then check your system files:

Right click on (My) Computer and select Manage (Continue) Then click on the arrow in front of Event Viewer. Next Click on the arrow in front of Windows Logs Right click on System and Clear Log, Clear. Repeat for Application.

Reboot.

Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator.  Then type (with an Enter after each line).

sfc  /scannow

(This will check your critical system files. Does this finish without complaint?  IF it says it couldn't fix everything then:

Copy the next two lines:

findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log  >  %UserProfile%\desktop\junk.txt
notepad %UserProfile%\desktop\junk.txt

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied line should appear.
Hit Enter. Copy and paste the text from notepad or if it is too big, just attach the file.)


1. Please download the Event Viewer Tool by Vino Rosso
http://images.malwar...om/vino/VEW.exe
and save it to your Desktop:
2. Right-click VEW.exe and Run AS Administrator
3. Under 'Select log to query', select:

* System
4. Under 'Select type to list', select:
* Error
* Warning


Then use the 'Number of events' as follows:


1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.


Please post the Output log in your next reply then repeat but select Application.  (Each time you run VEW it overwrites the log so copy the first one to a Reply or rename it before running it a second time.)

 

 

 

 

[Channeal]

Hello and thanks,

 

I have not ran scannow yet, am planning to do that this evening.

 

I downloaded System Update Readiness Tool for Windows 7 and the two updates, which both installed okay.

 

I downloaded the Vino's Event Viewer Tool and followed your instructions. (In error, I ran this before the System Update Readiness Tool for Windows 7, but don't know if that matters).

The log is at the end of this message. Please note that I have had a new problem today in that the CD/DVD drive is refusing to open , so you will see that that is mentioned in the log. I will run the tool again later with Application selected and post that log in another message.

 

I have not had one of the Windows Updates messages flash up recently, so am keeping my fingers crossed that perhaps the problem has been sorted by System Update Readiness Tool for Windows 7 and the two updates.

 

Chris.

 

 

 

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 19/12/2019 12:45:03

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 19/12/2019 12:06:23
Type: Critical Category: 63
Event: 41 Source: Microsoft-Windows-Kernel-Power
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 19/12/2019 12:39:18
Type: Error Category: 0
Event: 11 Source: cdrom
The driver detected a controller error on \Device\CdRom0.

Log: 'System' Date/Time: 19/12/2019 12:34:55
Type: Error Category: 0
Event: 11 Source: cdrom
The driver detected a controller error on \Device\CdRom0.

Log: 'System' Date/Time: 19/12/2019 12:30:32
Type: Error Category: 0
Event: 11 Source: cdrom
The driver detected a controller error on \Device\CdRom0.

Log: 'System' Date/Time: 19/12/2019 12:06:35
Type: Error Category: 0
Event: 6008 Source: EventLog
The previous system shutdown at 12:05:14 on ?19/?12/?2019 was unexpected.

Log: 'System' Date/Time: 19/12/2019 12:02:31
Type: Error Category: 0
Event: 7022 Source: Service Control Manager
The Windows Update service hung on starting.

Log: 'System' Date/Time: 18/12/2019 17:10:36
Type: Error Category: 0
Event: 14332 Source: Microsoft-Windows-WMPNSS-Service
Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80004005'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.

Log: 'System' Date/Time: 18/12/2019 17:10:14
Type: Error Category: 0
Event: 7022 Source: Service Control Manager
The Windows Search service hung on starting.

Log: 'System' Date/Time: 18/12/2019 00:09:27
Type: Error Category: 0
Event: 14332 Source: Microsoft-Windows-WMPNSS-Service
Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80004005'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.

Log: 'System' Date/Time: 17/12/2019 23:59:19
Type: Error Category: 0
Event: 7009 Source: Service Control Manager
A timeout was reached (30000 milliseconds) while waiting for the Xperia Companion Service service to connect.

Log: 'System' Date/Time: 17/12/2019 20:17:41
Type: Error Category: 0
Event: 7034 Source: Service Control Manager
The MBAMService service terminated unexpectedly.  It has done this 1 time(s).

Log: 'System' Date/Time: 17/12/2019 16:25:00
Type: Error Category: 0
Event: 14332 Source: Microsoft-Windows-WMPNSS-Service
Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80070420'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.

Log: 'System' Date/Time: 17/12/2019 12:04:42
Type: Error Category: 0
Event: 7022 Source: Service Control Manager
The Windows Update service hung on starting.

Log: 'System' Date/Time: 17/12/2019 12:02:42
Type: Error Category: 0
Event: 7022 Source: Service Control Manager
The NVIDIA Update Service Daemon service hung on starting.

Log: 'System' Date/Time: 16/12/2019 23:29:11
Type: Error Category: 0
Event: 10010 Source: Microsoft-Windows-DistributedCOM
The server {F9717507-6651-4EDB-BFF7-AE615179BCCF} did not register with DCOM within the required timeout.

Log: 'System' Date/Time: 14/12/2019 13:13:41
Type: Error Category: 0
Event: 14332 Source: Microsoft-Windows-WMPNSS-Service
Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80004005'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.

Log: 'System' Date/Time: 13/12/2019 15:58:17
Type: Error Category: 0
Event: 10010 Source: Microsoft-Windows-DistributedCOM
The server {752073A1-23F2-4396-85F0-8FDB879ED0ED} did not register with DCOM within the required timeout.

Log: 'System' Date/Time: 13/12/2019 00:11:30
Type: Error Category: 0
Event: 7011 Source: Service Control Manager
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the RapportMgmtService service.

Log: 'System' Date/Time: 13/12/2019 00:10:27
Type: Error Category: 0
Event: 10010 Source: Microsoft-Windows-DistributedCOM
The server {752073A1-23F2-4396-85F0-8FDB879ED0ED} did not register with DCOM within the required timeout.

Log: 'System' Date/Time: 11/12/2019 10:34:34
Type: Error Category: 0
Event: 36887 Source: Schannel
The following fatal alert was received: 20.

Log: 'System' Date/Time: 11/12/2019 10:27:45
Type: Error Category: 0
Event: 14332 Source: Microsoft-Windows-WMPNSS-Service
Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80070420'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 19/12/2019 12:08:20
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name teredo.ipv6.microsoft.com timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 19/12/2019 12:07:46
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_TEAC&PROD_USB___HS-CF_CARD&REV_4.00#000002040752&0#.

Log: 'System' Date/Time: 19/12/2019 11:54:45
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_TEAC&PROD_USB___HS-CF_CARD&REV_4.00#000002040752&0#.

Log: 'System' Date/Time: 19/12/2019 00:37:54
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 18/12/2019 17:10:41
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_TEAC&PROD_USB___HS-CF_CARD&REV_4.00#000002040752&0#.

Log: 'System' Date/Time: 18/12/2019 13:45:10
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 18/12/2019 02:12:53
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_TEAC&PROD_USB___HS-CF_CARD&REV_4.00#000002040752&0#.

Log: 'System' Date/Time: 18/12/2019 00:15:17
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 18/12/2019 00:09:35
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_TEAC&PROD_USB___HS-CF_CARD&REV_4.00#000002040752&0#.

Log: 'System' Date/Time: 18/12/2019 00:07:24
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 17/12/2019 23:59:32
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_TEAC&PROD_USB___HS-CF_CARD&REV_4.00#000002040752&0#.

Log: 'System' Date/Time: 17/12/2019 23:56:38
Type: Warning Category: 0
Event: 1 Source: Microsoft-Windows-Kernel-Tm
The Transaction (UOW={28927EED-2126-11EA-84AD-00137216C65C}, Description='') was unable to be committed, and instead rolled back; this was due to an error message returned by CLFS while attempting to write a Prepare or Commit record for the Transaction.  The CLFS error returned was: 0xc0190052.

Log: 'System' Date/Time: 17/12/2019 23:56:34
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 17/12/2019 16:24:59
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_TEAC&PROD_USB___HS-CF_CARD&REV_4.00#000002040752&0#.

Log: 'System' Date/Time: 17/12/2019 12:38:55
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 17/12/2019 11:57:42
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_TEAC&PROD_USB___HS-CF_CARD&REV_4.00#000002040752&0#.

Log: 'System' Date/Time: 16/12/2019 23:30:35
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 16/12/2019 14:33:33
Type: Warning Category: 0
Event: 1073 Source: USER32
The attempt by user NEAL1-DELL\channeal to restart/shutdown computer NEAL1-DELL failed

Log: 'System' Date/Time: 16/12/2019 12:32:31
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name apps.tourocloudbackup.com timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 16/12/2019 12:31:29
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_TEAC&PROD_USB___HS-CF_CARD&REV_4.00#000002040752&0#.


 

[RKinner]

Would like to see VEW after you run sfc /scannow and then reboot.

[Channeal]

Hello again.

 

I ran sfc/scannow and it told me that it did not find any integrity violations.

 

I ran VEW again and the reports are below. I have just realised though that I didn't reboot after running scannow (sorry, too many interruptions here so not so easy to concentrate), but I can always  run them again if necessary.

 

Chris.

 

 

 

 

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 19/12/2019 19:43:19

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 19/12/2019 19:17:28
Type: Error Category: 0
Event: 7022 Source: Service Control Manager
The Windows Update service hung on starting.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 19/12/2019 19:10:34
Type: Warning Category: 212
Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_TEAC&PROD_USB___HS-CF_CARD&REV_4.00#000002040752&0#.

Log: 'System' Date/Time: 19/12/2019 19:09:09
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

 

 

 

 

 

 

 

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 19/12/2019 19:49:05

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 19/12/2019 19:10:38
Type: Error Category: 0
Event: 1 Source: Touro Cloud Backup Crawler
An error has occurred (Problem with user account
).

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 19/12/2019 19:08:25
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.     DETAIL -   1 user registry handles leaked from \Registry\User\S-1-5-21-2559438547-1515831249-1651957702-1000:
Process 1584 (\Device\HarddiskVolume1\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-2559438547-1515831249-1651957702-1000






 

[RKinner]

Search for

services.msc

hit Enter.  This should bring up the Services Windows.  Scroll down to Windows Update and right click and select Properties.  Is it Started?  If the Startup Type is not set to Automatic (Delayed Start)  make it so and hit Apply.  If the service was not started try to start it.

 

In Firefox which I assume is your main browser go to:

about:addons

Verify that Avast Online Security is listed under Enabled

 

Do you have anything else listed under Enabled?  (Recommend Ublock Origin to block Ads and F. B. Purity to clean up Facebook (if you use it) but otherwise best to have as few add-ons as possible.  If you want to see the effect of add-ons on performance go to:

about:performance

and note how much memory is being used by your different add-ons and the startup impact.)

[Channeal]

Everything seems okay with Windows Update in Services. It was already started and set to Automatic (Delayed Start).

 

I use Firefox, my husband uses Chrome - though he doesn't really use the computer all that much.

 

Avast wasn't enabled in the Firefox addons, but I have enabled it now. I have now added F.B. Purity (I didn't know about that, so thanks for telling me). I also have Sharebutton for Facebook.

 

As far as adblockers go, I have currently got both Adblock Plus and Ghostery and I also have got Adblocker for YouTube Video as I use YouTube a lot and the ads really annoy me!

 

Should I get rid of some of these?

 

Thanks, Chris.

[RKinner]

The Avast add-on is good about identifying bad websites so it's best to have it on.

 

I prefer Ublock Origin over Adblock Plus.  Less load on the CPU and they don't take bribes to let certain ads through.

 

I've ever used Ghostery so can't say much about it.  You might check with

about:performance

and see how much memory it uses and what sort of startup delay is involved.

 

Not sure about need for Adblocker for YouTube Video.  Try disabling it with Ublock Origin installed and see if the ads come back.

[Channeal]

Hello again,

 

I was hoping the Windows Update problem had been resolved, but it appears not as I am still getting the message flash up.

 

It is weird because the message flashes up and then disappears quite quickly. It leaves a red cross by the Action Centre flag which - when I click on it - tells me there is a problem to be sorted. However, when I then go into the Action Centre page, it always says that no issues have been reported. Very strange!

 

Chris.

[RKinner]

Try and get the exact wording of the error next time it shows up.  Assume it doesn't leave anything in VEW?

[Channeal]

Hi there,

 

I had the message flash up a little while ago. The only thing that seems to show up in the latest VEW Log is:

 

Log: 'System' Date/Time: 22/12/2019 14:41:50
Type: Error Category: 0
Event: 7022 Source: Service Control Manager
The Windows Update service hung on starting.

 

I think that was around the time I first started up the computer today. I didn't see a message flash up until about 17:30,  although it is possible that I missed them as they do flash up and then disappear very quickly.

 

I guess it seems that nothing serious is happening and the messages are probably unimportant, I am just puzzled why I keep getting them.

 

Anyway, I grabbed three screen shots yesterday just to show you what happens. The first message disappears quickly, leaving just the red cross by the flag. When I click on that, the second message comes up , but is replaced almost immediately by the third one. I guess the computer for some reason thinks there is a problem, but soon realises that there isn't one after all!

 

 

 

 

I was involved in another thread on GTG recently relating to a memory problem on my Sony laptop and we came to the conclusion eventually that there was no explanation for it, that it was down to 'gremlins' in the laptop. I think maybe the gremlins have spread to my desktop computer now!

Edited by Channeal, 22 December 2019 - 01:11 PM.

[RKinner]

WMI is the process that is involved in reporting the problem and windows update is obviously part of it so

I think we need to try
Windows Repair all in one
https://www.tweaking...all_in_one.html

I know it sounds like snake oil but it's really pretty good.
We are doing the free version so just
Download it (Click on the Direct Download link and save it then install it by Right Click and Run As Admin.

 

They change the interface all of the time so I don't have exact instructions but essentially we just want the following items checked:

 

Reset Registry Permissions
Reset File Permissions

Reset Service Permissions
Register System Files
Repair WMI

Repair Windows Updates

 

I think they offer different preset versions now but whichever you chose gives you the chance to uncheck things before you click on Start Repair.  They make a big deal about it working better in Safe Mode - I've never bothered and it's worked fine.  They also want you to make a system restore point which is a good idea (but I never do).  It will run faster if you can pause your anti-virus.  If you click on the MajorGeeks Download it takes you to a page with a video of it working and several screenshots.  Looks like you can just Jump To Repairs then when you get to the list of repair items just check the ones in my list.

 

It doesn't hurt if you have more things checked just takes it longer to run.

 

[Channeal]

Okay, will do...... though possibly not until after Christmas now, as have a lot going on here.

 

I was already wondering if it might be an idea to run the Windows Repair All-in-One program. I am familiar with the program as have used it a couple of times before when being helped by Phillpower2.

 

Will let you know once I have run it.

 

Chris.