Wouldn't be the first time the left hand didn't know what the right hand was doing, but I am using Windows Firewall and Microsoft Security Essentials. You'd think they'd be smart enough to let the system access the Windows Update site.
The following three things are the only things that appear to be amiss at the moment:
- Cannot update windows
- Cannot run sfc /SCANNOW from an administrator command prompt
- Cannot do an upgrade (repair) reinstall of Windows 7.
On a hunch I checked my "hosts" file to see if somehow it had been hacked to redirect traffic to the Windows Update service somewhere else (possibly a malicious website) and it is clean. There are no redirects.
It could be a possibility, however, have you checked the %WinDir%\WinSxS\Backup isn't deleted? It contains files needed by Windows to start the Windows Update service and install updates.
Replace %WinDir% with C:\Windows or what partition Windows OS has been installed to.
This tutorial can help restore these files:
http://answers.microsoft.com/en-us/w...251667f?page=2
Create a System Restore point beforehand and Backup.
That's another suggestion crossed off the list, have you tried a System Restore?
May not help, but it's worth a try (:
Yes, didn't mention it in the OP but my system restore history only goes back to the date the problem started. All previous ones got wiped out in whatever caused this mess.
I tried restoring the earliest one I could get to but it made no difference.
Everything keeps pointing back to some sort of rootkit virus but I've checked the system every way I know how to and there is just no sign of infection. Even in Safe Mode the latest Malwarebytes says no infection.
Did the root kit damage the registry I'm guessing, may explain the registry errors within the Event Log file you attached earlier.
I think the reason for the updates not installing, may be due to some of the registry entries for the Windows Update being lost or damaged.
I agree the damaged registry entries would be consistent with the inability to do the updates. The problem is how to restore the registry entries.
I really don't think this machine is infected with a rootkit virus although I wouldn't rule it out completely. Usually they can be detected with AV scans though even if they cannot be repaired. Also they usually keep AV scanners from updating themselves. Neither of these symptoms have appeared. MS Security Essentials and Malwarebytes both are fully capable of updating their definitions databases.
You can get root kits which are still able to infect your system, and the root kit can have different purposes.
The only way you could restore the registry entries is with a system restore point, before the problem occured, although, the only alternative way I can think of to restore the registry, is a complete clean re -install of Windows 7.
Clean Install Windows 7
Note: There are programs which can supposedly restore your registry, but I wouldn't trust them.
Obviously not what I wanted to hear, but you may be right. I'm beginning to think the only way out is a clean install. I'll hold off doing anything drastic for the time being in hopes someone else has any other thoughts.
Quote